last executing test programs: 1m39.237794711s ago: executing program 3 (id=114): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x2000, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) 1m39.200988952s ago: executing program 3 (id=116): ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpgrp(0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x39, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1, 0x0, r1}}, 0x40) 1m39.108564693s ago: executing program 3 (id=119): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa8180c2000000080045000034000000000006907864010101ac1414aa00004e04", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8cc2000090780000080a6215e3c3000000000000"], 0x0) epoll_create1(0x80000) syz_extract_tcp_res(&(0x7f0000000340)={0x41424344, 0x41424344}, 0xd, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @random="78d271e19d1f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64210101, @local}, {{0x0, 0x4e22, 0x41424344, r3, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}]}}}}}}}, 0x0) fcntl$setlease(r0, 0x400, 0x1) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2509000000840004801300010062726f6164636173742d6c696e6b00004c00078008000400070000000800020082b00000080001000200000008000400d5380040080003000100010008000400070000000800020003000000080004000400000008000300050000000900010073797a31000000001300010062726f616463617374"], 0x98}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0xa4000061) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='irq_handler_entry\x00', r5, 0x0, 0x800000000000001}, 0x18) close(r7) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r5) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') splice(r1, &(0x7f0000000000)=0x2, 0xffffffffffffffff, &(0x7f0000000280)=0x7, 0xff, 0x2) 1m38.877423516s ago: executing program 3 (id=127): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x1, 0x24d, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1418c2, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendto$packet(r2, 0x0, 0x0, 0x4004, &(0x7f0000000200)={0x11, 0x9, 0x0, 0x1, 0xe0}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x48) 1m38.220656906s ago: executing program 3 (id=131): r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000a00)=""/189) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x700, 0x3ac002f85d4177d, 0x1, 0x2, {{0xf, 0x4, 0x0, 0x8, 0x3c, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x42, 0x0, 0x1, [0xf0e, 0xfffffffc, 0xfffffff8]}, @ssrr={0x89, 0x17, 0xaf, [@broadcast, @multicast1, @multicast2, @remote, @local]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000010000000000182f0000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000000000300", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r6 = open$dir(0x0, 0x4200, 0x54) write$9p(r5, &(0x7f0000001400)=';', 0x1) rt_sigsuspend(&(0x7f00000003c0)={[0x3]}, 0x8) sendfile(r5, r6, 0x0, 0x7ffff000) 1m37.493003467s ago: executing program 3 (id=143): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket$inet6(0xa, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000d00)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r9 = dup(r8) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0xf00, 0xe0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) 1m37.460947547s ago: executing program 32 (id=143): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket$inet6(0xa, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000d00)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r9 = dup(r8) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000380)={0x80, 0x6, 0xf00, 0xe0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) 1m20.693991865s ago: executing program 5 (id=393): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4081], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x11008, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}]}, 0x154}}, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000180)={0x0, 0x66, 0x98, 0x78, "c47ff2aa683048814ea00e2edad26562a0ad194c2222849afd26a322e964bf48ad4fc81eb93908c329407689236d3949240b18bb97f17b5f17b8d49dcb6ecb9ed3aa7f7d4d8a6cd6542a7f85d0a53f01b0c5d2e9409e4a63ba4b350ceb0540808ce8140bd5db774f216ed1cb3a0f46be6dbb41219098f16b"}, 0x98, 0x0) uname(0x0) 1m19.829917488s ago: executing program 5 (id=405): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@grpjquota}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210b, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x32, 0xfffffbff, 0x3, 0x7, 0xfffffffe, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x6, 0xffffffffffffffff, 0x9) socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{}, {0x0, 0x989680}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_forget\x00', r4, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xb, 0x0, 0x40, 0x7ffc1ffb}]}) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x200c) 1m18.932552651s ago: executing program 5 (id=417): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_uring_setup(0x22d6, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m18.712447065s ago: executing program 5 (id=421): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x810000, &(0x7f0000000040)={[{@auto_da_alloc}]}, 0x3, 0x4d4, &(0x7f0000000340)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x120) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a80)=@newsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in6=@mcast1, {0x0, 0x0, 0x0, 0xffffffe7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0x80}, {}, 0x0, 0x1, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'xchacha20\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0xfffffffffffffffe, 0x29) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000200), 0x10a8e18d6ff99a24) write$selinux_attr(r2, &(0x7f00000001c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25) 1m17.462250194s ago: executing program 5 (id=436): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0xc, 0x5, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80682) r6 = syz_io_uring_setup(0xc3b, &(0x7f00000000c0)={0x0, 0xc55a, 0x80, 0x8000004}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040008000d5b0000080000000e000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) 1m16.381044489s ago: executing program 5 (id=451): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x7c, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r3}, 0xe) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) 1m16.380706279s ago: executing program 33 (id=451): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x7c, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kfree\x00', r3}, 0xe) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) 2.210707548s ago: executing program 6 (id=1465): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000a40)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x72d}}, {@data_err_ignore}, {@nomblk_io_submit}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@delalloc}, {@jqfmt_vfsv1}], [{@euid_lt={'euid<', 0xffffffffffffffff}}]}, 0xf5, 0x490, &(0x7f00000014c0)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) sendfile(r1, r0, 0x0, 0x3ffff) 2.088642729s ago: executing program 0 (id=1470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x94033) 2.087774369s ago: executing program 0 (id=1472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b0a20000000000000000b7040000000000008500000000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000040)={[{@jqfmt_vfsv1}]}, 0xfe, 0x56c, &(0x7f0000000940)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 1.99534834s ago: executing program 0 (id=1475): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x23, 0x1, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000340)) ptrace$poke(0x21, r3, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x200000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x10, 0x1, 0x6, 0xa0000000}, {0x9, 0x3, 0x7, 0xb7}, {0xea7, 0x3, 0x41, 0x5}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000680)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x1ab, 0xf9e5, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0xfffffffd, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffff9, 0x1, 0x2, 0x5, 0x8, 0x1, 0x9, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x8001, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffff9, 0x101, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x7fffffff, 0x4, 0x6, 0x7, 0x80, 0x3, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x2, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x3, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x5, 0xfffffff7, 0x2, 0x400, 0x8, 0x3, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x6, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0x2, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0xffffffff, 0x14, 0x7a, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x2, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x8, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf4, 0x7, 0x2, 0x5, 0x4, 0x7, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x5, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x345f, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x202, 0x10000000, 0xb, 0x7, 0x8, 0x81, 0x8d1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x2, 0x9, 0x24000000, 0x99dc, 0x80000001, 0xfffff72d, 0x100000, 0x9, 0x1ff, 0x100, 0xfffffffb, 0x9, 0x7fff, 0x5, 0x3, 0x9, 0x5, 0x1ff, 0x8, 0x6dbe, 0x14bf, 0x7fffffff, 0x8001, 0x5, 0x1ff, 0xec26, 0x6, 0x4, 0x7, 0x4, 0x5, 0x40, 0x10000, 0x2, 0xe, 0x7, 0x101, 0x7fffffff, 0x9a, 0x60, 0xffffffff, 0x1, 0x8, 0x8, 0x8d2, 0xc, 0x5, 0x0, 0x6, 0x8, 0x2, 0x7, 0x5, 0x87, 0x9, 0xfffffbff, 0xffff, 0x0, 0x0, 0x1ff, 0x0, 0xffff, 0x4, 0xc4, 0x3, 0x8, 0x4, 0x3, 0xff, 0x401, 0x10001, 0x4, 0x3, 0x6, 0x6, 0x9, 0x0, 0x7fffffff, 0x9a, 0x3ff, 0xffff74ee, 0xb8, 0x401, 0x80000001, 0x401, 0x0, 0x4, 0x5, 0x2, 0x3ff, 0x9, 0x100000, 0x80000001, 0x6e8, 0x10001, 0x1, 0x3ae8, 0x9, 0x6c9, 0xf, 0x86ea, 0x1, 0x7, 0x3ff, 0x6, 0x4, 0x3, 0x0, 0x4a, 0x80, 0xb5, 0x57, 0x5d3, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x5, 0x5, 0x6d5a, 0xe64, 0x4, 0x81, 0x1, 0x5d, 0xfffffffd, 0xfffffffb, 0x8, 0x4, 0x5, 0x3, 0x7, 0x7, 0x9, 0x2, 0x6, 0x7, 0x6, 0x7f, 0x3, 0x9, 0x1, 0x5, 0x2, 0x6, 0xfffffc01, 0x0, 0x6, 0xfffffffe, 0x80000000, 0x80000000, 0x665d, 0x100, 0x5, 0x0, 0xffffffff, 0x100, 0x9, 0x14, 0x200, 0x8, 0x6, 0x9, 0x6, 0x4, 0x2, 0x0, 0x5, 0x7d2, 0x3, 0x3, 0x10, 0x9, 0x8, 0x101, 0xfffff0cb, 0x1, 0x10001, 0x7fffffff, 0x4da3, 0x6, 0x5, 0xca71, 0x7, 0xc00, 0xf1e, 0x3, 0x200, 0x8, 0x5, 0xd, 0x4000000, 0x9, 0xab, 0x9, 0x4, 0x7, 0x10000, 0xff, 0x1, 0x5, 0x166da8c1, 0xe29, 0xc, 0x5, 0xb, 0x8d, 0x3, 0x1, 0xf5, 0x0, 0x5, 0xffffffff, 0xff, 0xffff, 0x2, 0x1ff, 0x6, 0x1, 0x7, 0x9, 0xc9, 0x2, 0x7ff, 0x0, 0x3, 0x8, 0x3, 0x0, 0xc, 0xffff157c, 0x8, 0x2, 0xee1, 0xa0, 0x0, 0x0, 0x7fffffff, 0x2, 0x984f, 0x7, 0x7, 0x8, 0x801, 0x4, 0x84ed, 0x3ff, 0x3, 0x4, 0xf0, 0x7e4b, 0x0, 0x61]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000f40)={0xb0, 0x7, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x68, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040014}, 0x20040891) 1.949542221s ago: executing program 6 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, {0xa, 0x2, 0x7, @mcast2, 0xfffffffe}, r3, 0x1}}, 0x48) 1.912161802s ago: executing program 0 (id=1477): socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x48, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x34, 0x1, [@m_gact={0x30, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x20040800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5ac}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.896531782s ago: executing program 0 (id=1478): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1c2, &(0x7f00000008c0)="$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") openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088f747e0ffff200000002021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x6000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sched_switch\x00', r6, 0x0, 0x7fff}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 1.866407763s ago: executing program 6 (id=1479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x94033) 1.820686244s ago: executing program 6 (id=1480): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.687584306s ago: executing program 2 (id=1481): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 1.573520027s ago: executing program 2 (id=1485): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) unshare(0x20040600) 1.572509467s ago: executing program 4 (id=1487): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x23, 0x1, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000340)) ptrace$poke(0x21, r3, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x200000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x10, 0x1, 0x6, 0xa0000000}, {0x9, 0x3, 0x7, 0xb7}, {0xea7, 0x3, 0x41, 0x5}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000680)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x1ab, 0xf9e5, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0xfffffffd, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffff9, 0x1, 0x2, 0x5, 0x8, 0x1, 0x9, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x8001, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffff9, 0x101, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x7fffffff, 0x4, 0x6, 0x7, 0x80, 0x3, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x2, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x3, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x5, 0xfffffff7, 0x2, 0x400, 0x8, 0x3, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x6, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0x2, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0xffffffff, 0x14, 0x7a, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x2, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x8, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf4, 0x7, 0x2, 0x5, 0x4, 0x7, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x5, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x345f, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x202, 0x10000000, 0xb, 0x7, 0x8, 0x81, 0x8d1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x2, 0x9, 0x24000000, 0x99dc, 0x80000001, 0xfffff72d, 0x100000, 0x9, 0x1ff, 0x100, 0xfffffffb, 0x9, 0x7fff, 0x5, 0x3, 0x9, 0x5, 0x1ff, 0x8, 0x6dbe, 0x14bf, 0x7fffffff, 0x8001, 0x5, 0x1ff, 0xec26, 0x6, 0x4, 0x7, 0x4, 0x5, 0x40, 0x10000, 0x2, 0xe, 0x7, 0x101, 0x7fffffff, 0x9a, 0x60, 0xffffffff, 0x1, 0x8, 0x8, 0x8d2, 0xc, 0x5, 0x0, 0x6, 0x8, 0x2, 0x7, 0x5, 0x87, 0x9, 0xfffffbff, 0xffff, 0x0, 0x0, 0x1ff, 0x0, 0xffff, 0x4, 0xc4, 0x3, 0x8, 0x4, 0x3, 0xff, 0x401, 0x10001, 0x4, 0x3, 0x6, 0x6, 0x9, 0x0, 0x7fffffff, 0x9a, 0x3ff, 0xffff74ee, 0xb8, 0x401, 0x80000001, 0x401, 0x0, 0x4, 0x5, 0x2, 0x3ff, 0x9, 0x100000, 0x80000001, 0x6e8, 0x10001, 0x1, 0x3ae8, 0x9, 0x6c9, 0xf, 0x86ea, 0x1, 0x7, 0x3ff, 0x6, 0x4, 0x3, 0x0, 0x4a, 0x80, 0xb5, 0x57, 0x5d3, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x5, 0x5, 0x6d5a, 0xe64, 0x4, 0x81, 0x1, 0x5d, 0xfffffffd, 0xfffffffb, 0x8, 0x4, 0x5, 0x3, 0x7, 0x7, 0x9, 0x2, 0x6, 0x7, 0x6, 0x7f, 0x3, 0x9, 0x1, 0x5, 0x2, 0x6, 0xfffffc01, 0x0, 0x6, 0xfffffffe, 0x80000000, 0x80000000, 0x665d, 0x100, 0x5, 0x0, 0xffffffff, 0x100, 0x9, 0x14, 0x200, 0x8, 0x6, 0x9, 0x6, 0x4, 0x2, 0x0, 0x5, 0x7d2, 0x3, 0x3, 0x10, 0x9, 0x8, 0x101, 0xfffff0cb, 0x1, 0x10001, 0x7fffffff, 0x4da3, 0x6, 0x5, 0xca71, 0x7, 0xc00, 0xf1e, 0x3, 0x200, 0x8, 0x5, 0xd, 0x4000000, 0x9, 0xab, 0x9, 0x4, 0x7, 0x10000, 0xff, 0x1, 0x5, 0x166da8c1, 0xe29, 0xc, 0x5, 0xb, 0x8d, 0x3, 0x1, 0xf5, 0x0, 0x5, 0xffffffff, 0xff, 0xffff, 0x2, 0x1ff, 0x6, 0x1, 0x7, 0x9, 0xc9, 0x2, 0x7ff, 0x0, 0x3, 0x8, 0x3, 0x0, 0xc, 0xffff157c, 0x8, 0x2, 0xee1, 0xa0, 0x0, 0x0, 0x7fffffff, 0x2, 0x984f, 0x7, 0x7, 0x8, 0x801, 0x4, 0x84ed, 0x3ff, 0x3, 0x4, 0xf0, 0x7e4b, 0x0, 0x61]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000f40)={0xb0, 0x7, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x68, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040014}, 0x20040891) 1.534920497s ago: executing program 2 (id=1488): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000a40)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x72d}}, {@data_err_ignore}, {@nomblk_io_submit}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@delalloc}, {@jqfmt_vfsv1}], [{@euid_lt={'euid<', 0xffffffffffffffff}}]}, 0xf5, 0x490, &(0x7f00000014c0)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1.33884659s ago: executing program 4 (id=1489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, {0xa, 0x2, 0x7, @mcast2, 0xfffffffe}, r3, 0x1}}, 0x48) 1.276935511s ago: executing program 1 (id=1490): socket$inet6_dccp(0xa, 0x6, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5ac}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.157630473s ago: executing program 4 (id=1491): socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.148439793s ago: executing program 1 (id=1492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000840), &(0x7f0000000880)=0x4) 1.085050374s ago: executing program 1 (id=1493): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) (fail_nth: 7) 1.083420714s ago: executing program 4 (id=1494): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0xfffffffe, 0xfffffffd, 0x22, 0x6, 0x5, 0x1}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x250, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) 1.004830996s ago: executing program 1 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000680)=@newtaction={0x85c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x848, 0x1, [@m_police={0x844, 0x1, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x1ab, 0xf9e5, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0xfffffffd, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffff9, 0x1, 0x2, 0x5, 0x8, 0x1, 0x9, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x8001, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffff9, 0x101, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x7fffffff, 0x4, 0x6, 0x7, 0x80, 0x3, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x2, 0x9, 0x2, 0x4, 0x7, 0x9, 0x5, 0x7, 0x3, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x5, 0xfffffff7, 0x2, 0x400, 0x8, 0x3, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x6, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0x2, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0xffffffff, 0x14, 0x7a, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x2, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x8, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf4, 0x7, 0x2, 0x5, 0x4, 0x7, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x5, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x345f, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x202, 0x10000000, 0xb, 0x7, 0x8, 0x81, 0x8d1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x2, 0x9, 0x24000000, 0x99dc, 0x80000001, 0xfffff72d, 0x100000, 0x9, 0x1ff, 0x100, 0xfffffffb, 0x9, 0x7fff, 0x5, 0x3, 0x9, 0x5, 0x1ff, 0x8, 0x6dbe, 0x14bf, 0x7fffffff, 0x8001, 0x5, 0x1ff, 0xec26, 0x6, 0x4, 0x7, 0x4, 0x5, 0x40, 0x10000, 0x2, 0xe, 0x7, 0x101, 0x7fffffff, 0x9a, 0x60, 0xffffffff, 0x1, 0x8, 0x8, 0x8d2, 0xc, 0x5, 0x0, 0x6, 0x8, 0x2, 0x7, 0x5, 0x87, 0x9, 0xfffffbff, 0xffff, 0x0, 0x0, 0x1ff, 0x0, 0xffff, 0x4, 0xc4, 0x3, 0x8, 0x4, 0x3, 0xff, 0x401, 0x10001, 0x4, 0x3, 0x6, 0x6, 0x9, 0x0, 0x7fffffff, 0x9a, 0x3ff, 0xffff74ee, 0xb8, 0x401, 0x80000001, 0x401, 0x0, 0x4, 0x5, 0x2, 0x3ff, 0x9, 0x100000, 0x80000001, 0x6e8, 0x10001, 0x1, 0x3ae8, 0x9, 0x6c9, 0xf, 0x86ea, 0x1, 0x7, 0x3ff, 0x6, 0x4, 0x3, 0x0, 0x4a, 0x80, 0xb5, 0x57, 0x5d3, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x5, 0x5, 0x6d5a, 0xe64, 0x4, 0x81, 0x1, 0x5d, 0xfffffffd, 0xfffffffb, 0x8, 0x4, 0x5, 0x3, 0x7, 0x7, 0x9, 0x2, 0x6, 0x7, 0x6, 0x7f, 0x3, 0x9, 0x1, 0x5, 0x2, 0x6, 0xfffffc01, 0x0, 0x6, 0xfffffffe, 0x80000000, 0x80000000, 0x665d, 0x100, 0x5, 0x0, 0xffffffff, 0x100, 0x9, 0x14, 0x200, 0x8, 0x6, 0x9, 0x6, 0x4, 0x2, 0x0, 0x5, 0x7d2, 0x3, 0x3, 0x10, 0x9, 0x8, 0x101, 0xfffff0cb, 0x1, 0x10001, 0x7fffffff, 0x4da3, 0x6, 0x5, 0xca71, 0x7, 0xc00, 0xf1e, 0x3, 0x200, 0x8, 0x5, 0xd, 0x4000000, 0x9, 0xab, 0x9, 0x4, 0x7, 0x10000, 0xff, 0x1, 0x5, 0x166da8c1, 0xe29, 0xc, 0x5, 0xb, 0x8d, 0x3, 0x1, 0xf5, 0x0, 0x5, 0xffffffff, 0xff, 0xffff, 0x2, 0x1ff, 0x6, 0x1, 0x7, 0x9, 0xc9, 0x2, 0x7ff, 0x0, 0x3, 0x8, 0x3, 0x0, 0xc, 0xffff157c, 0x8, 0x2, 0xee1, 0xa0, 0x0, 0x0, 0x7fffffff, 0x2, 0x984f, 0x7, 0x7, 0x8, 0x801, 0x4, 0x84ed, 0x3ff, 0x3, 0x4, 0xf0, 0x7e4b, 0x0, 0x61]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x85c}}, 0x0) 907.351506ms ago: executing program 1 (id=1496): pipe2$9p(&(0x7f0000000040), 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c5f) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8400, &(0x7f0000001640)={[{@discard}, {@norecovery}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) io_setup(0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r5, r5, 0x0, 0x80000000) 696.59931ms ago: executing program 0 (id=1497): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) 689.21201ms ago: executing program 6 (id=1498): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 572.898542ms ago: executing program 6 (id=1499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b00)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x150, 0x150, 0x208, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'virt_wifi0\x00', 'bridge_slave_0\x00', 0x21, 0x2, 0x6f7d, 0x80000001, 0x2663, 0x5, {0x5}}}, @common=@addrtype={{0x30}, {0x11, 0x3a, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'xfrm0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x5, {0xe}}}}, {{@ip={@empty, @loopback, 0xffffffff, 0x0, 'vlan0\x00', 'geneve1\x00', {0x80}, {}, 0x0, 0x2, 0x47}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0xa7d7e797934d7ff4, 0x470, 0x2}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x7, 0x4, 0x5, 0x0, 0x5, 0x4], 0x1, 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0xf84e, 0x0, [0x26, 0x0, 0x2e, 0x13, 0x33, 0x2d, 0x39, 0x2b, 0x28, 0x3b, 0x2, 0x30, 0xa, 0x5, 0x39, 0x12], 0x1, 0x9, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x2000007d, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES16=r1, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc88, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='rxrpc_rx_packet\x00', r3, 0x0, 0x19}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x3}], 0x1c) sendto$inet6(r5, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 490.057833ms ago: executing program 2 (id=1500): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000a40)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x72d}}, {@data_err_ignore}, {@nomblk_io_submit}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@delalloc}, {@jqfmt_vfsv1}], [{@euid_lt={'euid<', 0xffffffffffffffff}}]}, 0xf5, 0x490, &(0x7f00000014c0)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x3ffff) 197.161817ms ago: executing program 1 (id=1501): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 104.814909ms ago: executing program 4 (id=1502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, {0xa, 0x2, 0x7, @mcast2, 0xfffffffe}, r3, 0x1}}, 0x48) 57.525359ms ago: executing program 2 (id=1503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x2}, 0x18) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {}, {0xfff1}}}, 0x24}}, 0x10) 30.07851ms ago: executing program 4 (id=1504): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x410c84, &(0x7f0000000000), 0x1, 0x785, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJImTfO+yQsvaD0FBA2UbkyNrYKHigcRLBT0bLtstqFmky3ZTWlCwBYRvAgqHgS99OyPevPqj6v+Fx7EUjUtVjxIZDYz7bbZ/GySrebzgck+z8xsnue788zMMzsPswHsW8Ppn0LE4Yh4L4kYzOYnEdHTTHVHnFxZ7/bSYjmdkhiIV39NmuvcWlosR8t7UoeyzKMR8e3bEUcKq8utzy9MlarVymyWH21MXxitzy8cPT9dmqxMVmaOj42PHzvxzInjOxfr7z8sDFx//6Unvzj551uPXHv3uyROxkC2rDWOnTIcw9ln0pN+hPd4cacL67Ck0xVgW9Jds2tlL4/DMRhdzRQA8G/2ZkQsAwD7TOL8DwD7TP49wK2lxXI+dfYbib1144WI6FuJP7+/ubKkO7tn19e8D9p/K7nnzkgSEUM7UP5wRHzy1eufpVPs0n1IgHYuX4mIs0PDq4//yaoxC1v11DrLDmSvw/fNd/yDvfN12v95tl3/r3Cn/xNt+j+9bfbd7dhw/z+4A4Ws40ZfxPMtY9tut8SfGerKcv9p9vl6knPnq5X02PbfiBiJnt40P7ZOGSM3/7q51rLW/t9vH7zxaVp++np3jcLP3b33vmei1Cg9SMytblyJeKx7Vfwtlwd9zb5uu/7v6U2W8fJz73y81rI0/jTefFodf2Sjk3bH8tWIJ9pu/7sj2pJ1xyeONpvDaN4o2vjyx4/61yq/dfunU1p+fi2wF9Lt379+/ENJ63jN+tbL+P7q4DdrLds4/vbt/0DyWjOd9yMulRqN2bGIA8krq+cfu/vePJ+vn8Y/8nj7/T8//rVr/+k14dlNxt99/ZfPtx//7krjn9jC9k9nZA3hTovYKHHt9lTXWuVvbvuPN1Mj2ZzNHP82W8EH+OgAAAAAAAAAAAAAAAAAAAAAAAAAYNMKETEQSaF4J10oFIsrv+H9/+gvVGv1xpFztbmZiWj+VvZQ9BTyR10OtjwPdSx7Hn6eP3Zf/umI+F9EfNh7MMmfozjR4dgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHdojd//T/3U2+naAQC7pq/TFQAA9pzzPwDsP87/ALD/9EUklztdCQBgT7n+B4D9x/kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXXb61Kl0Wv5jabGc5icuzs9N1S4enajUp4rTc+ViuTZ7oThZq01WK8VybXqj/1et1S6Mx8zcpdFGpd4Yrc8vnJmuzc00zpyfLk1WzlR69iQqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANia+vzCVKlarcxKbCOx/HBUo/OJrqw5dbYa/Z0pPXkoNsFOJzp8YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4h/g7AAD//7AaJtI=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5902, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000003280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff0f4) 0s ago: executing program 2 (id=1505): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004e40)="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", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70b9f2603356704de3f11ad536ac56c6f09b31d750a398764a2f7b7b27c48446c315fff2cbbe5cec1650a8654e49f14", 0x37}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000024c0)="02fe40bab3bac217f1a6e814488778d8e9ac3beee0074386a82fed334cb88055111c023ad070f69d932765a9b5c94f7027561c971b303db0fe2444a3f44361cdf49bf4477bcf6c0fb608f5552297e0e2fe3fbdbd6646d2512657a9cf86885523b1841bdf0658b46936f2e1e0dd04c9f1718b9654704ab7dd6b0fae145c52279f012bbae30183984a15d5296f942207a8a9e7db0df468925f8098987a78338f04239d25294ebab38981a1b83715fb49761ca24ad6541d563ba3dfa2d60ecb7c75f1f895c8fa7362798c4aca35a9c36b4e4ea1ef584782", 0xd6}, {&(0x7f00000004c0)="ccad2e60b49630455ee3f7a45f5baf397ee4cbc9ff535339cec0516c7f4e3d5bcaa1e922c4db640c619f4103f58352dacdef366238ced5cccf281dc839e40b3150c3f12f49d758c5544b3663e6747aebf5e6f554cfad5ab8ce3a6535022d2dc012c1363a881faeef51eb9fce4bcdbbd6b112ca56f76ca5ddb93767374c1242631645c9ca76ee41cc64d57a0be90a8bef9729ec7594d5b0a3afe341c729805be6f0068e126c", 0xa5}], 0x2}}], 0x2, 0x8090) kernel console output (not intermixed with test programs): ct_file_splice_eof+0x10/0x10 [ 107.209116][ T6726] do_sendfile+0x380/0x640 [ 107.209135][ T6726] __x64_sys_sendfile64+0x105/0x150 [ 107.209228][ T6726] x64_sys_call+0xb39/0x2fb0 [ 107.209255][ T6726] do_syscall_64+0xd0/0x1a0 [ 107.209285][ T6726] ? clear_bhb_loop+0x40/0x90 [ 107.209311][ T6726] ? clear_bhb_loop+0x40/0x90 [ 107.209385][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.209408][ T6726] RIP: 0033:0x7f4d9d7fe969 [ 107.209422][ T6726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.209477][ T6726] RSP: 002b:00007f4d9be67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 107.209493][ T6726] RAX: ffffffffffffffda RBX: 00007f4d9da25fa0 RCX: 00007f4d9d7fe969 [ 107.209552][ T6726] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 107.209567][ T6726] RBP: 00007f4d9be67090 R08: 0000000000000000 R09: 0000000000000000 [ 107.209706][ T6726] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 107.209717][ T6726] R13: 0000000000000000 R14: 00007f4d9da25fa0 R15: 00007ffcd21bd758 [ 107.209734][ T6726] [ 107.461894][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.471905][ T6740] FAULT_INJECTION: forcing a failure. [ 107.471905][ T6740] name failslab, interval 1, probability 0, space 0, times 0 [ 107.484601][ T6740] CPU: 0 UID: 0 PID: 6740 Comm: syz.2.942 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 107.484632][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 107.484643][ T6740] Call Trace: [ 107.484694][ T6740] [ 107.484703][ T6740] __dump_stack+0x1d/0x30 [ 107.484744][ T6740] dump_stack_lvl+0xe8/0x140 [ 107.484774][ T6740] dump_stack+0x15/0x1b [ 107.484794][ T6740] should_fail_ex+0x265/0x280 [ 107.484912][ T6740] should_failslab+0x8c/0xb0 [ 107.484952][ T6740] __kvmalloc_node_noprof+0x126/0x4d0 [ 107.484973][ T6740] ? alloc_netdev_mqs+0x73f/0xab0 [ 107.484996][ T6740] alloc_netdev_mqs+0x73f/0xab0 [ 107.485019][ T6740] rtnl_create_link+0x239/0x710 [ 107.485040][ T6740] rtnl_newlink_create+0x151/0x630 [ 107.485114][ T6740] ? security_capable+0x83/0x90 [ 107.485149][ T6740] ? netlink_ns_capable+0x86/0xa0 [ 107.485182][ T6740] rtnl_newlink+0xf29/0x12d0 [ 107.485214][ T6740] ? bpf_trace_run3+0x12c/0x1d0 [ 107.485236][ T6740] ? __kfree_skb+0x109/0x150 [ 107.485254][ T6740] ? __memcg_slab_free_hook+0xb7/0x1c0 [ 107.485345][ T6740] ? __kfree_skb+0x109/0x150 [ 107.485361][ T6740] ? __rcu_read_unlock+0x4f/0x70 [ 107.485388][ T6740] ? avc_has_perm_noaudit+0x1b1/0x200 [ 107.485409][ T6740] ? selinux_capable+0x1f9/0x270 [ 107.485451][ T6740] ? security_capable+0x83/0x90 [ 107.485512][ T6740] ? ns_capable+0x7d/0xb0 [ 107.485532][ T6740] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.485555][ T6740] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 107.485584][ T6740] netlink_rcv_skb+0x120/0x220 [ 107.485627][ T6740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.485658][ T6740] rtnetlink_rcv+0x1c/0x30 [ 107.485679][ T6740] netlink_unicast+0x5a1/0x670 [ 107.485711][ T6740] netlink_sendmsg+0x58b/0x6b0 [ 107.485791][ T6740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.485811][ T6740] __sock_sendmsg+0x142/0x180 [ 107.485838][ T6740] ____sys_sendmsg+0x31e/0x4e0 [ 107.485972][ T6740] ___sys_sendmsg+0x17b/0x1d0 [ 107.486007][ T6740] __x64_sys_sendmsg+0xd4/0x160 [ 107.486136][ T6740] x64_sys_call+0x2999/0x2fb0 [ 107.486160][ T6740] do_syscall_64+0xd0/0x1a0 [ 107.486264][ T6740] ? clear_bhb_loop+0x40/0x90 [ 107.486285][ T6740] ? clear_bhb_loop+0x40/0x90 [ 107.486308][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.486328][ T6740] RIP: 0033:0x7f1d172ee969 [ 107.486343][ T6740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.486439][ T6740] RSP: 002b:00007f1d15957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.486458][ T6740] RAX: ffffffffffffffda RBX: 00007f1d17515fa0 RCX: 00007f1d172ee969 [ 107.486470][ T6740] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 107.486482][ T6740] RBP: 00007f1d15957090 R08: 0000000000000000 R09: 0000000000000000 [ 107.486494][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.486518][ T6740] R13: 0000000000000000 R14: 00007f1d17515fa0 R15: 00007ffcea8a58b8 [ 107.486538][ T6740] [ 107.834955][ T6752] bridge_slave_0: left allmulticast mode [ 107.840698][ T6752] bridge_slave_0: left promiscuous mode [ 107.846475][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.853579][ T6752] FAULT_INJECTION: forcing a failure. [ 107.853579][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 107.866196][ T6752] CPU: 1 UID: 0 PID: 6752 Comm: syz.1.945 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 107.866227][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 107.866242][ T6752] Call Trace: [ 107.866249][ T6752] [ 107.866257][ T6752] __dump_stack+0x1d/0x30 [ 107.866281][ T6752] dump_stack_lvl+0xe8/0x140 [ 107.866303][ T6752] dump_stack+0x15/0x1b [ 107.866348][ T6752] should_fail_ex+0x265/0x280 [ 107.866387][ T6752] should_failslab+0x8c/0xb0 [ 107.866499][ T6752] kmem_cache_alloc_node_noprof+0x57/0x320 [ 107.866521][ T6752] ? __alloc_skb+0x101/0x320 [ 107.866626][ T6752] __alloc_skb+0x101/0x320 [ 107.866719][ T6752] br_info_notify+0x83/0x150 [ 107.866746][ T6752] br_ifinfo_notify+0x27/0x40 [ 107.866773][ T6752] br_stp_disable_port+0x8c/0x150 [ 107.866799][ T6752] del_nbp+0xdc/0x790 [ 107.866833][ T6752] br_del_if+0x99/0x1e0 [ 107.866874][ T6752] ? br_del_slave+0x12/0x30 [ 107.866894][ T6752] br_del_slave+0x24/0x30 [ 107.866917][ T6752] do_set_master+0x224/0x460 [ 107.867020][ T6752] ? __pfx_br_del_slave+0x10/0x10 [ 107.867041][ T6752] do_setlink+0x97f/0x27f0 [ 107.867065][ T6752] ? avc_has_perm_noaudit+0x1b1/0x200 [ 107.867106][ T6752] ? security_capable+0x83/0x90 [ 107.867144][ T6752] ? ns_capable+0x7d/0xb0 [ 107.867167][ T6752] ? netlink_ns_capable+0x86/0xa0 [ 107.867202][ T6752] rtnl_newlink+0xd8b/0x12d0 [ 107.867284][ T6752] ? xas_load+0x413/0x430 [ 107.867309][ T6752] ? xas_load+0x413/0x430 [ 107.867333][ T6752] ? cgroup_rstat_updated+0xa3/0x510 [ 107.867367][ T6752] ? try_charge_memcg+0x174/0x870 [ 107.867407][ T6752] ? page_counter_charge+0x207/0x230 [ 107.867492][ T6752] ? __rcu_read_unlock+0x4f/0x70 [ 107.867512][ T6752] ? avc_has_perm_noaudit+0x1b1/0x200 [ 107.867531][ T6752] ? selinux_capable+0x1f9/0x270 [ 107.867557][ T6752] ? security_capable+0x83/0x90 [ 107.867656][ T6752] ? ns_capable+0x7d/0xb0 [ 107.867678][ T6752] ? __pfx_rtnl_newlink+0x10/0x10 [ 107.867706][ T6752] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 107.867805][ T6752] ? avc_has_perm_noaudit+0x1b1/0x200 [ 107.867908][ T6752] netlink_rcv_skb+0x120/0x220 [ 107.867939][ T6752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.868001][ T6752] rtnetlink_rcv+0x1c/0x30 [ 107.868085][ T6752] netlink_unicast+0x5a1/0x670 [ 107.868116][ T6752] netlink_sendmsg+0x58b/0x6b0 [ 107.868136][ T6752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.868158][ T6752] __sock_sendmsg+0x142/0x180 [ 107.868190][ T6752] ____sys_sendmsg+0x31e/0x4e0 [ 107.868216][ T6752] ___sys_sendmsg+0x17b/0x1d0 [ 107.868254][ T6752] __x64_sys_sendmsg+0xd4/0x160 [ 107.868319][ T6752] x64_sys_call+0x2999/0x2fb0 [ 107.868338][ T6752] do_syscall_64+0xd0/0x1a0 [ 107.868361][ T6752] ? clear_bhb_loop+0x40/0x90 [ 107.868413][ T6752] ? clear_bhb_loop+0x40/0x90 [ 107.868432][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.868505][ T6752] RIP: 0033:0x7f4d9d7fe969 [ 107.868522][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.868542][ T6752] RSP: 002b:00007f4d9be67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.868564][ T6752] RAX: ffffffffffffffda RBX: 00007f4d9da25fa0 RCX: 00007f4d9d7fe969 [ 107.868578][ T6752] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 107.868592][ T6752] RBP: 00007f4d9be67090 R08: 0000000000000000 R09: 0000000000000000 [ 107.868631][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.868642][ T6752] R13: 0000000000000000 R14: 00007f4d9da25fa0 R15: 00007ffcd21bd758 [ 107.868658][ T6752] [ 108.242898][ T6752] bridge_slave_1: left allmulticast mode [ 108.248675][ T6752] bridge_slave_1: left promiscuous mode [ 108.254435][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.262104][ T6756] loop2: detected capacity change from 0 to 1024 [ 108.280300][ T6752] : (slave bond_slave_0): Releasing backup interface [ 108.290642][ T6752] : (slave bond_slave_1): Releasing backup interface [ 108.297544][ T6756] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 108.310024][ T6756] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.321438][ T6756] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 108.329817][ T6752] team0: Port device team_slave_0 removed [ 108.332104][ T6756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.342457][ T6752] team0: Port device team_slave_1 removed [ 108.342555][ T6756] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.948: Inode bitmap for bg 0 marked uninitialized [ 108.361901][ T6756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.479770][ T6770] x_tables: duplicate underflow at hook 2 [ 108.532873][ T6771] loop6: detected capacity change from 0 to 512 [ 108.543915][ T6771] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 108.562369][ T6771] EXT4-fs (loop6): 1 truncate cleaned up [ 108.568490][ T6771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.646227][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.771599][ T6784] FAULT_INJECTION: forcing a failure. [ 108.771599][ T6784] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.784919][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.2.956 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 108.784951][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 108.784965][ T6784] Call Trace: [ 108.785037][ T6784] [ 108.785117][ T6784] __dump_stack+0x1d/0x30 [ 108.785141][ T6784] dump_stack_lvl+0xe8/0x140 [ 108.785164][ T6784] dump_stack+0x15/0x1b [ 108.785183][ T6784] should_fail_ex+0x265/0x280 [ 108.785249][ T6784] should_fail_alloc_page+0xf2/0x100 [ 108.785278][ T6784] __alloc_frozen_pages_noprof+0xff/0x360 [ 108.785312][ T6784] alloc_pages_mpol+0xb3/0x250 [ 108.785359][ T6784] alloc_pages_noprof+0x90/0x130 [ 108.785457][ T6784] pte_alloc_one+0x2a/0x110 [ 108.785478][ T6784] __pte_alloc+0x32/0x290 [ 108.785503][ T6784] ? mas_state_walk+0x574/0x650 [ 108.785529][ T6784] handle_mm_fault+0x1d74/0x2ae0 [ 108.785570][ T6784] ? mas_walk+0xf2/0x120 [ 108.785600][ T6784] do_user_addr_fault+0x636/0x1090 [ 108.785693][ T6784] exc_page_fault+0x54/0xc0 [ 108.785787][ T6784] asm_exc_page_fault+0x26/0x30 [ 108.785805][ T6784] RIP: 0033:0x7f1d171b0d66 [ 108.785817][ T6784] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 108.785833][ T6784] RSP: 002b:00007f1d159564a0 EFLAGS: 00010246 [ 108.785879][ T6784] RAX: 0000000000000001 RBX: 00007f1d15956540 RCX: 0000000000000101 [ 108.785892][ T6784] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f1d159565e0 [ 108.785904][ T6784] RBP: 0000000000000102 R08: 00007f1d0d537000 R09: 0000000000000000 [ 108.785914][ T6784] R10: 0000000000000000 R11: 00007f1d15956550 R12: 0000000000000001 [ 108.785924][ T6784] R13: 00007f1d1738bfc0 R14: 0000000000000000 R15: 00007f1d159565e0 [ 108.785940][ T6784] [ 108.785959][ T6784] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 108.977039][ T6784] loop2: detected capacity change from 0 to 1024 [ 108.992210][ T6784] journal_path: Lookup failure for './file0' [ 108.998217][ T6784] EXT4-fs: error: could not find journal device path [ 109.174449][ T6792] loop2: detected capacity change from 0 to 1024 [ 109.220919][ T5023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.600746][ T3005] udevd[3005]: worker [3307] terminated by signal 33 (Unknown signal 33) [ 109.609202][ T3005] udevd[3005]: worker [3307] failed while handling '/devices/virtual/block/loop1' [ 109.624147][ T6835] loop6: detected capacity change from 0 to 512 [ 109.649725][ T6835] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 109.687561][ T6835] EXT4-fs (loop6): orphan cleanup on readonly fs [ 109.717320][ T6844] netlink: 'syz.1.979': attribute type 3 has an invalid length. [ 109.742055][ T6835] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.976: Block bitmap for bg 0 marked uninitialized [ 109.759791][ T6835] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 109.854256][ T6835] EXT4-fs (loop6): 1 orphan inode deleted [ 109.868658][ T6835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.905762][ T6870] loop2: detected capacity change from 0 to 2048 [ 109.930414][ T6835] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 109.931000][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 109.931016][ T29] audit: type=1400 audit(1747198150.614:3858): avc: denied { remount } for pid=6834 comm="syz.6.976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.956155][ T6835] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 109.980281][ T3842] loop2: p1 < > p4 [ 110.008881][ T3842] loop2: p4 size 8388608 extends beyond EOD, truncated [ 110.013480][ T6869] loop1: detected capacity change from 0 to 1024 [ 110.032910][ T6870] loop2: p1 < > p4 [ 110.037271][ T29] audit: type=1400 audit(1747198150.684:3859): avc: denied { create } for pid=6834 comm="syz.6.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.056742][ T29] audit: type=1400 audit(1747198150.684:3860): avc: denied { connect } for pid=6834 comm="syz.6.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.079268][ T6870] loop2: p4 size 8388608 extends beyond EOD, truncated [ 110.087687][ T6869] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 110.102563][ T6870] netlink: 'syz.2.983': attribute type 4 has an invalid length. [ 110.104902][ T6869] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.110249][ T6870] __nla_validate_parse: 6 callbacks suppressed [ 110.110263][ T6870] netlink: 152 bytes leftover after parsing attributes in process `syz.2.983'. [ 110.143091][ T5023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.154657][ T6869] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 110.154913][ T6859] FAULT_INJECTION: forcing a failure. [ 110.154913][ T6859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.162790][ T6869] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.175688][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.4.981 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 110.175745][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 110.175761][ T6859] Call Trace: [ 110.175768][ T6859] [ 110.175779][ T6859] __dump_stack+0x1d/0x30 [ 110.175807][ T6859] dump_stack_lvl+0xe8/0x140 [ 110.175831][ T6859] dump_stack+0x15/0x1b [ 110.175855][ T6859] should_fail_ex+0x265/0x280 [ 110.175956][ T6859] should_fail+0xb/0x20 [ 110.175995][ T6859] should_fail_usercopy+0x1a/0x20 [ 110.176021][ T6859] _copy_from_user+0x1c/0xb0 [ 110.176100][ T6859] ___sys_recvmsg+0xaa/0x370 [ 110.176141][ T6859] do_recvmmsg+0x1ef/0x540 [ 110.176175][ T6859] ? fput+0x8f/0xc0 [ 110.176201][ T6859] __x64_sys_recvmmsg+0xe5/0x170 [ 110.176287][ T6859] x64_sys_call+0x1c6a/0x2fb0 [ 110.176328][ T6859] do_syscall_64+0xd0/0x1a0 [ 110.176359][ T6859] ? clear_bhb_loop+0x40/0x90 [ 110.176387][ T6859] ? clear_bhb_loop+0x40/0x90 [ 110.176481][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.176517][ T6859] RIP: 0033:0x7ff7a76ce969 [ 110.176610][ T6859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.176649][ T6859] RSP: 002b:00007ff7a5d37038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 110.176673][ T6859] RAX: ffffffffffffffda RBX: 00007ff7a78f5fa0 RCX: 00007ff7a76ce969 [ 110.176690][ T6859] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 110.176706][ T6859] RBP: 00007ff7a5d37090 R08: 0000000000000000 R09: 0000000000000000 [ 110.176791][ T6859] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 110.176806][ T6859] R13: 0000000000000000 R14: 00007ff7a78f5fa0 R15: 00007ffde8069fb8 [ 110.176857][ T6859] [ 110.279646][ T29] audit: type=1326 audit(1747198150.944:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d172ee969 code=0x7ffc0000 [ 110.319733][ T6869] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.984: Inode bitmap for bg 0 marked uninitialized [ 110.325956][ T29] audit: type=1326 audit(1747198150.944:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d172ee969 code=0x7ffc0000 [ 110.354712][ T6890] loop6: detected capacity change from 0 to 512 [ 110.358007][ T29] audit: type=1326 audit(1747198150.944:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d172ee969 code=0x7ffc0000 [ 110.362018][ T6890] ext4: Unknown parameter 'subj_type' [ 110.384407][ T29] audit: type=1326 audit(1747198150.944:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d172ee969 code=0x7ffc0000 [ 110.384445][ T29] audit: type=1326 audit(1747198150.944:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d172ee969 code=0x7ffc0000 [ 110.433810][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 110.449623][ T29] audit: type=1326 audit(1747198150.944:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d172ee969 code=0x7ffc0000 [ 110.456965][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 110.478307][ T29] audit: type=1326 audit(1747198150.944:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.2.989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d172ee969 code=0x7ffc0000 [ 110.570415][ T6869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.585869][ T6893] xt_hashlimit: size too large, truncated to 1048576 [ 110.586035][ T6894] loop6: detected capacity change from 0 to 256 [ 110.703952][ T6895] loop2: detected capacity change from 0 to 4096 [ 110.731273][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.762569][ T6895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.842084][ T6899] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 110.908311][ T6899] SELinux: failed to load policy [ 110.994750][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.005303][ T6913] loop4: detected capacity change from 0 to 1024 [ 111.014908][ T6913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.034704][ T6913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.056530][ T6917] loop2: detected capacity change from 0 to 256 [ 111.145408][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.171010][ T6922] loop1: detected capacity change from 0 to 2048 [ 111.199348][ T6922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.201195][ T6927] program syz.4.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.227538][ T6917] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 111.237524][ T6917] SELinux: failed to load policy [ 111.256445][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 111.265461][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 111.360679][ T6935] loop4: detected capacity change from 0 to 512 [ 111.371191][ T6935] EXT4-fs: Ignoring removed bh option [ 111.376658][ T6935] ext2: Unknown parameter 'euid<00000000000000060929' [ 111.448466][ T6940] loop6: detected capacity change from 0 to 2048 [ 111.480043][ T3554] loop6: p1 < > p4 [ 111.484380][ T3554] loop6: p4 size 8388608 extends beyond EOD, truncated [ 111.497214][ T6940] loop6: p1 < > p4 [ 111.502088][ T6940] loop6: p4 size 8388608 extends beyond EOD, truncated [ 111.547693][ T6940] netlink: 'syz.6.1006': attribute type 4 has an invalid length. [ 111.555552][ T6940] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1006'. [ 111.656111][ T6945] loop6: detected capacity change from 0 to 2048 [ 111.673072][ T6945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.712496][ T6929] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.744452][ T6929] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 111.756850][ T6929] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.756850][ T6929] [ 111.766563][ T6929] EXT4-fs (loop1): Total free blocks count 0 [ 111.772626][ T6929] EXT4-fs (loop1): Free/Dirty block details [ 111.778636][ T6929] EXT4-fs (loop1): free_blocks=2415919104 [ 111.784479][ T6929] EXT4-fs (loop1): dirty_blocks=8224 [ 111.789892][ T6929] EXT4-fs (loop1): Block reservation details [ 111.795997][ T6929] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 111.860007][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 112.077543][ T6955] loop1: detected capacity change from 0 to 2048 [ 112.087612][ T6949] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.103587][ T6949] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 112.116252][ T6949] EXT4-fs (loop6): This should not happen!! Data will be lost [ 112.116252][ T6949] [ 112.126128][ T6949] EXT4-fs (loop6): Total free blocks count 0 [ 112.132265][ T6949] EXT4-fs (loop6): Free/Dirty block details [ 112.138275][ T6949] EXT4-fs (loop6): free_blocks=2415919104 [ 112.144094][ T6949] EXT4-fs (loop6): dirty_blocks=8224 [ 112.149442][ T6949] EXT4-fs (loop6): Block reservation details [ 112.155507][ T6949] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 112.167891][ T3842] loop1: p1 < > p4 [ 112.172551][ T3842] loop1: p4 size 8388608 extends beyond EOD, truncated [ 112.181940][ T6955] loop1: p1 < > p4 [ 112.186656][ T6955] loop1: p4 size 8388608 extends beyond EOD, truncated [ 112.194025][ T6935] FAULT_INJECTION: forcing a failure. [ 112.194025][ T6935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.207127][ T6935] CPU: 0 UID: 0 PID: 6935 Comm: syz.4.1004 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 112.207170][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 112.207185][ T6935] Call Trace: [ 112.207192][ T6935] [ 112.207201][ T6935] __dump_stack+0x1d/0x30 [ 112.207225][ T6935] dump_stack_lvl+0xe8/0x140 [ 112.207323][ T6935] dump_stack+0x15/0x1b [ 112.207344][ T6935] should_fail_ex+0x265/0x280 [ 112.207433][ T6935] should_fail+0xb/0x20 [ 112.207467][ T6935] should_fail_usercopy+0x1a/0x20 [ 112.207490][ T6935] set_fd_set+0x29/0xa0 [ 112.207554][ T6935] core_sys_select+0x451/0x600 [ 112.207602][ T6935] ? _parse_integer+0x27/0x40 [ 112.207675][ T6935] ? set_user_sigmask+0x84/0x190 [ 112.207732][ T6935] __se_sys_pselect6+0x216/0x280 [ 112.207779][ T6935] __x64_sys_pselect6+0x78/0x90 [ 112.207810][ T6935] x64_sys_call+0x1caa/0x2fb0 [ 112.207834][ T6935] do_syscall_64+0xd0/0x1a0 [ 112.207861][ T6935] ? clear_bhb_loop+0x40/0x90 [ 112.207914][ T6935] ? clear_bhb_loop+0x40/0x90 [ 112.207933][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.207951][ T6935] RIP: 0033:0x7ff7a76ce969 [ 112.207966][ T6935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.207986][ T6935] RSP: 002b:00007ff7a5d37038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 112.208026][ T6935] RAX: ffffffffffffffda RBX: 00007ff7a78f5fa0 RCX: 00007ff7a76ce969 [ 112.208039][ T6935] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 112.208053][ T6935] RBP: 00007ff7a5d37090 R08: 0000000000000000 R09: 0000000000000000 [ 112.208067][ T6935] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 112.208080][ T6935] R13: 0000000000000000 R14: 00007ff7a78f5fa0 R15: 00007ffde8069fb8 [ 112.208101][ T6935] [ 112.463242][ T3005] loop1: p1 < > p4 [ 112.471902][ T57] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 112.489207][ T3005] loop1: p4 size 8388608 extends beyond EOD, truncated [ 112.542460][ T6972] netlink: 'syz.0.1017': attribute type 4 has an invalid length. [ 112.550259][ T6972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1017'. [ 112.622269][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1018'. [ 112.632558][ T6955] netlink: 'syz.1.1008': attribute type 4 has an invalid length. [ 112.640428][ T6955] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1008'. [ 112.681964][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 112.682412][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 112.791150][ T6990] loop2: detected capacity change from 0 to 2048 [ 112.816765][ T6993] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 112.826779][ T6993] SELinux: failed to load policy [ 112.846847][ T3842] loop2: p1 < > p4 [ 112.861143][ T3842] loop2: p4 size 8388608 extends beyond EOD, truncated [ 112.897626][ T6990] loop2: p1 < > p4 [ 112.902304][ T6998] FAULT_INJECTION: forcing a failure. [ 112.902304][ T6998] name failslab, interval 1, probability 0, space 0, times 0 [ 112.915060][ T6998] CPU: 1 UID: 0 PID: 6998 Comm: syz.6.1026 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 112.915092][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 112.915103][ T6998] Call Trace: [ 112.915108][ T6998] [ 112.915114][ T6998] __dump_stack+0x1d/0x30 [ 112.915134][ T6998] dump_stack_lvl+0xe8/0x140 [ 112.915151][ T6998] dump_stack+0x15/0x1b [ 112.915166][ T6998] should_fail_ex+0x265/0x280 [ 112.915205][ T6998] should_failslab+0x8c/0xb0 [ 112.915253][ T6998] kmem_cache_alloc_noprof+0x50/0x310 [ 112.915277][ T6998] ? vm_area_dup+0x32/0x260 [ 112.915306][ T6998] vm_area_dup+0x32/0x260 [ 112.915331][ T6998] __split_vma+0xe9/0x610 [ 112.915354][ T6998] vma_modify+0x107/0x210 [ 112.915387][ T6998] vma_modify_flags+0x101/0x130 [ 112.915433][ T6998] mlock_fixup+0x11d/0x210 [ 112.915461][ T6998] apply_vma_lock_flags+0x193/0x250 [ 112.915496][ T6998] do_mlock+0x3c6/0x520 [ 112.915518][ T6998] ? fput+0x8f/0xc0 [ 112.915541][ T6998] ? ksys_write+0x16e/0x1a0 [ 112.915578][ T6998] __x64_sys_mlock2+0x71/0x90 [ 112.915608][ T6998] x64_sys_call+0x277e/0x2fb0 [ 112.915626][ T6998] do_syscall_64+0xd0/0x1a0 [ 112.915649][ T6998] ? clear_bhb_loop+0x40/0x90 [ 112.915670][ T6998] ? clear_bhb_loop+0x40/0x90 [ 112.915697][ T6998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.915740][ T6998] RIP: 0033:0x7f58c901e969 [ 112.915758][ T6998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.915778][ T6998] RSP: 002b:00007f58c7687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 112.915796][ T6998] RAX: ffffffffffffffda RBX: 00007f58c9245fa0 RCX: 00007f58c901e969 [ 112.915809][ T6998] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 112.915825][ T6998] RBP: 00007f58c7687090 R08: 0000000000000000 R09: 0000000000000000 [ 112.915840][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.915855][ T6998] R13: 0000000000000000 R14: 00007f58c9245fa0 R15: 00007fff3f0ffee8 [ 112.915880][ T6998] [ 112.921907][ T6990] loop2: p4 size 8388608 extends beyond EOD, [ 113.026556][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 113.031268][ T6990] truncated [ 113.036518][ T6992] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1024'. [ 113.138021][ T7003] loop6: detected capacity change from 0 to 2048 [ 113.177436][ T6990] netlink: 'syz.2.1023': attribute type 4 has an invalid length. [ 113.185256][ T6990] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1023'. [ 113.239153][ T7003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.294286][ T7009] loop4: detected capacity change from 0 to 2048 [ 113.343780][ T3842] loop4: p1 < > p4 [ 113.349518][ T3842] loop4: p4 size 8388608 extends beyond EOD, truncated [ 113.384093][ T7018] loop1: detected capacity change from 0 to 2048 [ 113.396097][ T7009] loop4: p1 < > p4 [ 113.402188][ T7009] loop4: p4 size 8388608 extends beyond EOD, truncated [ 113.411379][ T7018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.464484][ T7009] netlink: 'syz.4.1030': attribute type 4 has an invalid length. [ 113.520909][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 113.538272][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 113.685892][ T7016] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.750869][ T7032] loop2: detected capacity change from 0 to 1024 [ 113.751613][ T7016] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 113.768053][ T7032] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 113.769635][ T7016] EXT4-fs (loop6): This should not happen!! Data will be lost [ 113.769635][ T7016] [ 113.789223][ T7016] EXT4-fs (loop6): Total free blocks count 0 [ 113.795324][ T7016] EXT4-fs (loop6): Free/Dirty block details [ 113.801405][ T7016] EXT4-fs (loop6): free_blocks=2415919104 [ 113.807325][ T7016] EXT4-fs (loop6): dirty_blocks=8224 [ 113.812835][ T7016] EXT4-fs (loop6): Block reservation details [ 113.818939][ T7016] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 113.823607][ T7032] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.001454][ T7023] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.016902][ T7032] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 114.029681][ T7032] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.046587][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 114.050450][ T7023] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 114.060314][ T7032] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1037: Inode bitmap for bg 0 marked uninitialized [ 114.071613][ T7023] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.071613][ T7023] [ 114.094275][ T7023] EXT4-fs (loop1): Total free blocks count 0 [ 114.100423][ T7023] EXT4-fs (loop1): Free/Dirty block details [ 114.106393][ T7023] EXT4-fs (loop1): free_blocks=2415919104 [ 114.112214][ T7023] EXT4-fs (loop1): dirty_blocks=8224 [ 114.117681][ T7023] EXT4-fs (loop1): Block reservation details [ 114.123736][ T7023] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 114.174866][ T7032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.251584][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 114.343182][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.710002][ T7070] loop1: detected capacity change from 0 to 512 [ 114.735326][ T7070] EXT4-fs: Ignoring removed bh option [ 114.740852][ T7070] ext2: Unknown parameter 'euid<00000000000000060929' [ 114.794391][ T7070] sock: sock_set_timeout: `syz.1.1053' (pid 7070) tries to set negative timeout [ 115.160736][ T7093] __nla_validate_parse: 8 callbacks suppressed [ 115.160751][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 115.219344][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 115.219358][ T29] audit: type=1400 audit(1747198155.894:4060): avc: denied { setopt } for pid=7094 comm="syz.4.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.247664][ T29] audit: type=1326 audit(1747198155.924:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c63bee969 code=0x7ffc0000 [ 115.284217][ T29] audit: type=1326 audit(1747198155.954:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c63bee969 code=0x7ffc0000 [ 115.307945][ T29] audit: type=1326 audit(1747198155.954:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c63bee969 code=0x7ffc0000 [ 115.331662][ T29] audit: type=1326 audit(1747198155.954:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c63bee969 code=0x7ffc0000 [ 115.355280][ T29] audit: type=1326 audit(1747198155.954:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c63bee969 code=0x7ffc0000 [ 115.367336][ T7103] loop4: detected capacity change from 0 to 2048 [ 115.378917][ T29] audit: type=1326 audit(1747198155.954:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c63bee969 code=0x7ffc0000 [ 115.408525][ T29] audit: type=1326 audit(1747198155.954:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f1c63bee969 code=0x7ffc0000 [ 115.432074][ T29] audit: type=1326 audit(1747198155.954:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c63bee969 code=0x7ffc0000 [ 115.455732][ T29] audit: type=1326 audit(1747198155.954:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7095 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1c63bee969 code=0x7ffc0000 [ 115.477540][ T7107] loop6: detected capacity change from 0 to 2048 [ 115.487396][ T7103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.560463][ T3842] loop6: p1 < > p4 [ 115.583791][ T3842] loop6: p4 size 8388608 extends beyond EOD, truncated [ 115.619164][ T7107] loop6: p1 < > p4 [ 115.624191][ T7107] loop6: p4 size 8388608 extends beyond EOD, truncated [ 115.677027][ T7107] netlink: 'syz.6.1064': attribute type 4 has an invalid length. [ 115.684941][ T7107] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1064'. [ 115.804939][ T7116] loop2: detected capacity change from 0 to 1024 [ 115.829041][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 115.858225][ T7116] journal_path: Lookup failure for './file0' [ 115.864274][ T7116] EXT4-fs: error: could not find journal device path [ 115.906135][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 115.956182][ T7122] xt_hashlimit: size too large, truncated to 1048576 [ 115.996860][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 116.081639][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.089203][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.096650][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.106079][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.113511][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.121035][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.128441][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.135890][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.143331][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.150778][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.158250][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.165720][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.173132][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.229994][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.237566][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.245059][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.252499][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.260059][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.267496][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.275001][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.282450][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.289898][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.297362][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.304764][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.312235][ T7133] loop1: detected capacity change from 0 to 1024 [ 116.312248][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.325980][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.332553][ T7133] journal_path: Non-blockdev passed as './file0' [ 116.333393][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.339696][ T7133] EXT4-fs: error: could not find journal device path [ 116.347048][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.363883][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 116.385581][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 116.394860][ T7132] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1071'. [ 116.420161][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.444138][ T7134] fido_id[7134]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.578423][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1077'. [ 116.592443][ T7156] loop2: detected capacity change from 0 to 256 [ 116.602302][ T7146] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1077'. [ 116.625562][ T7158] loop4: detected capacity change from 0 to 1024 [ 116.635550][ T7158] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 116.656853][ T7158] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.676944][ T7158] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 116.685076][ T7158] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.706708][ T7158] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.1079: Inode bitmap for bg 0 marked uninitialized [ 116.723527][ T7158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.734328][ T7166] loop1: detected capacity change from 0 to 1024 [ 116.755935][ T7166] journal_path: Non-blockdev passed as './file0' [ 116.762368][ T7166] EXT4-fs: error: could not find journal device path [ 116.792304][ T7168] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 116.867892][ T7168] SELinux: failed to load policy [ 116.892487][ T7169] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 116.947233][ T7169] SELinux: failed to load policy [ 116.962165][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.976373][ T7178] loop1: detected capacity change from 0 to 1024 [ 116.990565][ T7178] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 117.031115][ T7178] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.062278][ T7178] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 117.063110][ T7181] xt_hashlimit: size too large, truncated to 1048576 [ 117.070842][ T7178] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.084347][ T7178] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.1087: Inode bitmap for bg 0 marked uninitialized [ 117.097835][ T7178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.165379][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.211924][ T7189] loop1: detected capacity change from 0 to 1024 [ 117.264922][ T7189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.297548][ T7198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1094'. [ 117.306583][ T7198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1094'. [ 117.331360][ T7204] loop6: detected capacity change from 0 to 1024 [ 117.362799][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.408330][ T7214] loop4: detected capacity change from 0 to 256 [ 117.418759][ T7212] loop1: detected capacity change from 0 to 1024 [ 117.441536][ T7212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.473565][ T7218] loop6: detected capacity change from 0 to 2048 [ 117.538524][ T7218] loop6: p1 < > p4 [ 117.544830][ T7218] loop6: p4 size 8388608 extends beyond EOD, truncated [ 117.591054][ T7218] netlink: 'syz.6.1103': attribute type 4 has an invalid length. [ 117.606440][ T7224] xt_hashlimit: size too large, truncated to 1048576 [ 117.620631][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 117.631800][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 117.780225][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 117.815939][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 117.850305][ T7226] SELinux: failed to load policy [ 117.895608][ T7242] loop6: detected capacity change from 0 to 1024 [ 118.016147][ T7251] loop6: detected capacity change from 0 to 256 [ 118.197504][ T7257] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 118.234980][ T7257] SELinux: failed to load policy [ 118.247502][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.298421][ T7261] netlink: 'syz.0.1119': attribute type 4 has an invalid length. [ 118.351362][ T7266] loop4: detected capacity change from 0 to 1024 [ 118.473345][ T7266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.593868][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.641799][ T7291] loop4: detected capacity change from 0 to 1024 [ 118.671299][ T7291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.888112][ T7307] loop1: detected capacity change from 0 to 512 [ 118.895250][ T7307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.933146][ T7307] EXT4-fs (loop1): 1 truncate cleaned up [ 118.939192][ T7307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.086806][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.155223][ T7329] loop2: detected capacity change from 0 to 2048 [ 119.156016][ T7331] loop4: detected capacity change from 0 to 256 [ 119.202667][ T7329] loop2: p1 < > p4 [ 119.207553][ T7329] loop2: p4 size 8388608 extends beyond EOD, truncated [ 119.218364][ T3005] loop2: p1 < > p4 [ 119.222751][ T3005] loop2: p4 size 8388608 extends beyond EOD, truncated [ 119.251214][ T7329] netlink: 'syz.2.1145': attribute type 4 has an invalid length. [ 119.304768][ T7334] loop6: detected capacity change from 0 to 256 [ 119.314832][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 119.326132][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 119.367147][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 119.367101][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 119.390091][ T7335] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 119.405224][ T7335] SELinux: failed to load policy [ 119.496807][ T7345] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 119.542969][ T7345] SELinux: failed to load policy [ 119.604247][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.703869][ T7353] loop1: detected capacity change from 0 to 1024 [ 119.755915][ T7353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.844870][ T7360] loop2: detected capacity change from 0 to 1024 [ 119.861806][ T7360] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 119.872399][ T7360] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.883587][ T7360] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 119.891807][ T7360] EXT4-fs (loop2): orphan cleanup on readonly fs [ 119.899366][ T7360] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1156: Inode bitmap for bg 0 marked uninitialized [ 119.928952][ T7360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.979467][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.071408][ T7375] loop4: detected capacity change from 0 to 1024 [ 120.077922][ T7372] 9pnet: Could not find request transport: f [ 120.080854][ T7375] journal_path: Non-blockdev passed as './file0' [ 120.090377][ T7375] EXT4-fs: error: could not find journal device path [ 120.157051][ T7378] loop4: detected capacity change from 0 to 2048 [ 120.165815][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.182855][ T7378] loop4: p1 < > p4 [ 120.191433][ T7378] loop4: p4 size 8388608 extends beyond EOD, truncated [ 120.272114][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 120.272127][ T29] audit: type=1326 audit(1747198160.954:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.317720][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 120.321365][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 120.369609][ T7396] loop4: detected capacity change from 0 to 1024 [ 120.376005][ T29] audit: type=1326 audit(1747198160.994:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.381591][ T7393] loop1: detected capacity change from 0 to 2048 [ 120.399493][ T29] audit: type=1326 audit(1747198160.994:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.429203][ T29] audit: type=1326 audit(1747198160.994:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.430029][ T7396] journal_path: Non-blockdev passed as './file0' [ 120.452656][ T29] audit: type=1326 audit(1747198160.994:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.458920][ T7396] EXT4-fs: error: could not find journal device path [ 120.482225][ T29] audit: type=1326 audit(1747198160.994:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.512365][ T29] audit: type=1326 audit(1747198160.994:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.536025][ T29] audit: type=1326 audit(1747198160.994:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.559501][ T29] audit: type=1326 audit(1747198160.994:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.583085][ T29] audit: type=1326 audit(1747198160.994:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7389 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 120.658576][ T7393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.700988][ T7407] __nla_validate_parse: 16 callbacks suppressed [ 120.701054][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1174'. [ 120.766874][ T7407] loop6: detected capacity change from 0 to 1024 [ 120.774141][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1166'. [ 120.783186][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1166'. [ 120.807288][ T7407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.844331][ T7408] loop4: detected capacity change from 0 to 1024 [ 120.860213][ T7408] journal_path: Non-blockdev passed as './file0' [ 120.866592][ T7408] EXT4-fs: error: could not find journal device path [ 121.036728][ T7419] loop4: detected capacity change from 0 to 2048 [ 121.093538][ T7419] loop4: p1 < > p4 [ 121.099455][ T7419] loop4: p4 size 8388608 extends beyond EOD, truncated [ 121.251013][ T57] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.269935][ T7428] loop4: detected capacity change from 0 to 256 [ 121.272644][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 121.288690][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 121.288690][ T57] [ 121.298393][ T57] EXT4-fs (loop1): Total free blocks count 0 [ 121.304457][ T57] EXT4-fs (loop1): Free/Dirty block details [ 121.310405][ T57] EXT4-fs (loop1): free_blocks=2415919104 [ 121.316206][ T57] EXT4-fs (loop1): dirty_blocks=4432 [ 121.321549][ T57] EXT4-fs (loop1): Block reservation details [ 121.327623][ T57] EXT4-fs (loop1): i_reserved_data_blocks=277 [ 121.356980][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 121.388640][ T5023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.496147][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1183'. [ 121.540599][ T7438] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 121.559515][ T7438] SELinux: failed to load policy [ 121.736931][ T7449] loop1: detected capacity change from 0 to 512 [ 121.746128][ T7449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.757144][ T7449] EXT4-fs (loop1): 1 truncate cleaned up [ 121.763279][ T7449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.850860][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1197'. [ 121.869400][ T7465] loop2: detected capacity change from 0 to 1024 [ 121.895032][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 121.906648][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.914111][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.921729][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.929477][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.936904][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.944423][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.951904][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.959347][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.966807][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.974262][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.981681][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.989077][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 121.996490][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.003935][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.011427][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.018873][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.026324][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.033764][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.041225][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.048614][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.056120][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.063562][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.071064][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.078495][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.085921][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.093418][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.100856][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.108246][ T6097] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 122.139841][ T6097] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 122.196518][ T7480] fido_id[7480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.297850][ T7485] loop6: detected capacity change from 0 to 1024 [ 122.314891][ T7485] journal_path: Non-blockdev passed as './file0' [ 122.321356][ T7485] EXT4-fs: error: could not find journal device path [ 122.494999][ T7497] loop2: detected capacity change from 0 to 2048 [ 122.548774][ T7506] loop4: detected capacity change from 0 to 256 [ 122.556163][ T7500] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1208'. [ 122.567232][ T7500] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1208'. [ 122.595511][ T3842] loop2: p1 < > p4 [ 122.600214][ T3842] loop2: p4 size 8388608 extends beyond EOD, truncated [ 122.608850][ T7497] loop2: p1 < > p4 [ 122.614473][ T7497] loop2: p4 size 8388608 extends beyond EOD, truncated [ 122.624981][ T3005] loop2: p1 < > p4 [ 122.629412][ T3005] loop2: p4 size 8388608 extends beyond EOD, truncated [ 122.665823][ T7497] netlink: 'syz.2.1210': attribute type 4 has an invalid length. [ 122.673793][ T7497] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1210'. [ 122.703223][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.703403][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 122.825468][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1217'. [ 122.859667][ T7517] loop2: detected capacity change from 0 to 1024 [ 122.974349][ T7521] loop1: detected capacity change from 0 to 1024 [ 122.981395][ T7521] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 123.002366][ T7521] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.044459][ T7521] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 123.057115][ T7521] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.071079][ T7521] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.1218: Inode bitmap for bg 0 marked uninitialized [ 123.196598][ T7540] xt_hashlimit: size too large, truncated to 1048576 [ 123.306595][ T7548] loop1: detected capacity change from 0 to 2048 [ 123.341688][ T7548] loop1: p1 < > p4 [ 123.346298][ T7548] loop1: p4 size 8388608 extends beyond EOD, truncated [ 123.385805][ T7552] loop2: detected capacity change from 0 to 256 [ 123.395854][ T7548] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 123.494185][ T7558] loop6: detected capacity change from 0 to 2048 [ 123.514090][ T7563] FAULT_INJECTION: forcing a failure. [ 123.514090][ T7563] name failslab, interval 1, probability 0, space 0, times 0 [ 123.526816][ T7563] CPU: 1 UID: 0 PID: 7563 Comm: syz.4.1235 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 123.526849][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 123.526906][ T7563] Call Trace: [ 123.526913][ T7563] [ 123.526944][ T7563] __dump_stack+0x1d/0x30 [ 123.526963][ T7563] dump_stack_lvl+0xe8/0x140 [ 123.527001][ T7563] dump_stack+0x15/0x1b [ 123.527069][ T7563] should_fail_ex+0x265/0x280 [ 123.527110][ T7563] ? nsim_nexthop_event_nb+0x7d/0xcd0 [ 123.527136][ T7563] should_failslab+0x8c/0xb0 [ 123.527169][ T7563] __kmalloc_cache_noprof+0x4c/0x320 [ 123.527224][ T7563] nsim_nexthop_event_nb+0x7d/0xcd0 [ 123.527247][ T7563] ? nh_notifier_info_init+0xb8/0x4d0 [ 123.527274][ T7563] ? should_failslab+0x8c/0xb0 [ 123.527368][ T7563] ? __kmalloc_cache_noprof+0x189/0x320 [ 123.527450][ T7563] ? vxlan_nexthop_event+0x2e/0x300 [ 123.527523][ T7563] ? __pfx_nsim_nexthop_event_nb+0x10/0x10 [ 123.527557][ T7563] blocking_notifier_call_chain+0x98/0x1f0 [ 123.527586][ T7563] call_nexthop_notifiers+0x103/0x210 [ 123.527640][ T7563] rtm_new_nexthop+0x37c9/0x4510 [ 123.527666][ T7563] ? bpf_trace_run3+0x12c/0x1d0 [ 123.527715][ T7563] ? ns_capable+0x7d/0xb0 [ 123.527740][ T7563] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 123.527818][ T7563] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 123.527845][ T7563] netlink_rcv_skb+0x120/0x220 [ 123.527950][ T7563] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.527988][ T7563] rtnetlink_rcv+0x1c/0x30 [ 123.528161][ T7563] netlink_unicast+0x5a1/0x670 [ 123.528249][ T7563] netlink_sendmsg+0x58b/0x6b0 [ 123.528406][ T7563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.528433][ T7563] __sock_sendmsg+0x142/0x180 [ 123.528558][ T7563] ____sys_sendmsg+0x345/0x4e0 [ 123.528589][ T7563] ___sys_sendmsg+0x17b/0x1d0 [ 123.528633][ T7563] __sys_sendmmsg+0x178/0x300 [ 123.528710][ T7563] __x64_sys_sendmmsg+0x57/0x70 [ 123.528738][ T7563] x64_sys_call+0x2f2f/0x2fb0 [ 123.528765][ T7563] do_syscall_64+0xd0/0x1a0 [ 123.528795][ T7563] ? clear_bhb_loop+0x40/0x90 [ 123.528870][ T7563] ? clear_bhb_loop+0x40/0x90 [ 123.528897][ T7563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.528917][ T7563] RIP: 0033:0x7ff7a76ce969 [ 123.528931][ T7563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.528953][ T7563] RSP: 002b:00007ff7a5d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 123.529007][ T7563] RAX: ffffffffffffffda RBX: 00007ff7a78f5fa0 RCX: 00007ff7a76ce969 [ 123.529024][ T7563] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 123.529040][ T7563] RBP: 00007ff7a5d37090 R08: 0000000000000000 R09: 0000000000000000 [ 123.529051][ T7563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.529063][ T7563] R13: 0000000000000000 R14: 00007ff7a78f5fa0 R15: 00007ffde8069fb8 [ 123.529081][ T7563] [ 123.814908][ T7560] loop1: detected capacity change from 0 to 1024 [ 124.211624][ T7584] loop1: detected capacity change from 0 to 256 [ 124.333670][ T7592] loop2: detected capacity change from 0 to 1024 [ 124.361809][ T7592] journal_path: Lookup failure for './file0' [ 124.367912][ T7592] EXT4-fs: error: could not find journal device path [ 124.384693][ T7595] loop4: detected capacity change from 0 to 2048 [ 124.470387][ T7603] loop6: detected capacity change from 0 to 2048 [ 124.566182][ T7609] loop2: detected capacity change from 0 to 2048 [ 124.790120][ T3304] loop2: p1 < > p4 [ 124.803113][ T3304] loop2: p4 size 8388608 extends beyond EOD, truncated [ 124.811558][ T7605] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 124.837629][ T7605] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 124.849983][ T7605] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.849983][ T7605] [ 124.859661][ T7605] EXT4-fs (loop4): Total free blocks count 0 [ 124.865652][ T7605] EXT4-fs (loop4): Free/Dirty block details [ 124.871573][ T7605] EXT4-fs (loop4): free_blocks=2415919104 [ 124.877369][ T7605] EXT4-fs (loop4): dirty_blocks=8224 [ 124.882769][ T7605] EXT4-fs (loop4): Block reservation details [ 124.888756][ T7605] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 124.909120][ T7609] loop2: p1 < > p4 [ 124.928679][ T7609] loop2: p4 size 8388608 extends beyond EOD, truncated [ 124.950989][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 124.963588][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.963588][ T31] [ 124.995421][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 125.006883][ T7614] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.023163][ T7609] netlink: 'syz.2.1250': attribute type 4 has an invalid length. [ 125.036765][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 125.073703][ T7614] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 125.086304][ T7614] EXT4-fs (loop6): This should not happen!! Data will be lost [ 125.086304][ T7614] [ 125.096176][ T7614] EXT4-fs (loop6): Total free blocks count 0 [ 125.102210][ T7614] EXT4-fs (loop6): Free/Dirty block details [ 125.104798][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 125.108103][ T7614] EXT4-fs (loop6): free_blocks=2415919104 [ 125.108124][ T7614] EXT4-fs (loop6): dirty_blocks=8224 [ 125.120714][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 125.123566][ T7614] EXT4-fs (loop6): Block reservation details [ 125.144589][ T7614] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 125.251699][ T3425] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 125.264307][ T3425] EXT4-fs (loop6): This should not happen!! Data will be lost [ 125.264307][ T3425] [ 125.353778][ T7639] loop4: detected capacity change from 0 to 2048 [ 125.390199][ T7639] loop4: p1 < > p4 [ 125.400696][ T7639] loop4: p4 size 8388608 extends beyond EOD, truncated [ 125.431913][ T7644] loop2: detected capacity change from 0 to 1024 [ 125.451774][ T7639] netlink: 'syz.4.1263': attribute type 4 has an invalid length. [ 125.465533][ T7644] journal_path: Lookup failure for './file0' [ 125.471686][ T7644] EXT4-fs: error: could not find journal device path [ 125.487205][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.494745][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.502286][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.529602][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 125.529618][ T29] audit: type=1326 audit(1747198166.194:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.559296][ T29] audit: type=1326 audit(1747198166.194:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.582900][ T29] audit: type=1326 audit(1747198166.194:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.606393][ T29] audit: type=1326 audit(1747198166.194:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.629969][ T29] audit: type=1326 audit(1747198166.194:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.653409][ T29] audit: type=1326 audit(1747198166.194:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.676959][ T29] audit: type=1326 audit(1747198166.194:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.700464][ T29] audit: type=1326 audit(1747198166.194:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.723944][ T29] audit: type=1326 audit(1747198166.194:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.747191][ T29] audit: type=1326 audit(1747198166.194:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.6.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 125.771744][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.779340][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.786786][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.794204][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.796921][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 125.801610][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.801634][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.801659][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.834066][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.838485][ T7652] x_tables: duplicate underflow at hook 2 [ 125.841492][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.841517][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.849585][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.869799][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.877332][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.884795][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.892399][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.899830][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.907209][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.914669][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.914883][ T7653] loop6: detected capacity change from 0 to 2048 [ 125.922108][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.922133][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.943347][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.950781][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.958194][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.965627][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.973086][ T3390] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 125.983504][ T3390] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 126.014393][ T7658] fido_id[7658]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.051885][ T7663] loop1: detected capacity change from 0 to 2048 [ 126.075848][ T7665] loop2: detected capacity change from 0 to 1024 [ 126.095858][ T3304] loop1: p1 < > p4 [ 126.108951][ T3304] loop1: p4 size 8388608 extends beyond EOD, truncated [ 126.137343][ T7663] loop1: p1 < > p4 [ 126.142738][ T7663] loop1: p4 size 8388608 extends beyond EOD, truncated [ 126.210499][ T7663] netlink: 'syz.1.1271': attribute type 4 has an invalid length. [ 126.218323][ T7663] __nla_validate_parse: 5 callbacks suppressed [ 126.218336][ T7663] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1271'. [ 126.261413][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 126.274763][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 126.288061][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1275'. [ 126.304896][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 126.318792][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 126.442231][ T7682] loop2: detected capacity change from 0 to 2048 [ 126.470557][ T7682] loop2: p1 < > p4 [ 126.475014][ T7682] loop2: p4 size 8388608 extends beyond EOD, truncated [ 126.531167][ T7682] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 126.538964][ T7682] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1278'. [ 126.579119][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 126.614434][ T7684] loop2: detected capacity change from 0 to 2048 [ 126.695498][ T31] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.725598][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 126.735142][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 126.747428][ T31] EXT4-fs (loop6): This should not happen!! Data will be lost [ 126.747428][ T31] [ 126.757163][ T31] EXT4-fs (loop6): Total free blocks count 0 [ 126.763268][ T31] EXT4-fs (loop6): Free/Dirty block details [ 126.769282][ T7688] loop4: detected capacity change from 0 to 1024 [ 126.769323][ T31] EXT4-fs (loop6): free_blocks=2415919104 [ 126.781478][ T31] EXT4-fs (loop6): dirty_blocks=8224 [ 126.786771][ T31] EXT4-fs (loop6): Block reservation details [ 126.792798][ T31] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 126.803207][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 126.815789][ T31] EXT4-fs (loop6): This should not happen!! Data will be lost [ 126.815789][ T31] [ 127.008369][ T7704] loop2: detected capacity change from 0 to 1024 [ 127.016420][ T7704] journal_path: Lookup failure for './file0' [ 127.022477][ T7704] EXT4-fs: error: could not find journal device path [ 127.054061][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.061557][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.068971][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.078935][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.086428][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.093864][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.101301][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.108743][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.116248][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.123654][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.131184][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.138646][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.146056][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.154685][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1285'. [ 127.164147][ T7699] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1285'. [ 127.175962][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.183478][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.190915][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.198461][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.205885][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.213355][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.220834][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.228237][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.235687][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.243150][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.250563][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.257961][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.264386][ T7712] loop1: detected capacity change from 0 to 2048 [ 127.265374][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.279130][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.286625][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.295490][ T23] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 127.328468][ T7715] fido_id[7715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.397084][ T7719] loop4: detected capacity change from 0 to 2048 [ 127.410712][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1293'. [ 127.434159][ T7723] loop1: detected capacity change from 0 to 1024 [ 127.450035][ T3842] loop4: p1 < > p4 [ 127.460112][ T3842] loop4: p4 size 8388608 extends beyond EOD, truncated [ 127.470445][ T7719] loop4: p1 < > p4 [ 127.477481][ T7719] loop4: p4 size 8388608 extends beyond EOD, truncated [ 127.529235][ T7719] netlink: 'syz.4.1290': attribute type 4 has an invalid length. [ 127.537089][ T7719] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1290'. [ 127.686762][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1302'. [ 127.694885][ T7742] loop2: detected capacity change from 0 to 1024 [ 127.702259][ T7743] loop4: detected capacity change from 0 to 1024 [ 127.862495][ T7752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'. [ 127.883468][ T7752] loop2: detected capacity change from 0 to 1024 [ 128.145812][ T7770] loop6: detected capacity change from 0 to 1024 [ 128.297907][ T7779] loop6: detected capacity change from 0 to 256 [ 128.396471][ T7782] loop4: detected capacity change from 0 to 1024 [ 128.428391][ T7785] loop2: detected capacity change from 0 to 2048 [ 128.438401][ T7782] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 128.452423][ T7782] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 128.463528][ T7782] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 128.471558][ T7782] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.478169][ T7782] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.1314: Inode bitmap for bg 0 marked uninitialized [ 128.491547][ T3842] loop2: p1 < > p4 [ 128.496411][ T3842] loop2: p4 size 8388608 extends beyond EOD, truncated [ 128.519154][ T7785] loop2: p1 < > p4 [ 128.525083][ T7785] loop2: p4 size 8388608 extends beyond EOD, truncated [ 128.603402][ T7785] netlink: 'syz.2.1315': attribute type 4 has an invalid length. [ 128.605252][ T7790] loop4: detected capacity change from 0 to 1024 [ 128.706619][ T7796] loop2: detected capacity change from 0 to 1024 [ 128.963548][ T7812] loop4: detected capacity change from 0 to 1024 [ 128.983274][ T7812] EXT4-fs mount: 40 callbacks suppressed [ 128.983291][ T7812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.051750][ T7820] loop1: detected capacity change from 0 to 1024 [ 129.082900][ T7820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.119469][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.137198][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.193194][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.206450][ T7824] loop4: detected capacity change from 0 to 256 [ 129.267590][ T7828] loop2: detected capacity change from 0 to 1024 [ 129.276500][ T7834] loop1: detected capacity change from 0 to 1024 [ 129.315346][ T7828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.328616][ T7834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.514268][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.717580][ T7861] loop6: detected capacity change from 0 to 1024 [ 129.732603][ T7861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.763106][ T7864] loop2: detected capacity change from 0 to 1024 [ 129.784407][ T7864] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 129.801616][ T7864] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.812812][ T7864] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 129.821001][ T7864] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.827708][ T7864] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1340: Inode bitmap for bg 0 marked uninitialized [ 129.841518][ T7864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.875272][ T5023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.887848][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.916031][ T7868] FAULT_INJECTION: forcing a failure. [ 129.916031][ T7868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.929302][ T7868] CPU: 0 UID: 0 PID: 7868 Comm: syz.6.1342 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 129.929375][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 129.929390][ T7868] Call Trace: [ 129.929397][ T7868] [ 129.929406][ T7868] __dump_stack+0x1d/0x30 [ 129.929431][ T7868] dump_stack_lvl+0xe8/0x140 [ 129.929457][ T7868] dump_stack+0x15/0x1b [ 129.929495][ T7868] should_fail_ex+0x265/0x280 [ 129.929584][ T7868] should_fail+0xb/0x20 [ 129.929623][ T7868] should_fail_usercopy+0x1a/0x20 [ 129.929649][ T7868] _copy_from_user+0x1c/0xb0 [ 129.929683][ T7868] __sys_sendto+0x19e/0x330 [ 129.929816][ T7868] __x64_sys_sendto+0x76/0x90 [ 129.929914][ T7868] x64_sys_call+0x2eb6/0x2fb0 [ 129.929940][ T7868] do_syscall_64+0xd0/0x1a0 [ 129.930038][ T7868] ? clear_bhb_loop+0x40/0x90 [ 129.930064][ T7868] ? clear_bhb_loop+0x40/0x90 [ 129.930091][ T7868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.930117][ T7868] RIP: 0033:0x7f58c901e969 [ 129.930135][ T7868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.930245][ T7868] RSP: 002b:00007f58c7687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 129.930266][ T7868] RAX: ffffffffffffffda RBX: 00007f58c9245fa0 RCX: 00007f58c901e969 [ 129.930278][ T7868] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 129.930289][ T7868] RBP: 00007f58c7687090 R08: 0000200000000140 R09: 000000000000001c [ 129.930300][ T7868] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000001 [ 129.930310][ T7868] R13: 0000000000000000 R14: 00007f58c9245fa0 R15: 00007fff3f0ffee8 [ 129.930334][ T7868] [ 129.979727][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.107639][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.115066][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.126231][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.135419][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.142857][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.150356][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.151737][ T7874] loop4: detected capacity change from 0 to 256 [ 130.157811][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.171688][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.179167][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.186580][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.194026][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.201589][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.209101][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.236743][ T7879] loop2: detected capacity change from 0 to 2048 [ 130.252901][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.260395][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.267882][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.275330][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.282773][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.290209][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.297629][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.305045][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.312463][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.319909][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.327373][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.334805][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.342224][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.349624][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.357016][ T6097] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 130.365882][ T6097] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 130.398600][ T3842] loop2: p1 < > p4 [ 130.433404][ T3842] loop2: p4 size 8388608 extends beyond EOD, truncated [ 130.450564][ T7894] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 130.461540][ T7879] loop2: p1 < > p4 [ 130.465964][ T7879] loop2: p4 size 8388608 extends beyond EOD, truncated [ 130.477652][ T7894] SELinux: failed to load policy [ 130.490839][ T7879] netlink: 'syz.2.1345': attribute type 4 has an invalid length. [ 130.555922][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 130.558673][ T7903] loop2: detected capacity change from 0 to 256 [ 130.602006][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.655844][ T7905] loop6: detected capacity change from 0 to 2048 [ 130.693535][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.704561][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 130.722289][ T7905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.753839][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 130.780775][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 130.794447][ T5023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.850409][ T7917] loop6: detected capacity change from 0 to 2048 [ 130.864080][ T7917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.279353][ T7920] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.296991][ T7920] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 131.309466][ T7920] EXT4-fs (loop6): This should not happen!! Data will be lost [ 131.309466][ T7920] [ 131.319128][ T7920] EXT4-fs (loop6): Total free blocks count 0 [ 131.325144][ T7920] EXT4-fs (loop6): Free/Dirty block details [ 131.331086][ T7920] EXT4-fs (loop6): free_blocks=2415919104 [ 131.336824][ T7920] EXT4-fs (loop6): dirty_blocks=8224 [ 131.342214][ T7920] EXT4-fs (loop6): Block reservation details [ 131.348191][ T7920] EXT4-fs (loop6): i_reserved_data_blocks=514 [ 131.364354][ T7932] loop4: detected capacity change from 0 to 1024 [ 131.379754][ T7932] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 131.409726][ T7932] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.412400][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 131.444036][ T7932] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 131.457092][ T7936] loop1: detected capacity change from 0 to 2048 [ 131.464334][ T7932] EXT4-fs (loop4): orphan cleanup on readonly fs [ 131.471114][ T7932] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.1365: Inode bitmap for bg 0 marked uninitialized [ 131.484750][ T7932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.514576][ T3842] loop1: p1 < > p4 [ 131.525154][ T3842] loop1: p4 size 8388608 extends beyond EOD, truncated [ 131.556102][ T7936] loop1: p1 < > p4 [ 131.560542][ T7936] loop1: p4 size 8388608 extends beyond EOD, truncated [ 131.572528][ T3005] loop1: p1 < > p4 [ 131.580285][ T3005] loop1: p4 size 8388608 extends beyond EOD, truncated [ 131.662268][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.671710][ T7945] __nla_validate_parse: 6 callbacks suppressed [ 131.671725][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1371'. [ 131.674341][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 131.720795][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 131.733189][ T7945] loop2: detected capacity change from 0 to 1024 [ 131.770743][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 131.770844][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 131.791508][ T7945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.855462][ T7959] loop6: detected capacity change from 0 to 256 [ 131.902908][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1372'. [ 131.912052][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1372'. [ 131.940073][ T7957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1375'. [ 131.953787][ T7957] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1375'. [ 132.145058][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.185403][ T7968] loop4: detected capacity change from 0 to 2048 [ 132.267425][ T7968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.558981][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1387'. [ 132.593417][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 132.593434][ T29] audit: type=1400 audit(1747198173.274:4903): avc: denied { create } for pid=7991 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.746154][ T29] audit: type=1400 audit(1747198173.364:4904): avc: denied { connect } for pid=7991 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.765925][ T29] audit: type=1400 audit(1747198173.364:4905): avc: denied { write } for pid=7991 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.785544][ T29] audit: type=1400 audit(1747198173.394:4906): avc: denied { read } for pid=7991 comm="syz.2.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.790566][ T7982] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 132.844766][ T8001] loop6: detected capacity change from 0 to 512 [ 132.870044][ T7982] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 132.875487][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.882402][ T7982] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.882402][ T7982] [ 132.882419][ T7982] EXT4-fs (loop4): Total free blocks count 0 [ 132.882447][ T7982] EXT4-fs (loop4): Free/Dirty block details [ 132.882458][ T7982] EXT4-fs (loop4): free_blocks=2415919104 [ 132.882499][ T7982] EXT4-fs (loop4): dirty_blocks=8224 [ 132.889927][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.899490][ T7982] EXT4-fs (loop4): Block reservation details [ 132.899506][ T7982] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 132.942395][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.953899][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.961336][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.968766][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.976342][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.983780][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.991296][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 132.998744][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.006265][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.011492][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'. [ 133.013737][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.022800][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1389'. [ 133.030059][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.054082][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.061564][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.069041][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.076478][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.083928][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.091409][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.098808][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.106283][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.113805][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.121228][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.128718][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.136169][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.143897][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.151436][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.153953][ T8015] loop2: detected capacity change from 0 to 2048 [ 133.158804][ T3390] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 133.178623][ T8001] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 133.180736][ T3390] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 133.199677][ T8001] System zones: 0-2, 18-18, 34-34 [ 133.210024][ T8015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.215964][ T8016] fido_id[8016]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.241694][ T8001] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1391: bg 0: block 248: padding at end of block bitmap is not set [ 133.248012][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 133.289652][ T8001] Quota error (device loop6): write_blk: dquota write failed [ 133.297136][ T8001] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 133.379186][ T8001] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1391: Failed to acquire dquot type 1 [ 133.384184][ T8025] loop1: detected capacity change from 0 to 2048 [ 133.454267][ T8001] EXT4-fs (loop6): 1 truncate cleaned up [ 133.463015][ T8001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.479522][ T3842] loop1: p1 < > p4 [ 133.489913][ T3842] loop1: p4 size 8388608 extends beyond EOD, truncated [ 133.490483][ T8001] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.519820][ T8027] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 133.520442][ T8025] loop1: p1 < > p4 [ 133.534222][ T8027] SELinux: failed to load policy [ 133.570800][ T8001] EXT4-fs error (device loop6): ext4_lookup:1793: inode #2: comm syz.6.1391: deleted inode referenced: 12 [ 133.574649][ T29] audit: type=1326 audit(1747198174.254:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.6.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 133.605709][ T29] audit: type=1326 audit(1747198174.254:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.6.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 133.629446][ T29] audit: type=1326 audit(1747198174.254:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.6.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 133.657024][ T8025] loop1: p4 size 8388608 extends beyond EOD, truncated [ 133.677134][ T29] audit: type=1326 audit(1747198174.314:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.6.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c901e969 code=0x7ffc0000 [ 133.711923][ T5023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.784456][ T8031] loop6: detected capacity change from 0 to 2048 [ 133.831741][ T8031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.870207][ T5023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.907911][ T8019] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.932050][ T8019] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 133.944975][ T8019] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.944975][ T8019] [ 133.955646][ T8019] EXT4-fs (loop2): Total free blocks count 0 [ 133.963447][ T8019] EXT4-fs (loop2): Free/Dirty block details [ 133.971773][ T8019] EXT4-fs (loop2): free_blocks=2415919104 [ 133.978348][ T8019] EXT4-fs (loop2): dirty_blocks=8224 [ 133.982441][ T8043] loop1: detected capacity change from 0 to 2048 [ 133.983819][ T8019] EXT4-fs (loop2): Block reservation details [ 133.996255][ T8019] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 134.003037][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1406'. [ 134.012551][ T8044] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1406'. [ 134.025013][ T3842] loop1: p1 < > p4 [ 134.032753][ T3842] loop1: p4 size 8388608 extends beyond EOD, truncated [ 134.051605][ T8043] loop1: p1 < > p4 [ 134.058461][ T8043] loop1: p4 size 8388608 extends beyond EOD, truncated [ 134.062013][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 134.106772][ T8043] netlink: 'syz.1.1407': attribute type 4 has an invalid length. [ 134.149067][ T8052] loop1: detected capacity change from 0 to 256 [ 134.330907][ T8059] loop2: detected capacity change from 0 to 2048 [ 134.366300][ T8059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.436805][ T8067] x_tables: duplicate underflow at hook 2 [ 134.645784][ T8068] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.660914][ T8068] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 134.673210][ T8068] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.673210][ T8068] [ 134.682875][ T8068] EXT4-fs (loop2): Total free blocks count 0 [ 134.688949][ T8068] EXT4-fs (loop2): Free/Dirty block details [ 134.694875][ T8068] EXT4-fs (loop2): free_blocks=2415919104 [ 134.700684][ T8068] EXT4-fs (loop2): dirty_blocks=8224 [ 134.706035][ T8068] EXT4-fs (loop2): Block reservation details [ 134.712042][ T8068] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 134.765947][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 134.881823][ T8077] loop4: detected capacity change from 0 to 1024 [ 134.888423][ T8075] loop2: detected capacity change from 0 to 2048 [ 134.900802][ T8077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.920576][ T8075] loop2: p1 < > p4 [ 134.925254][ T8075] loop2: p4 size 8388608 extends beyond EOD, truncated [ 134.941793][ T8075] netlink: 'syz.2.1414': attribute type 4 has an invalid length. [ 134.978302][ T8081] loop2: detected capacity change from 0 to 2048 [ 134.992714][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.024201][ T8081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.188259][ T8096] loop4: detected capacity change from 0 to 2048 [ 135.232337][ T8096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.327282][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.343631][ T8090] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.396283][ T8110] loop1: detected capacity change from 0 to 2048 [ 135.429711][ T8090] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 135.442044][ T8090] EXT4-fs (loop2): This should not happen!! Data will be lost [ 135.442044][ T8090] [ 135.451775][ T8090] EXT4-fs (loop2): Total free blocks count 0 [ 135.457823][ T8090] EXT4-fs (loop2): Free/Dirty block details [ 135.463805][ T8090] EXT4-fs (loop2): free_blocks=2415919104 [ 135.469673][ T8090] EXT4-fs (loop2): dirty_blocks=8224 [ 135.474974][ T8090] EXT4-fs (loop2): Block reservation details [ 135.490217][ T8090] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 135.540281][ T3842] loop1: p1 < > p4 [ 135.560333][ T3842] loop1: p4 size 8388608 extends beyond EOD, truncated [ 135.576741][ T8110] loop1: p1 < > p4 [ 135.581600][ T8110] loop1: p4 size 8388608 extends beyond EOD, truncated [ 135.597667][ T8110] netlink: 'syz.1.1427': attribute type 4 has an invalid length. [ 135.642697][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 135.710709][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 135.722621][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 135.788895][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 135.789019][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 135.875667][ T8142] loop4: detected capacity change from 0 to 2048 [ 135.918954][ T8145] loop6: detected capacity change from 0 to 1024 [ 135.940625][ T8142] loop4: p1 < > p4 [ 135.952596][ T8142] loop4: p4 size 8388608 extends beyond EOD, truncated [ 136.016934][ T8145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.049986][ T8142] netlink: 'syz.4.1443': attribute type 4 has an invalid length. [ 136.154264][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 136.165915][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 136.198101][ T8163] pim6reg1: entered promiscuous mode [ 136.203538][ T8163] pim6reg1: entered allmulticast mode [ 136.476959][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.484600][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.492028][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.529605][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.537044][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.544609][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.552125][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.559616][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.567037][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.574476][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.581961][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.589433][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.596844][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.618690][ T5023] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.638846][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.646277][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.653747][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.661203][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.668582][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.676058][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.683529][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.690938][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.691618][ T8183] random: crng reseeded on system resumption [ 136.698362][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.711735][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.711839][ T8180] loop4: detected capacity change from 0 to 2048 [ 136.719105][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.732935][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.740352][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.747808][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.755224][ T3390] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 136.772027][ T8184] FAULT_INJECTION: forcing a failure. [ 136.772027][ T8184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.785162][ T8184] CPU: 1 UID: 0 PID: 8184 Comm: syz.2.1460 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 136.785272][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 136.785294][ T8184] Call Trace: [ 136.785301][ T8184] [ 136.785309][ T8184] __dump_stack+0x1d/0x30 [ 136.785336][ T8184] dump_stack_lvl+0xe8/0x140 [ 136.785360][ T8184] dump_stack+0x15/0x1b [ 136.785382][ T8184] should_fail_ex+0x265/0x280 [ 136.785442][ T8184] should_fail+0xb/0x20 [ 136.785478][ T8184] should_fail_usercopy+0x1a/0x20 [ 136.785545][ T8184] _copy_from_user+0x1c/0xb0 [ 136.785571][ T8184] ___sys_sendmsg+0xc1/0x1d0 [ 136.785631][ T8184] __x64_sys_sendmsg+0xd4/0x160 [ 136.785663][ T8184] x64_sys_call+0x2999/0x2fb0 [ 136.785720][ T8184] do_syscall_64+0xd0/0x1a0 [ 136.785745][ T8184] ? clear_bhb_loop+0x40/0x90 [ 136.785766][ T8184] ? clear_bhb_loop+0x40/0x90 [ 136.785791][ T8184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.785816][ T8184] RIP: 0033:0x7f1d172ee969 [ 136.785838][ T8184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.785860][ T8184] RSP: 002b:00007f1d15915038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.785883][ T8184] RAX: ffffffffffffffda RBX: 00007f1d17516160 RCX: 00007f1d172ee969 [ 136.785897][ T8184] RDX: 000000004400c0b0 RSI: 00002000000003c0 RDI: 0000000000000005 [ 136.785911][ T8184] RBP: 00007f1d15915090 R08: 0000000000000000 R09: 0000000000000000 [ 136.785926][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.785938][ T8184] R13: 0000000000000000 R14: 00007f1d17516160 R15: 00007ffcea8a58b8 [ 136.785955][ T8184] [ 136.788568][ T3390] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 136.953665][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.976904][ T3842] loop4: p1 < > p4 [ 136.986587][ T3842] loop4: p4 size 8388608 extends beyond EOD, truncated [ 137.014445][ T8180] loop4: p1 < > p4 [ 137.017476][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.029914][ T8180] loop4: p4 size 8388608 extends beyond EOD, truncated [ 137.090347][ T8194] __nla_validate_parse: 10 callbacks suppressed [ 137.090367][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1463'. [ 137.105781][ T8194] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1463'. [ 137.122867][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 137.137963][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 137.183888][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 137.195296][ T3842] udevd[3842]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 137.245497][ T8202] loop6: detected capacity change from 0 to 512 [ 137.277488][ T8202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.285670][ T8202] journal_path: Lookup failure for './bus' [ 137.291545][ T8202] EXT4-fs: error: could not find journal device path [ 137.336021][ T8207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1469'. [ 137.345061][ T8207] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1469'. [ 137.364507][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.371995][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.379383][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.394349][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.401817][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.409471][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.417032][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.424454][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.431972][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.439510][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.447117][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.454549][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.462295][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.541913][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.549422][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.557012][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.564588][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.572090][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.579760][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.587148][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.594735][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.602264][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.609806][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.617347][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.624862][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.632402][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.639940][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.647334][ T3391] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 137.661606][ T3391] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 137.695290][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 137.695369][ T29] audit: type=1400 audit(1747198178.374:5121): avc: denied { write } for pid=8235 comm="syz.4.1482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 137.748497][ T8239] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 137.797619][ T8240] fido_id[8240]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.817714][ T8250] loop1: detected capacity change from 0 to 512 [ 137.826415][ T8250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.835865][ T8252] loop2: detected capacity change from 0 to 512 [ 137.844960][ T29] audit: type=1326 audit(1747198178.534:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 137.852423][ T8239] SELinux: failed to load policy [ 137.868972][ T8252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.890272][ T8252] journal_path: Lookup failure for './bus' [ 137.892775][ T8250] journal_path: Lookup failure for './bus' [ 137.896123][ T8252] EXT4-fs: error: could not find journal device path [ 137.901967][ T8250] EXT4-fs: error: could not find journal device path [ 137.918958][ T29] audit: type=1326 audit(1747198178.534:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 137.942408][ T29] audit: type=1326 audit(1747198178.534:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 137.965902][ T29] audit: type=1326 audit(1747198178.534:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 137.989346][ T29] audit: type=1326 audit(1747198178.534:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 138.012716][ T29] audit: type=1326 audit(1747198178.534:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 138.036122][ T29] audit: type=1326 audit(1747198178.534:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 138.059603][ T29] audit: type=1326 audit(1747198178.534:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 138.083068][ T29] audit: type=1326 audit(1747198178.534:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7a76ce969 code=0x7ffc0000 [ 138.135833][ T8252] loop2: detected capacity change from 0 to 1024 [ 138.190950][ T8252] EXT4-fs: Ignoring removed orlov option [ 138.230503][ T8262] FAULT_INJECTION: forcing a failure. [ 138.230503][ T8262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.243630][ T8262] CPU: 1 UID: 0 PID: 8262 Comm: syz.1.1493 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 138.243669][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.243682][ T8262] Call Trace: [ 138.243720][ T8262] [ 138.243728][ T8262] __dump_stack+0x1d/0x30 [ 138.243751][ T8262] dump_stack_lvl+0xe8/0x140 [ 138.243773][ T8262] dump_stack+0x15/0x1b [ 138.243827][ T8262] should_fail_ex+0x265/0x280 [ 138.243869][ T8262] should_fail+0xb/0x20 [ 138.243896][ T8262] should_fail_usercopy+0x1a/0x20 [ 138.243920][ T8262] _copy_from_iter+0xcf/0xdd0 [ 138.243937][ T8262] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 138.243974][ T8262] copy_page_from_iter+0x15a/0x290 [ 138.244015][ T8262] ? anon_pipe_write+0xc1/0xaa0 [ 138.244051][ T8262] anon_pipe_write+0x514/0xaa0 [ 138.244159][ T8262] ? anon_pipe_write+0xc1/0xaa0 [ 138.244201][ T8262] ? __pfx_anon_pipe_write+0x10/0x10 [ 138.244292][ T8262] vfs_write+0x49d/0x8d0 [ 138.244347][ T8262] ksys_write+0xda/0x1a0 [ 138.244377][ T8262] __x64_sys_write+0x40/0x50 [ 138.244414][ T8262] x64_sys_call+0x2cdd/0x2fb0 [ 138.244432][ T8262] do_syscall_64+0xd0/0x1a0 [ 138.244495][ T8262] ? clear_bhb_loop+0x40/0x90 [ 138.244540][ T8262] ? clear_bhb_loop+0x40/0x90 [ 138.244565][ T8262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.244592][ T8262] RIP: 0033:0x7f4d9d7fe969 [ 138.244609][ T8262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.244629][ T8262] RSP: 002b:00007f4d9be67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.244697][ T8262] RAX: ffffffffffffffda RBX: 00007f4d9da25fa0 RCX: 00007f4d9d7fe969 [ 138.244710][ T8262] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 138.244724][ T8262] RBP: 00007f4d9be67090 R08: 0000000000000000 R09: 0000000000000000 [ 138.244738][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.244752][ T8262] R13: 0000000000000000 R14: 00007f4d9da25fa0 R15: 00007ffcd21bd758 [ 138.244801][ T8262] [ 138.313020][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.387029][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1480'. [ 138.403118][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.411504][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1480'. [ 138.487552][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.496160][ T8252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.517957][ T8271] loop1: detected capacity change from 0 to 2048 [ 138.523113][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.531851][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.539260][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.546800][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.554291][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.561764][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.569167][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.576667][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.584095][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.591543][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.645726][ T8271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.860780][ T8282] x_tables: duplicate underflow at hook 2 [ 138.876992][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.877279][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.884531][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.884560][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.908344][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.915851][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.923263][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.930669][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.938047][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.945540][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.953026][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.960553][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.967990][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.975432][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.982885][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 138.990303][ T2968] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 139.027759][ T8279] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.043356][ T8279] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 139.055708][ T8279] EXT4-fs (loop1): This should not happen!! Data will be lost [ 139.055708][ T8279] [ 139.065420][ T8279] EXT4-fs (loop1): Total free blocks count 0 [ 139.071507][ T8279] EXT4-fs (loop1): Free/Dirty block details [ 139.077555][ T8279] EXT4-fs (loop1): free_blocks=2415919104 [ 139.083414][ T8279] EXT4-fs (loop1): dirty_blocks=8224 [ 139.088757][ T8279] EXT4-fs (loop1): Block reservation details [ 139.094768][ T8279] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 139.118378][ T2968] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 139.122369][ T8285] loop2: detected capacity change from 0 to 512 [ 139.166005][ T3425] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 139.169155][ T8285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.187461][ T8285] journal_path: Lookup failure for './bus' [ 139.193394][ T8285] EXT4-fs: error: could not find journal device path [ 139.225110][ T8285] loop2: detected capacity change from 0 to 1024 [ 139.235416][ T8285] EXT4-fs: Ignoring removed orlov option [ 139.259987][ T8285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.302204][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.330327][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 139.362954][ T3317] ================================================================== [ 139.371113][ T3317] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 139.376352][ T8293] loop4: detected capacity change from 0 to 2048 [ 139.378970][ T3317] [ 139.378979][ T3317] read-write to 0xffff888237c26b70 of 8 bytes by task 8294 on cpu 0: [ 139.395695][ T3317] find_get_block_common+0x4f0/0x960 [ 139.401013][ T3317] bdev_getblk+0x7f/0x3d0 [ 139.405348][ T3317] __ext4_get_inode_loc+0x303/0x930 [ 139.410571][ T3317] ext4_reserve_inode_write+0xdb/0x230 [ 139.416051][ T3317] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 139.421429][ T3317] ext4_dirty_inode+0x92/0xc0 [ 139.426120][ T3317] __mark_inode_dirty+0x15c/0x760 [ 139.431154][ T3317] file_update_time+0x288/0x2b0 [ 139.436013][ T3317] ext4_page_mkwrite+0x18b/0xba0 [ 139.440962][ T3317] handle_mm_fault+0x1733/0x2ae0 [ 139.445915][ T3317] do_user_addr_fault+0x636/0x1090 [ 139.451055][ T3317] exc_page_fault+0x54/0xc0 [ 139.455565][ T3317] asm_exc_page_fault+0x26/0x30 [ 139.460418][ T3317] [ 139.462742][ T3317] read to 0xffff888237c26b70 of 8 bytes by task 3317 on cpu 1: [ 139.470285][ T3317] has_bh_in_lru+0x35/0x1f0 [ 139.474799][ T3317] smp_call_function_many_cond+0x394/0xb20 [ 139.480608][ T3317] on_each_cpu_cond_mask+0x3c/0x80 [ 139.485731][ T3317] invalidate_bh_lrus+0x2a/0x30 [ 139.490599][ T3317] blkdev_flush_mapping+0x9a/0x1a0 [ 139.495728][ T3317] bdev_release+0x2bf/0x3d0 [ 139.500250][ T3317] blkdev_release+0x15/0x20 [ 139.504794][ T3317] __fput+0x29b/0x650 [ 139.508786][ T3317] ____fput+0x1c/0x30 [ 139.512772][ T3317] task_work_run+0x131/0x1a0 [ 139.517378][ T3317] resume_user_mode_work+0x6a/0x70 [ 139.522495][ T3317] syscall_exit_to_user_mode+0x77/0xb0 [ 139.527959][ T3317] do_syscall_64+0xdd/0x1a0 [ 139.532467][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.538365][ T3317] [ 139.540692][ T3317] value changed: 0x0000000000000000 -> 0xffff88810079ef70 [ 139.547801][ T3317] [ 139.550125][ T3317] Reported by Kernel Concurrency Sanitizer on: [ 139.556275][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 139.568874][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 139.578936][ T3317] ================================================================== [ 139.670324][ T8293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.704561][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.