last executing test programs: 2m32.198226459s ago: executing program 4 (id=363): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m32.192900819s ago: executing program 4 (id=365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa}) syz_emit_ethernet(0x9a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) fspick(r2, &(0x7f0000000180)='./file0\x00', 0x1) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x6044094, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x401, 0xfffb, 0x0, 0x0, 0x0, 0x8005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38010000100033060000000000000000ffffffff000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @loopback, 0x40}, 0x1c, &(0x7f0000000b00)}}], 0x2, 0x24000045) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000040)={0xf, 0x5, 0x401, 0xd, 0x1b, "28dd3f8f696198fd33b4522167861e38358f95"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m31.137412595s ago: executing program 4 (id=381): prctl$PR_SET_DUMPABLE(0x4, 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_DUMPABLE(0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000900c000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000d, 0x4010, r0, 0x29892000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2000, 0x50) futimesat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x0, &(0x7f0000000140)}) 2m30.1189054s ago: executing program 4 (id=391): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f0000000680)={0x0, "d7e5ab3c9d1e36aed7f7dc9033afe95c1fa05b3723d1e75d692d8e3a7691b7f79946ad35b247fa82471d655e15c9b222d6c1523f1f1589839cc5f0a50a2abd7d", 0x26}, 0x48, 0x0) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_by_handle_at(r4, &(0x7f0000000480)=@fuse_with_parent={0x18, 0x82, {{0x7fffffff, 0x7}, {0xff, 0x804, 0xffff}}}, 0x100) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x8) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r7 = epoll_create(0x8002) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)={0xa0000001}) renameat2(r8, &(0x7f0000000400)='./file1\x00', r5, &(0x7f0000000440)='./file0\x00', 0x2) keyctl$search(0xa, r6, &(0x7f0000000200)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 2m29.585786428s ago: executing program 4 (id=399): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x53a, &(0x7f0000000a40)="$eJzs3U9sI1cZAPBvJvHau02bLfQAqNClFBa0WjvxtquqF8qpQqgS0COHbUi8UbT2ehU7pQl7yB65I7ESJzhx5oDEAakn7kgc4MalHJAKrEBNERJGHttZb2Inbv7Ym/j3k0bzZt54vvcymvcmz8m8AKbWlYjYjogLEfFuRMx39yfdJd7sLO3jPn50f3nn0f3lJFqtd/6RZPntfdH3mbZnuucsRMT334r4YbIn6B8jGptbd5aq1cp6d1epWbtXamxuXV+rLa1WVit3y+WbizcXXr/xWvnE6vpS7dcfXYyI3/32ix/+YfsbP24Xa66b11+Pk9Spem43TttsRHznNIJNwEy3PheO8uEjfYiTlEbEZyLi5ez+n4+Z7Go+6cnL9M0xlg4AOA2t1ny05vu3AYDzLs3GwJK02B0LmIs0LRY7Y3gvxKW0Wm80r92ub9xd6YyVXY5cenutWlnojhVejlxye222spile9vVSnnP9o2IeD4ifpq/mG0Xl+vVlUk++ADAFHtmT///73yn/wcAzrnC42R+kuUAAManMOkCAABjp/8HgOmj/weA6aP/B4Dpo/8HgOmj/weAqfLdt99uL62d7vuvV97b3LhTf+/6SqVxp1jbWC4u19fvFVfr9dXsnT21w85XrdfvLb4aG++XmpVGs9TY3LpVq2/cbd7K3ut9q5IbS60AgIM8/9IHf04iYvuNi9kSfe/7P7SvfvG0SwecpnTSBQAmZuaAvP+MsRzA+O2f7QuYFsbjYXr9r9VqRd/cvRHxYDfV9zLQoX8i9HA39cn3Ys+ZHksHzht60C8fwKm7+vljjP8DZ5rxf5heR3sEH/AsD5w5xv9herVaiTn/AWDKGOMHBn5r36f/+/+FVt/Gw1MqEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwBc9mSpMXuXOBzkabFYsSzEXE5csnttWplISKei4g/5XP59vZiRJg3CADOsvRvSXf+r6vzr8ztzb2Q/ySfrSPiRz9/52fvLzWb64sRF5J/7u5vPuzuL0+i/ADAYXr9dK8f7/n40f3l3jLO8nz0rc7kou24O92lkzMbs9m6kI01XPpX0t3uaD+vzJxA/O0HEfG5QfVPsrGRy92ZT/fGb8d+dqzx0yfip1leZ93+WXz2BMoC0+aDdvvz5qD7L40r2Xrw/V/IWqjj67V/O/vav3S3/ZsZ0v5dGTXGq7//9r6drflO3oOIL8xG7PRO3tf+9OInQ+K/MmL8v7z4pZeH5bV+EXE1BtU/eSJWqVm7V2psbl1fqy2tVlYrd8vlm4s3F16/8Vq5lI1Rl3oj1fv9/Y1rzw2L367/pSHxC4fU/6sj1v+X/333B18+IP7XvzL4+r9wQPx2n/i1EeMvXfpNYVheO/7KkPofdv2vjRj/w79urYx4KAAwBo3NrTtL1Wpl/fiJwoHHpJX1Ru64IXKHH5NEbJ9IdUZJ5H/1k7cOPzg/tvIcMRHDsmaelhKem0T+6SjGCIlJt0zAaXt800+6JAAAAAAAAAAAAAAAwDAj/T/QxU9z8P7EhKsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAOfb/AAAA//+af9Tf") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0xa4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84402, 0x20) pwrite64(r6, &(0x7f0000000080)="10", 0xffffff27, 0x8000c60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r8}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) 2m29.44378531s ago: executing program 4 (id=401): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd77, 0x4, @perf_config_ext, 0x0, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033200fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000051) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r9, 0x0, 0x0, 0x4008040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x548, 0x120, 0x360, 0xffffffff, 0x0, 0x210, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, &(0x7f00000003c0), {[{{@ipv6={@mcast2, @local, [0xff000000, 0xffffffff, 0x0, 0xff], [0xffffff00, 0xff000000, 0xffffff00], 'virt_wifi0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x87, 0x9e, 0x0, 0x4d}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x4e20], [0x4e24, 0x4e20], 0x4, 0x2, 0xc2, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@multicast2, @ipv6=@private0, @port=0x4e23, @gre_key=0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xff], [0x0, 0xffffff00, 0xffffff00, 0xff], 'vxcan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x11, 0x7, 0x4, 0x3c}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@local, @ipv6=@mcast1, @port=0x4e21, @icmp_id=0x1}}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 'veth0_to_bridge\x00', 'veth1_to_team\x00', {0xff}, {}, 0x33, 0x3, 0x2, 0xc}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d4], 0x1}}, @common=@frag={{0x30}, {[0x1, 0x5], 0xffffffff, 0x4, 0x6}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x65}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x3b, 0xa0, 0x2, 0x38}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@private1, @ipv4=@multicast1, @port=0x4e23, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x25, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r12, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', r6, 0x80, 0x80, 0x0, 0x101, {{0x13, 0x4, 0x3, 0x2c, 0x4c, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@cipso={0x86, 0x24, 0x3, [{0x0, 0xc, "48d64ff52537aed07e9d"}, {0x7, 0x12, "982203cb22da1563b8a45c4b53e7e25f"}]}, @lsrr={0x83, 0x13, 0x54, [@dev={0xac, 0x14, 0x14, 0x42}, @empty, @rand_addr=0x64010102, @local]}]}}}}}) 2m29.404408091s ago: executing program 32 (id=401): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd77, 0x4, @perf_config_ext, 0x0, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102033200fe08000e7f0061cd915a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000051) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r9, 0x0, 0x0, 0x4008040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x548, 0x120, 0x360, 0xffffffff, 0x0, 0x210, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, &(0x7f00000003c0), {[{{@ipv6={@mcast2, @local, [0xff000000, 0xffffffff, 0x0, 0xff], [0xffffff00, 0xff000000, 0xffffff00], 'virt_wifi0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x87, 0x9e, 0x0, 0x4d}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x4e20], [0x4e24, 0x4e20], 0x4, 0x2, 0xc2, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@multicast2, @ipv6=@private0, @port=0x4e23, @gre_key=0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xff], [0x0, 0xffffff00, 0xffffff00, 0xff], 'vxcan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x11, 0x7, 0x4, 0x3c}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@local, @ipv6=@mcast1, @port=0x4e21, @icmp_id=0x1}}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 'veth0_to_bridge\x00', 'veth1_to_team\x00', {0xff}, {}, 0x33, 0x3, 0x2, 0xc}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d4], 0x1}}, @common=@frag={{0x30}, {[0x1, 0x5], 0xffffffff, 0x4, 0x6}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x65}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x3b, 0xa0, 0x2, 0x38}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@private1, @ipv4=@multicast1, @port=0x4e23, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x25, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r12, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', r6, 0x80, 0x80, 0x0, 0x101, {{0x13, 0x4, 0x3, 0x2c, 0x4c, 0x66, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@cipso={0x86, 0x24, 0x3, [{0x0, 0xc, "48d64ff52537aed07e9d"}, {0x7, 0x12, "982203cb22da1563b8a45c4b53e7e25f"}]}, @lsrr={0x83, 0x13, 0x54, [@dev={0xac, 0x14, 0x14, 0x42}, @empty, @rand_addr=0x64010102, @local]}]}}}}}) 4.219689547s ago: executing program 5 (id=2757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") 4.187660257s ago: executing program 5 (id=2758): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 4.0051059s ago: executing program 5 (id=2759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 4.00420824s ago: executing program 5 (id=2760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x50080) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000001fc0)={0x1, &(0x7f0000001f80)=[{0x6, 0x7}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000020c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002080)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_DELOBJ={0x138, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0xc8, 0x8, "e571a07c911cee566d9d9083a6ac01ea7a0e53108e7014dc75947f2211dc16cf08bcd45820035f975428b99056248dfe3668e9f80331208f4ece9e359d9c43a18e9d6ceb32a4f59ec677fc1dd3d95155778ce354b4aa9b522911b90c0018a3e6ccc0319374968e2524bed2c88568a23b96abbf4ec7870ec3581df6e0427e935d8f636bfb265579013f85e7adbdd7ba8d149d821310f2a4874e7991c06a247b19d6f8948f71576f9a83a6c87fd0544b53b7f2388992317189c40b1f71a8a2971ec3cd8694"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x10c, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'set\x00'}, @NFTA_MATCH_NAME={0xc, 0x1, 'udplite\x00'}, @NFTA_MATCH_INFO={0x27, 0x3, "54aaa9b0435ffbf55c88a9cd35364094df6d88cf523808bbdc63746af1859996be66ff"}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_USERDATA={0x2c, 0x7, 0x1, 0x0, "7b34aaff72030ec30b9d28cf8e90591b91dcfb3328173fe6b406acab6f877ed906bb3520d6ada73f"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x301, 0x0, 0x0, {0x66f0277a10b48b89, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}, @NFT_MSG_DELRULE={0x54, 0x8, 0xa, 0x904, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x18, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_NEWSETELEM={0x1838, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x17f0, 0x3, 0x0, 0x1, [{0x11ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x71, 0x6, 0x1, 0x0, "f0974280cb6e0d977d1adbf2478c606e33559b49b41290e51978953f0f82591a7044aceff2ecce6cfcab1a40b3f4ca6e3173ab9171c0f2a29ca10383ceb5087308f2013aad29224d511157f8ffe69225c03e725a03a4d5b6aefbee05e5c43cc3c2e5be639965570c28218df6bc"}, @NFTA_SET_ELEM_KEY={0x1114, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xe6, 0x1, "533579126f3cabd1ee21c702855db2f8bc5195940226e3cb71b2b6b869080bd462763001b14bfd5205fd1fbffdb73a53518e500433d217ff9d878affda0baadc10df361646ab4783f267d2efc906bf20b6c84ca1bbc6a366e41edb298657f9b17d1167bd9575dafe3e6ca954551a4b67b969d1ca87ddcf72b71b30810817f925ff90603bc0af2ca7bbc41c4ceb6671d6acb975a3a62e84275b0129a6a769244a516541fe29ca35ce155cd2d99115bfdbef1de4058f9a324aeecff60664b91785906f1b784e17aa2cde6742202effb07fb97463b9a4a0e83252f9053ec6f694f426b2"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x178, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3a, 0x6, 0x1, 0x0, "9c36d7e4da5cc6e1d667c70a2a43582e78ea60c3d23e7699d03cb057b27d3326bbef01800179dfd59351664884f4b0144a4ad1c55ace"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x120, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "3b3b637bdc209453ed1c93735ad71409b88d2d2628b2f691f3cce90bc17d782a40ce89d77d9cdfce5c006810a02329415c3ada2b263c324e7b122420182084da1f9655795e8a3bb4bc0fd4b6edaf171d4039445faec9e834b14d1c82b4799154cfabf58133ad44794c9da64a299b87244150c80df31cf367eccd07d2c5a2f9f0ad5b5bda8f6d480d69572a4015039b3d85baedc42d30b7dfcd17c6baa60cde54a13afaed9933bc88c1601ceb"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5771a8ea450ca721}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x21c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x210, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x40, 0x1, "1a1a74b08cd5379395f494ebc9f78e3784d1f30d19c3e4a1e1978af28a389ccdf3e682e66d44f3831df4dbb3292324b6c57e31940b468e20174bc69b"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "8fdb1a7266d419bb907e99e0c4968f7f1e0a625c813a467f8cb3dc8212fcc312facca5e58c6335be723fc40588b8f6b0693c6808a9fa8a6654e225a320162635f5a6c4abbbe1591dcbb42c38f87341b6c2ecb89ba205cdfe8eca7712ff7189abca23d34cc255ae6555f6ce4cf6775c82483a3b89005c0bb058906c787f5e319645e0cd9245a60137408bb8c382d83bdb2738fb09be519191e384e602e5956195aaaa255d4f2df1b608c15ed14dd325e02728997cc65a6e659cf02977793025d039144b37487e4a456fef89c36455778e4401cf201258c33cb4ac1d3c819fe982838dbcefb40dfe5cf5d0d6b646a78449f994"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf9}]}, {0x28c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x72}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x238, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xef266464134e4845}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "be11fd7d39e743600e0c6bdf50c98fc1e995f66e503e8e282887c1b06f9d18393e1e8a22a58ef2b525f3d43b0cadade9672a833dd107622aec82273ed571d5aa62a5f73e9811b7f5eab44ec40de5bc0502e894721af714deb44a61dfc0c8650944161dff20dedb17baf2d2285135b971427c2f20ee893071cb2b383e421f503b64902827cc18826f36b576d82d7feabdfceaa2a7f76bae3dff50207e23d53ef94e5c165eac30b3f042c3eafc27e90c68bded6135f7b5d0bb5903f437d8bab9a09399df33250bf5b0dbbd6eae037b65f15701c973161aef567d80a1b7749e6889d2"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x80, 0x14, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x36, 0x8, "8993d9a065e2d4e527c4b990e54c5c60c19cf40c5dd6efd4eac09f6ac57ffe7965db565f7a16c254f8e4afb00e10f7b19345"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xd}]}, @NFT_MSG_DELFLOWTABLE={0x1f8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x1a4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1e00}, 0x1, 0x0, 0x0, 0x80081}, 0x894) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810180000fd010000000008000100ac1414"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare(0x8000) 3.954018801s ago: executing program 5 (id=2762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000), 0x40040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91a876d8d847fa0a, @perf_bp={&(0x7f0000001040), 0x2}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='(pu&\"\"\t&&') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.820426563s ago: executing program 5 (id=2763): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x1000000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) dup(0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 1.969165891s ago: executing program 2 (id=2792): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) socket(0x2b, 0x80801, 0x1) nanosleep(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) semop(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='scsi_eh_wakeup\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8=0,shortoame=winnt,nonumtail=0,nonumtail=0,iocharset=cp862,shortname=lower,shortname=mixed,nonumtail=0,uni_xlate=1,codepage=950,nonumtail=0,utf8=0,nonumtail=0,\x00'], 0x1, 0x363, &(0x7f0000000c80)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r6, 0xffffffffffffffff, 0x0) 1.770873453s ago: executing program 2 (id=2796): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) rt_sigsuspend(0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@orlov}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@grpquota}, {@barrier}, {@usrjquota}, {@jqfmt_vfsold}, {@minixdf}]}, 0x3, 0x466, &(0x7f0000000340)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)}}, {{&(0x7f00000001c0)={0xa, 0x4e1c, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.531962877s ago: executing program 2 (id=2803): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000001af8ff00000000bfa1003ad8243bfff99f2ad1e80000ffb702000008000000b703000000007100000095000000fb3206614857edbe0d57d7210000"], &(0x7f0000000200)='GPL\x00', 0xce7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x1, 0x7, 0x8, 0x7}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) r3 = openat(r0, &(0x7f0000000000)='.\x00', 0x400, 0x0) fcntl$notify(r3, 0x402, 0xd) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) fchdir(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x19, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0xfffffffffffffcbd) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='nilfs2_segment_usage_allocated\x00', r7, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0xb, 0x801, 0x2) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="4ba206303a76356c1de6023f0d1e7b973dca1113ac1363403772966f8ea66fddbf546d5c3b66c5eea54e22b262a75b89f37528ae03b2454fa2b6d2626d3066893ac7bbe4de8927aa4f6df268a7705e44850f0d43b0527cc4aa3f2a853eae79ed02aaccb0", @ANYRES32, @ANYRES8=r2, @ANYRESDEC, @ANYRESHEX=r4, @ANYRES32=r5, @ANYRESHEX=r2, @ANYRESDEC=r8], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x14011) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000001040000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x9d0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) unshare(0x20040600) r11 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r11, 0x0) ppoll(&(0x7f0000000300)=[{r11, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) 1.531809507s ago: executing program 3 (id=2804): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.32954559s ago: executing program 2 (id=2806): memfd_create(&(0x7f0000000040)='\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x62040200) 1.273205171s ago: executing program 1 (id=2807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000000000000000000001f000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000001c96498e0a0feef088824453dc3f8aa570"]}, 0x119) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESHEX], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_dccp(0x2, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 1.227497782s ago: executing program 1 (id=2808): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") 1.226885202s ago: executing program 1 (id=2809): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x18c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6a5}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103843, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.181168792s ago: executing program 1 (id=2811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") 1.111556213s ago: executing program 1 (id=2812): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) socket(0x2b, 0x80801, 0x1) nanosleep(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) semop(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000020c8bee8000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='scsi_eh_wakeup\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r6, 0xffffffffffffffff, 0x0) 1.047477325s ago: executing program 2 (id=2814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x250, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 1.036027145s ago: executing program 1 (id=2815): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xa, 0xbb8, &(0x7f00000017c0)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfe4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x4}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x22, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfa8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x1, 0xcb, &(0x7f0000000640)=""/203, 0x40f00, 0x28, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x10, 0x5, 0xc}, 0x10, 0xb1ac, r0, 0x8, &(0x7f0000000900)=[r2, r3, r4], &(0x7f0000000940)=[{0x3, 0x2, 0x10, 0xb}, {0x4, 0x3, 0x8, 0xa}, {0x5, 0x1, 0x2, 0x2}, {0x3, 0x2, 0xd, 0x3}, {0x0, 0x4, 0xa, 0x2}, {0x0, 0x5, 0x3, 0xa}, {0x4, 0x5, 0xb, 0x4}, {0x4, 0x4, 0x10, 0x3}], 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c6e00000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x149882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8, 0x0, 0xffefffffffffffff}, 0x18) unshare(0x62040200) 775.880569ms ago: executing program 3 (id=2817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 761.037749ms ago: executing program 2 (id=2818): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 683.38243ms ago: executing program 0 (id=2820): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) prctl$PR_SET_NAME(0xf, 0x0) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 625.686641ms ago: executing program 3 (id=2821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) (fail_nth: 4) 375.165285ms ago: executing program 0 (id=2822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") 324.075785ms ago: executing program 0 (id=2823): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000004c0)=0xfffe, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r1, 0x0, 0x0, 0x40002062, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000300)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)) 251.804796ms ago: executing program 0 (id=2824): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x82, 0x5b7, &(0x7f0000001d40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000a40)={[{@jqfmt_vfsold}, {@nomblk_io_submit}, {@nomblk_io_submit}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") open_by_handle_at(r0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x40000) preadv2(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f0000000840)=""/77, 0x4d}, {0x0}, {0x0}], 0x4, 0xffff, 0x9a17, 0x10) syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x8c02) r2 = dup(r1) ioperm(0x401, 0x1fd, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='trans=fd', @ANYRES64=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="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"]) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000a00)='ext4_writepages_result\x00', r4, 0x0, 0x4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x3, 0xc, &(0x7f0000000f00)=ANY=[@ANYRES32=r3, @ANYBLOB="000000fa0a000000b708000000bf0000000000000007020000f887d5ee06641f8ac5ffffffb7030000085900000095b8c9fb30dd690cb58d938f8f3d194dbfc337db1fbb05eee9f96f7083b79f9c5a1123425300c3cc633fd71e31577e9a543eebe4a5567e0d2c14a37185c1cd448fcffaefffd8641f2c45b1e1de4c4d17fda8025420172b03b9008f45689c75116670f6c5c985c91a1f684d92395b59777878e0d01a5c7589e2a22ef8c04f635e", @ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000d80)={0x0, 0x0}) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x9, 0x2, @tid=r6}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe4, @void, @value}, 0x94) unshare(0x2040400) r8 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, &(0x7f00000002c0)={0x201, 0x9}) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 193.938877ms ago: executing program 3 (id=2825): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000680)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYRES8=0x0], 0xfd, 0x6b1, &(0x7f0000001f80)="$eJzs3V1vG1kdx/Hf2E7iZFFVAapWVbc5bVkpFcW1nW2qqFzsMBknA7bHmnEgkZBWhSarqk6Btkg0NyU3PEjLG+Bub7jgRazE9b4LuAJpBXcgJDRoZjx+iB9St0m6D99P1Ho8c+ac/5zj+t+JPWcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkORvlcsVS3Wtu75jJnI3Ab2RP8hrZntY2p5vpws1pbc7F7UpW/EfFot5OV7/9zX6RS/Ff13UlfXZFxfihqMO3Ll28941CLtt/SsCvQrNW+PT54aP7nc7ek5com9fM1b9Jyr1EoU236YW+17A3XeOFvllfWyvf3qqFpubV3XA3bLsN4wRuru0HZsW5aSrr66vGLe36283NDbvuZivvfqdaLq+Z7y+kAy2pFDpbXr3uNTeTMvHmuMxd89GP0wKu3TBm/2Fnb3Ugnhfj+jguVDnpSOJC1ZMKVcvVaqVSrVbW7qzfuVsuF0ZWlGNWuUcjJU79RYsvmNN9AwdeQy7O/3+1pLqKampbOzJjfxxtKJCvxoTtXVn+f/e2O7XdwfyfZfm5/ubLSvL/1fTZ1Un5f0IsRibZYdwWa8L62X7mkoiMnuq5DvVI99VRR3t6cgp1G5nlU6nlHH425aopT6F8eWrITtaY7hqjda1pTWV9oC3VFMqoJk91uQq1q1BtufEraj4eLVe22vIVyGhFjm7KqKJ1rWtVRq5K2pWvbTW1qQ3Z+ncURft6mPT7aj+m/PGRV1aoMuEgFlTIXnd7qk452kn5/ycv0r27+b9M/v+qSl8HC+nDp9PKAJ8DUff8f0bLZxMNAAAAAAA4C1by23cr+VT+HUmRal7dLb/psAAAAAAAwCmyFC3oiqz0W/l6Rxbn/wAAAAAAfNlYyTV2lqSl5Ev9Vv9yqZf5JUD+HEIEAAAAAACvKbny/+q8FCWTVizLmun8HwAAAAAAfAH8bmCO/UI2x26Ufayfk7T8twXrk38uKJizjlo737IO7HiLfdAtM/INgHbtsnWhO1Fv8jAvKXnmuFesbmvdSTB78w5+tn/SXP9WcCyA+fxgBRMCsOKW1wrdZ/pI19JdrnXnmX9wmFOyJW1lqebV3ZLj1+9VZNsXcm13p/3Lxw9/JQW949x/2Nkr/fRnnQdJLEfxqqODuNIXQ+HkxndGP5ZnyXwLyTUX4454UbWsyd83G0tW0m45O/687IPcYEPTBqDf5m90PR2z61FadumwN+O+JS0nkz9USsmQDR19MGf1o6gcP/JxAzEhimISxY20zI2VG+lDFl9cT84qfjsvVUujYzAURXUwipP7wvrXSF9Mi0JWMe6L1TiKv8QVHYviR5+kO6/OFsXIiADAm7Lfz0LJJOYjeTdLD9mb2ivlnZOz+/vD2f3ZH6M0Q+WlQveziamtFBW/o69YSR6aTyd0L1we845eLv0niiL7QlGD7+j/i1K9HPty2e0oiqLjx/rn/j2QumGPRPHfKIruVZJM8odjWfXjeIePJ7Yb1qv5uAtvPzv4eTIBfuzDvQ/3Hlerq2vl98rlO1XNJf9V6D7kRe4BAIw4+R47SYnclBLWe7qW1nHtwT/eTZeGMt7Xu18pyHT0QLeyWwgsj691aeBrCLfSs1bp+lL6uHRoLl28tygNlLUKyR1ebk08q0ty6UC91V7Z7L5Dx88A+2VXz3IIAAA4d9cn5GFpKP9rOP8Xh/L/La2kJVYujz3vHs7l3bPj3in9pLKVk4N//5Q7AwCArwg3+Mxaav/WCgKv9UFlfb1it7dcE/jOD0zgbWy6xmu23cDZspubrmkFftt3/LppBVrwFt3QhNutlh+0Tc0PTMsPvZ3kzu+me+v30G3YzbbnhK26a4eucfxm23baZsMLHdPa/l7dC7fcINk5bLmOV/Mcu+35TRP624HjlowJXXegoLfhNttezYsXm6YVeA072DU/9OvbDddsuKETeK22n1aYteU1a37QSKotKZr5RocAAHwZPX1++Oh+p7P35PjCYnxqnq450oQyowvzYypkjiAAAD5n+ul6hp2KZxgQAAAAAAAAAAAAAAAAAAAAAAAYcfIlfTMuzI27WFDqrfnFhe4a/Vr9SwxH6rF02oHNspCbda/skojDR59OKbzYW5N1/2CZo1ka1UXplQ/w71+T3krWKF1TOP0+XJwyuGex8N39tEcn95gm9NhCbywKp//PIV54/KcJm6IoiqbvvjDch/PTDnB4oSDpyfxrDMH5vxcBOF//DwAA//9wiz37") open(&(0x7f0000000000)='./file0\x00', 0x3a5a80, 0x102) 93.934948ms ago: executing program 0 (id=2826): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) socket(0x2b, 0x80801, 0x1) nanosleep(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) semop(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x15, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000020c8bee8000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='scsi_eh_wakeup\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8=0,shortoame=winnt,nonumtail=0,nonumtail=0,iocharset=cp862,shortname=lower,shortname=mixed,nonumtail=0,uni_xlate=1,codepage=950,nonumtail=0,utf8=0,nonumtail=0,\x00'], 0x1, 0x363, &(0x7f0000000c80)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r6, 0xffffffffffffffff, 0x0) 63.253969ms ago: executing program 3 (id=2827): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) 512.77µs ago: executing program 3 (id=2828): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) 0s ago: executing program 0 (id=2829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) mknod$loop(0x0, 0x20, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): ext_dirty:207: inode #13: comm syz.3.2421: mark_inode_dirty error [ 174.626390][ T2969] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 174.626693][ T2969] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.684893][T14954] loop5: detected capacity change from 0 to 164 [ 174.687071][T14889] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2421: corrupted inode contents [ 174.697394][T14952] bond1: entered promiscuous mode [ 174.709931][T14952] bond1: entered allmulticast mode [ 174.720871][T14952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.746961][T14952] bond1 (unregistering): Released all slaves [ 174.785319][T14889] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 174.806328][T14889] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2421: corrupted inode contents [ 174.806437][ T3321] EXT4-fs unmount: 33 callbacks suppressed [ 174.806454][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.844778][T15024] loop5: detected capacity change from 0 to 1024 [ 174.851893][T14889] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.2421: mark_inode_dirty error [ 174.869708][T15024] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2435: Failed to acquire dquot type 0 [ 174.885693][T14889] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 174.914662][T15031] loop2: detected capacity change from 0 to 128 [ 174.934134][T14889] EXT4-fs (loop3): 1 truncate cleaned up [ 174.939300][T15024] EXT4-fs (loop5): 1 truncate cleaned up [ 174.963999][T15024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.997347][T14889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.014423][T15024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.049046][ T3392] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 175.057845][ T3392] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.070968][T15024] loop5: detected capacity change from 0 to 256 [ 175.079546][T14889] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 175.111519][T15024] vfat: Unknown parameter 'shortoame' [ 175.167559][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.221029][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.228679][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.236261][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.344786][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.352273][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.359779][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.367349][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.374810][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.382296][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.390013][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.397646][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.405114][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.412619][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.423027][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.430481][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.437975][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.445372][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.452793][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.460258][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.467695][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.475205][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.482701][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.490121][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.497582][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.505079][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.512586][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.516877][T15072] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.520063][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.520167][ T3392] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 175.572044][T15033] vxcan1 speed is unknown, defaulting to 1000 [ 175.581683][ T3392] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz1 [ 175.639653][T15088] loop3: detected capacity change from 0 to 164 [ 175.736821][T15072] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.781838][T15076] vxcan1 speed is unknown, defaulting to 1000 [ 175.853683][T15102] loop3: detected capacity change from 0 to 1024 [ 175.871044][T15072] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.021591][T15102] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2447: Failed to acquire dquot type 0 [ 176.083517][T15102] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 176.119746][T15102] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2447: corrupted inode contents [ 176.141209][T15102] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.2447: mark_inode_dirty error [ 176.153494][T15072] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.183909][T15102] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2447: corrupted inode contents [ 176.217371][T15102] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.2447: mark_inode_dirty error [ 176.255998][T15102] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2447: corrupted inode contents [ 176.304776][T15102] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 176.319077][ T7585] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 176.328770][T15102] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2447: corrupted inode contents [ 176.342139][ T7585] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.344718][T15102] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.2447: mark_inode_dirty error [ 176.373093][T15102] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 176.407157][T15102] EXT4-fs (loop3): 1 truncate cleaned up [ 176.429774][T15102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.475469][T15102] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 176.536063][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.556494][T15178] loop3: detected capacity change from 0 to 164 [ 176.589895][T15186] loop3: detected capacity change from 0 to 1024 [ 176.601065][T15186] __quota_error: 25 callbacks suppressed [ 176.601115][T15186] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 176.617291][T15186] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 176.626740][T15186] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2458: Failed to acquire dquot type 0 [ 176.644671][T15186] EXT4-fs (loop3): 1 truncate cleaned up [ 176.650868][T15186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.667394][T15192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.676886][T15186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.677502][T15192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.696909][ T29] audit: type=1326 audit(1747009532.734:10757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15191 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 176.720803][T15192] loop2: detected capacity change from 0 to 256 [ 176.728468][ T29] audit: type=1326 audit(1747009532.734:10758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15191 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 176.752120][ T29] audit: type=1326 audit(1747009532.734:10759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15191 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 176.776303][ T29] audit: type=1326 audit(1747009532.734:10760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15191 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 176.799991][ T29] audit: type=1326 audit(1747009532.734:10761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15191 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 176.824838][ T29] audit: type=1326 audit(1747009532.734:10762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15191 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd28abe9a3 code=0x7ffc0000 [ 176.824902][ T29] audit: type=1326 audit(1747009532.734:10763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15191 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd28abd41f code=0x7ffc0000 [ 176.824928][ T29] audit: type=1326 audit(1747009532.734:10764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15191 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbd28abe9f7 code=0x7ffc0000 [ 176.836165][T15192] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 176.910692][T15186] loop3: detected capacity change from 0 to 256 [ 176.918187][ T3450] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 176.925991][T15186] vfat: Unknown parameter 'shortoame' [ 176.935982][ T3450] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.040837][T15195] vxcan1 speed is unknown, defaulting to 1000 [ 177.173460][T15235] vxcan1 speed is unknown, defaulting to 1000 [ 177.228322][T15260] bond1: entered promiscuous mode [ 177.233446][T15260] bond1: entered allmulticast mode [ 177.244477][T15260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.254259][T15260] bond1 (unregistering): Released all slaves [ 177.517987][T15370] loop2: detected capacity change from 0 to 1024 [ 177.542237][T15370] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2470: Failed to acquire dquot type 0 [ 177.563187][T15370] EXT4-fs (loop2): 1 truncate cleaned up [ 177.581989][T15370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.599872][T15370] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.619245][T15379] loop3: detected capacity change from 0 to 1024 [ 177.650603][T15379] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2472: Failed to acquire dquot type 0 [ 177.666066][T15370] loop2: detected capacity change from 0 to 256 [ 177.673603][T15370] vfat: Unknown parameter 'shortoame' [ 177.690816][T15379] EXT4-fs (loop3): 1 truncate cleaned up [ 177.703301][T15379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.732709][T15379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.795710][T15072] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.815318][ T7585] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 177.830473][T15379] loop3: detected capacity change from 0 to 256 [ 177.839498][T15072] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.849467][T15379] vfat: Unknown parameter 'shortoame' [ 177.855080][ T7585] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.862245][T15072] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.891538][T15072] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.248587][T15413] vxcan1 speed is unknown, defaulting to 1000 [ 178.415898][T15450] loop3: detected capacity change from 0 to 128 [ 178.418397][T15423] loop5: detected capacity change from 0 to 1024 [ 178.538107][T15454] FAULT_INJECTION: forcing a failure. [ 178.538107][T15454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.551219][T15454] CPU: 1 UID: 0 PID: 15454 Comm: syz.3.2481 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 178.551250][T15454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 178.551265][T15454] Call Trace: [ 178.551273][T15454] [ 178.551281][T15454] __dump_stack+0x1d/0x30 [ 178.551348][T15454] dump_stack_lvl+0xe8/0x140 [ 178.551366][T15454] dump_stack+0x15/0x1b [ 178.551381][T15454] should_fail_ex+0x265/0x280 [ 178.551461][T15454] should_fail+0xb/0x20 [ 178.551535][T15454] should_fail_usercopy+0x1a/0x20 [ 178.551558][T15454] _copy_from_user+0x1c/0xb0 [ 178.551584][T15454] ___sys_sendmsg+0xc1/0x1d0 [ 178.551634][T15454] __x64_sys_sendmsg+0xd4/0x160 [ 178.551664][T15454] x64_sys_call+0x2999/0x2fb0 [ 178.551697][T15454] do_syscall_64+0xd0/0x1a0 [ 178.551724][T15454] ? clear_bhb_loop+0x25/0x80 [ 178.551751][T15454] ? clear_bhb_loop+0x25/0x80 [ 178.551846][T15454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.551872][T15454] RIP: 0033:0x7f7bd713e969 [ 178.551901][T15454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.551925][T15454] RSP: 002b:00007f7bd57a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.551949][T15454] RAX: ffffffffffffffda RBX: 00007f7bd7365fa0 RCX: 00007f7bd713e969 [ 178.551999][T15454] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 178.552015][T15454] RBP: 00007f7bd57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.552029][T15454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.552044][T15454] R13: 0000000000000000 R14: 00007f7bd7365fa0 R15: 00007ffc9c89b508 [ 178.552149][T15454] [ 178.742744][T15423] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2478: Failed to acquire dquot type 0 [ 178.778526][T15423] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 178.801585][T15423] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2478: corrupted inode contents [ 178.818277][T15423] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2478: mark_inode_dirty error [ 178.845441][T15423] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2478: corrupted inode contents [ 178.878853][T15462] __nla_validate_parse: 4 callbacks suppressed [ 178.878872][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'. [ 178.897498][T15423] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2478: mark_inode_dirty error [ 178.938591][T15423] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2478: corrupted inode contents [ 178.972194][T15423] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 178.995389][T15423] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2478: corrupted inode contents [ 179.009835][T15423] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2478: mark_inode_dirty error [ 179.023547][T15423] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 179.039909][T15470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2487'. [ 179.054656][T15423] EXT4-fs (loop5): 1 truncate cleaned up [ 179.076334][T15423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.113607][T15423] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 179.165477][ T4611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.230665][T15481] loop5: detected capacity change from 0 to 4096 [ 179.242575][T15481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.387781][T15485] loop2: detected capacity change from 0 to 1024 [ 179.401813][T15491] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.469367][T15485] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2485: Failed to acquire dquot type 0 [ 179.483664][T15481] vxcan1 speed is unknown, defaulting to 1000 [ 179.567336][T15485] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 179.584822][T15485] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2485: corrupted inode contents [ 179.606129][T15485] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2485: mark_inode_dirty error [ 179.623748][T15485] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2485: corrupted inode contents [ 179.636621][T15491] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.655977][T15485] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2485: mark_inode_dirty error [ 179.671365][T15485] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2485: corrupted inode contents [ 179.676782][ T4611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.687867][T15485] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 179.704819][T15472] vxcan1 speed is unknown, defaulting to 1000 [ 179.705997][T15485] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2485: corrupted inode contents [ 179.734904][T15485] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2485: mark_inode_dirty error [ 179.763086][T15485] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 179.776792][T15538] loop5: detected capacity change from 0 to 1024 [ 179.790709][T15485] EXT4-fs (loop2): 1 truncate cleaned up [ 179.794302][T15538] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2498: Failed to acquire dquot type 0 [ 179.815190][T15538] EXT4-fs (loop5): 1 truncate cleaned up [ 179.827681][T15538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.844036][T15538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.856513][T15485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.863276][T15498] vxcan1 speed is unknown, defaulting to 1000 [ 179.905227][T15485] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 179.925098][T15491] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.931190][ T3450] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 179.949474][T15538] loop5: detected capacity change from 0 to 256 [ 179.956819][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.974337][ T3450] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.985342][T15538] vfat: Unknown parameter 'shortoame' [ 180.026210][T15569] loop5: detected capacity change from 0 to 1024 [ 180.061477][T15569] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2500: Failed to acquire dquot type 0 [ 180.094731][T15569] EXT4-fs (loop5): 1 truncate cleaned up [ 180.105902][T15569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.123070][T15569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.128508][T15567] loop2: detected capacity change from 0 to 1024 [ 180.145426][T15510] vxcan1 speed is unknown, defaulting to 1000 [ 180.160384][T15491] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.230054][T15567] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2499: Failed to acquire dquot type 0 [ 180.249957][T15567] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 180.270944][T15567] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2499: corrupted inode contents [ 180.288691][T15567] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2499: mark_inode_dirty error [ 180.312476][T15587] loop5: detected capacity change from 0 to 1024 [ 180.341026][T15587] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2501: Failed to acquire dquot type 0 [ 180.378915][T15567] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2499: corrupted inode contents [ 180.413308][T15567] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2499: mark_inode_dirty error [ 180.433177][T15567] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2499: corrupted inode contents [ 180.435044][T15587] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 180.483010][T15567] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 180.495926][T15587] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2501: corrupted inode contents [ 180.502617][T15567] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2499: corrupted inode contents [ 180.524955][T15567] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2499: mark_inode_dirty error [ 180.537170][T15587] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2501: mark_inode_dirty error [ 180.550592][T15567] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 180.566513][T15587] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2501: corrupted inode contents [ 180.585249][T15567] EXT4-fs (loop2): 1 truncate cleaned up [ 180.588036][T15587] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2501: mark_inode_dirty error [ 180.606416][T15567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.630749][T15567] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 180.639976][T15587] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2501: corrupted inode contents [ 180.654912][T15587] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 180.669714][T15587] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2501: corrupted inode contents [ 180.669737][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.708338][T15587] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2501: mark_inode_dirty error [ 180.723202][T15587] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 180.785418][T15587] EXT4-fs (loop5): 1 truncate cleaned up [ 180.829971][T15587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.857867][T15587] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 180.866737][T15685] loop2: detected capacity change from 0 to 512 [ 180.867303][T15685] EXT4-fs: Ignoring removed orlov option [ 180.868352][T15685] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2505: corrupted in-inode xattr: invalid ea_ino [ 180.868555][T15685] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2505: couldn't read orphan inode 15 (err -117) [ 180.869182][T15685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.976659][ T4611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.017922][T15695] loop3: detected capacity change from 0 to 4096 [ 181.049145][T15695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.072748][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.084454][T15705] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.190628][T15708] vxcan1 speed is unknown, defaulting to 1000 [ 181.235902][T15695] vxcan1 speed is unknown, defaulting to 1000 [ 181.306980][T15705] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.324393][T15725] vxcan1 speed is unknown, defaulting to 1000 [ 181.409118][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.445034][T15774] loop3: detected capacity change from 0 to 512 [ 181.452731][T15774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.464583][T15774] EXT4-fs (loop3): 1 truncate cleaned up [ 181.470788][T15774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.492642][T15705] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.583946][T15705] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.618519][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.681496][T15807] loop3: detected capacity change from 0 to 512 [ 181.692540][T15807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.714620][T15807] ext4 filesystem being mounted at /482/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.767770][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.924573][T15705] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.938468][T15491] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.978439][T15705] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.990219][T15491] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.035387][T15705] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.049258][T15491] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.077885][T15705] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.098980][T15491] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.146790][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.154332][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.161877][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.184941][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.192504][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.199968][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.207377][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.214840][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.222411][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.230012][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.237470][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.239181][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 182.244951][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.244980][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.254689][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2520'. [ 182.264078][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.277503][T15827] vxcan1 speed is unknown, defaulting to 1000 [ 182.277644][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.298681][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.306091][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.313554][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.320991][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.328445][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.335894][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.343366][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.350792][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.358399][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.366037][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.373571][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.381040][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.388492][ T1104] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 182.441110][ T36] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 182.447801][T15886] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2521'. [ 182.464569][ T1104] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 182.465934][ T36] hid-generic 0000:0000:0000.002E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 182.497379][ T36] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 182.505414][ T36] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.550085][T15920] loop5: detected capacity change from 0 to 512 [ 182.557846][T15920] EXT4-fs: Ignoring removed orlov option [ 182.576286][T15920] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.2527: corrupted in-inode xattr: invalid ea_ino [ 182.594016][T15920] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2527: couldn't read orphan inode 15 (err -117) [ 182.608718][T15920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.788739][T15932] loop2: detected capacity change from 0 to 1024 [ 182.879203][T15957] loop3: detected capacity change from 0 to 164 [ 182.888958][ T4611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.914478][ T36] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 182.941578][T15932] __quota_error: 34 callbacks suppressed [ 182.941622][T15932] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 182.959530][T15932] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 182.985447][T15932] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2531: Failed to acquire dquot type 0 [ 183.008627][ T36] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.026960][T15950] vxcan1 speed is unknown, defaulting to 1000 [ 183.058510][T15932] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 183.117244][ T29] audit: type=1326 audit(1747009538.650:10783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287451e969 code=0x7ffc0000 [ 183.141650][ T29] audit: type=1326 audit(1747009538.650:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f287451e969 code=0x7ffc0000 [ 183.168511][ T29] audit: type=1326 audit(1747009538.650:10785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287451e969 code=0x7ffc0000 [ 183.175256][T15932] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2531: corrupted inode contents [ 183.192225][ T29] audit: type=1326 audit(1747009538.650:10786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f287451e969 code=0x7ffc0000 [ 183.192263][ T29] audit: type=1326 audit(1747009538.650:10787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287451e969 code=0x7ffc0000 [ 183.192300][ T29] audit: type=1326 audit(1747009538.650:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f287451e969 code=0x7ffc0000 [ 183.192372][ T29] audit: type=1326 audit(1747009538.650:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287451e969 code=0x7ffc0000 [ 183.192458][ T29] audit: type=1326 audit(1747009538.650:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15983 comm="syz.1.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f287451e969 code=0x7ffc0000 [ 183.341650][T15932] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2531: mark_inode_dirty error [ 183.371003][T15932] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2531: corrupted inode contents [ 183.396994][T16001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2544'. [ 183.415283][T16004] loop3: detected capacity change from 0 to 1024 [ 183.437526][T15932] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2531: mark_inode_dirty error [ 183.456688][T16004] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2545: Failed to acquire dquot type 0 [ 183.457191][T16004] EXT4-fs (loop3): 1 truncate cleaned up [ 183.457675][T16004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.458465][T16004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.564054][T15932] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2531: corrupted inode contents [ 183.582610][T16003] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.630778][T15932] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 183.643736][T16012] siw: device registration error -23 [ 183.652087][T16021] loop3: detected capacity change from 0 to 164 [ 183.660751][T15932] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2531: corrupted inode contents [ 183.685332][T16021] rock: directory entry would overflow storage [ 183.691563][T16021] rock: sig=0x4f50, size=4, remaining=3 [ 183.697197][T16021] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 183.706583][T15932] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2531: mark_inode_dirty error [ 183.752463][T15932] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 183.770965][T16017] vxcan1 speed is unknown, defaulting to 1000 [ 183.796372][T16003] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.815801][T15932] EXT4-fs (loop2): 1 truncate cleaned up [ 183.835849][T15932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.006748][T16003] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.025751][T15932] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 184.092860][T16062] loop3: detected capacity change from 0 to 1024 [ 184.101947][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.168678][T16038] vxcan1 speed is unknown, defaulting to 1000 [ 184.181922][T16062] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2556: Failed to acquire dquot type 0 [ 184.209676][T16062] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 184.211880][T16078] loop2: detected capacity change from 0 to 512 [ 184.243588][T16003] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.249937][T16080] loop5: detected capacity change from 0 to 164 [ 184.255046][T16078] EXT4-fs: Ignoring removed orlov option [ 184.265141][T16062] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2556: corrupted inode contents [ 184.281160][T16078] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2557: corrupted in-inode xattr: invalid ea_ino [ 184.309699][T16078] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2557: couldn't read orphan inode 15 (err -117) [ 184.324398][T16062] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.2556: mark_inode_dirty error [ 184.335792][T16078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.385271][T16062] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2556: corrupted inode contents [ 184.451885][T16062] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.2556: mark_inode_dirty error [ 184.475934][T16062] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2556: corrupted inode contents [ 184.492272][T16089] loop5: detected capacity change from 0 to 1024 [ 184.507603][T16062] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 184.527038][T16062] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2556: corrupted inode contents [ 184.562331][T16089] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2560: Failed to acquire dquot type 0 [ 184.593600][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.602900][T16062] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.2556: mark_inode_dirty error [ 184.617799][T16062] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 184.627907][T16062] EXT4-fs (loop3): 1 truncate cleaned up [ 184.633983][T16062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.658311][T16089] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 184.675198][T16119] loop2: detected capacity change from 0 to 164 [ 184.675265][T16089] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2560: corrupted inode contents [ 184.692398][T16119] rock: directory entry would overflow storage [ 184.709542][T16119] rock: sig=0x4f50, size=4, remaining=3 [ 184.715221][T16119] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 184.725684][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.738543][T16089] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2560: mark_inode_dirty error [ 184.759059][T16089] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2560: corrupted inode contents [ 184.786180][T16089] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2560: mark_inode_dirty error [ 184.804384][T16132] loop2: detected capacity change from 0 to 164 [ 184.805194][T16089] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2560: corrupted inode contents [ 184.825050][T16089] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 184.835772][T16089] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2560: corrupted inode contents [ 184.860250][T16089] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2560: mark_inode_dirty error [ 184.873320][T16089] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 184.889448][T16089] EXT4-fs (loop5): 1 truncate cleaned up [ 184.912790][T16089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.942825][T16146] loop2: detected capacity change from 0 to 1024 [ 184.964026][T16089] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 184.982997][T16146] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.994082][T16146] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 185.014978][T16146] JBD2: no valid journal superblock found [ 185.020937][T16146] EXT4-fs (loop2): Could not load journal inode [ 185.033230][ T4611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.050347][T16146] loop2: detected capacity change from 0 to 512 [ 185.061097][T16146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.067824][T16146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.079393][T16146] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 185.118378][T16164] loop5: detected capacity change from 0 to 1024 [ 185.120582][T16148] vxcan1 speed is unknown, defaulting to 1000 [ 185.140632][T16164] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2570: Failed to acquire dquot type 0 [ 185.159324][T16164] EXT4-fs (loop5): 1 truncate cleaned up [ 185.187942][T16164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.201516][T16164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.227195][ T3388] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 185.258228][T16164] loop5: detected capacity change from 0 to 256 [ 185.268501][T16164] vfat: Unknown parameter 'shortoame' [ 185.294601][ T3388] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.334052][T16203] loop5: detected capacity change from 0 to 1024 [ 185.344530][T16203] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2572: Failed to acquire dquot type 0 [ 185.356732][T16203] EXT4-fs (loop5): 1 truncate cleaned up [ 185.385258][T16203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.399033][T16203] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.440935][T16213] loop3: detected capacity change from 0 to 512 [ 185.447587][T16213] EXT4-fs: Ignoring removed orlov option [ 185.472758][T16213] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2573: corrupted in-inode xattr: invalid ea_ino [ 185.486619][T16213] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2573: couldn't read orphan inode 15 (err -117) [ 185.499582][T16213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.571286][T16222] siw: device registration error -23 [ 185.615507][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.687414][T16226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2577'. [ 185.780733][T16230] loop5: detected capacity change from 0 to 1024 [ 185.805881][T16238] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2581'. [ 185.817369][T16230] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2579: Failed to acquire dquot type 0 [ 185.850896][T16230] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 185.869337][T16230] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2579: corrupted inode contents [ 185.884215][T16230] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2579: mark_inode_dirty error [ 185.893180][T16249] vxcan1 speed is unknown, defaulting to 1000 [ 185.903322][T16230] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2579: corrupted inode contents [ 185.918381][T16230] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2579: mark_inode_dirty error [ 185.931812][T16230] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2579: corrupted inode contents [ 185.946115][T16230] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 185.971802][T16230] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2579: corrupted inode contents [ 185.994399][T16272] loop3: detected capacity change from 0 to 512 [ 186.017632][T16230] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2579: mark_inode_dirty error [ 186.031626][T16230] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 186.042051][T16272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.042161][T16272] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.080310][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.102728][T16230] EXT4-fs (loop5): 1 truncate cleaned up [ 186.157799][T16230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.185266][T16230] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 186.217379][ T4611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.245804][T16295] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2590'. [ 186.289533][T16299] FAULT_INJECTION: forcing a failure. [ 186.289533][T16299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.302735][T16299] CPU: 0 UID: 0 PID: 16299 Comm: syz.5.2591 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 186.302771][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 186.302824][T16299] Call Trace: [ 186.302831][T16299] [ 186.302841][T16299] __dump_stack+0x1d/0x30 [ 186.302870][T16299] dump_stack_lvl+0xe8/0x140 [ 186.302939][T16299] dump_stack+0x15/0x1b [ 186.302960][T16299] should_fail_ex+0x265/0x280 [ 186.303035][T16299] should_fail+0xb/0x20 [ 186.303082][T16299] should_fail_usercopy+0x1a/0x20 [ 186.303106][T16299] _copy_to_user+0x20/0xa0 [ 186.303133][T16299] simple_read_from_buffer+0xb5/0x130 [ 186.303236][T16299] proc_fail_nth_read+0x100/0x140 [ 186.303270][T16299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.303301][T16299] vfs_read+0x19d/0x6f0 [ 186.303385][T16299] ? __rcu_read_unlock+0x4f/0x70 [ 186.303410][T16299] ? __fget_files+0x184/0x1c0 [ 186.303448][T16299] ksys_read+0xda/0x1a0 [ 186.303480][T16299] __x64_sys_read+0x40/0x50 [ 186.303511][T16299] x64_sys_call+0x2d77/0x2fb0 [ 186.303609][T16299] do_syscall_64+0xd0/0x1a0 [ 186.303637][T16299] ? clear_bhb_loop+0x25/0x80 [ 186.303665][T16299] ? clear_bhb_loop+0x25/0x80 [ 186.303692][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.303716][T16299] RIP: 0033:0x7f92266fd37c [ 186.303756][T16299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.303779][T16299] RSP: 002b:00007f9224d67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.303802][T16299] RAX: ffffffffffffffda RBX: 00007f9226925fa0 RCX: 00007f92266fd37c [ 186.303818][T16299] RDX: 000000000000000f RSI: 00007f9224d670a0 RDI: 0000000000000003 [ 186.303833][T16299] RBP: 00007f9224d67090 R08: 0000000000000000 R09: 0000000000000000 [ 186.303848][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.303878][T16299] R13: 0000000000000001 R14: 00007f9226925fa0 R15: 00007ffec2916338 [ 186.303902][T16299] [ 186.515527][T16302] netlink: 'syz.5.2592': attribute type 1 has an invalid length. [ 186.528600][T16302] can0: slcan on ttyS3. [ 186.536105][T16302] loop5: detected capacity change from 0 to 256 [ 186.558191][T16301] loop3: detected capacity change from 0 to 256 [ 186.651548][T16300] can0 (unregistered): slcan off ttyS3. [ 187.037538][T16316] loop5: detected capacity change from 0 to 1024 [ 187.083749][T16316] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2594: Failed to acquire dquot type 0 [ 187.101646][T16316] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 187.118939][T16316] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2594: corrupted inode contents [ 187.136557][T16316] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2594: mark_inode_dirty error [ 187.150780][T16316] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2594: corrupted inode contents [ 187.151075][T16003] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.167092][T16316] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2594: mark_inode_dirty error [ 187.183314][T16324] loop3: detected capacity change from 0 to 512 [ 187.187135][T16003] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.205026][T16003] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.219076][T16316] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2594: corrupted inode contents [ 187.220950][T16003] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.235557][T16316] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 187.254394][T16324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.267632][T16324] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.269259][T16316] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2594: corrupted inode contents [ 187.298797][T16316] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2594: mark_inode_dirty error [ 187.298881][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.322476][T16316] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 187.335476][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2598'. [ 187.352068][T16342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2598'. [ 187.362328][T16316] EXT4-fs (loop5): 1 truncate cleaned up [ 187.401103][T16347] loop3: detected capacity change from 0 to 512 [ 187.401415][T16316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.443662][T16347] EXT4-fs (loop3): orphan cleanup on readonly fs [ 187.443836][T16316] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 187.462264][T16347] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2600: bad orphan inode 13 [ 187.472770][T16347] ext4_test_bit(bit=12, block=18) = 1 [ 187.478257][T16347] is_bad_inode(inode)=0 [ 187.482427][T16347] NEXT_ORPHAN(inode)=2130706432 [ 187.487355][T16347] max_ino=32 [ 187.490571][T16347] i_nlink=1 [ 187.494507][T16347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.525586][ T4611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.541491][T16353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2602'. [ 187.556146][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.667525][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'. [ 187.677177][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 187.691021][T16378] loop5: detected capacity change from 0 to 512 [ 187.702716][T16378] EXT4-fs: Ignoring removed orlov option [ 187.723065][T16378] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.2606: corrupted in-inode xattr: invalid ea_ino [ 187.755532][T16375] loop3: detected capacity change from 0 to 256 [ 187.759637][T16378] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2606: couldn't read orphan inode 15 (err -117) [ 187.781753][T16378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.948973][T16395] capability: warning: `syz.1.2611' uses deprecated v2 capabilities in a way that may be insecure [ 188.368052][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'. [ 188.377007][T16415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'. [ 188.434506][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.438800][T16416] vxcan1 speed is unknown, defaulting to 1000 [ 188.442042][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.442072][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.533715][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.541232][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.549442][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.556997][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.564535][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.564659][T16431] loop3: detected capacity change from 0 to 164 [ 188.571946][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.571994][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.593769][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.601277][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.608681][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.616784][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.624249][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.631712][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.639185][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.647285][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.654693][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.662173][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.669700][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.677131][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.685104][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.692568][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.700087][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.707531][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.715797][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.723210][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 188.730926][ T36] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz1 [ 188.750011][T16457] loop3: detected capacity change from 0 to 164 [ 188.819269][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 188.819286][ T29] audit: type=1326 audit(1747009543.921:10862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 188.857955][ T29] audit: type=1326 audit(1747009543.948:10863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 188.881662][ T29] audit: type=1326 audit(1747009543.948:10864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 188.905415][ T29] audit: type=1326 audit(1747009543.948:10865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 188.929066][ T29] audit: type=1326 audit(1747009543.948:10866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 188.952963][ T29] audit: type=1326 audit(1747009543.948:10867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 188.980386][ T29] audit: type=1326 audit(1747009544.068:10868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 189.004079][ T29] audit: type=1326 audit(1747009544.068:10869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 189.027833][ T29] audit: type=1326 audit(1747009544.068:10870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 189.052118][ T29] audit: type=1326 audit(1747009544.068:10871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.3.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 189.115765][T16475] loop5: detected capacity change from 0 to 1024 [ 189.163341][T16475] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2625: Failed to acquire dquot type 0 [ 189.186470][T16475] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 189.203930][T16475] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2625: corrupted inode contents [ 189.225501][T16475] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2625: mark_inode_dirty error [ 189.272675][T16475] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2625: corrupted inode contents [ 189.275139][T16470] vxcan1 speed is unknown, defaulting to 1000 [ 189.331978][T16475] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2625: mark_inode_dirty error [ 189.364443][T16475] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2625: corrupted inode contents [ 189.378058][T16513] siw: device registration error -23 [ 189.389309][T16475] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 189.422374][T16475] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2625: corrupted inode contents [ 189.445892][T16475] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2625: mark_inode_dirty error [ 189.477346][T16475] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 189.501465][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.508885][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.516359][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.543562][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.551054][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.559328][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.563664][T16537] loop3: detected capacity change from 0 to 1024 [ 189.566763][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.580634][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.586488][T16475] EXT4-fs (loop5): 1 truncate cleaned up [ 189.588044][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.588071][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.588105][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.588132][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.588210][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.588573][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.619837][T16537] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2636: Failed to acquire dquot type 0 [ 189.624226][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.624255][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.666467][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.667670][T16537] EXT4-fs (loop3): 1 truncate cleaned up [ 189.673923][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.687058][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.694531][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.702748][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.710170][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.717646][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.725047][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.733226][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.740661][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.748072][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.755516][ T36] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 189.764973][ T36] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz1 [ 189.776010][T16475] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 189.805016][T16552] loop2: detected capacity change from 0 to 164 [ 189.816493][T16552] rock: directory entry would overflow storage [ 189.822830][T16552] rock: sig=0x4f50, size=4, remaining=3 [ 189.828636][T16552] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 189.887013][T16566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.910703][T16571] loop2: detected capacity change from 0 to 512 [ 189.914540][T16566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.961605][T16566] loop5: detected capacity change from 0 to 256 [ 190.001171][T16571] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.018930][T16566] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 190.071160][ T1104] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 190.087173][ T1104] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.111658][T16588] loop2: detected capacity change from 0 to 164 [ 190.139306][T16581] vxcan1 speed is unknown, defaulting to 1000 [ 190.178066][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.185576][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.193004][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.268484][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.276049][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.283483][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.290896][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.299167][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.306617][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.314186][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.321587][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.329804][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.337247][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.344819][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.352280][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.360519][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.367951][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.375383][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.382832][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.391044][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.398464][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.405894][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.413477][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.421052][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.429224][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.436697][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.444130][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.451539][ T36] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.460224][ T36] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz1 [ 190.492460][T16643] loop2: detected capacity change from 0 to 164 [ 190.514484][T16643] rock: directory entry would overflow storage [ 190.521450][T16643] rock: sig=0x4f50, size=4, remaining=3 [ 190.527037][T16643] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 190.608893][T16664] loop5: detected capacity change from 0 to 1024 [ 190.629591][T16664] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2656: Failed to acquire dquot type 0 [ 190.643207][T16664] EXT4-fs (loop5): 1 truncate cleaned up [ 190.659484][ T3390] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 190.669154][T16664] loop5: detected capacity change from 0 to 256 [ 190.680509][T16674] FAULT_INJECTION: forcing a failure. [ 190.680509][T16674] name failslab, interval 1, probability 0, space 0, times 0 [ 190.687332][T16664] vfat: Unknown parameter 'shortoame' [ 190.694010][T16674] CPU: 1 UID: 0 PID: 16674 Comm: syz.1.2657 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 190.694048][T16674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 190.694128][T16674] Call Trace: [ 190.694136][T16674] [ 190.694145][T16674] __dump_stack+0x1d/0x30 [ 190.694173][T16674] dump_stack_lvl+0xe8/0x140 [ 190.694198][T16674] dump_stack+0x15/0x1b [ 190.694219][T16674] should_fail_ex+0x265/0x280 [ 190.694260][T16674] should_failslab+0x8c/0xb0 [ 190.694303][T16674] kmem_cache_alloc_noprof+0x50/0x310 [ 190.694346][T16674] ? skb_clone+0x151/0x1f0 [ 190.694374][T16674] skb_clone+0x151/0x1f0 [ 190.694399][T16674] __hci_send_to_channel+0xf6/0x350 [ 190.694503][T16674] ? skb_push+0x60/0x90 [ 190.694531][T16674] hci_send_to_channel+0x36/0x50 [ 190.694559][T16674] hci_sock_bind+0x740/0x990 [ 190.694590][T16674] __sys_bind+0x1ce/0x2a0 [ 190.694689][T16674] __x64_sys_bind+0x3f/0x50 [ 190.694726][T16674] x64_sys_call+0x2086/0x2fb0 [ 190.694801][T16674] do_syscall_64+0xd0/0x1a0 [ 190.694926][T16674] ? clear_bhb_loop+0x25/0x80 [ 190.694953][T16674] ? clear_bhb_loop+0x25/0x80 [ 190.695039][T16674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.695066][T16674] RIP: 0033:0x7f287451e969 [ 190.695085][T16674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.695109][T16674] RSP: 002b:00007f2872b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 190.695212][T16674] RAX: ffffffffffffffda RBX: 00007f2874745fa0 RCX: 00007f287451e969 [ 190.695228][T16674] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000006 [ 190.695244][T16674] RBP: 00007f2872b87090 R08: 0000000000000000 R09: 0000000000000000 [ 190.695259][T16674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.695280][T16674] R13: 0000000000000000 R14: 00007f2874745fa0 R15: 00007ffdf92fbd48 [ 190.695304][T16674] [ 190.741929][T16679] FAULT_INJECTION: forcing a failure. [ 190.741929][T16679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.745831][ T3390] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.750186][T16679] CPU: 1 UID: 0 PID: 16679 Comm: syz.1.2659 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 190.750225][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 190.750281][T16679] Call Trace: [ 190.750289][T16679] [ 190.750299][T16679] __dump_stack+0x1d/0x30 [ 190.750326][T16679] dump_stack_lvl+0xe8/0x140 [ 190.750351][T16679] dump_stack+0x15/0x1b [ 190.750368][T16679] should_fail_ex+0x265/0x280 [ 190.750473][T16679] should_fail+0xb/0x20 [ 190.750508][T16679] should_fail_usercopy+0x1a/0x20 [ 190.750627][T16679] _copy_to_user+0x20/0xa0 [ 190.750656][T16679] simple_read_from_buffer+0xb5/0x130 [ 190.750742][T16679] proc_fail_nth_read+0x100/0x140 [ 190.750776][T16679] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.750819][T16679] vfs_read+0x19d/0x6f0 [ 190.750848][T16679] ? __rcu_read_unlock+0x4f/0x70 [ 190.750875][T16679] ? __fget_files+0x184/0x1c0 [ 190.750913][T16679] ksys_read+0xda/0x1a0 [ 190.750980][T16679] __x64_sys_read+0x40/0x50 [ 190.751012][T16679] x64_sys_call+0x2d77/0x2fb0 [ 190.751040][T16679] do_syscall_64+0xd0/0x1a0 [ 190.751068][T16679] ? clear_bhb_loop+0x25/0x80 [ 190.751096][T16679] ? clear_bhb_loop+0x25/0x80 [ 190.751162][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.751189][T16679] RIP: 0033:0x7f287451d37c [ 190.751208][T16679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.751232][T16679] RSP: 002b:00007f2872b87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.751256][T16679] RAX: ffffffffffffffda RBX: 00007f2874745fa0 RCX: 00007f287451d37c [ 190.751273][T16679] RDX: 000000000000000f RSI: 00007f2872b870a0 RDI: 0000000000000005 [ 190.751367][T16679] RBP: 00007f2872b87090 R08: 0000000000000000 R09: 0000000000000000 [ 190.751418][T16679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.751434][T16679] R13: 0000000000000000 R14: 00007f2874745fa0 R15: 00007ffdf92fbd48 [ 190.751458][T16679] [ 191.166766][T16697] loop5: detected capacity change from 0 to 164 [ 191.207598][T16704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.225121][T16704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.254852][T16704] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 191.321107][T16718] vxcan1 speed is unknown, defaulting to 1000 [ 191.332566][T16716] loop5: detected capacity change from 0 to 512 [ 191.349605][T16725] loop7: detected capacity change from 0 to 16384 [ 191.356836][T16716] EXT4-fs: Ignoring removed orlov option [ 191.382496][T16716] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.2669: corrupted in-inode xattr: invalid ea_ino [ 191.409481][T16716] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2669: couldn't read orphan inode 15 (err -117) [ 191.823602][T16761] loop5: detected capacity change from 0 to 1024 [ 191.850233][T16776] __nla_validate_parse: 5 callbacks suppressed [ 191.850310][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2676'. [ 191.866142][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2676'. [ 191.911599][T16761] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2675: Failed to acquire dquot type 0 [ 191.911908][T16762] vxcan1 speed is unknown, defaulting to 1000 [ 191.962603][T16761] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 191.984555][T16761] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2675: corrupted inode contents [ 192.005427][T16761] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2675: mark_inode_dirty error [ 192.022230][T16798] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.032464][T16761] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2675: corrupted inode contents [ 192.033843][T16761] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2675: mark_inode_dirty error [ 192.035388][T16761] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2675: corrupted inode contents [ 192.037074][T16761] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 192.038235][T16761] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2675: corrupted inode contents [ 192.039451][T16761] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2675: mark_inode_dirty error [ 192.040398][T16761] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 192.048572][T16761] EXT4-fs (loop5): 1 truncate cleaned up [ 192.198590][T16761] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 192.219978][T16839] FAULT_INJECTION: forcing a failure. [ 192.219978][T16839] name failslab, interval 1, probability 0, space 0, times 0 [ 192.233352][T16839] CPU: 1 UID: 0 PID: 16839 Comm: syz.3.2684 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 192.233448][T16839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.233461][T16839] Call Trace: [ 192.233466][T16839] [ 192.233528][T16839] __dump_stack+0x1d/0x30 [ 192.233548][T16839] dump_stack_lvl+0xe8/0x140 [ 192.233572][T16839] dump_stack+0x15/0x1b [ 192.233591][T16839] should_fail_ex+0x265/0x280 [ 192.233649][T16839] should_failslab+0x8c/0xb0 [ 192.233750][T16839] kmem_cache_alloc_noprof+0x50/0x310 [ 192.233799][T16839] ? prepare_creds+0x37/0x4c0 [ 192.233827][T16839] prepare_creds+0x37/0x4c0 [ 192.233853][T16839] __sys_setgid+0x6a/0x1d0 [ 192.233951][T16839] __x64_sys_setgid+0x1e/0x30 [ 192.233987][T16839] x64_sys_call+0xeaf/0x2fb0 [ 192.234013][T16839] do_syscall_64+0xd0/0x1a0 [ 192.234040][T16839] ? clear_bhb_loop+0x25/0x80 [ 192.234135][T16839] ? clear_bhb_loop+0x25/0x80 [ 192.234160][T16839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.234257][T16839] RIP: 0033:0x7f7bd713e969 [ 192.234271][T16839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.234307][T16839] RSP: 002b:00007f7bd57a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000006a [ 192.234328][T16839] RAX: ffffffffffffffda RBX: 00007f7bd7365fa0 RCX: 00007f7bd713e969 [ 192.234343][T16839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 192.234357][T16839] RBP: 00007f7bd57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 192.234371][T16839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.234385][T16839] R13: 0000000000000000 R14: 00007f7bd7365fa0 R15: 00007ffc9c89b508 [ 192.234408][T16839] [ 192.427669][T16843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.436484][T16843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.447317][T16847] loop5: detected capacity change from 0 to 1024 [ 192.456089][T16843] loop3: detected capacity change from 0 to 256 [ 192.464744][T16847] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2685: Failed to acquire dquot type 0 [ 192.476683][T16847] EXT4-fs (loop5): 1 truncate cleaned up [ 192.483275][T16843] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 192.500894][ T3450] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 192.508720][ T3450] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.520884][ T4383] bond0 (unregistering): Released all slaves [ 192.527149][T16847] loop5: detected capacity change from 0 to 256 [ 192.527522][T16847] vfat: Unknown parameter 'shortoame' [ 192.554689][T16798] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.628389][T16808] vxcan1 speed is unknown, defaulting to 1000 [ 192.676892][T16762] chnl_net:caif_netlink_parms(): no params data found [ 192.714972][T16865] loop5: detected capacity change from 0 to 1024 [ 192.739319][T16865] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2687: Failed to acquire dquot type 0 [ 192.760444][T16798] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.772270][T16865] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 192.773244][T16865] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2687: corrupted inode contents [ 192.774444][T16865] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2687: mark_inode_dirty error [ 192.775763][T16865] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2687: corrupted inode contents [ 192.776593][T16865] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2687: mark_inode_dirty error [ 192.778295][T16865] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2687: corrupted inode contents [ 192.779175][T16865] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 192.779957][T16865] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2687: corrupted inode contents [ 192.781118][T16865] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2687: mark_inode_dirty error [ 192.782269][T16865] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 192.787432][T16865] EXT4-fs (loop5): 1 truncate cleaned up [ 192.930937][T16865] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 192.954815][ T4383] hsr_slave_0: left promiscuous mode [ 192.961983][ T4383] hsr_slave_1: left promiscuous mode [ 193.074324][T16798] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.119462][T17025] loop5: detected capacity change from 0 to 1024 [ 193.126811][T17025] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 193.138535][T17025] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 193.154536][T17025] JBD2: no valid journal superblock found [ 193.160300][T17025] EXT4-fs (loop5): Could not load journal inode [ 193.168808][T16762] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.176027][T16762] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.183266][T17025] loop5: detected capacity change from 0 to 512 [ 193.189869][T16762] bridge_slave_0: entered allmulticast mode [ 193.196697][T16762] bridge_slave_0: entered promiscuous mode [ 193.199821][T17025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.203766][T16762] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.209959][T17025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.216288][T16762] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.230208][T16762] bridge_slave_1: entered allmulticast mode [ 193.236874][T16762] bridge_slave_1: entered promiscuous mode [ 193.248853][T17025] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 193.281465][T16762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.291386][T17025] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ [ 193.319452][T16798] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.330277][T16762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.342443][T16798] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.355975][T16798] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.376083][T16798] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.381763][T17094] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2695'. [ 193.395106][T16762] team0: Port device team_slave_0 added [ 193.402616][T16762] team0: Port device team_slave_1 added [ 193.442281][T16762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.449342][T16762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.475995][T16762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.487358][T16762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.494350][T16762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.520974][T16762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.550915][T16762] hsr_slave_0: entered promiscuous mode [ 193.557665][T16762] hsr_slave_1: entered promiscuous mode [ 193.563590][T16762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.571152][T16762] Cannot create hsr debugfs directory [ 193.649311][T17248] loop3: detected capacity change from 0 to 164 [ 193.674665][T17249] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.757462][T17249] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.777865][T17260] vxcan1 speed is unknown, defaulting to 1000 [ 193.900138][T17249] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.921903][T17298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17298 comm=syz.2.2700 [ 193.937826][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2700'. [ 193.949143][ T4429] smc: removing ib device syz [ 193.973948][T16762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.993460][T17249] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.054483][T16762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.069433][T16762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.079984][T16762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.124114][T16762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.140414][T16762] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.150856][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.158019][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.180464][T16762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.190951][T16762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.204887][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.211971][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.239682][T17325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.248883][T17325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.258405][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 194.258422][ T29] audit: type=1326 audit(1747009548.942:11010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 194.288895][T17325] loop2: detected capacity change from 0 to 256 [ 194.289002][ T29] audit: type=1326 audit(1747009548.942:11011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 194.313865][T16762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.318964][ T29] audit: type=1326 audit(1747009548.942:11012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 194.349349][ T29] audit: type=1326 audit(1747009548.942:11013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 194.373021][ T29] audit: type=1326 audit(1747009548.942:11014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbd28abe969 code=0x7ffc0000 [ 194.383746][T17325] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 194.396851][ T29] audit: type=1326 audit(1747009548.942:11015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd28abe9a3 code=0x7ffc0000 [ 194.427395][ T29] audit: type=1326 audit(1747009548.942:11016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd28abd41f code=0x7ffc0000 [ 194.450915][ T29] audit: type=1326 audit(1747009548.942:11017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbd28abe9f7 code=0x7ffc0000 [ 194.462917][T16762] veth0_vlan: entered promiscuous mode [ 194.474491][ T29] audit: type=1326 audit(1747009548.970:11018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd28abd2d0 code=0x7ffc0000 [ 194.474521][ T29] audit: type=1326 audit(1747009548.970:11019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17324 comm="syz.2.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd28abe56b code=0x7ffc0000 [ 194.531735][T16762] veth1_vlan: entered promiscuous mode [ 194.547682][T16762] veth0_macvtap: entered promiscuous mode [ 194.555281][T16762] veth1_macvtap: entered promiscuous mode [ 194.565709][T16762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.576305][T16762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.586306][T16762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.596855][T16762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.607496][T16762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.618365][T16762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.629032][T16762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.638902][T16762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.649403][T16762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.660264][T16762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.670499][T16762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.679296][T16762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.688081][T16762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.697344][T16762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.745257][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'. [ 194.754180][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'. [ 194.823900][T17355] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.864043][T17360] loop3: detected capacity change from 0 to 512 [ 194.870834][T17360] EXT4-fs: Ignoring removed orlov option [ 194.878995][T17360] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2707: corrupted in-inode xattr: invalid ea_ino [ 194.893709][T17360] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2707: couldn't read orphan inode 15 (err -117) [ 194.936975][T17355] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.076518][T17393] loop2: detected capacity change from 0 to 1024 [ 195.098865][T17355] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.102792][T17402] loop3: detected capacity change from 0 to 164 [ 195.154445][T17393] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2708: Failed to acquire dquot type 0 [ 195.171445][T17393] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 195.188199][T17393] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2708: corrupted inode contents [ 195.191348][T17409] loop3: detected capacity change from 0 to 512 [ 195.214952][T17409] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.220813][T17393] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2708: mark_inode_dirty error [ 195.265374][T17393] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2708: corrupted inode contents [ 195.288239][T17393] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2708: mark_inode_dirty error [ 195.302345][T17393] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2708: corrupted inode contents [ 195.337457][T17393] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 195.343196][T17355] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.349618][T17393] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2708: corrupted inode contents [ 195.393897][T17393] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2708: mark_inode_dirty error [ 195.409291][T17393] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 195.420652][T17420] loop3: detected capacity change from 0 to 1024 [ 195.438742][T17420] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2713: Failed to acquire dquot type 0 [ 195.446327][T17393] EXT4-fs (loop2): 1 truncate cleaned up [ 195.451183][T17420] EXT4-fs (loop3): 1 truncate cleaned up [ 195.477878][ T3388] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 195.487417][ T3388] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.498241][T17420] loop3: detected capacity change from 0 to 256 [ 195.499771][T17393] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 195.509095][T17420] vfat: Unknown parameter 'shortoame' [ 195.565032][T17437] loop3: detected capacity change from 0 to 128 [ 195.613445][T17446] loop2: detected capacity change from 0 to 1024 [ 195.622690][T17446] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2715: Failed to acquire dquot type 0 [ 195.634630][T17446] EXT4-fs (loop2): 1 truncate cleaned up [ 195.663914][T17453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.672857][T17453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.684560][T17453] loop2: detected capacity change from 0 to 256 [ 195.693733][T17453] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 195.733249][T17459] loop3: detected capacity change from 0 to 512 [ 195.739826][T17459] EXT4-fs: Ignoring removed orlov option [ 195.747005][T17459] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.2719: corrupted in-inode xattr: invalid ea_ino [ 195.760658][T17459] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2719: couldn't read orphan inode 15 (err -117) [ 195.956684][T17467] loop3: detected capacity change from 0 to 1024 [ 195.979420][T17467] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2720: Failed to acquire dquot type 0 [ 195.994457][T17467] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 196.009384][T17467] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2720: corrupted inode contents [ 196.026121][T17467] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.2720: mark_inode_dirty error [ 196.038368][T17467] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2720: corrupted inode contents [ 196.052096][T17467] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.2720: mark_inode_dirty error [ 196.064216][T17467] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2720: corrupted inode contents [ 196.077758][T17467] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 196.086977][T17467] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2720: corrupted inode contents [ 196.100248][T17467] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.2720: mark_inode_dirty error [ 196.112186][T17467] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 196.123625][T17467] EXT4-fs (loop3): 1 truncate cleaned up [ 196.136594][T17467] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 196.271437][T17480] loop2: detected capacity change from 0 to 164 [ 196.535942][T17496] loop5: detected capacity change from 0 to 1024 [ 196.564065][T17498] loop3: detected capacity change from 0 to 256 [ 196.581134][T17496] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2728: Failed to acquire dquot type 0 [ 196.621533][T17496] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 196.644026][T17515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.653581][T17515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.666594][T17515] loop3: detected capacity change from 0 to 256 [ 196.675077][T17511] loop2: detected capacity change from 0 to 1024 [ 196.676028][T17515] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 196.689280][T17496] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2728: corrupted inode contents [ 196.719272][T17496] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2728: mark_inode_dirty error [ 196.726081][T17511] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2731: Failed to acquire dquot type 0 [ 196.736539][T17496] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2728: corrupted inode contents [ 196.761330][T17511] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 196.762078][T17511] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2731: corrupted inode contents [ 196.763659][T17511] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2731: mark_inode_dirty error [ 196.765269][T17511] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2731: corrupted inode contents [ 196.766398][T17511] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2731: mark_inode_dirty error [ 196.767701][T17511] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2731: corrupted inode contents [ 196.768797][T17511] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 196.770193][T17511] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2731: corrupted inode contents [ 196.771649][T17511] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2731: mark_inode_dirty error [ 196.772613][T17511] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 196.777905][T17511] EXT4-fs (loop2): 1 truncate cleaned up [ 196.918659][T17496] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2728: mark_inode_dirty error [ 196.918644][T17511] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 196.941357][T17496] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2728: corrupted inode contents [ 196.959041][T17496] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 196.971213][T17496] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2728: corrupted inode contents [ 196.989056][T17496] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2728: mark_inode_dirty error [ 197.001534][T17496] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 197.012683][T17496] EXT4-fs (loop5): 1 truncate cleaned up [ 197.058461][T17529] loop5: detected capacity change from 0 to 4096 [ 197.275241][T17249] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.284448][T17538] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2735'. [ 197.342452][T17249] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.392005][T17249] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.411417][T17249] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.981108][T17580] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ [ 197.991392][T17588] netlink: 'syz.2.2739': attribute type 21 has an invalid length. [ 198.000020][T17588] netlink: 'syz.2.2739': attribute type 20 has an invalid length. [ 198.008025][T17588] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.116420][T17595] loop2: detected capacity change from 0 to 1024 [ 198.123898][T17595] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.135565][T17595] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 198.160604][T17595] JBD2: no valid journal superblock found [ 198.166475][T17595] EXT4-fs (loop2): Could not load journal inode [ 198.196551][T17595] loop2: detected capacity change from 0 to 512 [ 198.206282][T17595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.212967][T17595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.220814][T17595] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 198.282941][T17595] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ [ 198.370702][T17613] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.459358][T17613] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.516275][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.523746][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.531236][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.540138][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.547688][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.555888][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.563348][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.571452][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.578895][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.586456][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.594025][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.601416][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.609487][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.617014][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.624467][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.631953][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.640099][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.647680][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.651014][T17613] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.655097][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.655126][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.655154][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.655244][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.655269][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.655296][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.655324][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.655387][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.655414][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.733619][ T2969] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 198.741467][ T2969] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz0] on syz1 [ 198.798195][T17613] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.849161][T17653] loop3: detected capacity change from 0 to 1024 [ 198.867127][T17653] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2746: Failed to acquire dquot type 0 [ 198.887492][T17653] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 198.904413][T17653] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2746: corrupted inode contents [ 198.924851][T17653] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.2746: mark_inode_dirty error [ 198.941558][T17653] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2746: corrupted inode contents [ 198.962123][T17653] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.2746: mark_inode_dirty error [ 198.976853][T17653] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2746: corrupted inode contents [ 198.994021][T17653] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 199.007126][T17653] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2746: corrupted inode contents [ 199.024414][T17653] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.2746: mark_inode_dirty error [ 199.039670][T17653] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 199.055972][T17653] EXT4-fs (loop3): 1 truncate cleaned up [ 199.092321][T17613] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.129266][T17613] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.159794][T17613] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.190754][T17613] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.312012][T17355] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.325660][T17355] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.340313][T17355] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.355468][T17355] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.436655][T17697] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2754'. [ 199.480316][ T1104] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 199.491469][T17690] loop5: detected capacity change from 0 to 1024 [ 199.501195][ T1104] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.557335][T17690] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2751: Failed to acquire dquot type 0 [ 199.579133][T17690] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 199.608134][T17690] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2751: corrupted inode contents [ 199.632276][T17714] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ [ 199.641487][T17690] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2751: mark_inode_dirty error [ 199.657249][T17690] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2751: corrupted inode contents [ 199.682343][T17690] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2751: mark_inode_dirty error [ 199.697069][T17690] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2751: corrupted inode contents [ 199.710959][T17690] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 199.722655][T17690] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2751: corrupted inode contents [ 199.736944][T17690] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2751: mark_inode_dirty error [ 199.752997][T17690] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 199.766880][T17690] EXT4-fs (loop5): 1 truncate cleaned up [ 199.808135][T17720] loop5: detected capacity change from 0 to 164 [ 200.019012][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2760'. [ 200.029050][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2760'. [ 200.040647][T17734] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2760'. [ 200.171328][T17738] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.237233][T17748] loop3: detected capacity change from 0 to 1024 [ 200.255531][T17738] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.267046][T17748] __quota_error: 178 callbacks suppressed [ 200.267061][T17748] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 200.284318][T17748] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 200.293753][T17748] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2764: Failed to acquire dquot type 0 [ 200.306809][T17748] EXT4-fs (loop3): 1 truncate cleaned up [ 200.358902][T17738] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.379245][T17777] loop3: detected capacity change from 0 to 1024 [ 200.388379][T17777] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 200.399414][T17777] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 200.408864][T17777] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2766: Failed to acquire dquot type 0 [ 200.420763][T17777] EXT4-fs (loop3): 1 truncate cleaned up [ 200.436539][ T3389] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 200.446523][T17777] loop3: detected capacity change from 0 to 256 [ 200.453712][T17777] vfat: Unknown parameter 'shortoame' [ 200.460035][ T3389] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.470051][T17738] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.500830][T17796] loop3: detected capacity change from 0 to 164 [ 200.509256][T17796] rock: directory entry would overflow storage [ 200.515520][T17796] rock: sig=0x4f50, size=4, remaining=3 [ 200.521175][T17796] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 200.548560][T17801] loop3: detected capacity change from 0 to 512 [ 200.564808][T17801] ext4 filesystem being mounted at /563/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.720013][T17815] loop3: detected capacity change from 0 to 164 [ 200.748712][T17820] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2771'. [ 201.337178][ T3389] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 201.348228][ T3389] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.408788][T17850] loop2: detected capacity change from 0 to 512 [ 201.415369][T17850] EXT4-fs: Ignoring removed orlov option [ 201.433801][T17850] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2781: corrupted in-inode xattr: invalid ea_ino [ 201.448337][T17850] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2781: couldn't read orphan inode 15 (err -117) [ 201.460383][ T29] audit: type=1326 audit(1747009555.578:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17854 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 201.484756][ T29] audit: type=1326 audit(1747009555.578:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17854 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 201.508430][ T29] audit: type=1326 audit(1747009555.578:11184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17854 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 201.532048][ T29] audit: type=1326 audit(1747009555.578:11185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17854 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 201.559631][ T29] audit: type=1326 audit(1747009555.615:11186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17854 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 201.583357][ T29] audit: type=1326 audit(1747009555.624:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17854 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd713e969 code=0x7ffc0000 [ 201.704865][T17864] loop3: detected capacity change from 0 to 1024 [ 201.727142][T17864] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2782: Failed to acquire dquot type 0 [ 201.743020][T17864] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 201.762621][T17864] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2782: corrupted inode contents [ 201.778427][T17864] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.2782: mark_inode_dirty error [ 201.793568][T17864] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2782: corrupted inode contents [ 201.808188][T17864] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.2782: mark_inode_dirty error [ 201.838866][T17864] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2782: corrupted inode contents [ 201.860693][T17879] loop2: detected capacity change from 0 to 164 [ 201.870237][T17864] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 201.895394][T17864] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2782: corrupted inode contents [ 201.914216][T17864] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.2782: mark_inode_dirty error [ 201.914315][T17889] loop2: detected capacity change from 0 to 164 [ 201.937106][T17864] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 201.965672][T17864] EXT4-fs (loop3): 1 truncate cleaned up [ 201.984100][T17903] loop2: detected capacity change from 0 to 512 [ 202.000591][T17864] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 202.021962][T17903] ext4 filesystem being mounted at /551/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.071743][T17922] loop3: detected capacity change from 0 to 1024 [ 202.078390][T17923] loop2: detected capacity change from 0 to 1024 [ 202.097826][T17922] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2791: Failed to acquire dquot type 0 [ 202.113466][T17923] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2792: Failed to acquire dquot type 0 [ 202.126792][T17922] EXT4-fs (loop3): 1 truncate cleaned up [ 202.132383][T17923] EXT4-fs (loop2): 1 truncate cleaned up [ 202.147064][T17922] loop3: detected capacity change from 0 to 256 [ 202.149258][ T3388] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 202.153621][T17922] vfat: Unknown parameter 'shortoame' [ 202.166759][T17923] loop2: detected capacity change from 0 to 256 [ 202.170772][ T3392] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 202.173929][ T3388] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.186021][T17923] vfat: Unknown parameter 'shortoame' [ 202.197646][ T3392] hid-generic 0000:0000:0000.003E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 202.313198][T17971] loop2: detected capacity change from 0 to 512 [ 202.324992][T17971] EXT4-fs: Ignoring removed orlov option [ 202.332166][T17971] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2796: corrupted in-inode xattr: invalid ea_ino [ 202.348195][T17971] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2796: couldn't read orphan inode 15 (err -117) [ 202.383096][T17995] loop3: detected capacity change from 0 to 512 [ 202.407554][T17995] ext4 filesystem being mounted at /571/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.576015][T18004] loop3: detected capacity change from 0 to 1024 [ 202.636242][T18004] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2804: Failed to acquire dquot type 0 [ 202.653762][T18004] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 202.670487][T18004] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2804: corrupted inode contents [ 202.689559][T18004] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.2804: mark_inode_dirty error [ 202.711877][T18004] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2804: corrupted inode contents [ 202.742005][T18004] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.2804: mark_inode_dirty error [ 202.763082][T18004] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2804: corrupted inode contents [ 202.806341][T18004] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 202.850376][T18004] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.2804: corrupted inode contents [ 202.859164][T18043] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ [ 202.872929][T18004] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.2804: mark_inode_dirty error [ 202.918572][T18004] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 202.929397][T18052] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2813'. [ 202.939027][T18004] EXT4-fs (loop3): 1 truncate cleaned up [ 202.983870][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 202.991447][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 202.998974][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.007186][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.014624][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.022189][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.029676][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.037883][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.045418][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.052862][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.060473][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.068653][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.076085][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.088630][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.096061][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.104276][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.111698][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.119110][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.126611][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.134695][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.142144][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.149597][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.157098][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.165206][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.172656][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.180112][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.187561][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.194954][ T3389] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 203.203561][ T3389] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 203.213731][T18004] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 203.302425][T18072] bond1: entered promiscuous mode [ 203.307555][T18072] bond1: entered allmulticast mode [ 203.334922][T18072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.398209][T18113] FAULT_INJECTION: forcing a failure. [ 203.398209][T18113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.411385][T18113] CPU: 1 UID: 0 PID: 18113 Comm: syz.3.2821 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 203.411501][T18113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 203.411519][T18113] Call Trace: [ 203.411526][T18113] [ 203.411536][T18113] __dump_stack+0x1d/0x30 [ 203.411562][T18113] dump_stack_lvl+0xe8/0x140 [ 203.411581][T18113] dump_stack+0x15/0x1b [ 203.411640][T18113] should_fail_ex+0x265/0x280 [ 203.411682][T18113] should_fail+0xb/0x20 [ 203.411787][T18113] should_fail_usercopy+0x1a/0x20 [ 203.411809][T18113] _copy_from_iter+0xcf/0xdd0 [ 203.411832][T18113] ? __build_skb_around+0x1a0/0x200 [ 203.411862][T18113] ? __alloc_skb+0x223/0x320 [ 203.411938][T18113] netlink_sendmsg+0x471/0x6b0 [ 203.412000][T18113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.412057][T18113] __sock_sendmsg+0x142/0x180 [ 203.412103][T18113] ____sys_sendmsg+0x31e/0x4e0 [ 203.412186][T18113] ___sys_sendmsg+0x17b/0x1d0 [ 203.412266][T18113] __x64_sys_sendmsg+0xd4/0x160 [ 203.412297][T18113] x64_sys_call+0x2999/0x2fb0 [ 203.412324][T18113] do_syscall_64+0xd0/0x1a0 [ 203.412352][T18113] ? clear_bhb_loop+0x25/0x80 [ 203.412381][T18113] ? clear_bhb_loop+0x25/0x80 [ 203.412409][T18113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.412431][T18113] RIP: 0033:0x7f7bd713e969 [ 203.412503][T18113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.412525][T18113] RSP: 002b:00007f7bd57a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.412547][T18113] RAX: ffffffffffffffda RBX: 00007f7bd7365fa0 RCX: 00007f7bd713e969 [ 203.412562][T18113] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 203.412578][T18113] RBP: 00007f7bd57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.412593][T18113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.412675][T18113] R13: 0000000000000000 R14: 00007f7bd7365fa0 R15: 00007ffc9c89b508 [ 203.412700][T18113] [ 203.614256][T18067] loop2: detected capacity change from 0 to 1024 [ 203.690827][T18067] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2818: Failed to acquire dquot type 0 [ 203.789355][T18067] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 203.810668][T18144] loop3: detected capacity change from 0 to 164 [ 203.818357][T18067] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2818: corrupted inode contents [ 203.842090][T18144] rock: directory entry would overflow storage [ 203.849241][T18144] rock: sig=0x4f50, size=4, remaining=3 [ 203.850433][T18142] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ [ 203.854793][T18144] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 203.869744][T18067] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2818: mark_inode_dirty error [ 203.934651][T17738] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.958913][T17738] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.959077][T18067] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2818: corrupted inode contents [ 204.010132][T18067] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2818: mark_inode_dirty error [ 204.028921][T17738] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.041272][T18161] FAULT_INJECTION: forcing a failure. [ 204.041272][T18161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.054393][T18161] CPU: 0 UID: 0 PID: 18161 Comm: syz.0.2829 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 204.054424][T18161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 204.054510][T18161] Call Trace: [ 204.054516][T18161] [ 204.054525][T18161] __dump_stack+0x1d/0x30 [ 204.054545][T18161] dump_stack_lvl+0xe8/0x140 [ 204.054628][T18161] dump_stack+0x15/0x1b [ 204.054644][T18161] should_fail_ex+0x265/0x280 [ 204.054675][T18161] should_fail+0xb/0x20 [ 204.054758][T18161] should_fail_usercopy+0x1a/0x20 [ 204.054780][T18161] strncpy_from_user+0x25/0x230 [ 204.054834][T18161] ? kmem_cache_alloc_noprof+0x186/0x310 [ 204.054869][T18161] ? getname_flags+0x80/0x3b0 [ 204.054901][T18161] getname_flags+0xae/0x3b0 [ 204.054962][T18161] __x64_sys_mknod+0x40/0x60 [ 204.054990][T18161] x64_sys_call+0x181c/0x2fb0 [ 204.055009][T17738] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.055016][T18161] do_syscall_64+0xd0/0x1a0 [ 204.055050][T18161] ? clear_bhb_loop+0x25/0x80 [ 204.055112][T18161] ? clear_bhb_loop+0x25/0x80 [ 204.055138][T18161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.055148][T17738] ================================================================== [ 204.055164][T18161] RIP: 0033:0x7f1072e7e969 [ 204.055182][T18161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.055206][T18161] RSP: 002b:00007f10714e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 204.055257][T18161] RAX: ffffffffffffffda RBX: 00007f10730a5fa0 RCX: 00007f1072e7e969 [ 204.055273][T18161] RDX: 0000000000000700 RSI: 0000000000000020 RDI: 0000000000000000 [ 204.055290][T18161] RBP: 00007f10714e7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.055305][T18161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.055322][T18161] R13: 0000000000000000 R14: 00007f10730a5fa0 R15: 00007ffd97953e88 [ 204.055354][T18161] [ 204.139639][T17738] BUG: KCSAN: data-race in data_push_tail / symbol_string [ 204.139693][T17738] [ 204.139700][T17738] write to 0xffffffff88e348e0 of 1 bytes by task 18161 on cpu 0: [ 204.139719][T17738] symbol_string+0x1ce/0x250 [ 204.139750][T17738] pointer+0x60c/0xcf0 [ 204.139779][T17738] vsnprintf+0x491/0x890 [ 204.139807][T17738] vscnprintf+0x41/0x90 [ 204.139835][T17738] printk_sprint+0x30/0x2d0 [ 204.139868][T17738] vprintk_store+0x599/0x860 [ 204.139901][T17738] vprintk_emit+0x178/0x650 [ 204.139919][T17738] vprintk_default+0x26/0x30 [ 204.139943][T17738] vprintk+0x1d/0x30 [ 204.139968][T17738] _printk+0x79/0xa0 [ 204.139998][T17738] show_trace_log_lvl+0x4e3/0x560 [ 204.140023][T17738] __dump_stack+0x1d/0x30 [ 204.140042][T17738] dump_stack_lvl+0xe8/0x140 [ 204.140060][T17738] dump_stack+0x15/0x1b [ 204.140078][T17738] should_fail_ex+0x265/0x280 [ 204.140116][T17738] should_fail+0xb/0x20 [ 204.140145][T17738] should_fail_usercopy+0x1a/0x20 [ 204.140165][T17738] strncpy_from_user+0x25/0x230 [ 204.140191][T17738] getname_flags+0xae/0x3b0 [ 204.140221][T17738] __x64_sys_mknod+0x40/0x60 [ 204.140244][T17738] x64_sys_call+0x181c/0x2fb0 [ 204.140266][T17738] do_syscall_64+0xd0/0x1a0 [ 204.140292][T17738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.140314][T17738] [ 204.140321][T17738] read to 0xffffffff88e348e0 of 8 bytes by task 17738 on cpu 1: [ 204.140339][T17738] data_push_tail+0xfd/0x420 [ 204.140372][T17738] data_alloc+0xbf/0x2b0 [ 204.140401][T17738] prb_reserve+0x808/0xaf0 [ 204.140430][T17738] vprintk_store+0x56d/0x860 [ 204.140463][T17738] vprintk_emit+0x178/0x650 [ 204.140481][T17738] dev_vprintk_emit+0x242/0x2a0 [ 204.140504][T17738] dev_printk_emit+0x84/0xb0 [ 204.140526][T17738] __netdev_printk+0x35c/0x3e0 [ 204.140546][T17738] netdev_info+0x9b/0xd0 [ 204.140571][T17738] nsim_udp_tunnel_set_port+0x171/0x190 [ 204.140601][T17738] __udp_tunnel_nic_device_sync+0x564/0x9c0 [ 204.140629][T17738] __udp_tunnel_nic_add_port+0x6a9/0x720 [ 204.140654][T17738] udp_tunnel_push_rx_port+0xe9/0x120 [ 204.140677][T17738] geneve_netdevice_event+0x173/0x1b0 [ 204.140705][T17738] raw_notifier_call_chain+0x6c/0x1b0 [ 204.140725][T17738] call_netdevice_notifiers_info+0xae/0x100 [ 204.140752][T17738] call_netdevice_notifiers+0x48/0x70 [ 204.140777][T17738] udp_tunnel_nic_netdevice_event+0xa54/0xc90 [ 204.140804][T17738] raw_notifier_call_chain+0x6c/0x1b0 [ 204.140823][T17738] call_netdevice_notifiers_info+0xae/0x100 [ 204.140857][T17738] register_netdevice+0xd48/0xf10 [ 204.140890][T17738] nsim_create+0x5b7/0x780 [ 204.140914][T17738] __nsim_dev_port_add+0x477/0x640 [ 204.140946][T17738] nsim_dev_port_add_all+0x31/0xc0 [ 204.140977][T17738] nsim_dev_reload_up+0x30c/0x480 [ 204.141010][T17738] devlink_reload+0x318/0x580 [ 204.141028][T17738] devlink_nl_reload_doit+0x772/0x8f0 [ 204.141048][T17738] genl_family_rcv_msg_doit+0x140/0x1b0 [ 204.141075][T17738] genl_rcv_msg+0x422/0x460 [ 204.141103][T17738] netlink_rcv_skb+0x120/0x220 [ 204.141134][T17738] genl_rcv+0x28/0x40 [ 204.141155][T17738] netlink_unicast+0x59e/0x670 [ 204.141184][T17738] netlink_sendmsg+0x58b/0x6b0 [ 204.141222][T17738] __sock_sendmsg+0x142/0x180 [ 204.141248][T17738] ____sys_sendmsg+0x31e/0x4e0 [ 204.141267][T17738] ___sys_sendmsg+0x17b/0x1d0 [ 204.141285][T17738] __x64_sys_sendmsg+0xd4/0x160 [ 204.141305][T17738] x64_sys_call+0x2999/0x2fb0 [ 204.141327][T17738] do_syscall_64+0xd0/0x1a0 [ 204.141352][T17738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.141374][T17738] [ 204.141380][T17738] value changed: 0x00000000fffff5bb -> 0x00000000ff000a30 [ 204.141393][T17738] [ 204.141399][T17738] Reported by Kernel Concurrency Sanitizer on: [ 204.141412][T17738] CPU: 1 UID: 0 PID: 17738 Comm: syz.5.2763 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 204.141440][T17738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 204.141455][T17738] ================================================================== [ 204.217170][T18067] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2818: corrupted inode contents [ 204.702623][T18067] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 204.713439][T18067] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2818: corrupted inode contents [ 204.727799][T18067] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2818: mark_inode_dirty error [ 204.748960][T18067] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 204.760479][T18067] EXT4-fs (loop2): 1 truncate cleaned up [ 204.791307][T18067] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.