last executing test programs: 12m44.600992182s ago: executing program 32 (id=576): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 5m59.535440249s ago: executing program 33 (id=5887): r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r5, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x100000}}, 0x40) mq_open(0x0, 0x40, 0x1d4, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r11, 0x0, 0x1d6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r10], 0x20}}, 0x0) 4m39.736022952s ago: executing program 34 (id=7005): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)) r5 = socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 4m35.572824139s ago: executing program 35 (id=7132): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r0) 4m34.128699204s ago: executing program 36 (id=7158): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}], 0x1, 0x4040894) 3m56.712653047s ago: executing program 37 (id=7666): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000000)={0xa, 0x4e28, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x590}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b00)="f5", 0x1}], 0x1}}], 0x2, 0x8008800) 3m44.183076074s ago: executing program 4 (id=7924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x70bd29, 0x1fffffd, {0x0, 0x0, 0x0, r2, {0xd}, {0xf}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x8008004) 3m44.076081525s ago: executing program 8 (id=7932): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ee"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f00080003400000000008000440000000000800054000000000090002000000000002000000080001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x4500}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0xff, 0x0, 0x205}, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast2, @private1, @mcast1, 0x5, 0x0, 0x4, 0x400, 0xf44, 0x8}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe1f) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x964}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 3m44.070379165s ago: executing program 4 (id=7933): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0xfffffffffffffffe, 0x0) 3m44.045174978s ago: executing program 4 (id=7934): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r4, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) setsockopt$MRT6_TABLE(r4, 0x29, 0xcf, &(0x7f0000000500)=0xffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvTDY/mrzvm7S8vK+92IBIC9qkSVspItjitZT64+YpNmmpTZvSRDS1YAr1oogXD4InD9b/QgtePXj14MWDSCGI9GCl2pXZzKa72Wyy+bG7SfbzgUmemcnO852Eb55nn31mJoCONZx9SSMORsT1JGKwYl8h8p3DSz/34PdbF7IliWLx9d+SuPVBslB5rCT/PpC/+O/BSH5IIw501dY7O3/zysT09NSNfH107ur10dn5m0cvX524NHVp6tr4C+OnTp44eWrs2JbOr1BRPnvn7XcHPzr35ldfPErGvv7pXBKn43EeW3ZeK1/bu6Was9/ZcBSXPHyyNS19PbXFY+8UfwxW/44zycoN7FgXI6I7X/4fg9FV8dccjA9fbWtwQFMVkyi3UUDHSdbP/+7aTX3NCQZooXI/oPzefrX3wbXSJvdKgFZYPLM0SLaU+90RUc7/wtLYYPSVxgb6HyRV4zxJRGxtZG5JVsf33527ky1RZxwOaI6F2+VR7pXtf1LKzaHoK631P0ir8j+tWLLtr22y/uEV6/IfWmfhdkQ8lbf/PbHp/H9rk/XLfwAAAAAAANg+985ExPOrzf9Ll+f/9Kwy/2cgIk5vQ/3rf/6X3s8LyTZUB1RYPBPxUs38378qZwcPdeWf8/+7NB+gO714eXrqWET8JyKORHdvtj5WfdiqCcJHPznweb36K+f/ZUtWf3kuYH6o+4UVF+JOTsxNbM/ZQ2dbvB3xsDT/91C+pXr+T9b+JzXt/8evZAl+vcE6Djx793zVhl+e/HtYP/+BZil+GXF41et/nnS3k7XvzzFa6g+MlnsFtZ5+/9Nv6tUv/6F9sva/f+38700q79czu7Hj90TE8flCsd7+zfb/e5I3usrHz7w3MTd3YyyiJzlbu318YzHDXlXOh3K+ZPl/5Jm1x/+W+/8VebgvIhYarPN/jwd+rrdP+w/tk+X/5Nrt/1B1+7/RQl+M3x36Nr/FWI3zDbX/J0pt+pF8i/E/qFR7P45GE7Qt4QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALpdGxL8iSUeWy2k6MhIxEBH/jf50emZ27rmLM+9cm8z2VT//f3BpPSk//3+oYn18xfrxiNgfEZ917Sutj1yYmZ5s98kDAAAAAAAAAAAAAAAAAADADjFQuua/2Lvy+v/Mr13tjg5oukL+Xb5D5yls+pXF3m0NBGi5zec/sNs1nv/dTY0DaL36+f/wUbGkpeEALaT/D51rk/nv4wLYA7T/0KkaHNPra3YcQDs03P4vNjcOAAAAAABgW+w/dO/HJCIWXtxXWjI9+T6T/WFvS9sdANA25vBC5yrMtDsCoF28xweS5dKfq17sX3/2f9KcgAAAAAAAAAAAAACAGocPuv4fOlUascYjvM3th71sjev/V0t+twuAPaT+oz8aafsTPQTYxbzHB9Zrx13/DwAAAAAAAAAAAAA7QN/NKxPT01M3Zud3X+HlnRHGxgoLEzsijG0tPF7vZ8qPmd/YkbsjYmecYKsL5VtwtDGMNv5PAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqvwTAAD//9ywLb8=") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)={0x442040, 0x18, 0x3f}, 0x18) move_mount(r8, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', r9, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x200) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000f40)={0x4, &(0x7f0000000380)=[{0x1, 0x5, 0x4, 0x2}, {0x5, 0xff, 0x80, 0x7}, {0x4, 0x8c, 0x2, 0xfff}, {0x3, 0x1, 0x0, 0x2}]}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000400)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x17}, 0x2f, 0x0, 0x3, 0x480, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000004c0)='mm_page_alloc\x00', r7}, 0x18) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x6) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r14}, 0x18) ustat(0x2, 0x0) 3m44.02157146s ago: executing program 8 (id=7936): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000500)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto(r0, 0x0, 0x0, 0x20004825, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 3m43.938017088s ago: executing program 7 (id=7939): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nodiscard}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000001cc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 3m43.937309748s ago: executing program 4 (id=7940): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) r1 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r1, &(0x7f0000001100)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) 3m43.72681664s ago: executing program 4 (id=7944): syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 3m43.725997069s ago: executing program 7 (id=7945): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) unshare(0x22020400) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) flistxattr(r3, 0x0, 0x44) 3m43.616736521s ago: executing program 7 (id=7951): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7fc5fdffc61352fed3b06515e5760718aa6a58c16751d632055c81804fad44ae4a58671dac0da6fc1190e7555c61681d70f4eb2959db13dfa38ea7a69c36f1c1677d62ad8011371b56669aae18f7733788726699516cb4f5844994755a06fcf20229bde97734e518f9ba700f08c90756e40a2d92e50d1453ea8e5d1dfa2fa9683e6d500ed7dce4e97012e1f3ed799e53a9e98a89708ee54c184caa91fecd6be3a9a5f149a2045be697ee26e48ac0f4759e98eac0506a8b82837f790ba610203a36782db110417366ba5f90dc753dea5616c6edafaee6", @ANYRES16=r1, @ANYBLOB="100028bd7000fcdbdf250d000000050018000700000006000a000000000005001a0081000000050007000f0000000500170002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x50}}, 0x40000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000c00)=""/199, 0xc7, 0x0, &(0x7f0000000d00)=""/110, 0x6e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000000000000000180900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000005400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3ed7, 0x0) 3m43.615734331s ago: executing program 6 (id=7953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone3(0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x80, 0x0, 0xca, {{0x16, 0x4, 0x0, 0x1, 0x58, 0x27, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0xb, 0x7e, [@private=0xa010102, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0xe4, 0x1, 0x8, [{@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x2}, {@local, 0xd9}, {@empty, 0x1}]}, @timestamp_addr={0x44, 0xc, 0x1e, 0x1, 0xb, [{@private=0xa010101, 0x9}]}]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES64=r5], 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0xfffffffffffffeef}, 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="f9ff0f00fdffffff00868b842a00000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r8, 0xffffffffffffffff, 0x0) 3m43.544857398s ago: executing program 7 (id=7954): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) r1 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r1, &(0x7f0000001100)=[{&(0x7f0000001080)}], 0x1, 0x7000, 0x0, 0x3) 3m43.353843447s ago: executing program 7 (id=7955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000005c0), 0x200) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x4b7, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x40289}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x3b01, 0xffff000000000000, 0x0, 0x0) dup3(r0, r1, 0x0) 3m43.275832285s ago: executing program 6 (id=7957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffd, 0xfffffffe, 0xb, 0x1, 0x7fff, 0xffff, 0x5, 0x0, 0x4000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20018041}, 0xc804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m43.216546271s ago: executing program 4 (id=7958): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 3m43.212594411s ago: executing program 38 (id=7958): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 3m43.062862576s ago: executing program 6 (id=7963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x70bd29, 0x1fffffd, {0x0, 0x0, 0x0, r2, {0xd}, {0xf}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000051}, 0x8008004) 3m43.030771129s ago: executing program 6 (id=7965): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) r1 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r1, &(0x7f0000001100)=[{&(0x7f0000001080)}], 0x1, 0x7000, 0x0, 0x3) 3m42.976666614s ago: executing program 7 (id=7966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcffff250301f2800a4b938be366dc4b000000001400010000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c808004500ac1414bb00"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m42.976293115s ago: executing program 39 (id=7966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3m42.868550145s ago: executing program 6 (id=7969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a3100000000050001000700000034000780"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m42.036832369s ago: executing program 6 (id=7973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m42.036658959s ago: executing program 40 (id=7973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m40.798785543s ago: executing program 8 (id=7976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0xfffffffffffffffe, 0x0) 3m40.712857282s ago: executing program 8 (id=7977): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) r1 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r1, &(0x7f0000001100)=[{&(0x7f0000001080)}], 0x1, 0x7000, 0x0, 0x3) 3m40.585372964s ago: executing program 8 (id=7978): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141a42, 0x1c2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) r1 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r1, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) 3m40.300043013s ago: executing program 8 (id=7979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x1020) 3m40.256639058s ago: executing program 41 (id=7979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x1020) 3m40.03679565s ago: executing program 0 (id=7982): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) close(r1) 3m39.948962869s ago: executing program 0 (id=7983): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 3m39.529095881s ago: executing program 0 (id=7984): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x4, 0x3f62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x844) r2 = open(0x0, 0x143bc2, 0x1c0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000d00)={0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000ffeb0000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r6, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100082820ac059c0240000102030109022d0001018120060904020301000f09210c0f01012256020905810300040000860905a2fff476328cc40203e4ab048b5282a0b40000"], &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x2, 0x9, 0x20, 0x5}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x500a}}]}) fsopen(&(0x7f00000002c0)='nfsd\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x20c8a1, 0x20, 0x200008, 0xcf}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m38.073380316s ago: executing program 0 (id=7985): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) r1 = open(&(0x7f0000000180)='./file1\x00', 0xe0142, 0x102) pwritev2(r1, &(0x7f0000001100)=[{&(0x7f0000001080)='\b', 0x1}], 0x1, 0x7000, 0x0, 0x3) 3m37.870373737s ago: executing program 0 (id=7987): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x7) unshare(0x2a020000) unshare(0x8000000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x44001) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) close(0x4) 3m37.404941594s ago: executing program 0 (id=7989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3m37.398545344s ago: executing program 42 (id=7989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.324433386s ago: executing program 3 (id=12430): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000004003113d6003a058d786284620ed4434cc4736022a441da973d62b8a832cb86048ef23c4bc11ac744ea6061bfcaacf080d381cef39d98ae3fe57768e05d1048590e1a377df68d4b8c2fc9071d84942177fdde805", @ANYRES16, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) sendto$inet6(r4, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close(r1) 2.38796474s ago: executing program 3 (id=12451): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x10d2, &(0x7f0000000380)={0x0, 0xf567, 0x100, 0x0, 0x216}, &(0x7f00000000c0), &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file1\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 2.261597193s ago: executing program 5 (id=12454): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(0xffffffffffffffff, 0x5) r2 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x10, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r3, &(0x7f00000008c0)=ANY=[], 0x258) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x20004094}, 0x20040811) 2.199967399s ago: executing program 3 (id=12457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") 2.000786059s ago: executing program 3 (id=12460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24044838}, 0xc800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x298, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r6, 0x408}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x158, 0x0, 0x148, 0x158, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {0xff}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x21, 0x0, 0x1ff, 0x100000, 0x0, 0x80000ed, 0x10000007}, {0x20}}}, @common=@unspec=@connmark={{0x30}, {0xfffffffb, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x20, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff000000, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x6}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) shutdown(r6, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00007f8000/0x1000)=nil, 0x1000, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x48, 0x0, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="19"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) 1.430085666s ago: executing program 2 (id=12468): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) eventfd2(0x0, 0x0) 1.381077111s ago: executing program 2 (id=12469): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeex\xe5+\xf0', 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000eb03"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x80044940, &(0x7f0000001b00)) ppoll(&(0x7f0000000000)=[{r7, 0xc0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000b80)=0x5, 0x4) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001200010300000000000000000000000217c1200002000000000000000000000000000000030000000700"/56, @ANYRES32=0x0, @ANYBLOB="000000000000000700000000000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) lstat(&(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000180)) 1.339079356s ago: executing program 5 (id=12470): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000080)={[{@nogrpid}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@nodioread_nolock}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/101) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB='<4\x00\x00\x00'], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) get_mempolicy(0x0, &(0x7f00000000c0), 0xcc, &(0x7f0000ffb000/0x2000)=nil, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @remote, @empty}, &(0x7f00000005c0)=0xc) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) 1.284252251s ago: executing program 2 (id=12471): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000001a"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.105947149s ago: executing program 2 (id=12473): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.067855302s ago: executing program 5 (id=12474): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, 0x0, 0x0) 1.057624253s ago: executing program 3 (id=12475): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x4, 0x3f62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x844) r2 = open(0x0, 0x143bc2, 0x1c0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000ffeb0000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r6, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100082820ac059c0240000102030109022d0001018120060904020301000f09210c0f01012256020905810300040000860905a2fff476328cc40203e4ab048b5282"], &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x2, 0x9, 0x20, 0x5}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x500a}}]}) fsopen(&(0x7f00000002c0)='nfsd\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x20c8a1, 0x20, 0x200008, 0xcf}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.036524665s ago: executing program 5 (id=12476): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) 948.870445ms ago: executing program 5 (id=12478): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x9}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)='%-010d \x00'}, 0x20) 938.679865ms ago: executing program 2 (id=12479): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) eventfd2(0x0, 0x0) 916.648398ms ago: executing program 5 (id=12480): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(0xffffffffffffffff, 0x5) r2 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x10, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r3, &(0x7f00000008c0)=ANY=[], 0x258) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x20004094}, 0x20040811) 875.940422ms ago: executing program 2 (id=12481): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000011c0)={[{@acl}, {@barrier}, {@minixdf}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@debug}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/35, 0x23) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r3, 0x89ee, &(0x7f00000005c0)="8e00dfa8482514aa46605dee20f2fb7501e4eaa0995fff2cf33ec40c282deb44e156669f189a3404e9c30f7c0adc526df80b5e713e18c56c2a20b4d8bb0ebb55f3da78f2700fddb023deaac17afeeed1a76371ec58725e4fc308df1dd4d40eb2e5b2d8fca2bbc0c1ea6ef0484a00e84a3a68db1b98bd90ef107d5ce220ca984c9995fa271877822962100275f77559ca6357e98cdfc55921aca1461866cfceac835c8a0c54fed942761a14") getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000002440)=""/139, &(0x7f0000000040)=0x8b) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x200600, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000003c0)={0xfffffffc, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='mm_page_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000303000/0x4000)=nil, 0x4000, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0xba01}, 0x810) 749.275175ms ago: executing program 9 (id=12482): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 547.936875ms ago: executing program 1 (id=12485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 480.778911ms ago: executing program 1 (id=12486): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 464.172073ms ago: executing program 9 (id=12487): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 420.360138ms ago: executing program 9 (id=12488): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) 377.769902ms ago: executing program 9 (id=12489): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, 0x0, 0x0) 377.126152ms ago: executing program 1 (id=12490): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x9}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)='%-010d \x00'}, 0x20) 314.934598ms ago: executing program 9 (id=12491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 303.563149ms ago: executing program 1 (id=12492): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x7f, 0x1, 0x6) 239.251426ms ago: executing program 1 (id=12493): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2b}, [@generic={0x73, 0x1, 0x1, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f0000000080)='./file0\x00', 0xb) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44051}, 0x0) 237.908406ms ago: executing program 3 (id=12494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) accept4$llc(0xffffffffffffffff, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xe}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) 198.11679ms ago: executing program 1 (id=12495): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_misc(r4, &(0x7f00000012c0)="baa540d608bc217f4339ed531a6fff1177e8fd278329817806875fb7e465a8b781c4e223838af4c07e28565c42c304edb567bb315876e154b17c784e98c2b2eb9a6782c9964268561c0cfebf45826734964b8122db377a4d0fc5d2e55a07bcf801556778a5a52bfa2af58457a17eb23f54871aa5a54b62e0d2ff8a2d58780bdf096af19e8cd0c80d12aa5f4415d74c8050af30a24b189d32e1ec237a4d64eaf7b8aba3d3883174c30821e22a95a2b15872ff569e33442cf0e1a8e69e22c5ec1393619094a3dfb1d881c9ec396475dbe8d782bfdf074fa06b980d262f113283fa7f0a36db48f42feb56a7637de9cedf7292d422898b6e6fe16b75c4a6430091aed70dde9acc0c7157f117cca238411f385a9d0bcfe92b6adef374cc4f060a149cb3cb00a2867d3f9e36d59c07581a60259499044890ee013584a1634ea572849114136c57503c24cbee0cce4695119ba66775decc855e29c4e2e3d74b8bce038baee16832ac50004052cbaba3a46c0cfad739c3c637f7f108bdfe591cdd75fa483d87d08897b561d6a85fa647556a6be8582a5853a15d22e72425476175e5721acbe5d2d691037482790ddae5415a5af7d60dae02d54509401ac2ffa8a10e1b3ef30cb616f9ad2fd4e47c76804548f7f9aceef5519d6974206f9a4d0809de3e8c45a8442fce5c763bd174ab5108fc865c2a81acfa03698f73ee338f3fbedf3292739673f13c160cad4e1aa66cebc539bd76e67662f461f47f5ca50259c072dc58c54bea7a558559a465b2632e157175b8642540eb178c82c1c8f35f1aaa3c662e23d72dd2b47d11db8c9ae1e596aeae916b1a1f4649cfb04bd2ce9853cacb07554ca74ce789a7de6dfdcf37f1ba8bdf7b73ab08ec5b2ec806c7b28290094d248dbeba5d46502cb76f30145b9cdfe263b0b0f8b929fe780a125320ae3e0a0755064fdbf3ee9509b43ff423e58de3dc1909664c07ad0d0b5184484bf334ecfe525c4d3d8553a8003f33369e1aa027534d6fc60db15c615b8d01d46ea9cef8512800639d8d8221657787cacfde63e0555e8e3c764a8f486c8e5728f4eff9b6f2f33f07ce55342b772c9794d15d24e26f37a491c934a6356907ee5534b9c832d7d9cc1e077b1a41a63a754848de66ce9b5ab3db842af1caf5f1f1b28be17561996bf5c29b0188e04678d9692b7048e989aef9024561b941245e7d50514125e5275d859e49b5eb53ba27a2639f70d095e90462f257773612f386d2e1ca1f3dfccf279346744e8e699bcdffdc64b9daaa6972b827c302ed3451613c119462010f637377c31d5009652343f81f21674450a5adbd7c2ea7794dbfce9622cb6e715be767c8eacf7eb4fd0e4ba34ff3ef98a0f8f92a961004bd4b9908fd328fbbf816229c8bf697964911c33236617ab6fe396439802bbcf02ee0444d9cad12305448527029740e4cdb93bcef076503da315311eaca4cb5d12a7a34b8475a9379fe32fdae2bb048e02e54653deb6accb4ff112ad086ba13581883b6c6a9109651e7450d289f5b1fb4f94d4031c2665edce971e7f596776f9504f270b9660cf86b2e281b1b228f75379ecf4ed1ac98f7bd2ceb1ee4d36c15aba94c4839834766f831437142c9aeddd2ccbb6c98eb8445f835af71878bb88760651bec5c95f23b7f63171097968f5496b76a462deed7f379f9b0bef5de92e36499d8156f16c6b875311058fbfa64c81631202b2ccb665abd29fc3b62db74f2bbdae3c6151255d183f8e5c486b8e4f35754e9020939128e2c9bda7ad24c84afc095c11cd685570fb8c0068f6b895b1faa8638948342bf939f1330625bd7757bbb5ae6e44137525937c630a66d3808d1097a2aba68eee57534a052806c753962a4428ae2661259149bad50392b342347967a7efb3d9178eef9313da39c6415a6aefc66dc985ab7555793dc6526fd64cca3c07c1f084e37691c4e9e60c0acecc41c6d07d73c27e151c0ef04c4eb03dae72fed5086bd82cc26cdc6cd9d241d4ed9cf9cc2ac5d4a7665ba59ce1a664a26b91040ac93c5c5c1638468ecc50999dbf10dd8dcc9c47d4018195f210d43932848ceb75400b8d3b537890a1b14bbed51dcff2925a6fd0e968598b9f823cfa94fc3812475b0c5f1770fab2e61587dad7ce7e08ca64b3f1bcd758f3cfe4df29669d4b926b80514f5a6be540966b44ce7b80398f845062ba60d2e04fbfa982a45a6f330b9683188902b41f1d8bf29d003490c8f541433b89b7ea16e4bc2ee0b620dcfacb605bc18c88c1013d4128aba56f0147676becc97eba4a8434184aecc1073628141b955e3fe5d9186aaa4c72f72b336f61df5346663e1b0684f4b4d8b70f4ccf370d245c2a7f39650d21ad54aa5163300b3a31730cd181e0d12d4f63d803c02d31cddf36ec4a8534f2c41c4b1ddb9bbbe02b165fad1bd2d92ac8308e8990f138fdd26ae765c75fd45047e05e1afa9d3f11bff8d83ff39ad69cc7b5dde69ca24a8ba95bd9281548eba472b7faf8730af299d11d146b82df673c23ef8ee0c02129f4bd2d33a160e476e40faf42c8579cd6e913c271bdbae1cf0646161aeb1b0ce34b92472d29100ca5701365d739f3861ce13807e44de62af3ad69d45e2b5f6a06179571d6cca29ab3c48c6953a9012cd646dd2db4170d745d019637d1315769b9bae0b420e577e43bc73a4df85428c2fbd6826fa8d36579457b65012ff3744bcb020d85d234cd91651bacfb7c3c4d3990e7d5339571cbc8f44a10b450a6eedadad7eaee1a8a8bc124f4bb5705b5226eafe39f9764d2519ffe62c9167c116aa5d7c3a22b9b3313bda7b300c44b4d45e2b8096b562d558ad36ed4ac96908bb97d8c042a2bd0f502506743669a07a2c4299c06a67f20708e70fe8896292cad64140f0d530d696081bb15e60884892cafe0feb7b1496517a2e27a78f4d3d8854cd4885c292f4fad11337260b791c4f008daff7596021816916998450240506c362ba8643c4466fbbed0ddd9b2f1af25e9cd72d07c496383a3fb9e73a95b82ba464cbf41d73e7d1e82e2b4e37cdb064cb190e94e1b536e81c85823fb70ccf252b35bce8269aae8ab978496d16e021154944d411c45490f8a2ed476213a8db1ad0947f4f14396c01e32ccf63562bc69bfa8363236c4b46cc4c510054d3f98280ceb5a82cb88fdc74abb7a0aa8bf3c0da744ca07b716f891c95e2a329c67e98b5a9a0519c53dc780ac9eefe08071f140f1fef978b6459d28b286e3319492ca621b62f16b69e5ed5b6b05b373b2a4d137083910043a13b2aa85435ad5ee26870e1a1dd8ded11298bf2c778732c26952eed3127bf64854f16f3347f7c03a16857861a24356a8c16f2a3d6f7d1e0afcfd48d36728b5797140bfe9db260", 0x95a) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[], 0x220}, 0x1, 0x0, 0x0, 0x20004094}, 0x20040811) 0s ago: executing program 9 (id=12496): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) kernel console output (not intermixed with test programs): /0x30 [ 797.247880][ T6906] dump_stack_lvl+0xe8/0x140 [ 797.247965][ T6906] dump_stack+0x15/0x1b [ 797.247986][ T6906] should_fail_ex+0x265/0x280 [ 797.248011][ T6906] should_fail+0xb/0x20 [ 797.248032][ T6906] should_fail_usercopy+0x1a/0x20 [ 797.248096][ T6906] _copy_to_user+0x20/0xa0 [ 797.248127][ T6906] simple_read_from_buffer+0xb5/0x130 [ 797.248181][ T6906] proc_fail_nth_read+0x10e/0x150 [ 797.248216][ T6906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 797.248248][ T6906] vfs_read+0x1a8/0x770 [ 797.248278][ T6906] ? __rcu_read_unlock+0x4f/0x70 [ 797.248344][ T6906] ? __fget_files+0x184/0x1c0 [ 797.248447][ T6906] ksys_read+0xda/0x1a0 [ 797.248479][ T6906] __x64_sys_read+0x40/0x50 [ 797.248505][ T6906] x64_sys_call+0x27c0/0x3000 [ 797.248545][ T6906] do_syscall_64+0xd2/0x200 [ 797.248570][ T6906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 797.248599][ T6906] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 797.248748][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.248775][ T6906] RIP: 0033:0x7fb3307fe0dc [ 797.248794][ T6906] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 797.248880][ T6906] RSP: 002b:00007fb32f267030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 797.248916][ T6906] RAX: ffffffffffffffda RBX: 00007fb330a55fa0 RCX: 00007fb3307fe0dc [ 797.248933][ T6906] RDX: 000000000000000f RSI: 00007fb32f2670a0 RDI: 0000000000000005 [ 797.248947][ T6906] RBP: 00007fb32f267090 R08: 0000000000000000 R09: 0000000000000000 [ 797.248960][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.248976][ T6906] R13: 00007fb330a56038 R14: 00007fb330a55fa0 R15: 00007ffe6f172cf8 [ 797.248999][ T6906] [ 797.469526][ T6908] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 797.477234][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.486687][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.590270][ T6923] loop3: detected capacity change from 0 to 128 [ 797.596787][ T6923] EXT4-fs: Ignoring removed nobh option [ 797.646566][ T6932] loop9: detected capacity change from 0 to 1024 [ 797.654438][ T6932] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 797.665348][ T6932] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 797.673717][ T6932] EXT4-fs (loop9): failed to initialize system zone (-117) [ 797.681144][ T6932] EXT4-fs (loop9): mount failed [ 797.692663][ T6932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6932 comm=syz.9.11705 [ 797.720019][ T6936] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 797.727920][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.737284][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.760185][ T6938] loop2: detected capacity change from 0 to 512 [ 797.767586][ T6938] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 797.793030][ T6938] loop2: detected capacity change from 0 to 512 [ 797.799691][ T6938] EXT4-fs: inline encryption not supported [ 797.805764][ T6938] EXT4-fs: Ignoring removed bh option [ 797.811291][ T6938] EXT4-fs: Ignoring removed mblk_io_submit option [ 797.818405][ T6938] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 797.828544][ T6938] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 798.071120][ T6955] loop5: detected capacity change from 0 to 128 [ 798.077824][ T6955] EXT4-fs: Ignoring removed nobh option [ 798.123184][ T6960] loop5: detected capacity change from 0 to 1024 [ 798.136391][ T6960] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 798.146938][ T6960] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 798.155401][ T6960] EXT4-fs (loop5): failed to initialize system zone (-117) [ 798.162804][ T6960] EXT4-fs (loop5): mount failed [ 798.183970][ T6965] FAULT_INJECTION: forcing a failure. [ 798.183970][ T6965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.197104][ T6965] CPU: 1 UID: 0 PID: 6965 Comm: syz.1.11718 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 798.197138][ T6965] Tainted: [W]=WARN [ 798.197146][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 798.197159][ T6965] Call Trace: [ 798.197165][ T6965] [ 798.197172][ T6965] __dump_stack+0x1d/0x30 [ 798.197216][ T6965] dump_stack_lvl+0xe8/0x140 [ 798.197316][ T6965] dump_stack+0x15/0x1b [ 798.197341][ T6965] should_fail_ex+0x265/0x280 [ 798.197398][ T6965] should_fail+0xb/0x20 [ 798.197414][ T6965] should_fail_usercopy+0x1a/0x20 [ 798.197436][ T6965] _copy_from_user+0x1c/0xb0 [ 798.197561][ T6965] ___sys_sendmsg+0xc1/0x1d0 [ 798.197593][ T6965] __x64_sys_sendmsg+0xd4/0x160 [ 798.197619][ T6965] x64_sys_call+0x191e/0x3000 [ 798.197660][ T6965] do_syscall_64+0xd2/0x200 [ 798.197680][ T6965] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 798.197712][ T6965] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 798.197788][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.197812][ T6965] RIP: 0033:0x7f9c3d22f6c9 [ 798.197903][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.197925][ T6965] RSP: 002b:00007f9c3bc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.197955][ T6965] RAX: ffffffffffffffda RBX: 00007f9c3d485fa0 RCX: 00007f9c3d22f6c9 [ 798.197969][ T6965] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 798.197983][ T6965] RBP: 00007f9c3bc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 798.198012][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.198025][ T6965] R13: 00007f9c3d486038 R14: 00007f9c3d485fa0 R15: 00007ffcbcf44f68 [ 798.198118][ T6965] [ 798.203113][ T6967] siw: device registration error -23 [ 798.422619][ T6982] loop3: detected capacity change from 0 to 1024 [ 798.429131][ T6981] loop5: detected capacity change from 0 to 1024 [ 798.435858][ T6981] EXT4-fs: Ignoring removed orlov option [ 798.452206][ T6982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 798.474473][ T6989] loop1: detected capacity change from 0 to 128 [ 798.484519][ T6982] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11723: bg 0: block 88: padding at end of block bitmap is not set [ 798.499497][ T6989] EXT4-fs: Ignoring removed nobh option [ 798.514439][ T6992] loop2: detected capacity change from 0 to 128 [ 798.522091][ T6992] EXT4-fs: Ignoring removed nobh option [ 798.545315][ T6996] loop1: detected capacity change from 0 to 1024 [ 798.552332][ T6996] EXT4-fs: Ignoring removed orlov option [ 798.577358][ T6999] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 798.642540][ T7001] loop2: detected capacity change from 0 to 1024 [ 798.763792][ T7001] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 798.766548][ T7006] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1536) ! [ 798.784902][ T7001] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 798.793025][ T7001] EXT4-fs (loop2): failed to initialize system zone (-117) [ 798.806404][ T7001] EXT4-fs (loop2): mount failed [ 798.951903][ T7024] loop2: detected capacity change from 0 to 128 [ 798.961714][ T7024] EXT4-fs: Ignoring removed nobh option [ 799.017385][ T7038] IPv6: NLM_F_CREATE should be specified when creating new route [ 799.037155][ T7040] loop2: detected capacity change from 0 to 1024 [ 799.044144][ T7040] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 799.054494][ T7040] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 799.062715][ T7040] EXT4-fs (loop2): failed to initialize system zone (-117) [ 799.069929][ T7040] EXT4-fs (loop2): mount failed [ 799.110649][ T7049] loop2: detected capacity change from 0 to 512 [ 799.122852][ T7049] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.11745: inode has both inline data and extents flags [ 799.141619][ T7053] loop3: detected capacity change from 0 to 1024 [ 799.148756][ T7049] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.11745: couldn't read orphan inode 15 (err -117) [ 799.157222][ T7053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 799.173244][ T7049] rdma_op ffff88817fb5b980 conn xmit_rdma 0000000000000000 [ 799.216840][ T7061] loop2: detected capacity change from 0 to 1024 [ 799.228444][ T7063] __nla_validate_parse: 20 callbacks suppressed [ 799.228461][ T7063] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11749'. [ 799.235739][ T7061] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 799.256072][ T7061] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11747: bg 0: block 88: padding at end of block bitmap is not set [ 799.273945][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11750'. [ 799.293666][ T7070] loop3: detected capacity change from 0 to 128 [ 799.300412][ T7070] EXT4-fs: Ignoring removed nobh option [ 799.346782][ T7076] loop1: detected capacity change from 0 to 1024 [ 799.353810][ T7076] EXT4-fs: Ignoring removed orlov option [ 799.455498][ T7086] loop3: detected capacity change from 0 to 512 [ 799.483507][ T7087] loop5: detected capacity change from 0 to 1024 [ 799.491846][ T7087] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 799.501647][ T7088] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 799.515236][ T7086] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 799.523530][ T7086] System zones: 0-2, 18-18, 34-34 [ 799.529001][ T7087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 799.537778][ T7087] EXT4-fs (loop5): failed to initialize system zone (-117) [ 799.545911][ T7086] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11755: bg 0: block 248: padding at end of block bitmap is not set [ 799.553986][ T7087] EXT4-fs (loop5): mount failed [ 799.560897][ T7086] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.11755: Failed to acquire dquot type 1 [ 799.618361][ T7086] EXT4-fs (loop3): 1 truncate cleaned up [ 799.642726][ T7081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11755'. [ 799.652781][ T7096] IPv6: NLM_F_CREATE should be specified when creating new route [ 799.680025][ T7098] loop5: detected capacity change from 0 to 512 [ 799.687322][ T7096] FAULT_INJECTION: forcing a failure. [ 799.687322][ T7096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.700412][ T7096] CPU: 1 UID: 0 PID: 7096 Comm: syz.2.11757 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 799.700457][ T7096] Tainted: [W]=WARN [ 799.700465][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 799.700478][ T7096] Call Trace: [ 799.700485][ T7096] [ 799.700493][ T7096] __dump_stack+0x1d/0x30 [ 799.700518][ T7096] dump_stack_lvl+0xe8/0x140 [ 799.700608][ T7096] dump_stack+0x15/0x1b [ 799.700631][ T7096] should_fail_ex+0x265/0x280 [ 799.700655][ T7096] should_fail+0xb/0x20 [ 799.700673][ T7096] should_fail_usercopy+0x1a/0x20 [ 799.700696][ T7096] _copy_to_user+0x20/0xa0 [ 799.700750][ T7096] simple_read_from_buffer+0xb5/0x130 [ 799.700858][ T7096] proc_fail_nth_read+0x10e/0x150 [ 799.700954][ T7096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 799.700985][ T7096] vfs_read+0x1a8/0x770 [ 799.701012][ T7096] ? vt_ioctl+0x107a/0x18a0 [ 799.701036][ T7096] ? __rcu_read_unlock+0x4f/0x70 [ 799.701063][ T7096] ? __fget_files+0x184/0x1c0 [ 799.701173][ T7096] ksys_read+0xda/0x1a0 [ 799.701204][ T7096] __x64_sys_read+0x40/0x50 [ 799.701230][ T7096] x64_sys_call+0x27c0/0x3000 [ 799.701254][ T7096] do_syscall_64+0xd2/0x200 [ 799.701336][ T7096] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 799.701382][ T7096] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 799.701416][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.701507][ T7096] RIP: 0033:0x7f1c3853e0dc [ 799.701523][ T7096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 799.701576][ T7096] RSP: 002b:00007f1c36fa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 799.701597][ T7096] RAX: ffffffffffffffda RBX: 00007f1c38795fa0 RCX: 00007f1c3853e0dc [ 799.701612][ T7096] RDX: 000000000000000f RSI: 00007f1c36fa70a0 RDI: 0000000000000006 [ 799.701625][ T7096] RBP: 00007f1c36fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 799.701696][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.701710][ T7096] R13: 00007f1c38796038 R14: 00007f1c38795fa0 R15: 00007ffe80062878 [ 799.701729][ T7096] [ 799.928653][ T7098] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.11758: inode has both inline data and extents flags [ 799.955698][ T7098] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.11758: couldn't read orphan inode 15 (err -117) [ 799.975677][ T29] kauditd_printk_skb: 2077 callbacks suppressed [ 799.975694][ T29] audit: type=1400 audit(783.405:56058): avc: denied { append } for pid=7097 comm="syz.5.11758" path="/120/file0/cpu.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 800.005153][ T29] audit: type=1400 audit(783.414:56059): avc: denied { nlmsg_write } for pid=7107 comm="syz.9.11762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 800.025507][ T29] audit: type=1400 audit(783.414:56060): avc: denied { create } for pid=7107 comm="syz.9.11762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.044638][ T29] audit: type=1400 audit(783.414:56061): avc: denied { read } for pid=7107 comm="syz.9.11762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.063564][ T29] audit: type=1400 audit(783.414:56062): avc: denied { connect } for pid=7107 comm="syz.9.11762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.082696][ T29] audit: type=1400 audit(783.414:56063): avc: denied { name_connect } for pid=7107 comm="syz.9.11762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 800.102520][ T29] audit: type=1400 audit(783.414:56064): avc: denied { write } for pid=7107 comm="syz.9.11762" lport=55122 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.123752][ T29] audit: type=1400 audit(783.414:56065): avc: denied { shutdown } for pid=7107 comm="syz.9.11762" lport=55122 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.145183][ T29] audit: type=1400 audit(783.414:56066): avc: denied { setopt } for pid=7107 comm="syz.9.11762" lport=55122 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.166479][ T29] audit: type=1400 audit(783.414:56067): avc: denied { getopt } for pid=7107 comm="syz.9.11762" lport=55122 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.189492][ T7116] loop9: detected capacity change from 0 to 128 [ 800.195769][ T7117] rdma_op ffff888125a0c180 conn xmit_rdma 0000000000000000 [ 800.196227][ T7116] EXT4-fs: Ignoring removed nobh option [ 800.287987][ T7132] loop5: detected capacity change from 0 to 1024 [ 800.315360][ T7133] netlink: 16 bytes leftover after parsing attributes in process `syz.9.11767'. [ 800.332198][ T7123] loop3: detected capacity change from 0 to 1024 [ 800.345570][ T7132] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 800.382319][ T7132] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 800.393163][ T7123] EXT4-fs: Ignoring removed bh option [ 800.401080][ T7123] EXT4-fs: inline encryption not supported [ 800.407383][ T7123] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 800.420029][ T7132] EXT4-fs (loop5): failed to initialize system zone (-117) [ 800.435235][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11770'. [ 800.449620][ T7132] EXT4-fs (loop5): mount failed [ 800.484837][ T7123] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 800.525899][ T7123] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.11766: lblock 2 mapped to illegal pblock 2 (length 1) [ 800.565710][ T7150] FAULT_INJECTION: forcing a failure. [ 800.565710][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 800.578486][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.2.11774 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 800.578674][ T7150] Tainted: [W]=WARN [ 800.578682][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 800.578694][ T7150] Call Trace: [ 800.578701][ T7150] [ 800.578708][ T7150] __dump_stack+0x1d/0x30 [ 800.578733][ T7150] dump_stack_lvl+0xe8/0x140 [ 800.578822][ T7150] dump_stack+0x15/0x1b [ 800.578840][ T7150] should_fail_ex+0x265/0x280 [ 800.578861][ T7150] should_failslab+0x8c/0xb0 [ 800.578896][ T7150] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 800.578938][ T7150] ? __alloc_skb+0x101/0x320 [ 800.579019][ T7150] __alloc_skb+0x101/0x320 [ 800.579050][ T7150] ? audit_log_start+0x342/0x720 [ 800.579076][ T7150] audit_log_start+0x3a0/0x720 [ 800.579127][ T7150] ? kstrtouint+0x76/0xc0 [ 800.579163][ T7150] audit_seccomp+0x48/0x100 [ 800.579202][ T7150] ? __seccomp_filter+0x82d/0x1250 [ 800.579289][ T7150] __seccomp_filter+0x83e/0x1250 [ 800.579319][ T7150] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 800.579398][ T7150] ? vfs_write+0x7e8/0x960 [ 800.579431][ T7150] __secure_computing+0x82/0x150 [ 800.579459][ T7150] syscall_trace_enter+0xcf/0x1e0 [ 800.579561][ T7150] do_syscall_64+0xac/0x200 [ 800.579582][ T7150] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 800.579611][ T7150] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 800.579704][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.579730][ T7150] RIP: 0033:0x7f1c3853f6c9 [ 800.579745][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.579764][ T7150] RSP: 002b:00007f1c36fa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 800.579786][ T7150] RAX: ffffffffffffffda RBX: 00007f1c38795fa0 RCX: 00007f1c3853f6c9 [ 800.579800][ T7150] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000006 [ 800.579863][ T7150] RBP: 00007f1c36fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 800.579875][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.579888][ T7150] R13: 00007f1c38796038 R14: 00007f1c38795fa0 R15: 00007ffe80062878 [ 800.579910][ T7150] [ 800.588417][ T7148] lo speed is unknown, defaulting to 1000 [ 800.599853][ T7123] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.11766: lblock 0 mapped to illegal pblock 48 (length 1) [ 800.636141][ T7148] lo speed is unknown, defaulting to 1000 [ 800.826146][ T7123] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.11766: Failed to acquire dquot type 0 [ 800.840334][ T7123] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 800.858215][ T7123] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.11766: mark_inode_dirty error [ 800.897104][ T7123] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 800.919094][ T7123] EXT4-fs (loop3): 1 orphan inode deleted [ 800.943831][T11803] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 800.970214][ T7160] loop1: detected capacity change from 0 to 128 [ 800.983294][T11803] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:18: Failed to release dquot type 0 [ 800.995529][ T7160] EXT4-fs: Ignoring removed nobh option [ 801.025764][ T7162] loop2: detected capacity change from 0 to 512 [ 801.035760][ T4382] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 801.051420][ T7152] loop5: detected capacity change from 0 to 2048 [ 801.064764][ T4382] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 801.082716][ T7162] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.11778: inode has both inline data and extents flags [ 801.100763][ T4382] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 801.123112][ T7162] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.11778: couldn't read orphan inode 15 (err -117) [ 801.154048][ T7162] rdma_op ffff888130224180 conn xmit_rdma 0000000000000000 [ 801.195573][ T7171] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 801.262038][ T7175] loop2: detected capacity change from 0 to 1024 [ 801.273768][ T7171] bond0 (unregistering): Released all slaves [ 801.329311][ T7175] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 801.383429][ T7175] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 801.395420][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.402624][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.402695][ T7175] EXT4-fs (loop2): failed to initialize system zone (-117) [ 801.436702][ T7175] EXT4-fs (loop2): mount failed [ 801.459105][ T7177] $Hÿ: left promiscuous mode [ 801.460443][ T7175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7175 comm=syz.2.11781 [ 801.463903][ T7177] bond_slave_0: left promiscuous mode [ 801.464005][ T7177] bond_slave_1: left promiscuous mode [ 801.537694][ T7177] wg2: left promiscuous mode [ 801.579441][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11783'. [ 801.640142][T11803] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.649060][T11803] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.658016][T11803] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.676213][T11803] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.738058][ T7204] loop3: detected capacity change from 0 to 128 [ 801.744678][ T7204] EXT4-fs: Ignoring removed nobh option [ 801.751215][ T7200] loop1: detected capacity change from 0 to 1024 [ 801.804285][ T7200] EXT4-fs: Ignoring removed orlov option [ 801.814519][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11791'. [ 801.923439][ T7207] siw: device registration error -23 [ 802.026681][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11792'. [ 802.068413][ T7211] siw: device registration error -23 [ 802.264938][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11797'. [ 802.343608][ T7224] loop3: detected capacity change from 0 to 1024 [ 802.357460][ T7224] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 802.388808][ T7224] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 802.407452][ T7224] EXT4-fs (loop3): failed to initialize system zone (-117) [ 802.430498][ T7224] EXT4-fs (loop3): mount failed [ 802.454123][ T7224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7224 comm=syz.3.11798 [ 802.535302][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11800'. [ 802.566177][ T7236] syz_tun: entered allmulticast mode [ 802.583271][ T7234] syz_tun: left allmulticast mode [ 802.596538][ T7238] loop9: detected capacity change from 0 to 1024 [ 802.603777][ T7238] EXT4-fs: Ignoring removed orlov option [ 802.686695][ T7242] siw: device registration error -23 [ 803.036830][ T7263] loop1: detected capacity change from 0 to 128 [ 803.043593][ T7263] EXT4-fs: Ignoring removed nobh option [ 803.050728][ T7265] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 803.058170][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.066715][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.257560][ T7295] loop2: detected capacity change from 0 to 1024 [ 803.264765][ T7295] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 803.275315][ T7295] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 803.283582][ T7295] EXT4-fs (loop2): failed to initialize system zone (-117) [ 803.291182][ T7295] EXT4-fs (loop2): mount failed [ 803.380174][ T7303] loop2: detected capacity change from 0 to 128 [ 803.386864][ T7303] EXT4-fs: Ignoring removed nobh option [ 803.648674][T11851] bridge_slave_1: left allmulticast mode [ 803.654365][T11851] bridge_slave_1: left promiscuous mode [ 803.660126][T11851] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.667903][T11851] bridge_slave_0: left allmulticast mode [ 803.673577][T11851] bridge_slave_0: left promiscuous mode [ 803.679335][T11851] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.885364][T11851] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.894563][T11851] bond_slave_0: left promiscuous mode [ 803.905355][T11851] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.914530][T11851] bond_slave_1: left promiscuous mode [ 803.926667][T11851] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 803.935673][T11851] dummy0: left promiscuous mode [ 803.941301][T11851] $Hÿ (unregistering): Released all slaves [ 803.962324][T11851] bond1 (unregistering): (slave gretap1): Releasing active interface [ 804.115723][ T7353] FAULT_INJECTION: forcing a failure. [ 804.115723][ T7353] name failslab, interval 1, probability 0, space 0, times 0 [ 804.128379][ T7353] CPU: 0 UID: 0 PID: 7353 Comm: syz.1.11838 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 804.128484][ T7353] Tainted: [W]=WARN [ 804.128488][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 804.128496][ T7353] Call Trace: [ 804.128501][ T7353] [ 804.128527][ T7353] __dump_stack+0x1d/0x30 [ 804.128545][ T7353] dump_stack_lvl+0xe8/0x140 [ 804.128558][ T7353] dump_stack+0x15/0x1b [ 804.128650][ T7353] should_fail_ex+0x265/0x280 [ 804.128665][ T7353] ? ucma_alloc_ctx+0x30/0x1b0 [ 804.128697][ T7353] should_failslab+0x8c/0xb0 [ 804.128715][ T7353] __kmalloc_cache_noprof+0x4c/0x4a0 [ 804.128813][ T7353] ? should_fail_ex+0xdb/0x280 [ 804.128825][ T7353] ucma_alloc_ctx+0x30/0x1b0 [ 804.128851][ T7353] ucma_create_id+0x13f/0x250 [ 804.128867][ T7353] ucma_write+0x1b3/0x250 [ 804.128882][ T7353] ? __pfx_ucma_write+0x10/0x10 [ 804.128983][ T7353] vfs_write+0x269/0x960 [ 804.129009][ T7353] ? __rcu_read_unlock+0x4f/0x70 [ 804.129026][ T7353] ? __fget_files+0x184/0x1c0 [ 804.129119][ T7353] ksys_write+0xda/0x1a0 [ 804.129138][ T7353] __x64_sys_write+0x40/0x50 [ 804.129170][ T7353] x64_sys_call+0x2802/0x3000 [ 804.129191][ T7353] do_syscall_64+0xd2/0x200 [ 804.129204][ T7353] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 804.129285][ T7353] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 804.129305][ T7353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.129319][ T7353] RIP: 0033:0x7f9c3d22f6c9 [ 804.129355][ T7353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.129374][ T7353] RSP: 002b:00007f9c3bc8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 804.129393][ T7353] RAX: ffffffffffffffda RBX: 00007f9c3d485fa0 RCX: 00007f9c3d22f6c9 [ 804.129413][ T7353] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000003 [ 804.129428][ T7353] RBP: 00007f9c3bc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 804.129440][ T7353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.129498][ T7353] R13: 00007f9c3d486038 R14: 00007f9c3d485fa0 R15: 00007ffcbcf44f68 [ 804.129518][ T7353] [ 804.400053][ T7359] loop1: detected capacity change from 0 to 1024 [ 804.406882][ T7359] EXT4-fs: Ignoring removed orlov option [ 804.412741][ T7355] loop2: detected capacity change from 0 to 8192 [ 804.422042][ T7355] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 804.434850][ T7355] netlink: 'syz.2.11839': attribute type 39 has an invalid length. [ 804.521050][T11851] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.530440][T11851] bond_slave_0: left promiscuous mode [ 804.539383][T11851] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.549467][T11851] bond_slave_1: left promiscuous mode [ 804.557513][T11851] $Hÿ (unregistering): Released all slaves [ 804.570036][T11851] bond1 (unregistering): Released all slaves [ 804.589133][ T7363] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 804.638913][T11851] tipc: Left network mode [ 804.676264][ T7369] loop3: detected capacity change from 0 to 1024 [ 804.686550][ T7369] EXT4-fs: Ignoring removed orlov option [ 804.723589][T11851] hsr_slave_0: left promiscuous mode [ 804.734356][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.741997][T11851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.760380][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.767896][T11851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.783278][ T7376] loop9: detected capacity change from 0 to 1024 [ 804.793120][ T7376] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 804.805002][T11851] hsr_slave_0: left promiscuous mode [ 804.805166][ T7376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 804.818483][ T7376] EXT4-fs (loop9): failed to initialize system zone (-117) [ 804.826020][ T7376] EXT4-fs (loop9): mount failed [ 804.831448][T11851] hsr_slave_1: left promiscuous mode [ 804.846063][T11851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.853492][T11851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.872072][ T7380] __nla_validate_parse: 16 callbacks suppressed [ 804.872085][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11847'. [ 804.877125][ T7376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7376 comm=syz.9.11846 [ 804.878664][ T7380] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11847'. [ 804.910125][T11851] veth1_macvtap: left promiscuous mode [ 804.920582][T11851] veth0_macvtap: left promiscuous mode [ 804.926349][T11851] veth1_vlan: left promiscuous mode [ 804.939348][ T7386] siw: device registration error -23 [ 804.942496][T11851] veth0_vlan: left promiscuous mode [ 804.958257][T11851] veth1_macvtap: left promiscuous mode [ 804.973734][T11851] veth0_macvtap: left promiscuous mode [ 804.979358][T11851] veth1_vlan: left promiscuous mode [ 804.989404][T11851] veth0_vlan: left promiscuous mode [ 804.994869][ T7389] loop1: detected capacity change from 0 to 1024 [ 805.001518][ T7389] EXT4-fs: Ignoring removed orlov option [ 805.123053][T11851] team0 (unregistering): Port device team_slave_0 removed [ 805.216648][T11851] team0 (unregistering): Port device team_slave_0 removed [ 805.224844][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11854'. [ 805.264717][T11851] team0 (unregistering): Port device dummy0 removed [ 805.279209][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11845'. [ 805.288418][ T3719] infiniband syz1: ib_query_port failed (-19) [ 805.296246][ T7402] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 805.310863][ T7401] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 805.348602][ T29] kauditd_printk_skb: 1284 callbacks suppressed [ 805.348618][ T29] audit: type=1400 audit(788.437:57347): avc: denied { read } for pid=7409 comm="syz.3.11855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 805.351680][ T7410] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 805.416625][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.425277][ T29] audit: type=1400 audit(788.494:57348): avc: denied { read write } for pid=7409 comm="syz.3.11855" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 805.448472][ T29] audit: type=1400 audit(788.494:57349): avc: denied { open } for pid=7409 comm="syz.3.11855" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 805.455952][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.471563][ T29] audit: type=1400 audit(788.494:57350): avc: denied { ioctl } for pid=7409 comm="syz.3.11855" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 805.480518][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11858'. [ 805.521301][ T29] audit: type=1400 audit(788.596:57351): avc: denied { read write } for pid=7417 comm="syz.1.11860" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 805.545221][ T29] audit: type=1400 audit(788.596:57352): avc: denied { open } for pid=7417 comm="syz.1.11860" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 805.568870][ T29] audit: type=1400 audit(788.596:57353): avc: denied { ioctl } for pid=7417 comm="syz.1.11860" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 805.596432][ T7412] loop9: detected capacity change from 0 to 4096 [ 805.610762][ T29] audit: type=1400 audit(788.596:57354): avc: denied { setopt } for pid=7413 comm="syz.5.11858" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 805.658515][ T29] audit: type=1400 audit(788.718:57355): avc: denied { create } for pid=7420 comm="syz.1.11861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 805.672889][ T7414] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 805.677619][ T29] audit: type=1400 audit(788.718:57356): avc: denied { ioctl } for pid=7420 comm="syz.1.11861" path="socket:[128393]" dev="sockfs" ino=128393 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 805.711779][ T7425] FAULT_INJECTION: forcing a failure. [ 805.711779][ T7425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.724929][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz.2.11862 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 805.724966][ T7425] Tainted: [W]=WARN [ 805.724973][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.724987][ T7425] Call Trace: [ 805.724995][ T7425] [ 805.725019][ T7425] __dump_stack+0x1d/0x30 [ 805.725055][ T7425] dump_stack_lvl+0xe8/0x140 [ 805.725079][ T7425] dump_stack+0x15/0x1b [ 805.725176][ T7425] should_fail_ex+0x265/0x280 [ 805.725199][ T7425] should_fail+0xb/0x20 [ 805.725295][ T7425] should_fail_usercopy+0x1a/0x20 [ 805.725389][ T7425] _copy_from_user+0x1c/0xb0 [ 805.725418][ T7425] get_sg_io_hdr+0x82/0x360 [ 805.725439][ T7425] ? path_openat+0x1bf8/0x2170 [ 805.725462][ T7425] ? __rcu_read_unlock+0x4f/0x70 [ 805.725494][ T7425] sg_new_write+0xc3/0x890 [ 805.725605][ T7425] ? do_vfs_ioctl+0x866/0xe10 [ 805.725634][ T7425] sg_ioctl+0xb81/0x1360 [ 805.725717][ T7425] ? __pfx_sg_ioctl+0x10/0x10 [ 805.725826][ T7425] __se_sys_ioctl+0xce/0x140 [ 805.725847][ T7425] __x64_sys_ioctl+0x43/0x50 [ 805.725871][ T7425] x64_sys_call+0x1816/0x3000 [ 805.725926][ T7425] do_syscall_64+0xd2/0x200 [ 805.725950][ T7425] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 805.726040][ T7425] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 805.726081][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.726107][ T7425] RIP: 0033:0x7f1c3853f6c9 [ 805.726125][ T7425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.726155][ T7425] RSP: 002b:00007f1c36fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 805.726248][ T7425] RAX: ffffffffffffffda RBX: 00007f1c38795fa0 RCX: 00007f1c3853f6c9 [ 805.726264][ T7425] RDX: 00002000000005c0 RSI: 0000000000002285 RDI: 0000000000000003 [ 805.726278][ T7425] RBP: 00007f1c36fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 805.726291][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.726303][ T7425] R13: 00007f1c38796038 R14: 00007f1c38795fa0 R15: 00007ffe80062878 [ 805.726321][ T7425] [ 805.726969][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11861'. [ 806.132712][ T7445] loop9: detected capacity change from 0 to 1024 [ 806.139592][ T7445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 806.260946][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11869'. [ 806.306688][ T7452] siw: device registration error -23 [ 806.333698][ T7457] loop9: detected capacity change from 0 to 1024 [ 806.340307][ T7457] EXT4-fs: Ignoring removed orlov option [ 806.531372][ T7466] loop2: detected capacity change from 0 to 512 [ 806.539922][ T7466] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.11873: inode has both inline data and extents flags [ 806.553573][ T7466] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.11873: couldn't read orphan inode 15 (err -117) [ 806.570881][ T7466] rdma_op ffff8881589a4580 conn xmit_rdma 0000000000000000 [ 806.572919][ T7469] loop9: detected capacity change from 0 to 1024 [ 806.584871][ T7469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 806.602895][ T7473] loop2: detected capacity change from 0 to 128 [ 806.609470][ T7473] EXT4-fs: Ignoring removed nobh option [ 806.621518][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11874'. [ 806.630507][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11874'. [ 806.917139][ T7480] loop1: detected capacity change from 0 to 1024 [ 806.931564][ T7480] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 806.941146][ T7480] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11878: bg 0: block 88: padding at end of block bitmap is not set [ 806.991770][ T7484] loop5: detected capacity change from 0 to 1024 [ 806.998555][ T7484] EXT4-fs: Ignoring removed nomblk_io_submit option [ 807.205664][ T7494] loop2: detected capacity change from 0 to 1024 [ 807.213083][ T7494] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 807.229057][ T7494] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 807.237293][ T7494] EXT4-fs (loop2): failed to initialize system zone (-117) [ 807.244530][ T7494] EXT4-fs (loop2): mount failed [ 807.259332][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11882'. [ 807.279776][ T7499] loop1: detected capacity change from 0 to 1024 [ 807.286409][ T7499] EXT4-fs: Ignoring removed orlov option [ 807.344455][ T7514] loop2: detected capacity change from 0 to 512 [ 807.352452][ T7514] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 807.380352][ T7519] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 807.397367][ T7514] EXT4-fs (loop2): 1 truncate cleaned up [ 807.461659][ T7529] loop3: detected capacity change from 0 to 1024 [ 807.468430][ T7529] EXT4-fs: Ignoring removed orlov option [ 807.502047][ T7532] loop3: detected capacity change from 0 to 1024 [ 807.519474][ T7532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 807.530018][ T7532] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11893: bg 0: block 88: padding at end of block bitmap is not set [ 807.568681][ T7538] loop1: detected capacity change from 0 to 1024 [ 807.576026][ T7538] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 807.586625][ T7538] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 807.594747][ T7538] EXT4-fs (loop1): failed to initialize system zone (-117) [ 807.602166][ T7538] EXT4-fs (loop1): mount failed [ 807.724422][ T7551] loop1: detected capacity change from 0 to 1024 [ 807.731701][ T7551] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 807.742561][ T7551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 807.751923][ T7551] EXT4-fs (loop1): failed to initialize system zone (-117) [ 807.759314][ T7551] EXT4-fs (loop1): mount failed [ 807.830995][ T7559] loop1: detected capacity change from 0 to 512 [ 807.837980][ T7559] EXT4-fs: Ignoring removed nobh option [ 807.862062][ T7559] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.11901: corrupted inode contents [ 807.874300][ T7559] EXT4-fs (loop1): Remounting filesystem read-only [ 807.881406][ T7559] EXT4-fs (loop1): 1 truncate cleaned up [ 807.897445][ T7563] loop3: detected capacity change from 0 to 512 [ 807.904502][ T7563] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 807.916166][ T7563] EXT4-fs (loop3): 1 truncate cleaned up [ 808.004648][ T7571] loop3: detected capacity change from 0 to 1024 [ 808.011325][ T7571] EXT4-fs: Ignoring removed orlov option [ 808.043620][ T7574] loop2: detected capacity change from 0 to 1024 [ 808.050968][ T7574] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 808.061901][ T7574] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 808.070246][ T7574] EXT4-fs (loop2): failed to initialize system zone (-117) [ 808.077704][ T7574] EXT4-fs (loop2): mount failed [ 808.180163][ T7586] loop5: detected capacity change from 0 to 512 [ 808.194886][ T7586] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.11909: inode has both inline data and extents flags [ 808.209224][ T7586] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.11909: couldn't read orphan inode 15 (err -117) [ 808.229664][ T7586] rdma_op ffff8881589a5580 conn xmit_rdma 0000000000000000 [ 808.236985][ T7591] loop3: detected capacity change from 0 to 1024 [ 808.243696][ T7591] EXT4-fs: Ignoring removed orlov option [ 808.279751][ T7594] loop5: detected capacity change from 0 to 512 [ 808.286747][ T7594] EXT4-fs: Ignoring removed nobh option [ 808.299639][ T7600] loop3: detected capacity change from 0 to 512 [ 808.306161][ T7600] EXT4-fs: Ignoring removed nobh option [ 808.313032][ T7594] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.11912: corrupted inode contents [ 808.321458][ T7600] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.11914: corrupted inode contents [ 808.325190][ T7594] EXT4-fs (loop5): Remounting filesystem read-only [ 808.337173][ T7600] EXT4-fs (loop3): Remounting filesystem read-only [ 808.343790][ T7594] EXT4-fs (loop5): 1 truncate cleaned up [ 808.363544][ T7600] EXT4-fs (loop3): 1 truncate cleaned up [ 808.381514][ T7606] loop9: detected capacity change from 0 to 1024 [ 808.396372][ T7606] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 808.450360][ T7606] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.11915: bg 0: block 88: padding at end of block bitmap is not set [ 809.015173][ T7631] loop1: detected capacity change from 0 to 1024 [ 809.022551][ T7631] EXT4-fs: Ignoring removed orlov option [ 809.435781][ T7643] loop9: detected capacity change from 0 to 512 [ 809.450172][ T7643] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.11924: inode has both inline data and extents flags [ 809.465439][ T7643] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.11924: couldn't read orphan inode 15 (err -117) [ 809.481345][ T7643] rdma_op ffff888103762580 conn xmit_rdma 0000000000000000 [ 809.509108][ T7650] syz_tun: entered allmulticast mode [ 809.514719][ T7651] loop9: detected capacity change from 0 to 1024 [ 809.521527][ T7651] EXT4-fs: Ignoring removed orlov option [ 809.565348][ T7648] syz_tun: left allmulticast mode [ 809.600132][ T7653] lo speed is unknown, defaulting to 1000 [ 809.657386][ T7653] lo speed is unknown, defaulting to 1000 [ 809.696582][ T7655] loop1: detected capacity change from 0 to 1024 [ 809.703780][ T7655] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 809.742807][ T7655] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 809.751570][ T7655] EXT4-fs (loop1): failed to initialize system zone (-117) [ 809.759005][ T7655] EXT4-fs (loop1): mount failed [ 809.866308][ T7664] loop1: detected capacity change from 0 to 1024 [ 809.874015][ T7664] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 809.902803][ T7664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 809.911450][ T7664] EXT4-fs (loop1): failed to initialize system zone (-117) [ 809.918803][ T7664] EXT4-fs (loop1): mount failed [ 810.157477][ T7670] loop5: detected capacity change from 0 to 1024 [ 810.165762][ T7670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 810.182946][ T7670] EXT4-fs mount: 249 callbacks suppressed [ 810.182961][ T7670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.214500][ T7674] loop2: detected capacity change from 0 to 1024 [ 810.230619][ T7674] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 810.239551][ T7674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.253227][ T7674] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11935: bg 0: block 88: padding at end of block bitmap is not set [ 810.282574][ T4795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.301224][ T7678] loop5: detected capacity change from 0 to 512 [ 810.308015][ T7678] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 810.320092][ T7678] EXT4-fs (loop5): 1 truncate cleaned up [ 810.331714][ T7678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.393601][ T4795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.447308][ T7686] loop5: detected capacity change from 0 to 1024 [ 810.454760][ T7686] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 810.465274][ T7686] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 810.473408][ T7686] EXT4-fs (loop5): failed to initialize system zone (-117) [ 810.480949][ T7686] EXT4-fs (loop5): mount failed [ 810.522668][ T7691] loop5: detected capacity change from 0 to 1024 [ 810.529341][ T7691] EXT4-fs: Ignoring removed orlov option [ 810.538574][ T7691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.570563][ T4795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.594506][ T7695] loop5: detected capacity change from 0 to 1024 [ 810.612079][ T7695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.627715][ T3710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.653290][ T7699] $Hÿ: renamed from bond0 (while UP) [ 810.660933][ T7695] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.11941: Allocating blocks 449-513 which overlap fs metadata [ 810.661428][ T7699] $Hÿ: entered promiscuous mode [ 810.680001][ T7699] bond_slave_0: entered promiscuous mode [ 810.681780][ T7694] EXT4-fs (loop5): pa ffff888106e25540: logic 48, phys. 177, len 21 [ 810.685859][ T7699] bond_slave_1: entered promiscuous mode [ 810.693733][ T7694] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 810.709649][ T29] kauditd_printk_skb: 1550 callbacks suppressed [ 810.709664][ T29] audit: type=1326 audit(793.432:58901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb330831f85 code=0x7ffc0000 [ 810.726098][ T7699] lo speed is unknown, defaulting to 1000 [ 810.738959][ T29] audit: type=1326 audit(793.432:58902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3307f6567 code=0x7ffc0000 [ 810.767592][ T29] audit: type=1326 audit(793.432:58903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb33079b779 code=0x7ffc0000 [ 810.777103][ T7699] lo speed is unknown, defaulting to 1000 [ 810.790462][ T29] audit: type=1326 audit(793.432:58904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb3307ff6c9 code=0x7ffc0000 [ 810.818923][ T29] audit: type=1326 audit(793.432:58905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb330831f85 code=0x7ffc0000 [ 810.842057][ T29] audit: type=1326 audit(793.432:58906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb330831f85 code=0x7ffc0000 [ 810.865054][ T29] audit: type=1326 audit(793.432:58907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb330831f85 code=0x7ffc0000 [ 810.888010][ T29] audit: type=1326 audit(793.442:58908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb330831f85 code=0x7ffc0000 [ 810.910999][ T29] audit: type=1326 audit(793.442:58909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3307f6567 code=0x7ffc0000 [ 810.933944][ T29] audit: type=1326 audit(793.442:58910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.3.11937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb33079b779 code=0x7ffc0000 [ 810.971991][ T4795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.028939][ T7709] __nla_validate_parse: 12 callbacks suppressed [ 811.028956][ T7709] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11945'. [ 811.068532][ T7717] $Hÿ: entered promiscuous mode [ 811.073633][ T7717] bond_slave_0: entered promiscuous mode [ 811.079385][ T7717] bond_slave_1: entered promiscuous mode [ 811.117650][ T7717] lo speed is unknown, defaulting to 1000 [ 811.141462][ T7721] loop2: detected capacity change from 0 to 1024 [ 811.148646][ T7721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 811.158568][ T7717] lo speed is unknown, defaulting to 1000 [ 811.178528][ T7721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.275360][ T3710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.284578][ T7728] loop3: detected capacity change from 0 to 1024 [ 811.291225][ T7728] EXT4-fs: Ignoring removed orlov option [ 811.305563][ T7728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.332386][ T7731] loop2: detected capacity change from 0 to 512 [ 811.340010][ T7731] EXT4-fs: Ignoring removed nobh option [ 811.340248][ T4382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.366057][ T7731] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.11952: corrupted inode contents [ 811.386378][ T7731] EXT4-fs (loop2): Remounting filesystem read-only [ 811.395290][ T7731] EXT4-fs (loop2): 1 truncate cleaned up [ 811.408555][ T7735] loop3: detected capacity change from 0 to 1024 [ 811.415459][ T7731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.436655][ T7735] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 811.461161][ T7735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.474855][ T3710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.498315][ T7740] loop2: detected capacity change from 0 to 512 [ 811.499291][ T7735] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11953: bg 0: block 88: padding at end of block bitmap is not set [ 811.518389][ T7740] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.11954: inode has both inline data and extents flags [ 811.537110][ T7740] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.11954: couldn't read orphan inode 15 (err -117) [ 811.550988][ T7740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.568174][ T7740] rdma_op ffff8881011e4580 conn xmit_rdma 0000000000000000 [ 811.584767][ T3710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.609453][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11956'. [ 811.827443][ T4382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.844895][ T7752] $Hÿ: entered promiscuous mode [ 811.850344][ T7752] bond_slave_0: entered promiscuous mode [ 811.856467][ T7752] bond_slave_1: entered promiscuous mode [ 811.873952][ T7752] lo speed is unknown, defaulting to 1000 [ 811.902666][ T7752] lo speed is unknown, defaulting to 1000 [ 811.945367][ T7756] netlink: 80 bytes leftover after parsing attributes in process `syz.5.11958'. [ 812.043237][ T7768] loop9: detected capacity change from 0 to 1024 [ 812.050221][ T7768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 812.064002][ T7768] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.167774][ T5610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.245494][ T7780] loop5: detected capacity change from 0 to 512 [ 812.252705][ T7780] EXT4-fs: Ignoring removed nobh option [ 812.267071][ T7780] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.11965: corrupted inode contents [ 812.279793][ T7780] EXT4-fs (loop5): Remounting filesystem read-only [ 812.282633][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11966'. [ 812.297129][ T7780] EXT4-fs (loop5): 1 truncate cleaned up [ 812.303741][ T7780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.327943][ T4795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.352785][ T7786] loop5: detected capacity change from 0 to 1024 [ 812.363088][ T7786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 812.372201][ T7786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.395729][ T7786] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11967: bg 0: block 88: padding at end of block bitmap is not set [ 812.396581][ T7784] siw: device registration error -23 [ 812.440821][ T7792] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 812.448735][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.457256][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.531643][ T7798] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11971'. [ 812.566579][ T7801] loop2: detected capacity change from 0 to 1024 [ 812.573332][ T7801] EXT4-fs: Ignoring removed orlov option [ 812.580967][ T7801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.748683][ T3710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.774477][ T7809] lo: entered allmulticast mode [ 812.799727][ T7808] lo: left allmulticast mode [ 812.807796][ T4795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.828090][ T7813] syz_tun: entered allmulticast mode [ 812.835282][ T7811] loop2: detected capacity change from 0 to 1024 [ 812.842195][ T7811] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 812.852417][ T7812] syz_tun: left allmulticast mode [ 812.857688][ T7811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 812.866035][ T7811] EXT4-fs (loop2): failed to initialize system zone (-117) [ 812.873764][ T7811] EXT4-fs (loop2): mount failed [ 813.054395][ T7826] loop1: detected capacity change from 0 to 1024 [ 813.061275][ T7826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 813.078931][ T7826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.109350][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11981'. [ 813.174315][ T4628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.190896][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11982'. [ 813.236843][ T7833] siw: device registration error -23 [ 813.317689][ T7839] loop1: detected capacity change from 0 to 1024 [ 813.335269][ T7839] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 813.343814][ T7839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.357145][ T7839] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11985: bg 0: block 88: padding at end of block bitmap is not set [ 813.386843][ T7843] loop3: detected capacity change from 0 to 1024 [ 813.393670][ T7843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 813.410633][ T7843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.502802][ T4382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.526398][ T7848] loop3: detected capacity change from 0 to 512 [ 813.533205][ T7848] EXT4-fs: Ignoring removed nobh option [ 813.570140][ T7848] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.11987: corrupted inode contents [ 813.582361][ T7848] EXT4-fs (loop3): Remounting filesystem read-only [ 813.589535][ T7848] EXT4-fs (loop3): 1 truncate cleaned up [ 813.595816][ T7848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.623943][ T4382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.657225][ T7855] loop3: detected capacity change from 0 to 1024 [ 813.667425][ T7855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.691283][ T4628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.698960][ T7855] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.11988: Allocating blocks 449-513 which overlap fs metadata [ 813.716529][ T7854] EXT4-fs (loop3): pa ffff888106e25690: logic 48, phys. 177, len 21 [ 813.724661][ T7854] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 813.733360][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11989'. [ 813.756336][ T4382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.779107][ T7861] loop1: detected capacity change from 0 to 512 [ 813.785959][ T7861] EXT4-fs: Ignoring removed nobh option [ 813.795555][ T7861] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.11990: corrupted inode contents [ 813.849101][ T7861] EXT4-fs (loop1): Remounting filesystem read-only [ 813.858448][ T7861] EXT4-fs (loop1): 1 truncate cleaned up [ 813.864433][ T7861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.889755][ T4628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.907270][ T7874] syz_tun: entered allmulticast mode [ 813.913221][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11994'. [ 814.016565][ T7881] loop9: detected capacity change from 0 to 1024 [ 814.023295][ T7881] EXT4-fs: Ignoring removed orlov option [ 814.030998][ T7881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.174387][ T5610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.190107][ T7887] loop9: detected capacity change from 0 to 128 [ 814.196587][ T7887] EXT4-fs: Ignoring removed nobh option [ 814.203502][ T7887] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 814.227091][ T5610] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.266848][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12001'. [ 814.751085][ T7900] loop3: detected capacity change from 0 to 1024 [ 814.757766][ T7900] EXT4-fs: Ignoring removed orlov option [ 814.765686][ T7900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.789662][ T4382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.806020][ T7903] syz_tun: entered allmulticast mode [ 814.816474][ T7902] syz_tun: left allmulticast mode [ 814.841488][ T7905] loop3: detected capacity change from 0 to 512 [ 814.848121][ T7905] EXT4-fs: Ignoring removed nobh option [ 814.868887][ T7905] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.12006: corrupted inode contents [ 814.883044][ T7911] lo: entered allmulticast mode [ 814.889218][ T7905] EXT4-fs (loop3): Remounting filesystem read-only [ 814.906380][ T7905] EXT4-fs (loop3): 1 truncate cleaned up [ 814.913664][ T7905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.958515][ T4382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.031744][ T7926] loop2: detected capacity change from 0 to 512 [ 815.037674][ T7927] loop1: detected capacity change from 0 to 512 [ 815.040711][ T7926] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.12015: inode has both inline data and extents flags [ 815.058211][ T7926] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.12015: couldn't read orphan inode 15 (err -117) [ 815.068598][ T7927] EXT4-fs: Ignoring removed nobh option [ 815.075257][ T7926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.101392][ T7926] rdma_op ffff8881195ff180 conn xmit_rdma 0000000000000000 [ 815.101659][ T7931] loop3: detected capacity change from 0 to 1024 [ 815.117337][ T7927] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.12014: corrupted inode contents [ 815.129570][ T7927] EXT4-fs (loop1): Remounting filesystem read-only [ 815.130625][ T3710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.136903][ T7927] EXT4-fs (loop1): 1 truncate cleaned up [ 815.146808][ T7931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.151022][ T7927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.189726][ T7931] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.12016: Allocating blocks 449-513 which overlap fs metadata [ 815.206097][ T7930] EXT4-fs (loop3): pa ffff888106e9f700: logic 48, phys. 177, len 21 [ 815.214146][ T7930] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 815.236483][ T4382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.246571][ T4628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.272456][ T7942] loop3: detected capacity change from 0 to 1024 [ 815.284213][ T7945] loop1: detected capacity change from 0 to 512 [ 815.291725][ T7945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 815.299073][ T7942] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 815.310649][ T7945] EXT4-fs (loop1): 1 truncate cleaned up [ 815.310707][ T7942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.333601][ T7945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.382684][ T7942] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.12019: bg 0: block 88: padding at end of block bitmap is not set [ 815.410646][ T4628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.508625][ T7966] loop1: detected capacity change from 0 to 512 [ 815.515950][ T7966] EXT4-fs: Ignoring removed nobh option [ 815.521431][ T7960] siw: device registration error -23 [ 815.551259][ T7966] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.12029: corrupted inode contents [ 815.568596][ T7966] EXT4-fs (loop1): Remounting filesystem read-only [ 815.573637][ T7971] loop9: detected capacity change from 0 to 1024 [ 815.594119][ T7966] EXT4-fs (loop1): 1 truncate cleaned up [ 815.600265][ T7966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.627728][ T7971] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.643350][ T4628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.669893][ T7976] loop1: detected capacity change from 0 to 1024 [ 815.676840][ T7976] EXT4-fs: Ignoring removed orlov option [ 815.684578][ T7976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.753466][ T7971] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.12030: Allocating blocks 449-513 which overlap fs metadata [ 815.770218][ T7968] EXT4-fs (loop9): pa ffff888106e9f7e0: logic 48, phys. 177, len 21 [ 815.778275][ T7968] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 815.827359][ T5610] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.840729][ T4382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.881032][ T4628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.890139][ T7985] loop3: detected capacity change from 0 to 128 [ 815.897235][ T7985] EXT4-fs: Ignoring removed nobh option [ 815.987277][ T7996] loop5: detected capacity change from 0 to 512 [ 815.997758][ T7996] EXT4-fs: Ignoring removed nobh option [ 816.012539][ T7996] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.12037: corrupted inode contents [ 816.026880][ T8005] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 816.033365][ T7996] EXT4-fs (loop5): Remounting filesystem read-only [ 816.041164][ T7996] EXT4-fs (loop5): 1 truncate cleaned up [ 816.046538][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.055386][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.070247][ T29] kauditd_printk_skb: 2613 callbacks suppressed [ 816.070282][ T29] audit: type=1400 audit(798.456:61508): avc: denied { read } for pid=8006 comm="syz.3.12041" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 816.083852][ T8008] loop3: detected capacity change from 0 to 1024 [ 816.106640][ T8008] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 816.117698][ T29] audit: type=1400 audit(798.456:61509): avc: denied { open } for pid=8006 comm="syz.3.12041" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 816.141018][ T29] audit: type=1400 audit(798.456:61510): avc: denied { read write } for pid=8006 comm="syz.3.12041" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 816.164106][ T29] audit: type=1400 audit(798.456:61511): avc: denied { open } for pid=8006 comm="syz.3.12041" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 816.169409][ T8008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 816.196145][ T8008] EXT4-fs (loop3): failed to initialize system zone (-117) [ 816.197022][ T29] audit: type=1400 audit(798.558:61512): avc: denied { unmount } for pid=4795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 816.203478][ T8008] EXT4-fs (loop3): mount failed [ 816.235170][ T29] audit: type=1400 audit(798.615:61513): avc: denied { sys_module } for pid=8011 comm="syz.2.12042" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 816.262846][ T8016] loop5: detected capacity change from 0 to 512 [ 816.269569][ T8016] EXT4-fs: Ignoring removed nobh option [ 816.275591][ T29] audit: type=1400 audit(798.633:61514): avc: denied { ioctl } for pid=8006 comm="syz.3.12041" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 816.300278][ T29] audit: type=1400 audit(798.633:61515): avc: denied { write } for pid=8006 comm="syz.3.12041" name="mcfilter" dev="proc" ino=4026532983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 816.327421][ T29] audit: type=1400 audit(798.699:61516): avc: denied { mac_admin } for pid=8017 comm="syz.3.12044" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 816.332092][ T8019] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 816.348333][ T29] audit: type=1400 audit(798.699:61517): avc: denied { relabelto } for pid=8017 comm="syz.3.12044" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 816.382509][ T8016] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.12043: corrupted inode contents [ 816.394639][ T8016] EXT4-fs (loop5): Remounting filesystem read-only [ 816.401575][ T8016] EXT4-fs (loop5): 1 truncate cleaned up [ 816.434719][ T8024] __nla_validate_parse: 2 callbacks suppressed [ 816.434735][ T8024] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12047'. [ 816.503421][ T8035] loop2: detected capacity change from 0 to 1024 [ 816.511998][ T8035] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 816.518330][ T8034] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12051'. [ 816.522832][ T8035] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 816.538986][ T8035] EXT4-fs (loop2): failed to initialize system zone (-117) [ 816.546316][ T8035] EXT4-fs (loop2): mount failed [ 816.578799][ T8042] loop2: detected capacity change from 0 to 1024 [ 816.595626][ T8042] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 816.606818][ T8042] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12053: bg 0: block 88: padding at end of block bitmap is not set [ 816.737874][ T8054] loop3: detected capacity change from 0 to 512 [ 816.744525][ T8054] EXT4-fs: Ignoring removed nobh option [ 816.763339][ T8054] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.12056: corrupted inode contents [ 816.775983][ T8054] EXT4-fs (loop3): Remounting filesystem read-only [ 816.784400][ T8054] EXT4-fs (loop3): 1 truncate cleaned up [ 816.797315][ T8058] loop9: detected capacity change from 0 to 1024 [ 816.824943][ T8058] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 816.853674][ T8058] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.12057: bg 0: block 88: padding at end of block bitmap is not set [ 816.871986][ T8064] loop3: detected capacity change from 0 to 1024 [ 816.927930][ T8064] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.12058: Allocating blocks 449-513 which overlap fs metadata [ 816.975448][ T8074] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12062'. [ 816.997503][ T8062] EXT4-fs (loop3): pa ffff888106e25770: logic 48, phys. 177, len 21 [ 817.005622][ T8062] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 817.026247][ T8078] loop1: detected capacity change from 0 to 1024 [ 817.033755][ T8078] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 817.044539][ T8078] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 817.054463][ T8078] EXT4-fs (loop1): failed to initialize system zone (-117) [ 817.061680][ T8078] EXT4-fs (loop1): mount failed [ 817.121735][ T8089] loop3: detected capacity change from 0 to 128 [ 817.133057][ T8089] EXT4-fs: Ignoring removed nobh option [ 817.176116][ T8088] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 817.194867][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.214308][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.233390][ T8093] loop3: detected capacity change from 0 to 512 [ 817.240387][ T8093] EXT4-fs: Ignoring removed nobh option [ 817.279725][ T8100] lo speed is unknown, defaulting to 1000 [ 817.292273][ T8093] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.12068: corrupted inode contents [ 817.311875][ T8093] EXT4-fs (loop3): Remounting filesystem read-only [ 817.330100][ T8093] EXT4-fs (loop3): 1 truncate cleaned up [ 817.332116][ T8100] lo speed is unknown, defaulting to 1000 [ 817.425023][ T8111] loop3: detected capacity change from 0 to 1024 [ 817.431939][ T8111] EXT4-fs: Ignoring removed orlov option [ 817.606811][ T8122] netlink: 80 bytes leftover after parsing attributes in process `syz.9.12073'. [ 817.682303][ T8132] loop9: detected capacity change from 0 to 128 [ 817.688998][ T8132] EXT4-fs: Ignoring removed nobh option [ 817.731941][ T8138] FAULT_INJECTION: forcing a failure. [ 817.731941][ T8138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.745102][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.3.12080 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 817.745142][ T8138] Tainted: [W]=WARN [ 817.745149][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 817.745163][ T8138] Call Trace: [ 817.745214][ T8138] [ 817.745222][ T8138] __dump_stack+0x1d/0x30 [ 817.745247][ T8138] dump_stack_lvl+0xe8/0x140 [ 817.745270][ T8138] dump_stack+0x15/0x1b [ 817.745291][ T8138] should_fail_ex+0x265/0x280 [ 817.745310][ T8138] should_fail+0xb/0x20 [ 817.745388][ T8138] should_fail_usercopy+0x1a/0x20 [ 817.745401][ T8138] strncpy_from_user+0x25/0x230 [ 817.745418][ T8138] ? kmem_cache_alloc_noprof+0x242/0x480 [ 817.745494][ T8138] ? getname_flags+0x80/0x3b0 [ 817.745602][ T8138] getname_flags+0xae/0x3b0 [ 817.745620][ T8138] getname_uflags+0x21/0x30 [ 817.745692][ T8138] io_linkat_prep+0x105/0x1b0 [ 817.745712][ T8138] io_submit_sqes+0x5ef/0x1060 [ 817.745736][ T8138] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 817.745799][ T8138] ? 0xffffffff81000000 [ 817.745808][ T8138] ? __rcu_read_unlock+0x4f/0x70 [ 817.745825][ T8138] ? get_pid_task+0x96/0xd0 [ 817.745839][ T8138] ? proc_fail_nth_write+0x13b/0x160 [ 817.745892][ T8138] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 817.745921][ T8138] ? vfs_write+0x7e8/0x960 [ 817.745959][ T8138] ? __rcu_read_unlock+0x4f/0x70 [ 817.745974][ T8138] ? __fget_files+0x184/0x1c0 [ 817.745992][ T8138] ? fput+0x8f/0xc0 [ 817.746065][ T8138] __x64_sys_io_uring_enter+0x78/0x90 [ 817.746085][ T8138] x64_sys_call+0x2df0/0x3000 [ 817.746099][ T8138] do_syscall_64+0xd2/0x200 [ 817.746112][ T8138] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 817.746181][ T8138] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 817.746202][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.746225][ T8138] RIP: 0033:0x7fb3307ff6c9 [ 817.746234][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.746246][ T8138] RSP: 002b:00007fb32f267038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 817.746258][ T8138] RAX: ffffffffffffffda RBX: 00007fb330a55fa0 RCX: 00007fb3307ff6c9 [ 817.746266][ T8138] RDX: 0000000000000217 RSI: 00000000000040f9 RDI: 0000000000000003 [ 817.746354][ T8138] RBP: 00007fb32f267090 R08: 0000000000000000 R09: 0000000000000000 [ 817.746362][ T8138] R10: 00000000000000a5 R11: 0000000000000246 R12: 0000000000000001 [ 817.746369][ T8138] R13: 00007fb330a56038 R14: 00007fb330a55fa0 R15: 00007ffe6f172cf8 [ 817.746402][ T8138] [ 818.089163][ T8152] loop3: detected capacity change from 0 to 1024 [ 818.096482][ T8152] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 818.110313][ T8152] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 818.118844][ T8152] EXT4-fs (loop3): failed to initialize system zone (-117) [ 818.126257][ T8152] EXT4-fs (loop3): mount failed [ 818.157319][ T8161] loop3: detected capacity change from 0 to 1024 [ 818.164273][ T8161] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 818.174813][ T8161] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 818.183243][ T8161] EXT4-fs (loop3): failed to initialize system zone (-117) [ 818.190495][ T8161] EXT4-fs (loop3): mount failed [ 818.196550][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12085'. [ 818.251536][ T8169] loop5: detected capacity change from 0 to 1024 [ 818.259696][ T8169] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 818.274552][ T8169] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 818.282779][ T8169] EXT4-fs (loop5): failed to initialize system zone (-117) [ 818.282885][ T8171] loop2: detected capacity change from 0 to 1024 [ 818.290392][ T8169] EXT4-fs (loop5): mount failed [ 818.301724][ T8174] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 818.309263][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.316466][ T8171] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 818.318401][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.349776][ T8169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8169 comm=syz.5.12090 [ 818.350346][ T8171] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 818.376094][ T8171] EXT4-fs (loop2): failed to initialize system zone (-117) [ 818.390790][ T8171] EXT4-fs (loop2): mount failed [ 818.434418][ T8180] loop2: detected capacity change from 0 to 1024 [ 818.455935][ T8180] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 818.468029][ T8180] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12094: bg 0: block 88: padding at end of block bitmap is not set [ 818.853641][ T8196] loop2: detected capacity change from 0 to 512 [ 818.860475][ T8196] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 818.872848][ T8196] EXT4-fs (loop2): 1 truncate cleaned up [ 818.910274][ T8200] loop2: detected capacity change from 0 to 1024 [ 818.917641][ T8200] EXT4-fs: Ignoring removed orlov option [ 818.951821][ T8203] loop3: detected capacity change from 0 to 1024 [ 818.959107][ T8203] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 818.970132][ T8203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 818.978822][ T8203] EXT4-fs (loop3): failed to initialize system zone (-117) [ 818.986271][ T8203] EXT4-fs (loop3): mount failed [ 819.079258][ T3724] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 819.086765][ T3724] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 819.097742][ T3724] hid-generic 0000:0003:0000.0011: hidraw0: HID v0.03 Device [syz0] on syz0 [ 819.258552][ T8220] loop2: detected capacity change from 0 to 1024 [ 819.272141][ T8223] loop9: detected capacity change from 0 to 1024 [ 819.279743][ T8223] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 819.290692][ T8223] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 819.298829][ T8223] EXT4-fs (loop9): failed to initialize system zone (-117) [ 819.306103][ T8223] EXT4-fs (loop9): mount failed [ 819.315364][ T8220] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.12106: Allocating blocks 449-513 which overlap fs metadata [ 819.343218][ T8219] EXT4-fs (loop2): pa ffff888106e9f9a0: logic 48, phys. 177, len 21 [ 819.351272][ T8219] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 819.356132][ T8230] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 819.370597][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.379979][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.403398][ T8234] loop2: detected capacity change from 0 to 1024 [ 819.418096][ T8234] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 819.428475][ T8234] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12110: bg 0: block 88: padding at end of block bitmap is not set [ 819.819617][ T8248] loop2: detected capacity change from 0 to 1024 [ 819.826520][ T8248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 819.920857][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12114'. [ 819.997178][ T8258] loop5: detected capacity change from 0 to 1024 [ 820.004615][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12118'. [ 820.008575][ T8252] siw: device registration error -23 [ 820.021239][ T8258] EXT4-fs: Ignoring removed orlov option [ 820.065574][ T8268] loop2: detected capacity change from 0 to 512 [ 820.072868][ T8268] EXT4-fs: Ignoring removed nobh option [ 820.092951][ T8268] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.12120: corrupted inode contents [ 820.105184][ T8268] EXT4-fs (loop2): Remounting filesystem read-only [ 820.113534][ T8268] EXT4-fs (loop2): 1 truncate cleaned up [ 820.139119][ T8273] loop2: detected capacity change from 0 to 128 [ 820.145818][ T8273] EXT4-fs: Ignoring removed nobh option [ 820.239660][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12132'. [ 820.280329][ T8284] loop9: detected capacity change from 0 to 1024 [ 820.287088][ T8284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 820.514432][ T8296] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 820.531615][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.552193][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.672227][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12129'. [ 820.964928][ T8308] loop1: detected capacity change from 0 to 1024 [ 820.978828][ T8308] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 820.989664][ T8308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12133: bg 0: block 88: padding at end of block bitmap is not set [ 821.232775][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12137'. [ 821.314315][ T8326] loop9: detected capacity change from 0 to 512 [ 821.321119][ T8326] EXT4-fs: Ignoring removed nobh option [ 821.344589][ T8326] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.12138: corrupted inode contents [ 821.356781][ T8326] EXT4-fs (loop9): Remounting filesystem read-only [ 821.363996][ T8326] EXT4-fs (loop9): 1 truncate cleaned up [ 821.620893][ T8337] siw: device registration error -23 [ 821.734689][ T8348] loop1: detected capacity change from 0 to 1024 [ 821.741770][ T8348] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 821.752346][ T8348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 821.760543][ T8348] EXT4-fs (loop1): failed to initialize system zone (-117) [ 821.767787][ T8348] EXT4-fs (loop1): mount failed [ 821.797804][ T8351] loop1: detected capacity change from 0 to 2048 [ 821.882919][ T8354] xt_hashlimit: overflow, rate too high: 0 [ 821.889212][ T29] kauditd_printk_skb: 3131 callbacks suppressed [ 821.889223][ T29] audit: type=1400 audit(803.909:64639): avc: denied { shutdown } for pid=8350 comm="syz.1.12146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 821.949926][ T8356] loop9: detected capacity change from 0 to 512 [ 821.956473][ T8356] EXT4-fs: Ignoring removed nobh option [ 821.973441][ T8356] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.12147: corrupted inode contents [ 821.985487][ T8356] EXT4-fs (loop9): Remounting filesystem read-only [ 821.992394][ T8356] Quota error (device loop9): write_blk: dquota write failed [ 821.999874][ T8356] Quota error (device loop9): qtree_write_dquot: Error -30 occurred while creating quota [ 822.009715][ T8356] EXT4-fs (loop9): 1 truncate cleaned up [ 822.032302][ T29] audit: type=1326 audit(804.031:64640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.9.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb74ff6c9 code=0x7ffc0000 [ 822.055727][ T29] audit: type=1326 audit(804.031:64641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.9.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb74ff6c9 code=0x7ffc0000 [ 822.078858][ T29] audit: type=1326 audit(804.031:64642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.9.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb74ff6c9 code=0x7ffc0000 [ 822.101901][ T29] audit: type=1326 audit(804.031:64643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.9.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb74ff6c9 code=0x7ffc0000 [ 822.125555][ T29] audit: type=1326 audit(804.031:64644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.9.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fceb74ff6c9 code=0x7ffc0000 [ 822.148711][ T29] audit: type=1326 audit(804.031:64645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.9.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb74ff6c9 code=0x7ffc0000 [ 822.172206][ T29] audit: type=1326 audit(804.031:64646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8359 comm="syz.9.12148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb74ff6c9 code=0x7ffc0000 [ 822.395665][ T8374] __nla_validate_parse: 1 callbacks suppressed [ 822.395702][ T8374] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12153'. [ 822.428815][ T8377] loop2: detected capacity change from 0 to 512 [ 822.436015][ T8377] EXT4-fs: Ignoring removed nobh option [ 822.444174][ T8377] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.12154: corrupted inode contents [ 822.457762][ T8377] EXT4-fs (loop2): Remounting filesystem read-only [ 822.464918][ T8377] EXT4-fs (loop2): 1 truncate cleaned up [ 822.526882][ T8384] loop5: detected capacity change from 0 to 1024 [ 822.534289][ T8384] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 822.545406][ T8384] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 822.554473][ T8384] EXT4-fs (loop5): failed to initialize system zone (-117) [ 822.561940][ T8384] EXT4-fs (loop5): mount failed [ 822.591611][ T8390] loop5: detected capacity change from 0 to 1024 [ 822.598488][ T8390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 822.726782][ T8396] loop1: detected capacity change from 0 to 512 [ 822.733486][ T8396] EXT4-fs: Ignoring removed nobh option [ 822.747851][ T8398] loop5: detected capacity change from 0 to 1024 [ 822.757111][ T8396] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.12159: corrupted inode contents [ 822.764359][ T8398] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 822.777070][ T8396] EXT4-fs (loop1): Remounting filesystem read-only [ 822.780040][ T8398] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.12161: bg 0: block 88: padding at end of block bitmap is not set [ 822.785025][ T8396] EXT4-fs (loop1): 1 truncate cleaned up [ 822.882286][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12162'. [ 822.963317][ T8408] loop9: detected capacity change from 0 to 1024 [ 822.970485][ T8408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 823.104577][ T8415] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 823.112331][ T8415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.120781][ T8415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.143484][ T8422] atomic_op ffff8881195ff128 conn xmit_atomic 0000000000000000 [ 823.249739][ T8434] loop2: detected capacity change from 0 to 1024 [ 823.251784][ T8436] rdma_op ffff88812f8e7180 conn xmit_rdma 0000000000000000 [ 823.256709][ T8434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 823.297739][ T8441] loop9: detected capacity change from 0 to 1024 [ 823.305315][ T8441] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 823.315967][ T8441] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 823.324182][ T8441] EXT4-fs (loop9): failed to initialize system zone (-117) [ 823.331458][ T8441] EXT4-fs (loop9): mount failed [ 823.386327][ T8448] loop9: detected capacity change from 0 to 8192 [ 823.397765][ T8448] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 823.410754][ T8448] netlink: 'syz.9.12176': attribute type 39 has an invalid length. [ 823.413890][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12177'. [ 823.452661][ T8454] $Hÿ: left promiscuous mode [ 823.457461][ T8454] bond_slave_0: left promiscuous mode [ 823.463066][ T8454] bond_slave_1: left promiscuous mode [ 823.469652][ T8454] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 823.482545][ T8454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 823.686926][ T8459] loop3: detected capacity change from 0 to 1024 [ 823.693721][ T8459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 823.789422][ T8466] atomic_op ffff88812f8e7128 conn xmit_atomic 0000000000000000 [ 823.826157][ T8473] rdma_op ffff8881195ff180 conn xmit_rdma 0000000000000000 [ 823.849445][ T8475] loop1: detected capacity change from 0 to 1024 [ 823.856711][ T8475] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 823.867355][ T8475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 823.875878][ T8475] EXT4-fs (loop1): failed to initialize system zone (-117) [ 823.883106][ T8475] EXT4-fs (loop1): mount failed [ 823.903467][ T8479] loop1: detected capacity change from 0 to 128 [ 823.910290][ T8479] EXT4-fs: Ignoring removed nobh option [ 823.949298][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12188'. [ 823.973829][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12189'. [ 824.023083][ T8487] siw: device registration error -23 [ 824.051438][ T8492] loop1: detected capacity change from 0 to 1024 [ 824.058185][ T8492] EXT4-fs: Ignoring removed orlov option [ 824.101084][ T8496] loop1: detected capacity change from 0 to 512 [ 824.108091][ T8496] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 824.120737][ T8496] EXT4-fs (loop1): 1 truncate cleaned up [ 824.157101][ T8506] rdma_op ffff8881195ff180 conn xmit_rdma 0000000000000000 [ 824.191379][ T8510] loop1: detected capacity change from 0 to 128 [ 824.205207][ T8510] EXT4-fs: Ignoring removed nobh option [ 824.218545][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12199'. [ 824.253207][ T8518] loop2: detected capacity change from 0 to 1024 [ 824.267837][ T8518] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 824.271783][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12203'. [ 824.295671][ T8518] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 824.312193][ T8528] loop1: detected capacity change from 0 to 1024 [ 824.318859][ T8528] EXT4-fs: Ignoring removed orlov option [ 824.340324][ T8518] EXT4-fs (loop2): failed to initialize system zone (-117) [ 824.352052][ T8518] EXT4-fs (loop2): mount failed [ 824.382161][ T8534] loop9: detected capacity change from 0 to 512 [ 824.389985][ T8534] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 824.408842][ T8534] EXT4-fs (loop9): 1 truncate cleaned up [ 824.414889][ T8539] rdma_op ffff88812f8e7180 conn xmit_rdma 0000000000000000 [ 824.521556][ T8553] loop2: detected capacity change from 0 to 1024 [ 824.538892][ T8553] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 824.548337][ T8553] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12214: bg 0: block 88: padding at end of block bitmap is not set [ 824.846554][ T8561] pim6reg: entered allmulticast mode [ 824.932800][ T8568] loop2: detected capacity change from 0 to 1024 [ 824.939523][ T8568] EXT4-fs: Ignoring removed orlov option [ 824.982779][ T8571] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 824.984865][ T8573] loop2: detected capacity change from 0 to 1024 [ 824.998910][ T8573] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 825.006918][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12220'. [ 825.009542][ T8573] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 825.026440][ T8573] EXT4-fs (loop2): failed to initialize system zone (-117) [ 825.033829][ T8573] EXT4-fs (loop2): mount failed [ 825.071166][ T8580] rdma_op ffff88817dc0e580 conn xmit_rdma 0000000000000000 [ 825.095907][ T8575] siw: device registration error -23 [ 825.134679][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12225'. [ 825.178169][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12227'. [ 825.195202][ T8595] loop2: detected capacity change from 0 to 1024 [ 825.225240][ T8595] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.12228: Allocating blocks 449-513 which overlap fs metadata [ 825.240811][ T8594] EXT4-fs (loop2): pa ffff888106e25930: logic 48, phys. 177, len 21 [ 825.248915][ T8594] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 825.380659][ T8613] rdma_op ffff88817dc0ed80 conn xmit_rdma 0000000000000000 [ 825.490740][ T8630] loop9: detected capacity change from 0 to 1024 [ 825.497473][ T8630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 825.605459][ T8635] loop9: detected capacity change from 0 to 128 [ 825.612093][ T8635] EXT4-fs: Ignoring removed nobh option [ 826.197510][ T8644] rdma_op ffff88812f8e6180 conn xmit_rdma 0000000000000000 [ 826.220193][ T8646] loop3: detected capacity change from 0 to 1024 [ 826.227245][ T8646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 826.275153][ T8653] loop5: detected capacity change from 0 to 1024 [ 826.285468][ T8653] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 826.296069][ T8653] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 826.304320][ T8653] EXT4-fs (loop5): failed to initialize system zone (-117) [ 826.311567][ T8653] EXT4-fs (loop5): mount failed [ 826.342244][ T8660] loop5: detected capacity change from 0 to 1024 [ 826.349759][ T8660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 826.374213][ T8667] loop3: detected capacity change from 0 to 128 [ 826.381245][ T8667] EXT4-fs: Ignoring removed nobh option [ 826.545392][ T8676] loop9: detected capacity change from 0 to 1024 [ 826.552039][ T8676] EXT4-fs: Ignoring removed orlov option [ 826.647582][ T8682] rdma_op ffff88817dc0ed80 conn xmit_rdma 0000000000000000 [ 826.791350][ T8695] loop9: detected capacity change from 0 to 1024 [ 826.798302][ T8695] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 826.808689][ T8695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 826.816825][ T8695] EXT4-fs (loop9): failed to initialize system zone (-117) [ 826.824192][ T8695] EXT4-fs (loop9): mount failed [ 826.880217][ T8702] loop9: detected capacity change from 0 to 1024 [ 826.916739][ T8702] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.12264: Allocating blocks 449-513 which overlap fs metadata [ 826.932293][ T8701] EXT4-fs (loop9): pa ffff888106e257e0: logic 48, phys. 177, len 21 [ 826.940416][ T8701] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 826.966487][ T8706] loop1: detected capacity change from 0 to 128 [ 826.972977][ T8706] EXT4-fs: Ignoring removed nobh option [ 827.000848][ T8709] $Hÿ: left promiscuous mode [ 827.005655][ T8709] bond_slave_0: left promiscuous mode [ 827.011167][ T8709] bond_slave_1: left promiscuous mode [ 827.017751][ T8709] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 827.039771][ T8709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 827.055274][ T3735] lo speed is unknown, defaulting to 1000 [ 827.173981][ T8715] rdma_op ffff88812f8e7180 conn xmit_rdma 0000000000000000 [ 827.200046][ T8717] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 827.244797][ T29] kauditd_printk_skb: 4179 callbacks suppressed [ 827.244812][ T29] audit: type=1400 audit(808.913:68822): avc: denied { write } for pid=8724 comm="syz.2.12273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 827.274079][ T8723] lo speed is unknown, defaulting to 1000 [ 827.282947][ T8725] loop2: detected capacity change from 0 to 1024 [ 827.304399][ T8725] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 827.309381][ T8723] lo speed is unknown, defaulting to 1000 [ 827.319430][ T29] audit: type=1400 audit(808.913:68823): avc: denied { read } for pid=8724 comm="syz.2.12273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 827.322420][ T8725] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12273: bg 0: block 88: padding at end of block bitmap is not set [ 827.339302][ T29] audit: type=1400 audit(808.913:68824): avc: denied { perfmon } for pid=8724 comm="syz.2.12273" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 827.373963][ T29] audit: type=1400 audit(808.913:68825): avc: denied { prog_run } for pid=8724 comm="syz.2.12273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 827.392546][ T29] audit: type=1400 audit(808.960:68826): avc: denied { open } for pid=8722 comm="syz.1.12272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 827.411346][ T29] audit: type=1400 audit(808.960:68827): avc: denied { kernel } for pid=8722 comm="syz.1.12272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 827.430367][ T29] audit: type=1400 audit(808.960:68828): avc: denied { mounton } for pid=8724 comm="syz.2.12273" path="/331/file1" dev="tmpfs" ino=1846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 827.452594][ T29] audit: type=1400 audit(808.960:68829): avc: denied { name_bind } for pid=8722 comm="syz.1.12272" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 827.473820][ T29] audit: type=1400 audit(808.960:68830): avc: denied { node_bind } for pid=8722 comm="syz.1.12272" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 827.496546][ T29] audit: type=1400 audit(808.988:68831): avc: denied { mount } for pid=8724 comm="syz.2.12273" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 827.658916][ T8742] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 827.744084][ T8748] loop9: detected capacity change from 0 to 2048 [ 827.815491][ T8756] rdma_op ffff88812f8e4580 conn xmit_rdma 0000000000000000 [ 827.863874][ T8763] xt_hashlimit: overflow, rate too high: 0 [ 827.875684][ T8762] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 827.883628][ T8761] loop2: detected capacity change from 0 to 512 [ 827.890394][ T8761] EXT4-fs: Ignoring removed nobh option [ 827.913987][ T8761] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.12284: corrupted inode contents [ 827.916061][ T8769] __nla_validate_parse: 14 callbacks suppressed [ 827.916154][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12286'. [ 827.926956][ T8761] EXT4-fs (loop2): Remounting filesystem read-only [ 827.949035][ T8761] EXT4-fs (loop2): 1 truncate cleaned up [ 827.989563][ T8771] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 828.047630][ T8777] loop2: detected capacity change from 0 to 1024 [ 828.054485][ T8777] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 828.065107][ T8777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 828.073285][ T8777] EXT4-fs (loop2): failed to initialize system zone (-117) [ 828.080535][ T8777] EXT4-fs (loop2): mount failed [ 828.188326][ T8782] loop2: detected capacity change from 0 to 512 [ 828.194876][ T8782] EXT4-fs: Ignoring removed nobh option [ 828.217003][ T8782] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.12292: corrupted inode contents [ 828.229100][ T8782] EXT4-fs (loop2): Remounting filesystem read-only [ 828.236097][ T8782] EXT4-fs (loop2): 1 truncate cleaned up [ 828.463954][ T8796] lo speed is unknown, defaulting to 1000 [ 828.497883][ T8796] lo speed is unknown, defaulting to 1000 [ 828.616726][ T8797] loop3: detected capacity change from 0 to 2048 [ 828.629126][ T8801] loop2: detected capacity change from 0 to 512 [ 828.637191][ T8801] EXT4-fs: Ignoring removed nobh option [ 828.661865][ T8801] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.12298: corrupted inode contents [ 828.679205][ T8806] loop1: detected capacity change from 0 to 512 [ 828.693569][ T8801] EXT4-fs (loop2): Remounting filesystem read-only [ 828.696917][ T8806] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 828.713935][ T8801] EXT4-fs (loop2): 1 truncate cleaned up [ 828.715163][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12300'. [ 828.741976][ T8806] EXT4-fs (loop1): 1 truncate cleaned up [ 828.754960][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12301'. [ 828.841401][ T8816] siw: device registration error -23 [ 828.854394][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12303'. [ 828.854660][ T8818] loop3: detected capacity change from 0 to 1024 [ 828.872783][ T8818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 829.330116][ T8839] loop5: detected capacity change from 0 to 1024 [ 829.336857][ T8839] EXT4-fs: Ignoring removed orlov option [ 829.527027][ T8839] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 829.622140][ T8845] loop5: detected capacity change from 0 to 1024 [ 829.663099][ T8845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 829.692257][ T8845] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.12312: bg 0: block 88: padding at end of block bitmap is not set [ 829.858789][ T8850] loop2: detected capacity change from 0 to 1024 [ 829.897687][ T8850] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 829.915615][ T8852] loop1: detected capacity change from 0 to 1024 [ 829.922360][ T8852] EXT4-fs: Ignoring removed orlov option [ 829.937034][ T8850] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 829.976045][ T8850] EXT4-fs (loop2): failed to initialize system zone (-117) [ 829.987378][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12316'. [ 829.998350][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12315'. [ 829.999180][ T8850] EXT4-fs (loop2): mount failed [ 830.058569][ T8859] siw: device registration error -23 [ 830.367553][ T8877] loop5: detected capacity change from 0 to 1024 [ 830.374189][ T8877] EXT4-fs: Ignoring removed orlov option [ 830.498009][ T8880] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 830.536102][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12323'. [ 831.215159][ T8898] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 831.234369][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12329'. [ 831.344691][ T8904] loop3: detected capacity change from 0 to 512 [ 831.407447][ T8904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 831.454189][ T8904] EXT4-fs (loop3): 1 truncate cleaned up [ 831.493582][ T8910] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 831.501809][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.510345][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.857973][ T8915] loop3: detected capacity change from 0 to 512 [ 831.868081][ T8915] EXT4-fs: Ignoring removed nobh option [ 831.911778][ T8915] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.12336: corrupted inode contents [ 831.926481][ T8915] EXT4-fs (loop3): Remounting filesystem read-only [ 831.941696][ T8915] EXT4-fs (loop3): 1 truncate cleaned up [ 831.955244][ T8930] loop5: detected capacity change from 0 to 1024 [ 831.985856][ T8930] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.12342: Allocating blocks 449-513 which overlap fs metadata [ 832.001882][ T8929] EXT4-fs (loop5): pa ffff888106e9f930: logic 48, phys. 177, len 21 [ 832.009904][ T8929] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 832.022653][ T8934] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 832.039257][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12343'. [ 832.071793][ T8938] loop5: detected capacity change from 0 to 1024 [ 832.084191][ T8945] loop3: detected capacity change from 0 to 512 [ 832.091816][ T8945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 832.101892][ T8938] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 832.104568][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12345'. [ 832.123337][ T8938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 832.123653][ T8945] EXT4-fs (loop3): 1 truncate cleaned up [ 832.142748][ T8938] EXT4-fs (loop5): failed to initialize system zone (-117) [ 832.165249][ T8938] EXT4-fs (loop5): mount failed [ 832.176794][ T8951] loop2: detected capacity change from 0 to 1024 [ 832.183437][ T8951] EXT4-fs: Ignoring removed orlov option [ 832.332111][ T8955] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 832.447426][ T8978] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 832.476182][ T8984] loop1: detected capacity change from 0 to 1024 [ 832.482957][ T8984] EXT4-fs: Ignoring removed orlov option [ 832.487519][ T8986] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 832.614615][ T8996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 832.643961][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 832.643986][ T29] audit: type=1326 audit(813.964:69598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 832.678379][ T29] audit: type=1326 audit(813.964:69599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 832.701475][ T29] audit: type=1326 audit(813.964:69600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 832.724671][ T29] audit: type=1326 audit(813.964:69601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 832.747636][ T29] audit: type=1326 audit(813.964:69602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c38571f85 code=0x7ffc0000 [ 832.770661][ T29] audit: type=1326 audit(813.964:69603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c38571f85 code=0x7ffc0000 [ 832.793660][ T29] audit: type=1326 audit(813.964:69604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c38571f85 code=0x7ffc0000 [ 832.816690][ T29] audit: type=1326 audit(813.964:69605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c38571f85 code=0x7ffc0000 [ 832.821280][ T8998] lo speed is unknown, defaulting to 1000 [ 832.839705][ T29] audit: type=1326 audit(813.964:69606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c38571f85 code=0x7ffc0000 [ 832.839818][ T29] audit: type=1326 audit(813.964:69607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8994 comm="syz.2.12363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c38571f85 code=0x7ffc0000 [ 832.899213][ T9003] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 832.912241][ T9000] loop2: detected capacity change from 0 to 1024 [ 832.943144][ T8998] lo speed is unknown, defaulting to 1000 [ 832.943221][ T9000] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 832.980263][ T9007] loop9: detected capacity change from 0 to 1024 [ 832.987004][ T9007] EXT4-fs: Ignoring removed orlov option [ 833.128396][ T8998] loop1: detected capacity change from 0 to 2048 [ 833.172102][ T9000] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12365: bg 0: block 88: padding at end of block bitmap is not set [ 833.295456][ T9022] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 833.303984][ T9019] __nla_validate_parse: 3 callbacks suppressed [ 833.304000][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12369'. [ 833.332578][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12370'. [ 833.444979][ T9032] loop9: detected capacity change from 0 to 1024 [ 833.452054][ T9032] EXT4-fs: Ignoring removed orlov option [ 833.817880][ T9051] lo speed is unknown, defaulting to 1000 [ 833.854878][ T9051] lo speed is unknown, defaulting to 1000 [ 833.915814][ T9056] loop3: detected capacity change from 0 to 512 [ 833.932949][ T9056] EXT4-fs: Ignoring removed nobh option [ 833.968577][ T9056] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.12381: corrupted inode contents [ 833.985042][ T9051] loop1: detected capacity change from 0 to 2048 [ 833.987635][ T9056] EXT4-fs (loop3): Remounting filesystem read-only [ 834.001136][ T9056] EXT4-fs (loop3): 1 truncate cleaned up [ 834.236358][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12383'. [ 834.355675][ T9073] rdma_op ffff888157ff2d80 conn xmit_rdma 0000000000000000 [ 834.387057][ T9075] loop1: detected capacity change from 0 to 1024 [ 834.431045][ T9075] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 834.467495][ T9075] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12387: bg 0: block 88: padding at end of block bitmap is not set [ 834.488478][ T9084] loop5: detected capacity change from 0 to 512 [ 834.495117][ T9084] EXT4-fs: Ignoring removed nobh option [ 834.524265][ T9084] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.12390: corrupted inode contents [ 834.536728][ T9084] EXT4-fs (loop5): Remounting filesystem read-only [ 834.543853][ T9084] EXT4-fs (loop5): 1 truncate cleaned up [ 834.722607][ T9096] syz!: rxe_newlink: already configured on team_slave_0 [ 834.731293][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.743350][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.937178][ T9111] loop1: detected capacity change from 0 to 1024 [ 834.937467][ T9112] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 834.977574][ T9116] lo speed is unknown, defaulting to 1000 [ 834.977834][ T9111] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.12397: Allocating blocks 449-513 which overlap fs metadata [ 835.012327][ T9116] lo speed is unknown, defaulting to 1000 [ 835.018118][ T9109] EXT4-fs (loop1): pa ffff888106e9fe70: logic 48, phys. 177, len 21 [ 835.026164][ T9109] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 835.056123][ T9120] netlink: 596 bytes leftover after parsing attributes in process `syz.9.12400'. [ 835.092863][ T9127] loop9: detected capacity change from 0 to 1024 [ 835.099828][ T9127] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 835.110361][ T9127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 835.118818][ T9127] EXT4-fs (loop9): failed to initialize system zone (-117) [ 835.126372][ T9127] EXT4-fs (loop9): mount failed [ 835.152882][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12405'. [ 835.195177][ T9134] siw: device registration error -23 [ 835.234580][ T9137] loop9: detected capacity change from 0 to 1024 [ 835.275085][ T9141] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 835.275143][ T9137] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 835.297044][ T9137] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.12406: bg 0: block 88: padding at end of block bitmap is not set [ 835.341151][ T9145] lo speed is unknown, defaulting to 1000 [ 835.376036][ T9145] lo speed is unknown, defaulting to 1000 [ 835.697959][ T9165] netlink: 596 bytes leftover after parsing attributes in process `syz.3.12413'. [ 835.793854][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12416'. [ 836.002384][ T9181] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 836.126335][ T9194] loop5: detected capacity change from 0 to 1024 [ 836.135277][ T9191] netlink: 596 bytes leftover after parsing attributes in process `syz.1.12425'. [ 836.166078][ T9194] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.12426: Allocating blocks 449-513 which overlap fs metadata [ 836.182174][ T9193] EXT4-fs (loop5): pa ffff888106e25c40: logic 48, phys. 177, len 21 [ 836.190189][ T9193] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 836.226710][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12427'. [ 836.304019][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12433'. [ 836.326340][ T9220] loop9: detected capacity change from 0 to 1024 [ 836.332977][ T9220] EXT4-fs: Ignoring removed orlov option [ 836.371127][ T9227] loop5: detected capacity change from 0 to 512 [ 836.378472][ T9227] EXT4-fs: Ignoring removed nobh option [ 836.390006][ T9223] lo speed is unknown, defaulting to 1000 [ 836.426827][ T9223] lo speed is unknown, defaulting to 1000 [ 836.459179][ T9227] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.12438: corrupted inode contents [ 836.471347][ T9227] EXT4-fs (loop5): Remounting filesystem read-only [ 836.487639][ T9227] EXT4-fs (loop5): 1 truncate cleaned up [ 836.612948][ T9237] lo speed is unknown, defaulting to 1000 [ 836.667549][ T9237] lo speed is unknown, defaulting to 1000 [ 836.694309][ T9239] loop1: detected capacity change from 0 to 2048 [ 836.934275][ T9262] loop2: detected capacity change from 0 to 1024 [ 836.943755][ T9262] EXT4-fs: Ignoring removed orlov option [ 836.956706][ T9266] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 837.141515][ T9269] loop5: detected capacity change from 0 to 512 [ 837.158110][ T9269] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 837.172805][ T9269] EXT4-fs (loop5): 1 truncate cleaned up [ 837.217809][ T9272] loop3: detected capacity change from 0 to 512 [ 837.236429][ T9272] EXT4-fs: Ignoring removed nobh option [ 837.261055][ T9272] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.12451: corrupted inode contents [ 837.301802][ T9272] EXT4-fs (loop3): Remounting filesystem read-only [ 837.323618][ T9272] EXT4-fs (loop3): 1 truncate cleaned up [ 837.337206][ T9283] syz!: rxe_newlink: already configured on team_slave_0 [ 837.380228][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.390986][ T9289] loop3: detected capacity change from 0 to 512 [ 837.398296][ T9289] EXT4-fs: Ignoring removed nobh option [ 837.407539][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.450270][ T9289] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.12457: corrupted inode contents [ 837.473382][ T9289] EXT4-fs (loop3): Remounting filesystem read-only [ 837.488440][ T9289] EXT4-fs (loop3): 1 truncate cleaned up [ 837.595810][ T9301] loop3: detected capacity change from 0 to 2048 [ 837.671819][ T9307] xt_hashlimit: overflow, rate too high: 0 [ 838.033351][ T9317] lo speed is unknown, defaulting to 1000 [ 838.061943][ T9317] lo speed is unknown, defaulting to 1000 [ 838.146026][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 838.146057][ T29] audit: type=1326 audit(819.109:70025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.193500][ T29] audit: type=1326 audit(819.137:70027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.216486][ T29] audit: type=1326 audit(819.137:70028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.239554][ T29] audit: type=1326 audit(819.137:70029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.262653][ T29] audit: type=1326 audit(819.137:70026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.285614][ T29] audit: type=1326 audit(819.137:70030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.308644][ T29] audit: type=1326 audit(819.137:70031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.331603][ T29] audit: type=1326 audit(819.137:70032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.354651][ T29] audit: type=1326 audit(819.137:70033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.377569][ T29] audit: type=1326 audit(819.137:70034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9324 comm="syz.2.12468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3853f6c9 code=0x7ffc0000 [ 838.405474][ T9332] loop5: detected capacity change from 0 to 512 [ 838.412388][ T9332] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 838.427532][ T9332] EXT4-fs (loop5): 1 truncate cleaned up [ 838.455787][ T9335] lo speed is unknown, defaulting to 1000 [ 838.482681][ T9337] loop2: detected capacity change from 0 to 512 [ 838.544108][ T9337] EXT4-fs: Ignoring removed nobh option [ 838.554356][ T9335] lo speed is unknown, defaulting to 1000 [ 838.578838][ T9337] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.12473: corrupted inode contents [ 838.593897][ T9337] EXT4-fs (loop2): Remounting filesystem read-only [ 838.602647][ T9337] EXT4-fs (loop2): 1 truncate cleaned up [ 838.624563][ T9344] lo speed is unknown, defaulting to 1000 [ 838.695996][ T9344] lo speed is unknown, defaulting to 1000 [ 838.702737][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.719489][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.723920][ T9362] loop2: detected capacity change from 0 to 1024 [ 838.735079][ T9352] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 838.747199][ T9363] __nla_validate_parse: 8 callbacks suppressed [ 838.747225][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12480'. [ 838.820637][ T9362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 838.914312][ T9362] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.12481: bg 0: block 88: padding at end of block bitmap is not set [ 838.930493][ T9371] loop9: detected capacity change from 0 to 512 [ 838.937760][ T9373] loop1: detected capacity change from 0 to 512 [ 838.959825][ T9373] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 838.970060][ T9371] EXT4-fs: Ignoring removed nobh option [ 838.982548][ T9373] EXT4-fs (loop1): 1 truncate cleaned up [ 838.996774][ T9371] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.12482: corrupted inode contents [ 839.023846][ T9371] EXT4-fs (loop9): Remounting filesystem read-only [ 839.037833][ T9371] EXT4-fs (loop9): 1 truncate cleaned up [ 839.348995][ T9400] loop3: detected capacity change from 0 to 1024 [ 839.355749][ T9400] EXT4-fs: Ignoring removed orlov option [ 839.520146][ T9404] ================================================================== [ 839.528272][ T9404] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 839.536280][ T9404] [ 839.538634][ T9404] write to 0xffff8881801b2460 of 4 bytes by task 9400 on cpu 1: [ 839.546264][ T9404] writeback_single_inode+0x150/0x3f0 [ 839.551653][ T9404] sync_inode_metadata+0x5b/0x90 [ 839.556610][ T9404] generic_buffers_fsync_noflush+0xd9/0x120 [ 839.562523][ T9404] ext4_sync_file+0x1ab/0x690 [ 839.567207][ T9404] vfs_fsync_range+0x10d/0x130 [ 839.571986][ T9404] ext4_buffered_write_iter+0x34f/0x3c0 [ 839.577530][ T9404] ext4_file_write_iter+0x387/0xf60 [ 839.582727][ T9404] iter_file_splice_write+0x666/0xa60 [ 839.588091][ T9404] direct_splice_actor+0x156/0x2a0 [ 839.593195][ T9404] splice_direct_to_actor+0x312/0x680 [ 839.598561][ T9404] do_splice_direct+0xda/0x150 [ 839.603317][ T9404] do_sendfile+0x380/0x650 [ 839.607738][ T9404] __x64_sys_sendfile64+0x105/0x150 [ 839.612936][ T9404] x64_sys_call+0x2bb4/0x3000 [ 839.617606][ T9404] do_syscall_64+0xd2/0x200 [ 839.622095][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.627977][ T9404] [ 839.630286][ T9404] read to 0xffff8881801b2460 of 4 bytes by task 9404 on cpu 0: [ 839.637811][ T9404] vfs_fsync_range+0x9b/0x130 [ 839.642483][ T9404] ext4_buffered_write_iter+0x34f/0x3c0 [ 839.648022][ T9404] ext4_file_write_iter+0x387/0xf60 [ 839.653207][ T9404] iter_file_splice_write+0x666/0xa60 [ 839.658573][ T9404] direct_splice_actor+0x156/0x2a0 [ 839.663677][ T9404] splice_direct_to_actor+0x312/0x680 [ 839.669043][ T9404] do_splice_direct+0xda/0x150 [ 839.673800][ T9404] do_sendfile+0x380/0x650 [ 839.678217][ T9404] __x64_sys_sendfile64+0x105/0x150 [ 839.683415][ T9404] x64_sys_call+0x2bb4/0x3000 [ 839.688085][ T9404] do_syscall_64+0xd2/0x200 [ 839.692576][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.698457][ T9404] [ 839.700765][ T9404] value changed: 0x00000070 -> 0x00000002 [ 839.706464][ T9404] [ 839.708769][ T9404] Reported by Kernel Concurrency Sanitizer on: [ 839.714904][ T9404] CPU: 0 UID: 0 PID: 9404 Comm: syz.3.12494 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 839.726264][ T9404] Tainted: [W]=WARN [ 839.730049][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 839.740097][ T9404] ================================================================== [ 839.761675][ T9408] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !