last executing test programs: 8.116241157s ago: executing program 3 (id=1952): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, 0x0, 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 7.248656563s ago: executing program 3 (id=1965): sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x40810) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000004000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) 6.310132644s ago: executing program 3 (id=1977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000200000008011b0000000000", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000400"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x10) semget$private(0x0, 0x5, 0x0) semtimedop(0x0, &(0x7f0000005740)=[{0x3, 0x8}], 0x1, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x18, &(0x7f0000000800)={r7, 0x1, 0x6, @local}, 0x10) sendto$packet(r8, &(0x7f0000000040)="0203000008000000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r5], 0x3c}}, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x141182) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.34858223s ago: executing program 3 (id=2015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000200000008011b0000000000", @ANYRES32, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'pimreg1\x00', 0x400}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000400"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x10) semget$private(0x0, 0x5, 0x0) semtimedop(0x0, &(0x7f0000005740)=[{0x3, 0x8}], 0x1, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x18, &(0x7f0000000800)={r7, 0x1, 0x6, @local}, 0x10) sendto$packet(r8, &(0x7f0000000040)="0203000008000000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r5], 0x3c}}, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x141182) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.00344137s ago: executing program 4 (id=2017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x923}, 0x14}}, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x70, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}}}, 0xe8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0xa000200f}) sync() openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r7 = geteuid() setreuid(r7, 0xee00) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r5}, &(0x7f0000000080), &(0x7f0000000900)=r4}, 0x20) 2.703366986s ago: executing program 0 (id=2020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 2.623641613s ago: executing program 0 (id=2022): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) (fail_nth: 1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x1d, 0x1000, 0xffffffffffffffff, 0xfd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) shutdown(0xffffffffffffffff, 0x0) getdents(r4, &(0x7f0000000000)=""/149, 0x95) getdents64(r4, 0x0, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000080)='bridge0\x00') 2.174390392s ago: executing program 4 (id=2025): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x3}, 0x22, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$loop(0x0, 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r7, 0x0, 0x1, 0x4}}, 0x20) 1.714038612s ago: executing program 1 (id=2028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.387922841s ago: executing program 2 (id=2030): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000000000001"], 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xfffffff9, 0x8, 0x6, 0x200, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xd, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe2181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000000c0), 0x4) ioctl$sock_proto_private(r4, 0x89e0, &(0x7f0000001080)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, 0x0, &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 1.373720682s ago: executing program 2 (id=2031): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000380)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 1.144053232s ago: executing program 2 (id=2032): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000003004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) fgetxattr(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="73656335fa02ffff8208ffff50b4"], &(0x7f0000000d40)=""/1, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @echo_reply}}}}}, 0x0) 1.067941968s ago: executing program 0 (id=2033): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() socket$tipc(0x1e, 0x5, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket(0xa, 0x40000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) syz_clone3(&(0x7f00000006c0)={0x324100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1.04877455s ago: executing program 2 (id=2034): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "0f969cd13e89442f08264b7c9385b424"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r3 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r3, 0x47fa, 0x9bbe, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001000)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x50aae, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r6}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x8000, &(0x7f0000001dc0)={0x87}, 0x20) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 1.04809478s ago: executing program 4 (id=2035): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 834.663818ms ago: executing program 0 (id=2036): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000060301040100003e0000000000000f000000000000000000"], 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_setup(0x4697, &(0x7f00000007c0)={0x0, 0xc85a, 0x2, 0x2, 0xb9, 0x0, r2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x20010, r6, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301"], 0x20}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="237f495f984f510b30cab6a80d26724b6c77e979385e8d9526334e7d575d4aff066aab01799c7f7c176850bef1a2e4a381825a49e15378adda3dd77f1c1826d65c18170db8da04f89685d63aaa8049395b51221b57c567f4e170a23788828803ec14cf4994cf7ceb2b00"/117]) write$P9_RLERRORu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="8b"], 0x53) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005e00)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0xa4}}, @TCA_TBF_BURST={0x8, 0x6, 0xd206}]}}]}, 0x60}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000004c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb9b}}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r10, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x4628, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e80100001200200027bd7000fedbdf251107050d4e214e22340c000005000000ff0700000200000003000000050000000300000003000000", @ANYRES32=r9, @ANYBLOB="00010000090000000001000003000000fc0001000df8f0cf3d12d17dcaa2ebe66ced037a9543a2d5259aa94d4442b143813c9ab321daa2d400081b0e1682dba51ce498a712512057cdc98ddbf6449a32f3e63d97865f3838b55bc25b76463ca711f35df59d0c715f5b0aa83da7c201e68f88fa5a0e141db1f2697cb4acc5b733ce0b5d8ba462ff0f9c3f8c8659293928ffe190445fb08cebe1d77a93249e5b797081022bf6b0826d70fe7307417c0800000098897e8983e17692759abc451591746f013c68c640f05128629e9a5cd10c7887d9b7dba32a6858f315c4c8ab01c29374774b1639e746988deab2437fe312381dfe5ea58a240eed55c6e3c2ef6410b3986859444dde0a9f000100e534fedfe6732e9c8bf26d9ef5895792b487926ba196417e1713b7f2470e0502f66609bc9f5d111b3ce9c46f8338e1aa9918079949247266ce32a6a25bee3548e167ed83bbdb87977fb6e841b1111c6d1e9b251b866b8732b220a5754ca753136dd927be184fe047ebfdf2b89e344cb35e0825729171a68a79a4cb395b27b34c44605e22d0aed61c3bc4a8eae856554eef2f7700000000000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) 791.506602ms ago: executing program 1 (id=2037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300030c00"], 0x60}, 0x1, 0x7}, 0x0) 691.442891ms ago: executing program 3 (id=2038): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, 0x0, 0x40810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0xfffc, 0x0, 0xffffffff, 0x1}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404809, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) 690.684911ms ago: executing program 4 (id=2039): openat(0xffffffffffffff9c, 0x0, 0x103042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xf43f, 0x9, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) unshare(0x40000000) (fail_nth: 1) 649.839594ms ago: executing program 1 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x129}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0) 570.702911ms ago: executing program 1 (id=2041): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000000000001"], 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xfffffff9, 0x8, 0x6, 0x200, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xd, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe2181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000000c0), 0x4) ioctl$sock_proto_private(r4, 0x89e0, &(0x7f0000001080)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, 0x0, &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b0000008922309dd4543cde35c2e5794727a695b17f93ed6d145a511d04842b2378e1aa4bd91f0389b681de2b63b601b9411fb5866cd4fe0be256abe6747fad85b6702a92f9c3affc8ff6826fbf985d4223a32f4de28bbeafd45097ede58dd953d4aff6e13f3ccefe379de77c9242e2d8ef5438b6aec36dd3d738182828ab1168f3c05861200042b28ac17e926e6b68fa8fbd4c00000000000000000000000000000000ed61def279f8b2d886f52c91f6e8cb75d1ff9382f161c32e2d410e33f5b64e3ee4356d8d28a51b55b062550db64b098b6b4ada8e39e42d7f4cde3df4851b89f0daace0454a96f1be0bdf2a206f7e9919a8d9139b01ed32e0eba34079f3aed4f5", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 336.258851ms ago: executing program 0 (id=2042): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x0, 0x802}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000d80), 0xfffffecc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000008000"/28], 0x50) readv(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000800)) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x0) r5 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x800000, 0x0, 0x0, 0x1, 0x0, "cb00001400000000000000ffff0000e700"}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) r8 = io_uring_setup(0x6248, &(0x7f0000000280)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x18, 0x20000000, r9) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = open(&(0x7f0000000280)='./bus\x00', 0x10d042, 0x12) sendfile(r3, r10, 0x0, 0x10001) 335.633121ms ago: executing program 4 (id=2043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 323.437592ms ago: executing program 1 (id=2044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000003004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) fgetxattr(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="73656335fa02ffff8208ffff50b4"], &(0x7f0000000d40)=""/1, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @echo_reply}}}}}, 0x0) 233.298201ms ago: executing program 1 (id=2045): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x6, 0x2a3, &(0x7f0000000180)="$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") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="27164113f82b2000308014000400403a7a050083e556c241ff1b3b56c34d99f0e9192c176a18ae67faa7d453913b27e3397652c0a3eb711b25de25081259934035984b1acf439560471512ba23902856b631eab5dba4bf2ef70b41c86a42578406ede29ea8650e60cd1504303763858e125a03ad0d86d04a85c26736e5a87076a71ed87e1dfac8638421277cc2cbd638572f94ea703f0f6450e87716e19e4f452a99e0d6e710f00e225f10158099acc242d47c419f69cf5bd83622c9d03f42ab3b385dcaab4f90c07d9fa0c221d76917c3106ed4558a19760c7ec74b13a9fa1d0700"/238], 0x3c}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="27164113f82b2000308014000400403a7a050083e556c241ff1b3b56c34d99f0e9192c176a18ae67faa7d453913b27e3397652c0a3eb711b25de25081259934035984b1acf439560471512ba23902856b631eab5dba4bf2ef70b41c86a42578406ede29ea8650e60cd1504303763858e125a03ad0d86d04a85c26736e5a87076a71ed87e1dfac8638421277cc2cbd638572f94ea703f0f6450e87716e19e4f452a99e0d6e710f00e225f10158099acc242d47c419f69cf5bd83622c9d03f42ab3b385dcaab4f90c07d9fa0c221d76917c3106ed4558a19760c7ec74b13a9fa1d0700"/238], 0x3c}}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r9], 0x60}}, 0x0) close(r9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f0000000280)='./file1\x00') (async) unlink(&(0x7f0000000280)='./file1\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r10}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r10}, 0x18) ftruncate(r11, 0x5) socket$netlink(0x10, 0x3, 0x14) (async) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r9, @ANYRESOCT=0x0], 0x38}}, 0x4004090) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r9, @ANYRESOCT=0x0], 0x38}}, 0x4004090) 232.113291ms ago: executing program 2 (id=2046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@grpquota}, {@dioread_nolock}]}, 0xff, 0x55c, &(0x7f0000001100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) 193.935824ms ago: executing program 4 (id=2047): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) 82.965394ms ago: executing program 2 (id=2048): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="060000003004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}]}}]}, 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_GETMODE(r6, 0x5601, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) fgetxattr(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="73656335fa02ffff8208ffff50b4"], &(0x7f0000000d40)=""/1, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @echo_reply}}}}}, 0x0) 0s ago: executing program 3 (id=2049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) kernel console output (not intermixed with test programs): XT4-fs (loop2): Total free blocks count 0 [ 149.943752][ T8371] EXT4-fs (loop2): Free/Dirty block details [ 149.949686][ T8371] EXT4-fs (loop2): free_blocks=68451041280 [ 149.955573][ T8371] EXT4-fs (loop2): dirty_blocks=32 [ 149.960710][ T8371] EXT4-fs (loop2): Block reservation details [ 149.966703][ T8371] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 149.973006][ T8374] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 149.985355][ T8374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 149.985355][ T8374] [ 150.101368][ T8380] bpf_get_probe_write_proto: 2 callbacks suppressed [ 150.101379][ T8380] syz.2.1577[8380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.108492][ T8380] syz.2.1577[8380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.124182][ T8380] syz.2.1577[8380] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.161704][ T8382] loop0: detected capacity change from 0 to 128 [ 150.180647][ T8384] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1579'. [ 150.189752][ T8384] 1ªX¹¦À: renamed from 60ªX¹¦À [ 150.200978][ T8384] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 150.240373][ T8388] dvmrp0: left allmulticast mode [ 150.291039][ T1814] kworker/u8:6: attempt to access beyond end of device [ 150.291039][ T1814] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 150.320906][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 150.339603][ T8395] loop2: detected capacity change from 0 to 1024 [ 150.425293][ T8404] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1586'. [ 150.434667][ T8404] 0ªX¹¦À: renamed from 61ªX¹¦À [ 150.442154][ T8404] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 150.458278][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 150.458294][ T29] audit: type=1326 audit(1728751303.563:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.487922][ T29] audit: type=1326 audit(1728751303.563:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.511343][ T29] audit: type=1326 audit(1728751303.563:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.534782][ T29] audit: type=1326 audit(1728751303.563:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.558165][ T29] audit: type=1326 audit(1728751303.563:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.581550][ T29] audit: type=1326 audit(1728751303.563:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.604955][ T29] audit: type=1326 audit(1728751303.563:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.628449][ T29] audit: type=1326 audit(1728751303.563:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.651844][ T29] audit: type=1326 audit(1728751303.573:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.675342][ T29] audit: type=1326 audit(1728751303.573:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e0a2edff9 code=0x7ffc0000 [ 150.719824][ T8412] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1592'. [ 150.728842][ T8412] 1ªX¹¦À: renamed from 60ªX¹¦À [ 150.737418][ T8412] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 150.774352][ T8416] loop3: detected capacity change from 0 to 128 [ 150.805675][ T28] kworker/u8:1: attempt to access beyond end of device [ 150.805675][ T28] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 150.847110][ T8421] syz.3.1594[8421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.847173][ T8421] syz.3.1594[8421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.858993][ T8421] syz.3.1594[8421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.863252][ T8420] loop2: detected capacity change from 0 to 128 [ 150.905462][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.907226][ T8423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.913267][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.913318][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.937333][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.945183][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.953172][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.961128][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.968888][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.976626][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.984486][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 150.992234][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 151.000032][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 151.007814][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 151.015583][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 151.023320][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 151.031065][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 151.038961][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 151.046730][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 151.054482][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: unknown main item tag 0x0 [ 151.062388][ T8423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.065882][ T3342] hid-generic FFFC:0000:FFFFFFFF.0034: hidraw0: HID v0.01 Device [syz0] on syz0 [ 151.108625][ T1814] kworker/u8:6: attempt to access beyond end of device [ 151.108625][ T1814] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 151.130034][ T8425] syz.1.1598[8425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.130108][ T8425] syz.1.1598[8425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.142866][ T8425] syz.1.1598[8425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.174373][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 151.218219][ T8431] loop2: detected capacity change from 0 to 1024 [ 151.252781][ T8435] loop0: detected capacity change from 0 to 512 [ 151.261548][ T8435] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1601: corrupted in-inode xattr: invalid ea_ino [ 151.290207][ T8435] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1601: couldn't read orphan inode 15 (err -117) [ 151.310708][ T8439] loop1: detected capacity change from 0 to 1024 [ 151.330690][ T8435] bond1: entered promiscuous mode [ 151.335719][ T8435] bond1: entered allmulticast mode [ 151.340964][ T8435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.341819][ T8439] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 151.362621][ T8439] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 151.374910][ T8439] EXT4-fs (loop1): This should not happen!! Data will be lost [ 151.374910][ T8439] [ 151.384658][ T8439] EXT4-fs (loop1): Total free blocks count 0 [ 151.390674][ T8439] EXT4-fs (loop1): Free/Dirty block details [ 151.396573][ T8439] EXT4-fs (loop1): free_blocks=68451041280 [ 151.402476][ T8439] EXT4-fs (loop1): dirty_blocks=32 [ 151.407679][ T8439] EXT4-fs (loop1): Block reservation details [ 151.413676][ T8439] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 151.420608][ T8445] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 151.420983][ T8435] bond1 (unregistering): Released all slaves [ 151.432868][ T8445] EXT4-fs (loop1): This should not happen!! Data will be lost [ 151.432868][ T8445] [ 151.462985][ T8447] 0ªX¹¦À: renamed from 61ªX¹¦À [ 151.469766][ T8447] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 151.511368][ T8449] loop1: detected capacity change from 0 to 128 [ 151.533891][ T8451] syz.0.1606[8451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.567902][ T50] kworker/u8:3: attempt to access beyond end of device [ 151.567902][ T50] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 151.597719][ T8453] loop4: detected capacity change from 0 to 128 [ 151.614820][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.627688][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.667313][ T50] kworker/u8:3: attempt to access beyond end of device [ 151.667313][ T50] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 151.713702][ T8461] loop4: detected capacity change from 0 to 512 [ 151.721900][ T8461] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.741096][ T8461] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.1611: corrupted inode contents [ 151.753184][ T8461] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.1611: mark_inode_dirty error [ 151.764784][ T8461] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.1611: corrupted inode contents [ 151.789330][ T8461] bond1: entered promiscuous mode [ 151.794382][ T8461] bond1: entered allmulticast mode [ 151.799752][ T8461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.810245][ T8461] bond1 (unregistering): Released all slaves [ 151.902023][ T8469] loop7: detected capacity change from 0 to 16384 [ 151.909070][ T8469] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 151.962131][ T8471] loop4: detected capacity change from 0 to 1024 [ 151.980607][ T8471] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 151.995599][ T8471] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 152.007933][ T8471] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.007933][ T8471] [ 152.017620][ T8471] EXT4-fs (loop4): Total free blocks count 0 [ 152.023633][ T8471] EXT4-fs (loop4): Free/Dirty block details [ 152.029543][ T8471] EXT4-fs (loop4): free_blocks=68451041280 [ 152.035373][ T8471] EXT4-fs (loop4): dirty_blocks=32 [ 152.040495][ T8471] EXT4-fs (loop4): Block reservation details [ 152.046474][ T8471] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 152.052836][ T8474] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 152.065161][ T8474] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.065161][ T8474] [ 152.096088][ T8476] 0ªX¹¦À: renamed from 61ªX¹¦À [ 152.102815][ T8476] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 152.137194][ T8478] loop4: detected capacity change from 0 to 1024 [ 152.168859][ T8482] 0ªX¹¦À: renamed from 61ªX¹¦À [ 152.177303][ T8482] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 152.237633][ T8491] dvmrp0: entered allmulticast mode [ 152.245615][ T8491] dvmrp0: left allmulticast mode [ 152.318739][ T8498] loop7: detected capacity change from 0 to 16384 [ 152.325441][ T8498] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 152.400780][ T8500] loop2: detected capacity change from 0 to 8192 [ 152.457470][ T8502] loop2: detected capacity change from 0 to 128 [ 152.527486][ T50] kworker/u8:3: attempt to access beyond end of device [ 152.527486][ T50] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 152.556179][ T8506] 9pnet_fd: Insufficient options for proto=fd [ 152.563643][ T8506] 9pnet_fd: Insufficient options for proto=fd [ 152.611876][ T8510] loop2: detected capacity change from 0 to 1024 [ 152.656835][ T8515] loop2: detected capacity change from 0 to 128 [ 152.716484][ T3381] kworker/u8:7: attempt to access beyond end of device [ 152.716484][ T3381] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 152.799366][ T8517] usb usb8: check_ctrlrecip: process 8517 (syz.2.1632) requesting ep 01 but needs 81 [ 152.810317][ T8517] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 153.042216][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.050079][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.057952][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.065756][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.068599][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.073499][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.089528][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.097316][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.105154][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.112925][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.120775][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.128559][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.136353][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.144130][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.151901][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.159739][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.167469][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.175246][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.182993][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.190924][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: unknown main item tag 0x0 [ 153.199064][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.318246][ T8528] __nla_validate_parse: 3 callbacks suppressed [ 153.318265][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 153.361651][ T8532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1638'. [ 153.420414][ T8531] loop0: detected capacity change from 0 to 8192 [ 153.432931][ T8534] loop1: detected capacity change from 0 to 1024 [ 153.559002][ T8544] loop0: detected capacity change from 0 to 128 [ 153.649200][ T8548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1645'. [ 153.670326][ T3381] kworker/u8:7: attempt to access beyond end of device [ 153.670326][ T3381] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 153.710728][ T8550] loop0: detected capacity change from 0 to 1024 [ 153.730481][ T8550] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 153.752941][ T8550] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 153.765355][ T8550] EXT4-fs (loop0): This should not happen!! Data will be lost [ 153.765355][ T8550] [ 153.775096][ T8550] EXT4-fs (loop0): Total free blocks count 0 [ 153.781109][ T8550] EXT4-fs (loop0): Free/Dirty block details [ 153.787099][ T8550] EXT4-fs (loop0): free_blocks=68451041280 [ 153.793015][ T8550] EXT4-fs (loop0): dirty_blocks=32 [ 153.798389][ T8550] EXT4-fs (loop0): Block reservation details [ 153.804474][ T8550] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 153.812378][ T8558] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 153.824724][ T8558] EXT4-fs (loop0): This should not happen!! Data will be lost [ 153.824724][ T8558] [ 153.884409][ T8564] loop7: detected capacity change from 0 to 16384 [ 153.892056][ T8564] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.903007][ T3356] hid-generic FFFC:0000:FFFFFFFF.0035: hidraw1: HID v0.01 Device [syz0] on syz0 [ 154.027534][ T8577] 9pnet_fd: Insufficient options for proto=fd [ 154.033489][ T8576] loop4: detected capacity change from 0 to 1024 [ 154.070804][ T8581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1658'. [ 154.081117][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1659'. [ 154.165836][ T8594] loop7: detected capacity change from 0 to 16384 [ 154.173935][ T8594] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.189891][ T8590] loop4: detected capacity change from 0 to 8192 [ 154.229833][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 154.247113][ T8600] loop3: detected capacity change from 0 to 128 [ 154.307809][ T28] kworker/u8:1: attempt to access beyond end of device [ 154.307809][ T28] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 154.394120][ T8609] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1671'. [ 154.470676][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1674'. [ 154.526367][ T8621] loop1: detected capacity change from 0 to 8192 [ 154.576251][ T8624] loop7: detected capacity change from 0 to 16384 [ 154.584141][ T8624] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 154.630679][ T8626] 9pnet_fd: Insufficient options for proto=fd [ 154.635187][ T8628] dvmrp0: entered allmulticast mode [ 154.646035][ T8628] dvmrp0: left allmulticast mode [ 154.683231][ T8630] loop2: detected capacity change from 0 to 1024 [ 154.704827][ T8630] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 154.737598][ T8630] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 154.749921][ T8630] EXT4-fs (loop2): This should not happen!! Data will be lost [ 154.749921][ T8630] [ 154.759585][ T8630] EXT4-fs (loop2): Total free blocks count 0 [ 154.765580][ T8630] EXT4-fs (loop2): Free/Dirty block details [ 154.771541][ T8630] EXT4-fs (loop2): free_blocks=68451041280 [ 154.777366][ T8630] EXT4-fs (loop2): dirty_blocks=32 [ 154.782504][ T8630] EXT4-fs (loop2): Block reservation details [ 154.788595][ T8630] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 154.795278][ T8635] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 154.807583][ T8635] EXT4-fs (loop2): This should not happen!! Data will be lost [ 154.807583][ T8635] [ 154.848481][ T8637] loop0: detected capacity change from 0 to 1024 [ 154.886395][ T8637] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 154.908448][ T8637] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 154.920790][ T8637] EXT4-fs (loop0): This should not happen!! Data will be lost [ 154.920790][ T8637] [ 154.930490][ T8637] EXT4-fs (loop0): Total free blocks count 0 [ 154.936536][ T8637] EXT4-fs (loop0): Free/Dirty block details [ 154.942498][ T8637] EXT4-fs (loop0): free_blocks=68451041280 [ 154.948319][ T8637] EXT4-fs (loop0): dirty_blocks=32 [ 154.953433][ T8637] EXT4-fs (loop0): Block reservation details [ 154.959468][ T8637] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 154.971193][ T8642] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 154.983547][ T8642] EXT4-fs (loop0): This should not happen!! Data will be lost [ 154.983547][ T8642] [ 155.007458][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1684'. [ 155.067887][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.077639][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.085421][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.093212][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.101008][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.108782][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.116522][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.124328][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.132078][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.139896][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.147640][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.155397][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.163158][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.170915][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.178677][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.186415][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.194275][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.202032][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.209803][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.217520][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: unknown main item tag 0x0 [ 155.225338][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.235249][ T996] hid-generic FFFC:0000:FFFFFFFF.0036: hidraw0: HID v0.01 Device [syz0] on syz0 [ 155.289753][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 155.314079][ T8652] loop2: detected capacity change from 0 to 1024 [ 155.325729][ T8655] loop7: detected capacity change from 0 to 16384 [ 155.332530][ T8655] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.405640][ T8657] loop4: detected capacity change from 0 to 8192 [ 155.505111][ T8663] loop4: detected capacity change from 0 to 128 [ 155.561688][ T8667] bpf_get_probe_write_proto: 14 callbacks suppressed [ 155.561700][ T8667] syz.2.1694[8667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.581964][ T8667] syz.2.1694[8667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.593539][ T8667] syz.2.1694[8667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.618712][ T50] kworker/u8:3: attempt to access beyond end of device [ 155.618712][ T50] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 155.663385][ T8668] loop1: detected capacity change from 0 to 128 [ 155.753967][ T8678] loop2: detected capacity change from 0 to 1024 [ 155.762031][ T50] kworker/u8:3: attempt to access beyond end of device [ 155.762031][ T50] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 155.781159][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.796795][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.872646][ T8687] loop0: detected capacity change from 0 to 2048 [ 155.879559][ T8687] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.905495][ T8687] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1703: bg 0: block 234: padding at end of block bitmap is not set [ 155.906397][ T8692] loop7: detected capacity change from 0 to 16384 [ 155.921296][ T8687] EXT4-fs (loop0): Remounting filesystem read-only [ 155.929234][ T8692] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 155.950660][ T8687] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 155.960697][ T8687] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 155.976042][ T8687] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 155.994674][ T8687] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 156.007600][ T8687] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 156.070868][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.078793][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.086652][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.094434][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.102192][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.109958][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.117755][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.125536][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.126134][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.133322][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.149384][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.157170][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.164952][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.172715][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.180557][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.188404][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.196260][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.204120][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.211883][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.219640][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: unknown main item tag 0x0 [ 156.227532][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.239440][ T3343] hid-generic FFFC:0000:FFFFFFFF.0037: hidraw0: HID v0.01 Device [syz0] on syz0 [ 156.285468][ T8698] loop3: detected capacity change from 0 to 128 [ 156.351996][ T40] kworker/u8:2: attempt to access beyond end of device [ 156.351996][ T40] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 156.440692][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.446238][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.448586][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.465570][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.465904][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.473379][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.488978][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.496762][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.504539][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.512372][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.520178][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.528264][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.536132][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.543899][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.551690][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.559459][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.567216][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.575027][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.582768][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.590707][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.598465][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: unknown main item tag 0x0 [ 156.608479][ T3356] hid-generic FFFC:0000:FFFFFFFF.0038: hidraw0: HID v0.01 Device [syz0] on syz0 [ 156.652368][ T8715] loop1: detected capacity change from 0 to 1024 [ 156.796686][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 156.796700][ T29] audit: type=1326 audit(1728751309.983:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8725 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 156.828513][ T29] audit: type=1326 audit(1728751310.023:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8725 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 156.851993][ T29] audit: type=1326 audit(1728751310.023:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8725 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 156.875620][ T29] audit: type=1326 audit(1728751310.023:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8725 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 156.898950][ T29] audit: type=1326 audit(1728751310.023:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8725 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 156.929050][ T8729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.939396][ T8729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.153339][ T8731] loop4: detected capacity change from 0 to 1024 [ 157.294760][ T8745] loop4: detected capacity change from 0 to 1024 [ 157.354538][ T8749] loop4: detected capacity change from 0 to 2048 [ 157.368551][ T8749] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.393802][ T8749] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1727: bg 0: block 234: padding at end of block bitmap is not set [ 157.408504][ T8749] EXT4-fs (loop4): Remounting filesystem read-only [ 157.415681][ T8749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 157.425905][ T8749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 157.434823][ T8749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 157.446379][ T8749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 157.470972][ T8749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 157.485250][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.493110][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.500944][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.508684][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.516432][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.524222][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.531956][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.539708][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.547477][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.555340][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.563123][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.570909][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.578712][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.586461][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.594247][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.602004][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.609815][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.617640][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.625384][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: unknown main item tag 0x0 [ 157.634322][ T3343] hid-generic FFFC:0000:FFFFFFFF.0039: hidraw0: HID v0.01 Device [syz0] on syz0 [ 157.638532][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.655691][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.724630][ T29] audit: type=1326 audit(1728751310.913:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 157.764525][ T29] audit: type=1326 audit(1728751310.953:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 157.810541][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.818385][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.826222][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.834016][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.841754][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.849526][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.857340][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.865112][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.872857][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.880641][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.888385][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.896153][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.903955][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.911688][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.919509][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.927244][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.935074][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.942818][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 157.950628][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: unknown main item tag 0x0 [ 158.010082][ T3356] hid-generic FFFC:0000:FFFFFFFF.003A: hidraw0: HID v0.01 Device [syz0] on syz0 [ 158.022180][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.048368][ T29] audit: type=1326 audit(1728751310.983:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 158.071843][ T29] audit: type=1326 audit(1728751310.983:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 158.095289][ T29] audit: type=1326 audit(1728751310.983:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8755 comm="syz.1.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 158.129303][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.198914][ T8760] loop3: detected capacity change from 0 to 1024 [ 158.242750][ T8760] EXT4-fs mount: 50 callbacks suppressed [ 158.242765][ T8760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.250884][ T8765] 9pnet_fd: Insufficient options for proto=fd [ 158.271842][ T8765] 9pnet_fd: Insufficient options for proto=fd [ 158.279401][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.311458][ T3492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.334626][ T8771] loop2: detected capacity change from 0 to 512 [ 158.344051][ T8773] loop0: detected capacity change from 0 to 1024 [ 158.353661][ T8771] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.381146][ T8773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.395222][ T8771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.412322][ T8771] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1736: corrupted inode contents [ 158.412596][ T8782] loop3: detected capacity change from 0 to 128 [ 158.425741][ T5008] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.441840][ T8771] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.1736: mark_inode_dirty error [ 158.453452][ T8771] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1736: corrupted inode contents [ 158.484707][ T8787] syz.0.1739[8787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.484772][ T8787] syz.0.1739[8787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.486339][ T8771] bond1: entered promiscuous mode [ 158.500010][ T8787] syz.0.1739[8787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.507526][ T8771] bond1: entered allmulticast mode [ 158.508583][ T8771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.542002][ T8771] bond1 (unregistering): Released all slaves [ 158.549649][ T28] kworker/u8:1: attempt to access beyond end of device [ 158.549649][ T28] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 158.579872][ T8789] loop3: detected capacity change from 0 to 1024 [ 158.591738][ T8791] loop0: detected capacity change from 0 to 1024 [ 158.600947][ T8789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.615448][ T8791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.634297][ T3492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.645918][ T5008] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.657044][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.673015][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.688717][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.709488][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.718045][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.804167][ T8805] loop1: detected capacity change from 0 to 1024 [ 158.829627][ T8805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.851487][ T5070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.873121][ T8809] loop7: detected capacity change from 0 to 16384 [ 158.879955][ T8809] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.932445][ T8811] loop1: detected capacity change from 0 to 8192 [ 159.010489][ T8815] loop1: detected capacity change from 0 to 1024 [ 159.029701][ T8815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.042635][ T8815] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 159.057718][ T8815] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 159.070198][ T8815] EXT4-fs (loop1): This should not happen!! Data will be lost [ 159.070198][ T8815] [ 159.079875][ T8815] EXT4-fs (loop1): Total free blocks count 0 [ 159.085855][ T8815] EXT4-fs (loop1): Free/Dirty block details [ 159.091763][ T8815] EXT4-fs (loop1): free_blocks=68451041280 [ 159.097611][ T8815] EXT4-fs (loop1): dirty_blocks=32 [ 159.102765][ T8815] EXT4-fs (loop1): Block reservation details [ 159.108799][ T8815] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 159.115287][ T8818] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 159.156496][ T8820] loop1: detected capacity change from 0 to 128 [ 159.165831][ T8822] syz.4.1752[8822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.165957][ T8822] syz.4.1752[8822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.177800][ T8822] syz.4.1752[8822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.216135][ T28] kworker/u8:1: attempt to access beyond end of device [ 159.216135][ T28] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 159.222816][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.247390][ T8826] syz.1.1754[8826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.248953][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.268066][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.275847][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.276682][ T8827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.283589][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.283617][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.307434][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.315271][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.323030][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.330790][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.338548][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.346364][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.354140][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.361976][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.369766][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.377510][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.385266][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.385834][ T8835] loop0: detected capacity change from 0 to 512 [ 159.393009][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.401877][ T8835] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.406949][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: unknown main item tag 0x0 [ 159.433110][ T8827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.444648][ T8839] loop2: detected capacity change from 0 to 1024 [ 159.448455][ T8835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.456712][ T9] hid-generic FFFC:0000:FFFFFFFF.003B: hidraw0: HID v0.01 Device [syz0] on syz0 [ 159.477357][ T8835] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1757: corrupted inode contents [ 159.490513][ T8835] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.1757: mark_inode_dirty error [ 159.492063][ T8839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.520415][ T8835] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.1757: corrupted inode contents [ 159.564217][ T8843] dvmrp0: entered allmulticast mode [ 159.573640][ T8845] loop1: detected capacity change from 0 to 512 [ 159.578703][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.589047][ T8845] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.610952][ T8835] bond1: entered promiscuous mode [ 159.616024][ T8835] bond1: entered allmulticast mode [ 159.621465][ T8835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.631304][ T8845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.647753][ T8835] bond1 (unregistering): Released all slaves [ 159.648505][ T8854] loop3: detected capacity change from 0 to 1024 [ 159.661872][ T8845] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1761: corrupted inode contents [ 159.682559][ T8845] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.1761: mark_inode_dirty error [ 159.697101][ T8845] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1761: corrupted inode contents [ 159.709570][ T8854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.749043][ T8848] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 159.754373][ T8845] bond1: entered promiscuous mode [ 159.764574][ T8848] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 159.768916][ T8845] bond1: entered allmulticast mode [ 159.772234][ T8845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.781176][ T8848] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.781176][ T8848] [ 159.781195][ T8848] EXT4-fs (loop3): Total free blocks count 0 [ 159.808652][ T8848] EXT4-fs (loop3): Free/Dirty block details [ 159.814534][ T8848] EXT4-fs (loop3): free_blocks=68451041280 [ 159.820417][ T8848] EXT4-fs (loop3): dirty_blocks=32 [ 159.825534][ T8848] EXT4-fs (loop3): Block reservation details [ 159.831562][ T8848] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 159.838259][ T8854] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 159.839551][ T5008] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.868293][ T8845] bond1 (unregistering): Released all slaves [ 159.967882][ T5070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.982054][ T8876] loop7: detected capacity change from 0 to 16384 [ 159.989307][ T8876] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.033679][ T8879] loop1: detected capacity change from 0 to 1024 [ 160.036224][ T8881] __nla_validate_parse: 5 callbacks suppressed [ 160.036254][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 160.070196][ T8879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.095233][ T5070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.128679][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1775'. [ 160.186899][ T8890] loop3: detected capacity change from 0 to 512 [ 160.195638][ T8890] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.209914][ T8890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.225210][ T8890] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1777: corrupted inode contents [ 160.238541][ T8890] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.1777: mark_inode_dirty error [ 160.266013][ T8890] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1777: corrupted inode contents [ 160.285649][ T8894] loop1: detected capacity change from 0 to 1024 [ 160.311989][ T8894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.329609][ T8894] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 160.330048][ T8890] bond1: entered promiscuous mode [ 160.349554][ T8890] bond1: entered allmulticast mode [ 160.355712][ T8890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.364363][ T8894] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 160.376688][ T8894] EXT4-fs (loop1): This should not happen!! Data will be lost [ 160.376688][ T8894] [ 160.386336][ T8894] EXT4-fs (loop1): Total free blocks count 0 [ 160.392420][ T8894] EXT4-fs (loop1): Free/Dirty block details [ 160.398374][ T8894] EXT4-fs (loop1): free_blocks=68451041280 [ 160.404249][ T8894] EXT4-fs (loop1): dirty_blocks=32 [ 160.409375][ T8894] EXT4-fs (loop1): Block reservation details [ 160.415361][ T8894] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 160.423041][ T8899] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 160.423900][ T8890] bond1 (unregistering): Released all slaves [ 160.491756][ T3492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.523834][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.537042][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.547665][ T8911] loop3: detected capacity change from 0 to 512 [ 160.554617][ T8911] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.569532][ T8911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.583894][ T8911] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1784: corrupted inode contents [ 160.595907][ T8911] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.1784: mark_inode_dirty error [ 160.607347][ T8911] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.1784: corrupted inode contents [ 160.632669][ T8911] bond1: entered promiscuous mode [ 160.637750][ T8911] bond1: entered allmulticast mode [ 160.643647][ T8911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.653704][ T8911] bond1 (unregistering): Released all slaves [ 160.712204][ T3492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.730371][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 160.807226][ T8921] bpf_get_probe_write_proto: 11 callbacks suppressed [ 160.807238][ T8921] syz.2.1787[8921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.823598][ T8921] syz.2.1787[8921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.835075][ T8921] syz.2.1787[8921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.852795][ T8919] loop0: detected capacity change from 0 to 8192 [ 160.869781][ T8925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.880450][ T8925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.919556][ T8927] loop0: detected capacity change from 0 to 1024 [ 160.930412][ T8929] syz.2.1791[8929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.930470][ T8929] syz.2.1791[8929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.936621][ T8927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.945331][ T8929] syz.2.1791[8929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.955351][ T8927] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 160.984931][ T8933] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1792'. [ 160.991631][ T8927] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 161.007269][ T8933] 1ªX¹¦À: renamed from 60ªX¹¦À [ 161.012481][ T8927] EXT4-fs (loop0): This should not happen!! Data will be lost [ 161.012481][ T8927] [ 161.012513][ T8927] EXT4-fs (loop0): Total free blocks count 0 [ 161.032997][ T8927] EXT4-fs (loop0): Free/Dirty block details [ 161.038995][ T8927] EXT4-fs (loop0): free_blocks=68451041280 [ 161.044831][ T8927] EXT4-fs (loop0): dirty_blocks=32 [ 161.049948][ T8927] EXT4-fs (loop0): Block reservation details [ 161.055921][ T8927] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 161.062475][ T8934] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 161.076124][ T8933] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 161.104594][ T8937] loop1: detected capacity change from 0 to 512 [ 161.127314][ T8937] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 161.150951][ T8937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.165942][ T8937] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1793: corrupted inode contents [ 161.178074][ T8937] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.1793: mark_inode_dirty error [ 161.189698][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.199219][ T8937] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1793: corrupted inode contents [ 161.211074][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.246683][ T8937] bond1: entered promiscuous mode [ 161.251808][ T8937] bond1: entered allmulticast mode [ 161.257279][ T8937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.269577][ T8937] bond1 (unregistering): Released all slaves [ 161.329682][ T5070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.490604][ T8955] loop3: detected capacity change from 0 to 8192 [ 161.794011][ T8960] syz.0.1801[8960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.794198][ T8960] syz.0.1801[8960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.805965][ T8960] syz.0.1801[8960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.843876][ T8962] syz.0.1802[8962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.869261][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.889349][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.041902][ T8968] 9pnet_fd: Insufficient options for proto=fd [ 162.110218][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 162.110232][ T29] audit: type=1326 audit(1728751315.303:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.139753][ T29] audit: type=1326 audit(1728751315.303:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.163629][ T29] audit: type=1326 audit(1728751315.303:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.187195][ T29] audit: type=1326 audit(1728751315.303:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.211677][ T29] audit: type=1326 audit(1728751315.303:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.235289][ T29] audit: type=1326 audit(1728751315.303:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.258742][ T29] audit: type=1326 audit(1728751315.303:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.282223][ T29] audit: type=1326 audit(1728751315.303:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.305803][ T29] audit: type=1326 audit(1728751315.303:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.323946][ T8980] loop1: detected capacity change from 0 to 512 [ 162.329274][ T29] audit: type=1326 audit(1728751315.303:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8971 comm="syz.2.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659f38dff9 code=0x7ffc0000 [ 162.339769][ T8983] loop4: detected capacity change from 0 to 1024 [ 162.361161][ T8980] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.400320][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.400933][ T8986] loop2: detected capacity change from 0 to 1024 [ 162.413488][ T8980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.432662][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.442426][ T8994] loop7: detected capacity change from 0 to 16384 [ 162.444300][ T8976] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1809: corrupted inode contents [ 162.451232][ T8994] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 162.462406][ T8983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.471370][ T8976] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.1809: mark_inode_dirty error [ 162.494210][ T8976] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.1809: corrupted inode contents [ 162.512590][ T8986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.519789][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.541637][ T8976] bond1: entered promiscuous mode [ 162.546755][ T8976] bond1: entered allmulticast mode [ 162.554789][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.555090][ T8976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.587255][ T8976] bond1 (unregistering): Released all slaves [ 162.681912][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.694673][ T8999] usb usb8: check_ctrlrecip: process 8999 (syz.0.1817) requesting ep 01 but needs 81 [ 162.704980][ T8999] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 162.712114][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.734079][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.740377][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.741892][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.757902][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.765702][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.773545][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.781292][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.789136][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.797051][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.804838][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.812680][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.820483][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.832330][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.840114][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.847847][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.855588][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.863386][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.871125][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.878939][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.886681][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: unknown main item tag 0x0 [ 162.895047][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.905122][ T3356] hid-generic FFFC:0000:FFFFFFFF.003C: hidraw0: HID v0.01 Device [syz0] on syz0 [ 162.906230][ T5070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.044638][ T9018] usb usb8: check_ctrlrecip: process 9018 (syz.1.1823) requesting ep 01 but needs 81 [ 163.055421][ T9018] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 163.084815][ T9024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.093452][ T9024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.249466][ T9026] loop2: detected capacity change from 0 to 1024 [ 163.269447][ T9026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.291462][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.311608][ T9030] loop7: detected capacity change from 0 to 16384 [ 163.318593][ T9030] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.369776][ T9032] loop2: detected capacity change from 0 to 2048 [ 163.376359][ T9032] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.399370][ T9032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.516695][ T9040] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1828: bg 0: block 234: padding at end of block bitmap is not set [ 163.531367][ T9040] EXT4-fs (loop2): Remounting filesystem read-only [ 163.553381][ T9044] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1832'. [ 163.563418][ T9044] 1ªX¹¦À: renamed from 60ªX¹¦À [ 163.570387][ T9044] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 163.620812][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 163.635680][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.653507][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.939235][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1837'. [ 163.985197][ T9054] loop3: detected capacity change from 0 to 8192 [ 164.043087][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.052618][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.233012][ T9061] loop4: detected capacity change from 0 to 1024 [ 164.263287][ T9061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.299234][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.334976][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.344974][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.904655][ T9079] loop1: detected capacity change from 0 to 128 [ 164.968033][ T1814] kworker/u8:6: attempt to access beyond end of device [ 164.968033][ T1814] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 165.071574][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.081221][ T9089] FAULT_INJECTION: forcing a failure. [ 165.081221][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.094455][ T9089] CPU: 0 UID: 0 PID: 9089 Comm: syz.1.1854 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 165.105288][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.115340][ T9089] Call Trace: [ 165.118620][ T9089] [ 165.121548][ T9089] dump_stack_lvl+0xf2/0x150 [ 165.126144][ T9089] dump_stack+0x15/0x20 [ 165.130381][ T9089] should_fail_ex+0x223/0x230 [ 165.135068][ T9089] should_fail+0xb/0x10 [ 165.139247][ T9089] should_fail_usercopy+0x1a/0x20 [ 165.144339][ T9089] _copy_from_iter+0xd3/0xd20 [ 165.149041][ T9089] ? kmalloc_reserve+0x16e/0x190 [ 165.154017][ T9089] ? __build_skb_around+0x196/0x1f0 [ 165.159260][ T9089] ? __alloc_skb+0x21f/0x310 [ 165.163844][ T9089] ? __virt_addr_valid+0x1ed/0x250 [ 165.169012][ T9089] ? __check_object_size+0x364/0x520 [ 165.174405][ T9089] netlink_sendmsg+0x460/0x6e0 [ 165.179187][ T9089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.184536][ T9089] __sock_sendmsg+0x140/0x180 [ 165.189229][ T9089] ____sys_sendmsg+0x312/0x410 [ 165.193999][ T9089] __sys_sendmsg+0x1d9/0x270 [ 165.198618][ T9089] __x64_sys_sendmsg+0x46/0x50 [ 165.203409][ T9089] x64_sys_call+0x2689/0x2d60 [ 165.208084][ T9089] do_syscall_64+0xc9/0x1c0 [ 165.212593][ T9089] ? clear_bhb_loop+0x55/0xb0 [ 165.217269][ T9089] ? clear_bhb_loop+0x55/0xb0 [ 165.222180][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.228075][ T9089] RIP: 0033:0x7f5ed52adff9 [ 165.232499][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.252154][ T9089] RSP: 002b:00007f5ed3f27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.260595][ T9089] RAX: ffffffffffffffda RBX: 00007f5ed5465f80 RCX: 00007f5ed52adff9 [ 165.268667][ T9089] RDX: 0000000000040000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 165.276696][ T9089] RBP: 00007f5ed3f27090 R08: 0000000000000000 R09: 0000000000000000 [ 165.284684][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.292775][ T9089] R13: 0000000000000000 R14: 00007f5ed5465f80 R15: 00007ffd80dcdad8 [ 165.300760][ T9089] [ 165.301476][ T9091] loop4: detected capacity change from 0 to 8192 [ 165.334102][ T9095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.344553][ T9095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.409857][ T9094] usb usb8: check_ctrlrecip: process 9094 (syz.2.1852) requesting ep 01 but needs 81 [ 165.412553][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.420962][ T9094] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 165.435145][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.530039][ T9113] loop2: detected capacity change from 0 to 2048 [ 165.536631][ T9113] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.549944][ T9113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.666380][ T9117] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1863: bg 0: block 234: padding at end of block bitmap is not set [ 165.681129][ T9117] EXT4-fs (loop2): Remounting filesystem read-only [ 166.062641][ T9125] loop4: detected capacity change from 0 to 1024 [ 166.100047][ T9125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.151295][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.210990][ T9129] loop4: detected capacity change from 0 to 2048 [ 166.217689][ T9129] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.246677][ T9133] bpf_get_probe_write_proto: 14 callbacks suppressed [ 166.246694][ T9133] syz.3.1869[9133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.255674][ T9129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.279375][ T9133] syz.3.1869[9133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.279431][ T9133] syz.3.1869[9133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.294964][ T9133] SELinux: policydb version -1682183729 does not match my version range 15-33 [ 166.317115][ T9133] SELinux: failed to load policy [ 166.322501][ T9129] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1868: bg 0: block 234: padding at end of block bitmap is not set [ 166.337439][ T9129] EXT4-fs (loop4): Remounting filesystem read-only [ 166.348024][ T9129] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 166.365220][ T9129] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 166.375208][ T9129] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 166.393189][ T9129] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 166.404981][ T9129] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 166.430403][ T9140] syz.3.1871[9140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.430628][ T9140] syz.3.1871[9140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.469361][ T9140] syz.3.1871[9140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.560743][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'. [ 166.630746][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.638638][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.646382][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.654157][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.662052][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.669828][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.677634][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.685390][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.693219][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.700953][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.708722][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.716546][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.724312][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.732101][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.738760][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.739863][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.755890][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.763711][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.771557][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.779526][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: unknown main item tag 0x0 [ 166.787619][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.814093][ T9151] loop1: detected capacity change from 0 to 1024 [ 166.858649][ T3342] hid-generic FFFC:0000:FFFFFFFF.003D: hidraw0: HID v0.01 Device [syz0] on syz0 [ 166.879391][ T9151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.918602][ T5070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.931767][ T9157] loop3: detected capacity change from 0 to 1024 [ 166.952076][ T9157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.980183][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 167.002102][ T3492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.070315][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.110065][ T9167] FAULT_INJECTION: forcing a failure. [ 167.110065][ T9167] name failslab, interval 1, probability 0, space 0, times 0 [ 167.110470][ T9169] syz.4.1882[9169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.122903][ T9167] CPU: 1 UID: 0 PID: 9167 Comm: syz.3.1883 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 167.122934][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.154999][ T9167] Call Trace: [ 167.158317][ T9167] [ 167.161302][ T9167] dump_stack_lvl+0xf2/0x150 [ 167.165968][ T9167] dump_stack+0x15/0x20 [ 167.168859][ T9169] syz.4.1882[9169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.170194][ T9167] should_fail_ex+0x223/0x230 [ 167.170291][ T9169] syz.4.1882[9169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.181562][ T9167] ? security_inode_alloc+0x37/0x100 [ 167.202830][ T9167] should_failslab+0x8f/0xb0 [ 167.207424][ T9167] kmem_cache_alloc_noprof+0x4c/0x290 [ 167.212857][ T9167] security_inode_alloc+0x37/0x100 [ 167.218000][ T9167] inode_init_always_gfp+0x444/0x490 [ 167.223352][ T9167] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 167.229196][ T9167] alloc_inode+0x82/0x160 [ 167.233529][ T9167] new_inode+0x1e/0x100 [ 167.237781][ T9167] hugetlbfs_get_inode+0x82/0x2b0 [ 167.242826][ T9167] hugetlb_file_setup+0x188/0x3c0 [ 167.247984][ T9167] ksys_mmap_pgoff+0x172/0x330 [ 167.252788][ T9167] x64_sys_call+0x1884/0x2d60 [ 167.257523][ T9167] do_syscall_64+0xc9/0x1c0 [ 167.262120][ T9167] ? clear_bhb_loop+0x55/0xb0 [ 167.266887][ T9167] ? clear_bhb_loop+0x55/0xb0 [ 167.271698][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.277662][ T9167] RIP: 0033:0x7f2e0a2edff9 [ 167.282111][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.301858][ T9167] RSP: 002b:00007f2e08f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 167.310296][ T9167] RAX: ffffffffffffffda RBX: 00007f2e0a4a5f80 RCX: 00007f2e0a2edff9 [ 167.318280][ T9167] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000000020000000 [ 167.326272][ T9167] RBP: 00007f2e08f67090 R08: ffffffffffffffff R09: 0000000000000000 [ 167.334258][ T9167] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 167.342238][ T9167] R13: 0000000000000000 R14: 00007f2e0a4a5f80 R15: 00007ffdeb7446e8 [ 167.350232][ T9167] [ 167.392266][ T9178] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1887'. [ 167.401233][ T9178] 0ªX¹¦À: renamed from 61ªX¹¦À [ 167.408008][ T9178] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 167.484157][ T9184] loop4: detected capacity change from 0 to 512 [ 167.502274][ T9184] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.521166][ T9184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.545189][ T9184] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.1890: corrupted inode contents [ 167.559723][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.580592][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.592120][ T9192] loop0: detected capacity change from 0 to 512 [ 167.599573][ T9184] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.1890: mark_inode_dirty error [ 167.619547][ T9184] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.1890: corrupted inode contents [ 167.650318][ T9192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.660728][ T9184] bond1: entered promiscuous mode [ 167.663016][ T9192] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.667833][ T9184] bond1: entered allmulticast mode [ 167.711070][ T9184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.735860][ T9184] bond1 (unregistering): Released all slaves [ 167.823945][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.884036][ T5008] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.903442][ T9201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.913283][ T9201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.927566][ T9203] syz.4.1896[9203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.964706][ T9207] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1898'. [ 167.986511][ T9207] 0ªX¹¦À: renamed from 61ªX¹¦À [ 167.993261][ T9207] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 168.201310][ T9212] usb usb8: check_ctrlrecip: process 9212 (syz.3.1900) requesting ep 01 but needs 81 [ 168.211127][ T9212] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 168.277848][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.285651][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.293636][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.301441][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.309309][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.317053][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.324561][ T9222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.324843][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.340941][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.348719][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.356494][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.364351][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.372106][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.379879][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.387673][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.390525][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 168.395455][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.412078][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.419812][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.427665][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.435454][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: unknown main item tag 0x0 [ 168.443357][ T9222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.444303][ T996] hid-generic FFFC:0000:FFFFFFFF.003E: hidraw0: HID v0.01 Device [syz0] on syz0 [ 168.464544][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 168.464555][ T29] audit: type=1326 audit(1728751321.653:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 168.495709][ T29] audit: type=1326 audit(1728751321.693:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 168.519349][ T29] audit: type=1326 audit(1728751321.693:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 168.542849][ T29] audit: type=1326 audit(1728751321.693:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 168.567465][ T9224] serio: Serial port ptm0 [ 168.572060][ T29] audit: type=1326 audit(1728751321.763:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 168.595604][ T29] audit: type=1326 audit(1728751321.763:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 168.620811][ T29] audit: type=1326 audit(1728751321.813:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 168.644136][ T29] audit: type=1326 audit(1728751321.813:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 168.667672][ T29] audit: type=1326 audit(1728751321.813:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9220 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ed52adff9 code=0x7ffc0000 [ 168.670007][ T9226] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1905'. [ 168.701075][ T9226] 0ªX¹¦À: renamed from 61ªX¹¦À [ 168.707606][ T9226] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 168.923174][ T9233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.932090][ T9233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.136861][ T9235] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1909'. [ 169.146967][ T9235] 1ªX¹¦À: renamed from 60ªX¹¦À [ 169.153738][ T9235] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 169.192894][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.203063][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.477505][ T9239] loop4: detected capacity change from 0 to 1024 [ 169.491636][ T9239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.507693][ T9239] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 169.522633][ T9239] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 169.534922][ T9239] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.534922][ T9239] [ 169.544591][ T9239] EXT4-fs (loop4): Total free blocks count 0 [ 169.550601][ T9239] EXT4-fs (loop4): Free/Dirty block details [ 169.556579][ T9239] EXT4-fs (loop4): free_blocks=68451041280 [ 169.562411][ T9239] EXT4-fs (loop4): dirty_blocks=32 [ 169.567592][ T9239] EXT4-fs (loop4): Block reservation details [ 169.573591][ T9239] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 169.580274][ T9243] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 169.660593][ T9249] loop7: detected capacity change from 0 to 16384 [ 169.667605][ T9249] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.752186][ T9252] loop1: detected capacity change from 0 to 2048 [ 169.760375][ T9252] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.780231][ T29] audit: type=1326 audit(1728751322.963:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9250 comm="syz.4.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bf7bdff9 code=0x7ffc0000 [ 169.889709][ T9258] loop4: detected capacity change from 0 to 8192 [ 169.957502][ T9252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.079163][ T9264] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1916: bg 0: block 234: padding at end of block bitmap is not set [ 170.091584][ T5024] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.093719][ T9264] EXT4-fs (loop1): Remounting filesystem read-only [ 170.687160][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.696478][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.814070][ T9279] loop7: detected capacity change from 0 to 16384 [ 170.820876][ T9279] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.943870][ T9285] loop4: detected capacity change from 0 to 8192 [ 170.979560][ T9287] 9pnet_fd: Insufficient options for proto=fd [ 171.235664][ T9296] 9pnet_fd: Insufficient options for proto=fd [ 171.258003][ T9298] loop1: detected capacity change from 0 to 128 [ 171.316312][ T40] kworker/u8:2: attempt to access beyond end of device [ 171.316312][ T40] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 171.347824][ T9303] bpf_get_probe_write_proto: 11 callbacks suppressed [ 171.347843][ T9303] syz.1.1937[9303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.355934][ T9303] syz.1.1937[9303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.367391][ T9303] syz.1.1937[9303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.369812][ T9305] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1938'. [ 171.400603][ T9305] 1ªX¹¦À: renamed from 60ªX¹¦À [ 171.407051][ T9305] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 171.440854][ T9307] loop0: detected capacity change from 0 to 128 [ 171.463672][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'. [ 171.508974][ T28] kworker/u8:1: attempt to access beyond end of device [ 171.508974][ T28] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 171.932569][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.941445][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.007957][ T9320] loop2: detected capacity change from 0 to 512 [ 172.019807][ T9320] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.032860][ T9320] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 172.091514][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.100778][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.127788][ T9320] Process accounting resumed [ 172.136476][ T9330] loop3: detected capacity change from 0 to 128 [ 172.194892][ T9336] syz.1.1949[9336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.194943][ T9336] syz.1.1949[9336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.206528][ T9336] syz.1.1949[9336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.208000][ T1814] kworker/u8:6: attempt to access beyond end of device [ 172.208000][ T1814] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 172.260763][ T9339] loop3: detected capacity change from 0 to 1024 [ 172.281796][ T9343] 9pnet_fd: Insufficient options for proto=fd [ 172.306152][ T9347] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1953'. [ 172.315317][ T9347] 0ªX¹¦À: renamed from 61ªX¹¦À [ 172.321863][ T9347] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 172.670385][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.674046][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.678252][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.694449][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.702227][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.710052][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.717766][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.725559][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.733306][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.741063][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.748852][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.756605][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.764368][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.772108][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.779836][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.787570][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.795422][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.803228][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.810975][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.818821][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: unknown main item tag 0x0 [ 172.826640][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.828312][ T3356] hid-generic FFFC:0000:FFFFFFFF.003F: hidraw0: HID v0.01 Device [syz0] on syz0 [ 172.890082][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'. [ 172.962568][ T9366] loop1: detected capacity change from 0 to 128 [ 172.998703][ T9368] loop2: detected capacity change from 0 to 512 [ 173.007053][ T9368] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.024548][ T3381] kworker/u8:7: attempt to access beyond end of device [ 173.024548][ T3381] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 173.032603][ T9368] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1961: corrupted inode contents [ 173.050340][ T9368] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.1961: mark_inode_dirty error [ 173.061991][ T9368] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.1961: corrupted inode contents [ 173.067854][ T9373] syz.1.1962[9373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.073977][ T9373] syz.1.1962[9373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.085409][ T9373] syz.1.1962[9373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.102738][ T9368] bond1: entered promiscuous mode [ 173.119242][ T9368] bond1: entered allmulticast mode [ 173.124633][ T9368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.138498][ T9368] bond1 (unregistering): Released all slaves [ 173.159805][ T9379] loop1: detected capacity change from 0 to 2048 [ 173.166484][ T9379] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.167289][ T9381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.181443][ T9381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.209687][ T9385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.219340][ T9385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.314058][ T9387] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1964: bg 0: block 234: padding at end of block bitmap is not set [ 173.329439][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1967'. [ 173.333697][ T9387] EXT4-fs (loop1): Remounting filesystem read-only [ 173.402301][ T9392] loop4: detected capacity change from 0 to 128 [ 173.468695][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 173.468711][ T29] audit: type=1400 audit(1728751326.663:2272): avc: denied { getopt } for pid=9395 comm="syz.0.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.504081][ T40] kworker/u8:2: attempt to access beyond end of device [ 173.504081][ T40] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 173.574751][ T29] audit: type=1326 audit(1728751326.763:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 173.575877][ T9403] syz.0.1973[9403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.599130][ T29] audit: type=1326 audit(1728751326.763:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 173.634148][ T29] audit: type=1326 audit(1728751326.763:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 173.634678][ T9406] FAULT_INJECTION: forcing a failure. [ 173.634678][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.657688][ T29] audit: type=1326 audit(1728751326.793:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 173.670711][ T9406] CPU: 0 UID: 0 PID: 9406 Comm: syz.4.1972 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 173.670742][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.670755][ T9406] Call Trace: [ 173.670762][ T9406] [ 173.670786][ T9406] dump_stack_lvl+0xf2/0x150 [ 173.670866][ T9406] dump_stack+0x15/0x20 [ 173.670883][ T9406] should_fail_ex+0x223/0x230 [ 173.694338][ T29] audit: type=1326 audit(1728751326.793:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 173.704976][ T9406] should_fail+0xb/0x10 [ 173.715107][ T29] audit: type=1326 audit(1728751326.793:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 173.718357][ T9406] should_fail_usercopy+0x1a/0x20 [ 173.721303][ T29] audit: type=1326 audit(1728751326.793:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 173.725955][ T9406] _copy_to_iter+0xd3/0xd20 [ 173.725994][ T9406] ? memcg_list_lru_alloc+0xd2/0x740 [ 173.730149][ T29] audit: type=1326 audit(1728751326.793:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 173.734785][ T9406] ? __virt_addr_valid+0x1ed/0x250 [ 173.758265][ T29] audit: type=1326 audit(1728751326.793:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9402 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe9a7dff9 code=0x7ffc0000 [ 173.762350][ T9406] ? __check_object_size+0x364/0x520 [ 173.881209][ T9406] __skb_datagram_iter+0x2d9/0x610 [ 173.886355][ T9406] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 173.892035][ T9406] skb_copy_datagram_iter+0x41/0x130 [ 173.897362][ T9406] unix_stream_read_actor+0x44/0x70 [ 173.902680][ T9406] unix_stream_read_generic+0x6c7/0x1470 [ 173.908424][ T9406] ? selinux_socket_recvmsg+0x19c/0x1d0 [ 173.914058][ T9406] unix_stream_recvmsg+0xc4/0xf0 [ 173.919021][ T9406] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 173.925028][ T9406] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 173.930708][ T9406] sock_recvmsg+0x13f/0x170 [ 173.935243][ T9406] ____sys_recvmsg+0xf9/0x280 [ 173.939947][ T9406] __sys_recvmsg+0x1da/0x270 [ 173.944575][ T9406] __x64_sys_recvmsg+0x46/0x50 [ 173.949422][ T9406] x64_sys_call+0xb84/0x2d60 [ 173.954131][ T9406] do_syscall_64+0xc9/0x1c0 [ 173.958657][ T9406] ? clear_bhb_loop+0x55/0xb0 [ 173.963395][ T9406] ? clear_bhb_loop+0x55/0xb0 [ 173.968116][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.974081][ T9406] RIP: 0033:0x7f80bf7bdff9 [ 173.978518][ T9406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.998151][ T9406] RSP: 002b:00007f80be410038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 174.006648][ T9406] RAX: ffffffffffffffda RBX: 00007f80bf976058 RCX: 00007f80bf7bdff9 [ 174.014663][ T9406] RDX: 0000000040000100 RSI: 0000000020001140 RDI: 0000000000000005 [ 174.022635][ T9406] RBP: 00007f80be410090 R08: 0000000000000000 R09: 0000000000000000 [ 174.030700][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.038745][ T9406] R13: 0000000000000001 R14: 00007f80bf976058 R15: 00007ffc325f5d28 [ 174.046810][ T9406] [ 174.063465][ T9409] loop0: detected capacity change from 0 to 512 [ 174.076455][ T9409] EXT4-fs: Ignoring removed orlov option [ 174.136958][ T9409] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.148586][ T9409] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 174.158714][ T9409] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1975: Corrupt directory, running e2fsck is recommended [ 174.196466][ T9409] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 174.204584][ T9409] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1975: corrupted in-inode xattr: invalid ea_ino [ 174.232210][ T9421] FAULT_INJECTION: forcing a failure. [ 174.232210][ T9421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.245396][ T9421] CPU: 0 UID: 0 PID: 9421 Comm: syz.1.1978 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 174.256123][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.266203][ T9421] Call Trace: [ 174.269481][ T9421] [ 174.272408][ T9421] dump_stack_lvl+0xf2/0x150 [ 174.277002][ T9421] dump_stack+0x15/0x20 [ 174.281161][ T9421] should_fail_ex+0x223/0x230 [ 174.285871][ T9421] should_fail+0xb/0x10 [ 174.290070][ T9421] should_fail_usercopy+0x1a/0x20 [ 174.295353][ T9421] _copy_from_user+0x1e/0xd0 [ 174.299957][ T9421] __se_sys_mount+0x119/0x2d0 [ 174.304745][ T9421] ? ksys_write+0x17a/0x1b0 [ 174.309321][ T9421] __x64_sys_mount+0x67/0x80 [ 174.313973][ T9421] x64_sys_call+0x203e/0x2d60 [ 174.318671][ T9421] do_syscall_64+0xc9/0x1c0 [ 174.323189][ T9421] ? clear_bhb_loop+0x55/0xb0 [ 174.327976][ T9421] ? clear_bhb_loop+0x55/0xb0 [ 174.332807][ T9421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.338726][ T9421] RIP: 0033:0x7f5ed52adff9 [ 174.343151][ T9421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.362821][ T9421] RSP: 002b:00007f5ed3f27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.371334][ T9421] RAX: ffffffffffffffda RBX: 00007f5ed5465f80 RCX: 00007f5ed52adff9 [ 174.379328][ T9421] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 174.387409][ T9421] RBP: 00007f5ed3f27090 R08: 0000000020001340 R09: 0000000000000000 [ 174.395381][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.403360][ T9421] R13: 0000000000000000 R14: 00007f5ed5465f80 R15: 00007ffd80dcdad8 [ 174.411347][ T9421] [ 174.418876][ T9409] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1975: couldn't read orphan inode 15 (err -117) [ 174.467183][ T9408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1975'. [ 174.479758][ T9408] (unnamed net_device) (uninitialized): option ad_select: invalid value (36) [ 174.495535][ T9408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9408 comm=syz.0.1975 [ 174.507939][ T9408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9408 comm=syz.0.1975 [ 174.533408][ T9424] loop4: detected capacity change from 0 to 512 [ 174.550686][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 174.564187][ T9409] bond0: (slave team0): Releasing backup interface [ 174.591109][ T9424] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.628304][ T9409] team0 (unregistering): Port device team_slave_0 removed [ 174.640131][ T9409] team0 (unregistering): Port device team_slave_1 removed [ 174.678368][ T9431] loop1: detected capacity change from 0 to 128 [ 174.782108][ T9433] SELinux: policydb string SE Le· does not match my string SE Linux [ 174.790610][ T9433] SELinux: failed to load policy [ 174.792049][ T40] kworker/u8:2: attempt to access beyond end of device [ 174.792049][ T40] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 174.820988][ T9435] loop4: detected capacity change from 0 to 128 [ 174.875587][ T9439] loop0: detected capacity change from 0 to 1024 [ 174.884912][ T1814] kworker/u8:6: attempt to access beyond end of device [ 174.884912][ T1814] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 174.920569][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.971627][ T9447] loop2: detected capacity change from 0 to 1024 [ 174.988388][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.001807][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 175.014136][ T9447] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 175.035332][ T9447] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 175.047752][ T9447] EXT4-fs (loop2): This should not happen!! Data will be lost [ 175.047752][ T9447] [ 175.057463][ T9447] EXT4-fs (loop2): Total free blocks count 0 [ 175.063488][ T9447] EXT4-fs (loop2): Free/Dirty block details [ 175.069439][ T9447] EXT4-fs (loop2): free_blocks=68451041280 [ 175.075260][ T9447] EXT4-fs (loop2): dirty_blocks=32 [ 175.080437][ T9447] EXT4-fs (loop2): Block reservation details [ 175.086434][ T9447] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 175.097496][ T9447] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 175.109888][ T9447] EXT4-fs (loop2): This should not happen!! Data will be lost [ 175.109888][ T9447] [ 175.262458][ T9458] loop0: detected capacity change from 0 to 8192 [ 175.275606][ T9460] loop2: detected capacity change from 0 to 8192 [ 175.319243][ T9462] loop2: detected capacity change from 0 to 128 [ 175.334898][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.347944][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.397964][ T3381] kworker/u8:7: attempt to access beyond end of device [ 175.397964][ T3381] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 175.427927][ T9466] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1996'. [ 175.437069][ T9466] 0ªX¹¦À: renamed from 61ªX¹¦À [ 175.443760][ T9466] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 175.764554][ T9474] loop1: detected capacity change from 0 to 1024 [ 176.406102][ T9492] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2006'. [ 176.417554][ T9492] 1ªX¹¦À: renamed from 60ªX¹¦À [ 176.424703][ T9492] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 176.445824][ T9494] loop2: detected capacity change from 0 to 128 [ 176.492717][ T9496] loop4: detected capacity change from 0 to 1024 [ 176.526956][ T28] kworker/u8:1: attempt to access beyond end of device [ 176.526956][ T28] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 176.581272][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.590787][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.598578][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.606408][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.614185][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.622032][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.629875][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.637637][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.645384][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.653519][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.661276][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.669104][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.676917][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.684725][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.692542][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.700305][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.708207][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.716149][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.723910][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.731660][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: unknown main item tag 0x0 [ 176.739965][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.779849][ T9505] loop1: detected capacity change from 0 to 1024 [ 176.798596][ T3356] hid-generic FFFC:0000:FFFFFFFF.0040: hidraw0: HID v0.01 Device [syz0] on syz0 [ 176.804973][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 176.841029][ T9512] bpf_get_probe_write_proto: 5 callbacks suppressed [ 176.841042][ T9512] syz.0.2013[9512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.847689][ T9512] syz.0.2013[9512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.859140][ T9512] syz.0.2013[9512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.947233][ T9516] ALSA: seq fatal error: cannot create timer (-22) [ 177.634766][ T9530] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2018'. [ 177.643759][ T9530] 1ªX¹¦À: renamed from 60ªX¹¦À [ 177.650846][ T9530] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 177.709880][ T9532] loop2: detected capacity change from 0 to 128 [ 177.760367][ T9536] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2021'. [ 177.777021][ T9536] 1ªX¹¦À: renamed from 60ªX¹¦À [ 177.782845][ T9538] FAULT_INJECTION: forcing a failure. [ 177.782845][ T9538] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 177.796115][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.0.2022 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 177.806832][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.816883][ T9538] Call Trace: [ 177.820157][ T9538] [ 177.823106][ T9538] dump_stack_lvl+0xf2/0x150 [ 177.827701][ T9538] dump_stack+0x15/0x20 [ 177.831862][ T9538] should_fail_ex+0x223/0x230 [ 177.836619][ T9538] should_fail_alloc_page+0xfd/0x110 [ 177.841948][ T9538] __alloc_pages_noprof+0x109/0x340 [ 177.847152][ T9538] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 177.852563][ T9538] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 177.858030][ T9538] handle_mm_fault+0xdbe/0x2a80 [ 177.862944][ T9538] exc_page_fault+0x296/0x650 [ 177.867655][ T9538] asm_exc_page_fault+0x26/0x30 [ 177.872563][ T9538] RIP: 0010:__put_user_4+0x11/0x20 [ 177.877785][ T9538] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 177.897392][ T9538] RSP: 0018:ffffc90009d37e88 EFLAGS: 00050202 [ 177.903464][ T9538] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000020004080 [ 177.911439][ T9538] RDX: ffff8881020f0000 RSI: 0000000000000006 RDI: 0000000000000000 [ 177.919430][ T9538] RBP: 0000000000000000 R08: ffffffff84137354 R09: 0000000000000000 [ 177.927396][ T9538] R10: 0001ffffffffffff R11: 000188811bb98727 R12: 0000000020004080 [ 177.935377][ T9538] R13: 0000000000000000 R14: 0000000000000018 R15: 0000000000000005 [ 177.943492][ T9538] ? __sys_socketpair+0xa4/0x430 [ 177.948457][ T9538] __sys_socketpair+0xba/0x430 [ 177.953245][ T9538] ? ksys_write+0x17a/0x1b0 [ 177.957837][ T9538] __x64_sys_socketpair+0x52/0x60 [ 177.962870][ T9538] x64_sys_call+0x1c1e/0x2d60 [ 177.967571][ T9538] do_syscall_64+0xc9/0x1c0 [ 177.972084][ T9538] ? clear_bhb_loop+0x55/0xb0 [ 177.976834][ T9538] ? clear_bhb_loop+0x55/0xb0 [ 177.981604][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.987546][ T9538] RIP: 0033:0x7fcbe9a7dff9 [ 177.991981][ T9538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.011727][ T9538] RSP: 002b:00007fcbe86f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 178.020137][ T9538] RAX: ffffffffffffffda RBX: 00007fcbe9c35f80 RCX: 00007fcbe9a7dff9 [ 178.028153][ T9538] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 178.036139][ T9538] RBP: 00007fcbe86f7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.044127][ T9538] R10: 0000000020004080 R11: 0000000000000246 R12: 0000000000000001 [ 178.052100][ T9538] R13: 0000000000000000 R14: 00007fcbe9c35f80 R15: 00007ffe029af638 [ 178.060080][ T9538] [ 178.064474][ T28] kworker/u8:1: attempt to access beyond end of device [ 178.064474][ T28] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 178.080491][ T9540] loop0: detected capacity change from 0 to 128 [ 178.116161][ T9536] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 178.143051][ T9540] ext4 filesystem being mounted at /289/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.194118][ T9538] bridge_slave_1: left allmulticast mode [ 178.199817][ T9538] bridge_slave_1: left promiscuous mode [ 178.205620][ T9538] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.236465][ T9538] bridge_slave_0: left allmulticast mode [ 178.242292][ T9538] bridge_slave_0: left promiscuous mode [ 178.247972][ T9538] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.360566][ T9553] loop1: detected capacity change from 0 to 512 [ 178.383557][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.391417][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.399210][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.406952][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.414901][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.422662][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.430652][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.438475][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.446242][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.454057][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.461823][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.469576][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.477366][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.485139][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.492886][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.500650][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.508519][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.510235][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.516243][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.532418][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: unknown main item tag 0x0 [ 178.544082][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.552308][ T3356] hid-generic FFFC:0000:FFFFFFFF.0041: hidraw0: HID v0.01 Device [syz0] on syz0 [ 178.556546][ T9553] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.581908][ T9547] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 178.606555][ T9546] Process accounting resumed [ 178.627334][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 178.980487][ T9566] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2030'. [ 178.989619][ T9566] 0ªX¹¦À: renamed from 61ªX¹¦À [ 178.996111][ T9566] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 179.035720][ T9568] FAULT_INJECTION: forcing a failure. [ 179.035720][ T9568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.048883][ T9568] CPU: 1 UID: 0 PID: 9568 Comm: syz.2.2031 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 179.059678][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.069732][ T9568] Call Trace: [ 179.073009][ T9568] [ 179.075930][ T9568] dump_stack_lvl+0xf2/0x150 [ 179.080550][ T9568] dump_stack+0x15/0x20 [ 179.084725][ T9568] should_fail_ex+0x223/0x230 [ 179.089534][ T9568] should_fail+0xb/0x10 [ 179.093761][ T9568] should_fail_usercopy+0x1a/0x20 [ 179.098807][ T9568] _copy_from_iter+0xd3/0xd20 [ 179.103594][ T9568] ? __rcu_read_unlock+0x4e/0x70 [ 179.108609][ T9568] ? avc_has_perm_noaudit+0x1cc/0x210 [ 179.113999][ T9568] copy_page_from_iter+0x14f/0x280 [ 179.119186][ T9568] pipe_write+0x444/0xd20 [ 179.123526][ T9568] vfs_write+0x76a/0x910 [ 179.127860][ T9568] ? __pfx_pipe_write+0x10/0x10 [ 179.132762][ T9568] ksys_write+0xeb/0x1b0 [ 179.137060][ T9568] __x64_sys_write+0x42/0x50 [ 179.141672][ T9568] x64_sys_call+0x27dd/0x2d60 [ 179.146372][ T9568] do_syscall_64+0xc9/0x1c0 [ 179.150913][ T9568] ? clear_bhb_loop+0x55/0xb0 [ 179.155622][ T9568] ? clear_bhb_loop+0x55/0xb0 [ 179.160312][ T9568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.166225][ T9568] RIP: 0033:0x7f659f38cadf [ 179.170648][ T9568] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 179.190262][ T9568] RSP: 002b:00007f659e004d30 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 179.198721][ T9568] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f659f38cadf [ 179.206870][ T9568] RDX: 0000000000000029 RSI: 00007f659e004f30 RDI: 0000000000000002 [ 179.214930][ T9568] RBP: 00007f659e004f30 R08: 0000000000000000 R09: 0000000000000000 [ 179.222896][ T9568] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000029 [ 179.230866][ T9568] R13: 00007f659f51b620 R14: 0000000000000029 R15: 00007f659f51cc80 [ 179.238944][ T9568] [ 179.272762][ T9570] loop2: detected capacity change from 0 to 128 [ 179.332537][ T3381] kworker/u8:7: attempt to access beyond end of device [ 179.332537][ T3381] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 179.528249][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 179.528267][ T29] audit: type=1400 audit(1728751332.663:2326): avc: denied { write } for pid=9573 comm="syz.0.2033" path="socket:[25898]" dev="sockfs" ino=25898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.573300][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2036'. [ 179.587643][ T9583] 9pnet_fd: Insufficient options for proto=fd [ 179.611966][ T29] audit: type=1400 audit(1728751332.753:2327): avc: denied { sqpoll } for pid=9582 comm="syz.0.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 179.688971][ T9583] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 179.693461][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.714923][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.731648][ T9583] loop0: detected capacity change from 0 to 512 [ 179.749366][ T9590] loop4: detected capacity change from 0 to 512 [ 179.755979][ T9583] EXT4-fs error (device loop0): __ext4_iget:4952: inode #11: block 16: comm syz.0.2036: invalid block [ 179.773725][ T9583] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.2036: couldn't read orphan inode 11 (err -117) [ 179.794497][ T9583] EXT4-fs (loop0): 1 truncate cleaned up [ 179.798155][ T9595] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2041'. [ 179.809548][ T9595] 0ªX¹¦À: renamed from 61ªX¹¦À [ 179.815184][ T9583] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.827178][ T9590] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.839471][ T9590] FAULT_INJECTION: forcing a failure. [ 179.839471][ T9590] name failslab, interval 1, probability 0, space 0, times 0 [ 179.852102][ T9590] CPU: 1 UID: 0 PID: 9590 Comm: syz.4.2039 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 179.862790][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.872936][ T9590] Call Trace: [ 179.876214][ T9590] [ 179.879226][ T9590] dump_stack_lvl+0xf2/0x150 [ 179.883815][ T9590] dump_stack+0x15/0x20 [ 179.888012][ T9590] should_fail_ex+0x223/0x230 [ 179.892722][ T9590] ? create_new_namespaces+0x3c/0x430 [ 179.898151][ T9590] should_failslab+0x8f/0xb0 [ 179.902749][ T9590] kmem_cache_alloc_noprof+0x4c/0x290 [ 179.908202][ T9590] create_new_namespaces+0x3c/0x430 [ 179.913470][ T9590] ? security_capable+0x81/0x90 [ 179.918328][ T9590] unshare_nsproxy_namespaces+0xe6/0x120 [ 179.924070][ T9590] ksys_unshare+0x3c9/0x6e0 [ 179.928619][ T9590] __x64_sys_unshare+0x1f/0x30 [ 179.933422][ T9590] x64_sys_call+0x2c8d/0x2d60 [ 179.938132][ T9590] do_syscall_64+0xc9/0x1c0 [ 179.942671][ T9590] ? clear_bhb_loop+0x55/0xb0 [ 179.947438][ T9590] ? clear_bhb_loop+0x55/0xb0 [ 179.952136][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.958097][ T9590] RIP: 0033:0x7f80bf7bdff9 [ 179.962523][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.982242][ T9590] RSP: 002b:00007f80be431038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 179.990656][ T9590] RAX: ffffffffffffffda RBX: 00007f80bf975f80 RCX: 00007f80bf7bdff9 [ 179.998636][ T9590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 180.006619][ T9590] RBP: 00007f80be431090 R08: 0000000000000000 R09: 0000000000000000 [ 180.014662][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.022636][ T9590] R13: 0000000000000000 R14: 00007f80bf975f80 R15: 00007ffc325f5d28 [ 180.030615][ T9590] [ 180.036598][ T9595] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 180.100719][ T9602] loop1: detected capacity change from 0 to 128 [ 180.148254][ T9606] loop0: detected capacity change from 0 to 1024 [ 180.169032][ T50] kworker/u8:3: attempt to access beyond end of device [ 180.169032][ T50] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 180.192821][ T9606] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.204657][ T9606] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002] [ 180.218199][ T9606] System zones: 0-1, 3-36 [ 180.237987][ T9608] loop2: detected capacity change from 0 to 1024 [ 180.249610][ T9614] loop1: detected capacity change from 0 to 256 [ 180.258351][ T9613] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 180.275677][ T9614] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 180.288335][ T9613] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 180.290128][ T9614] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 180.308233][ T9614] gtp0: entered promiscuous mode [ 180.313342][ T9614] gtp0: entered allmulticast mode [ 180.323486][ T9613] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 180.331398][ T9613] FAT-fs (loop1): Filesystem has been set read-only [ 180.352109][ T9622] loop2: detected capacity change from 0 to 128 [ 180.400365][ T9621] ================================================================== [ 180.408480][ T9621] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 180.417728][ T9621] [ 180.420062][ T9621] write to 0xffff888114a077b8 of 4 bytes by task 9606 on cpu 0: [ 180.427698][ T9621] writeback_single_inode+0x14f/0x3f0 [ 180.433098][ T9621] sync_inode_metadata+0x5c/0x90 [ 180.438072][ T9621] generic_buffers_fsync_noflush+0xd8/0x120 [ 180.443995][ T9621] ext4_sync_file+0x1ff/0x6c0 [ 180.448696][ T9621] vfs_fsync_range+0x116/0x130 [ 180.453492][ T9621] ext4_buffered_write_iter+0x326/0x370 [ 180.459059][ T9621] ext4_file_write_iter+0x293/0xe10 [ 180.464297][ T9621] iter_file_splice_write+0x5f1/0x980 [ 180.469713][ T9621] direct_splice_actor+0x160/0x2c0 [ 180.474845][ T9621] splice_direct_to_actor+0x302/0x670 [ 180.480229][ T9621] do_splice_direct+0xd7/0x150 [ 180.485012][ T9621] do_sendfile+0x39b/0x970 [ 180.489461][ T9621] __x64_sys_sendfile64+0x110/0x150 [ 180.494687][ T9621] x64_sys_call+0xed5/0x2d60 [ 180.499290][ T9621] do_syscall_64+0xc9/0x1c0 [ 180.503801][ T9621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.509729][ T9621] [ 180.512056][ T9621] read to 0xffff888114a077b8 of 4 bytes by task 9621 on cpu 1: [ 180.519613][ T9621] generic_buffers_fsync_noflush+0x83/0x120 [ 180.525529][ T9621] ext4_sync_file+0x1ff/0x6c0 [ 180.530221][ T9621] vfs_fsync_range+0x116/0x130 [ 180.535012][ T9621] ext4_buffered_write_iter+0x326/0x370 [ 180.540599][ T9621] ext4_file_write_iter+0x293/0xe10 [ 180.545814][ T9621] iter_file_splice_write+0x5f1/0x980 [ 180.551198][ T9621] direct_splice_actor+0x160/0x2c0 [ 180.556330][ T9621] splice_direct_to_actor+0x302/0x670 [ 180.561716][ T9621] do_splice_direct+0xd7/0x150 [ 180.566514][ T9621] do_sendfile+0x39b/0x970 [ 180.570948][ T9621] __x64_sys_sendfile64+0x110/0x150 [ 180.576159][ T9621] x64_sys_call+0xed5/0x2d60 [ 180.580763][ T9621] do_syscall_64+0xc9/0x1c0 [ 180.585281][ T9621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.591207][ T9621] [ 180.593526][ T9621] value changed: 0x00000038 -> 0x00000002 [ 180.599249][ T9621] [ 180.601578][ T9621] Reported by Kernel Concurrency Sanitizer on: [ 180.607737][ T9621] CPU: 1 UID: 0 PID: 9621 Comm: syz.0.2042 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 180.618424][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.628507][ T9621] ================================================================== [ 180.651119][ T3381] kworker/u8:7: attempt to access beyond end of device [ 180.651119][ T3381] loop2: rw=1, sector=145, nr_sectors = 896 limit=128