last executing test programs: 4.153179498s ago: executing program 1 (id=6638): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 3.092480618s ago: executing program 1 (id=6644): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x22020400) socket$kcm(0xa, 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) 2.918513162s ago: executing program 2 (id=6647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x20001, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r3 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 2.897689292s ago: executing program 2 (id=6648): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a001542000000005c000000006d6f4c409546fad03d45b0d20000"], 0x1c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) 2.49356926s ago: executing program 3 (id=6653): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a001542000000005c000000006d6f4c409546fad03d45b0d20000"], 0x1c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 2.449694601s ago: executing program 0 (id=6654): socket$inet(0x2, 0x5, 0x1000d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x120) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xe65, 0x3a, 'E', 0x3a, 'syz1', 0x3a, './file0', 0x3a, [0x46]}, 0x2d) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c17, &(0x7f00000003c0)=ANY=[], 0x1, 0xa29, &(0x7f0000001800)="$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") getdents(0xffffffffffffffff, &(0x7f000001fc00)=""/179, 0xb3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0xa, 0x4, 0x6, @empty, 0x3}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000300)="8b", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 2.272335135s ago: executing program 1 (id=6655): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 2.271515605s ago: executing program 0 (id=6656): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x2e) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x5, 0x4}}}}}, 0x28}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)={0x1a0, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x400c0}, 0x24040855) close(0xffffffffffffffff) r9 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x10000, 0x10003}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r10) 1.810776124s ago: executing program 3 (id=6657): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c00)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = msgget$private(0x0, 0x184) msgsnd(r6, &(0x7f0000002900)=ANY=[@ANYBLOB="01"], 0xfd1, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x3, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8581, 0x3, 0x0, 0xffffffffffffffff}) syz_clone3(&(0x7f00000012c0)={0x2400, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), {0xf}, &(0x7f00000001c0)=""/182, 0xb6, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0b000000080000000c000000fbbfffff2aa4826cee6b8ab3d3f881b28edf40bd7c58e548ec4d3e127c660a24b52fde38e082ef9035181b123d9abb99cc3a41790eb0a1e15ef13a1616b48f69805b3dac7b7d6ebffcfa960cee8da8c43abb98263c24e061c4f4e5ea4a239e6a9e7135da6fbaba39bd0607384020bf5a4302252d977fbf26841a4f913b7ea3c13d02414261b60e22bcda7936b4fc3d213f0cd1bf760b1d9c77bf86a4da221e0bb63cdb60513b63a74ab7144bfbb88f0082315b08bdb2b1a59295095d5d2f18b0010000005df045a3e6c7b66b199400669702df5033f8b1f867a047ee758a0e7c51a6b801ea4c6ce223a0", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@grpid}, {@usrjquota}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x4}}, {@nodioread_nolock}, {@grpjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") setresuid(0x0, 0xee01, 0x0) recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.589506698s ago: executing program 2 (id=6659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000200)={'batadv0\x00', 0x800}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x209, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 1.460088511s ago: executing program 4 (id=6662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) process_vm_readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000c40)=""/203, 0xcb}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f00000000c0)=""/35, 0x23}], 0x6, &(0x7f0000000bc0)=[{&(0x7f0000000740)=""/121, 0x79}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000d40)=""/242, 0xf2}, {&(0x7f00000008c0)=""/232, 0xe8}, {&(0x7f00000009c0)=""/162, 0xa2}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000b00)=""/175, 0xaf}], 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000180)="38f91153f3", 0x5, 0xfffffffffffffffc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x302d, 0x800, 0x1, 0x141}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) linkat(r6, &(0x7f0000000540)='./file0\x00', r6, &(0x7f0000000580)='./file0\x00', 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="00008864ffffffffffff9e714ad99c6808004500ff5100660000062f9078ff2694452ea22fa0beffffffac1414aa80008100000c90784109655880000000"], 0x32) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r6, 0x7, &(0x7f0000000280)=""/212, 0xd4, 0x10, 0x1}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c000480050003000200000005000300010000000500030000000000050003000100000005000300010000000800020002"], 0x50}}, 0x0) recvmmsg(r6, &(0x7f0000003700)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f00000009c0)=""/161, 0xa1}, {&(0x7f00000007c0)=""/120, 0x78}], 0x3, &(0x7f0000000a80)=""/79, 0x4f}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/71, 0x47}, {&(0x7f0000000b80)=""/88, 0x58}], 0x2}}, {{&(0x7f0000000c40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, &(0x7f0000000d00)=""/23, 0x17}, 0x3}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d40)=""/15, 0xf}, {&(0x7f0000000d80)=""/149, 0x95}, {&(0x7f0000002640)=""/149, 0x95}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x4, &(0x7f0000000e80)=""/29, 0x1d}, 0x6}], 0x4, 0x100, &(0x7f0000003800)={0x0, 0x3938700}) io_uring_enter(r7, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.432974522s ago: executing program 2 (id=6663): mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0), 0x6, 0x51c, &(0x7f0000000700)="$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") mkdir(0x0, 0x0) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x1}, [], {0x4, 0x3}, [], {0x10, 0x7}, {0x20, 0x1}}, 0x24, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x6, 0x5, 0x2, 0x2, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0x1, 0x5, 0x5, 0x100, 0xfffffffffffffffc}, @cb_func, @jmp={0x5, 0x0, 0xc, 0x5, 0x5, 0x20, 0x10}, @call={0x85, 0x0, 0x0, 0x7f}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000380)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x30935, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[r4, r4, r3, r3, r3, r4], &(0x7f0000000580)=[{0x4, 0x3, 0xa, 0x1}, {0x5, 0x3, 0xd, 0x8}, {0x2, 0x3, 0xa, 0x5}, {0x3, 0x4, 0xe}]}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a3100000000080003400000000109000100", @ANYRES32], 0x34}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000340), &(0x7f0000000300)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) listxattr(&(0x7f0000000480)='.\x00', &(0x7f0000000640)=""/229, 0xe5) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 1.366214093s ago: executing program 1 (id=6664): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{&(0x7f00000000c0)="75c620e90a308a79cdb9d27fd1f275be901bb8206136b95619205ca9be8b55b24d05296191ab91d17cb2f6fd4fde18a7b45ef1b6844b1ed61510d09ac150e81f273d00e6ba29532f2b3a7b0ceecbffdf03dd082620fffd6794169206c7eab658bd021eb72e6b899438e45b92f4951ad91c5af4009c585efb908ec3f0c8bfdbaa5efae5c7bada49b343ebba09259601dea0131fdcfaa411e8372ccd780e13416ee02e4102cb9e20a854122525e21d59a330ce51711f64ef202acd65e489e34018724ef7323502ce9ff81556319a1257a86b7428e2a2d4", 0xd6, 0x3}, {&(0x7f00000001c0)="a2187b5485105185090117ef05675a1e995dbc0d8c646e665138c84829e638fa83373f13bca8e5e2ce4b2a67eb51f83c47afb67c5a33c06df98c2bd852940941ab70d1f666545c2f0001a4aa23e8f545d589c6b8", 0x54, 0x1}, {&(0x7f0000000000)="f4a5cfe4155c2e30922b345abd82d7448b36a5c3", 0x14}]}, 0x3, 0x2}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8, &(0x7f00000002c0)) 1.348755623s ago: executing program 0 (id=6665): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) 1.136509067s ago: executing program 4 (id=6666): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x7c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x68, 0x1, [@m_ctinfo={0x64, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa263"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_TARGET_NETNSID={0x8}]}, 0x34}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.125105767s ago: executing program 2 (id=6667): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 1.034895929s ago: executing program 4 (id=6668): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x801}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) 911.614162ms ago: executing program 3 (id=6669): socket$inet(0x2, 0x5, 0x1000d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x120) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000027c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xe65, 0x3a, 'E', 0x3a, 'syz1', 0x3a, './file0', 0x3a, [0x46]}, 0x2d) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c17, &(0x7f00000003c0)=ANY=[], 0x1, 0xa29, &(0x7f0000001800)="$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") getdents(0xffffffffffffffff, &(0x7f000001fc00)=""/179, 0xb3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000000)=@in6={0xa, 0x4, 0x6, @empty, 0x3}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000300)="8b", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 598.662978ms ago: executing program 2 (id=6670): recvmmsg(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000880)={0x6, {{0x2, 0x4e21, @private=0xa010102}}}, 0x88) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = msgget$private(0x0, 0x3ac) msgrcv(r2, 0x0, 0x0, 0x1, 0x2000) msgrcv(r2, 0x0, 0x0, 0x2, 0x2000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, 0x0, &(0x7f0000000080)=""/67}, 0x20) msgget$private(0x0, 0x524) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in=@broadcast, @in=@local}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000580)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) fstat(r4, 0x0) statx(0xffffffffffffff9c, 0x0, 0x400, 0x80, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) getpgid(0x0) msgsnd(r2, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x4010, r0, 0xffffd000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r7, 0x0, 0x0) write$P9_RREAD(r6, &(0x7f0000000580)=ANY=[], 0xa0) sendfile(r6, r1, 0x0, 0x3ffff) sendfile(r6, r1, 0x0, 0x7fffeffd) 560.864589ms ago: executing program 3 (id=6671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8d}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(0x0, r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x34, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0xfffffffffffffe96, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400089c}, 0x4000080) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="0a0001007770616e310000000a0001007770616e", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x2400c010}, 0x4000) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r9, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x420}}, 0x8004) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e23, 0x6, @remote, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 401.853402ms ago: executing program 3 (id=6672): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0), 0x6, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") mkdir(0x0, 0x0) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x1}, [], {0x4, 0x3}, [], {0x10, 0x7}, {0x20, 0x1}}, 0x24, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x6, 0x5, 0x2, 0x2, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @alu={0x7, 0x0, 0x1, 0x5, 0x5, 0x100, 0xfffffffffffffffc}, @cb_func, @jmp={0x5, 0x0, 0xc, 0x5, 0x5, 0x20, 0x10}, @call={0x85, 0x0, 0x0, 0x7f}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000380)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000001440)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x30935, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[r4, r4, r3, r3, r3, r4], &(0x7f0000000580)=[{0x4, 0x3, 0xa, 0x1}, {0x5, 0x3, 0xd, 0x8}, {0x2, 0x3, 0xa, 0x5}, {0x3, 0x4, 0xe}]}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a3100000000080003400000000109000100", @ANYRES32], 0x34}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000340), &(0x7f0000000300)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) listxattr(&(0x7f0000000480)='.\x00', &(0x7f0000000640)=""/229, 0xe5) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 391.432392ms ago: executing program 1 (id=6673): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a0000000400000006000000800000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_read_part_table(0x1051, &(0x7f0000001280)="$eJzsz7EJwlAUBdAbTIIiSBp7LR3jD+Em9gouo87jJLY2kpg4gqQ4Bz58Hvc+eGEuXqmS/r3HwTLJ4vttk6yn4PNXuez2uZbzEK36eOmG1mab1Wms3kubqmtSp0lyO0zrUtc5Pv55IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM1ScAAP//gqkI3g==") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x32126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 292.163584ms ago: executing program 0 (id=6674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x801}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) 262.659775ms ago: executing program 0 (id=6675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef7ec2ea72ff78e04927d241dea66ff7487527450271f5eecbf1ef4f33ddcdcbb7fd642d78b34841e80399d5c524968", 0x3a}], 0x2) 238.451575ms ago: executing program 3 (id=6676): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x2e) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x5, 0x4}}}}}, 0x28}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)={0x1a0, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x400c0}, 0x24040855) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) r9 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x10000, 0x10003, 0x0, 0x0, r8}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r10) 165.246756ms ago: executing program 0 (id=6677): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x2e) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @void, @val={0xc, 0x99, {0x5, 0x4}}}}}, 0x28}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)={0x1a0, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x400c0}, 0x24040855) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) r9 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x10000, 0x10003, 0x0, 0x0, r8}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r10) 160.671427ms ago: executing program 4 (id=6678): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x7c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x68, 0x1, [@m_ctinfo={0x64, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa263"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_TARGET_NETNSID={0x8}]}, 0x34}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 142.255667ms ago: executing program 1 (id=6679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000001380)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c00)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES8=r1, @ANYBLOB, @ANYRES32=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4004000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = msgget$private(0x0, 0x184) msgsnd(r5, &(0x7f0000002900)=ANY=[@ANYBLOB="01"], 0xfd1, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x3, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8581, 0x3, 0x0, 0xffffffffffffffff}) syz_clone3(&(0x7f00000012c0)={0x2400, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0xf}, &(0x7f00000001c0)=""/182, 0xb6, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1d, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0xffffbffb, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) sched_setaffinity(r6, 0x8, &(0x7f0000001340)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) 50.891749ms ago: executing program 4 (id=6680): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 0s ago: executing program 4 (id=6681): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x5b2, &(0x7f0000000c00)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000300)={[0x68]}, 0x8, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f00000001c0)="a0101822006cf1a26ca6fe78836941e17097cccd19125e5399e4b280b65366095407d0ce7bce31074f5aa208bfd4318e24572096fb9347c7a7db1f", &(0x7f0000000480)=""/178, &(0x7f0000000200)="4b390308c8076fd3a07f524d2c99bb225308de16acb0117c57f213ffc278f6bf0fc8632effe165121aa69fba89b0dd8271ba1d1e7df5bb8d2ead25c368adc44c002eb2080f9438456dbe7069a1", &(0x7f00000002c0)="d60681bbb263b802d68418c8fbfff0e76b6d1a64b3c6698244266559c2ef08c84e71837e6dd3dc", 0x3, r3, 0x4}, 0x38) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[0x0]) kernel console output (not intermixed with test programs): 413.088646][T21419] ext4: Unknown parameter 'mask' [ 413.099019][T21422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6127'. [ 413.109163][T21419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6127'. [ 413.371727][T21434] netlink: zone id is out of range [ 413.377220][T21434] netlink: zone id is out of range [ 413.382879][T21434] netlink: zone id is out of range [ 413.388110][T21434] netlink: zone id is out of range [ 413.393478][T21434] netlink: zone id is out of range [ 413.398740][T21434] netlink: zone id is out of range [ 413.404074][T21434] netlink: zone id is out of range [ 413.409260][T21434] netlink: zone id is out of range [ 413.417869][T21434] binfmt_misc: register: failed to install interpreter file ./file0 [ 413.435625][T21434] loop3: detected capacity change from 0 to 1764 [ 413.616519][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6135'. [ 413.772840][T21450] binfmt_misc: register: failed to install interpreter file ./file0 [ 413.958162][T21459] FAULT_INJECTION: forcing a failure. [ 413.958162][T21459] name failslab, interval 1, probability 0, space 0, times 0 [ 413.971179][T21459] CPU: 0 UID: 0 PID: 21459 Comm: syz.4.6137 Not tainted syzkaller #0 PREEMPT(voluntary) [ 413.971208][T21459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.971222][T21459] Call Trace: [ 413.971230][T21459] [ 413.971239][T21459] __dump_stack+0x1d/0x30 [ 413.971281][T21459] dump_stack_lvl+0xe8/0x140 [ 413.971381][T21459] dump_stack+0x15/0x1b [ 413.971404][T21459] should_fail_ex+0x265/0x280 [ 413.971443][T21459] should_failslab+0x8c/0xb0 [ 413.971485][T21459] kmem_cache_alloc_noprof+0x50/0x310 [ 413.971517][T21459] ? copy_fs_struct+0x31/0x110 [ 413.971626][T21459] copy_fs_struct+0x31/0x110 [ 413.971661][T21459] ksys_unshare+0x2c6/0x6d0 [ 413.971700][T21459] ? ksys_write+0x192/0x1a0 [ 413.971737][T21459] __x64_sys_unshare+0x1f/0x30 [ 413.971783][T21459] x64_sys_call+0x2911/0x2ff0 [ 413.971808][T21459] do_syscall_64+0xd2/0x200 [ 413.971828][T21459] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 413.971859][T21459] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 413.971899][T21459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.972008][T21459] RIP: 0033:0x7f156240eec9 [ 413.972029][T21459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.972051][T21459] RSP: 002b:00007f1560e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 413.972070][T21459] RAX: ffffffffffffffda RBX: 00007f1562666180 RCX: 00007f156240eec9 [ 413.972083][T21459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 413.972130][T21459] RBP: 00007f1560e35090 R08: 0000000000000000 R09: 0000000000000000 [ 413.972147][T21459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.972164][T21459] R13: 00007f1562666218 R14: 00007f1562666180 R15: 00007ffe2624ce78 [ 413.972191][T21459] [ 414.435682][T21466] FAULT_INJECTION: forcing a failure. [ 414.435682][T21466] name failslab, interval 1, probability 0, space 0, times 0 [ 414.449255][T21466] CPU: 1 UID: 0 PID: 21466 Comm: syz.0.6140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 414.449342][T21466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 414.449359][T21466] Call Trace: [ 414.449367][T21466] [ 414.449375][T21466] __dump_stack+0x1d/0x30 [ 414.449469][T21466] dump_stack_lvl+0xe8/0x140 [ 414.449490][T21466] dump_stack+0x15/0x1b [ 414.449563][T21466] should_fail_ex+0x265/0x280 [ 414.449602][T21466] should_failslab+0x8c/0xb0 [ 414.449633][T21466] kmem_cache_alloc_noprof+0x50/0x310 [ 414.449669][T21466] ? copy_fs_struct+0x31/0x110 [ 414.449848][T21466] copy_fs_struct+0x31/0x110 [ 414.449933][T21466] ksys_unshare+0x2c6/0x6d0 [ 414.449967][T21466] ? ksys_write+0x192/0x1a0 [ 414.449993][T21466] __x64_sys_unshare+0x1f/0x30 [ 414.450028][T21466] x64_sys_call+0x2911/0x2ff0 [ 414.450130][T21466] do_syscall_64+0xd2/0x200 [ 414.450153][T21466] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 414.450177][T21466] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 414.450217][T21466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.450324][T21466] RIP: 0033:0x7f1f6aaaeec9 [ 414.450344][T21466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.450369][T21466] RSP: 002b:00007f1f694cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 414.450394][T21466] RAX: ffffffffffffffda RBX: 00007f1f6ad06180 RCX: 00007f1f6aaaeec9 [ 414.450408][T21466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 414.450421][T21466] RBP: 00007f1f694cd090 R08: 0000000000000000 R09: 0000000000000000 [ 414.450434][T21466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.450503][T21466] R13: 00007f1f6ad06218 R14: 00007f1f6ad06180 R15: 00007ffdda5a92c8 [ 414.450523][T21466] [ 414.771016][T21464] loop2: detected capacity change from 0 to 1024 [ 414.814499][T21464] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.6141: Failed to acquire dquot type 0 [ 414.839163][T21464] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 414.855706][T21464] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6141: corrupted inode contents [ 414.870286][T21464] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.6141: mark_inode_dirty error [ 414.885729][T21464] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6141: corrupted inode contents [ 414.900911][T21464] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.6141: mark_inode_dirty error [ 414.923911][T21464] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6141: corrupted inode contents [ 414.937944][T21464] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 414.960379][T21464] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6141: corrupted inode contents [ 414.979367][T21464] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.6141: mark_inode_dirty error [ 415.001976][T21464] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 415.011923][T21464] EXT4-fs (loop2): 1 truncate cleaned up [ 415.019122][T21464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.019326][T21491] FAULT_INJECTION: forcing a failure. [ 415.019326][T21491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.046092][T21491] CPU: 1 UID: 0 PID: 21491 Comm: syz.3.6148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 415.046137][T21491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.046201][T21491] Call Trace: [ 415.046213][T21491] [ 415.046222][T21491] __dump_stack+0x1d/0x30 [ 415.046325][T21491] dump_stack_lvl+0xe8/0x140 [ 415.046423][T21491] dump_stack+0x15/0x1b [ 415.046439][T21491] should_fail_ex+0x265/0x280 [ 415.046482][T21491] should_fail+0xb/0x20 [ 415.046508][T21491] should_fail_usercopy+0x1a/0x20 [ 415.046561][T21491] _copy_from_user+0x1c/0xb0 [ 415.046581][T21491] __sys_bpf+0x178/0x7b0 [ 415.046619][T21491] __x64_sys_bpf+0x41/0x50 [ 415.046698][T21491] x64_sys_call+0x2aea/0x2ff0 [ 415.046726][T21491] do_syscall_64+0xd2/0x200 [ 415.046752][T21491] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 415.046779][T21491] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 415.046875][T21491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.046897][T21491] RIP: 0033:0x7f0a76b1eec9 [ 415.046913][T21491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.046989][T21491] RSP: 002b:00007f0a75587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.047015][T21491] RAX: ffffffffffffffda RBX: 00007f0a76d75fa0 RCX: 00007f0a76b1eec9 [ 415.047030][T21491] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 415.047087][T21491] RBP: 00007f0a75587090 R08: 0000000000000000 R09: 0000000000000000 [ 415.047102][T21491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.047114][T21491] R13: 00007f0a76d76038 R14: 00007f0a76d75fa0 R15: 00007fffac793b68 [ 415.047134][T21491] [ 415.301870][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.326364][T21497] binfmt_misc: register: failed to install interpreter file ./file0 [ 415.349874][T21497] loop2: detected capacity change from 0 to 1764 [ 415.364004][T21501] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 415.370912][T21501] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 415.379008][T21501] vhci_hcd vhci_hcd.0: Device attached [ 415.386298][T21501] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6152'. [ 415.402674][T21502] vhci_hcd: connection closed [ 415.402975][T21246] vhci_hcd: stop threads [ 415.412404][T21246] vhci_hcd: release socket [ 415.416846][T21246] vhci_hcd: disconnect device [ 415.447891][T21505] loop2: detected capacity change from 0 to 256 [ 415.463661][T21505] FAT-fs (loop2): Directory bread(block 64) failed [ 415.470608][T21505] FAT-fs (loop2): Directory bread(block 65) failed [ 415.477599][T21505] FAT-fs (loop2): Directory bread(block 66) failed [ 415.484652][T21505] FAT-fs (loop2): Directory bread(block 67) failed [ 415.491471][T21505] FAT-fs (loop2): Directory bread(block 68) failed [ 415.498509][T21505] FAT-fs (loop2): Directory bread(block 69) failed [ 415.506313][T21505] FAT-fs (loop2): Directory bread(block 70) failed [ 415.512978][T21505] FAT-fs (loop2): Directory bread(block 71) failed [ 415.519721][T21505] FAT-fs (loop2): Directory bread(block 72) failed [ 415.526307][T21505] FAT-fs (loop2): Directory bread(block 73) failed [ 415.606854][T21509] binfmt_misc: register: failed to install interpreter file ./file0 [ 415.675569][T21512] loop4: detected capacity change from 0 to 512 [ 415.694452][T21512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.707224][T21512] ext4 filesystem being mounted at /19/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.731160][T21512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6156'. [ 415.878985][T21022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.082168][T21525] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6161'. [ 416.204849][T21534] binfmt_misc: register: failed to install interpreter file ./file0 [ 416.222545][T21534] loop1: detected capacity change from 0 to 1764 [ 416.223768][T21536] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21536 comm=syz.0.6163 [ 416.255229][T21540] loop3: detected capacity change from 0 to 1024 [ 416.262776][T21540] EXT4-fs: Ignoring removed bh option [ 416.273823][T21540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.288624][T21540] FAULT_INJECTION: forcing a failure. [ 416.288624][T21540] name failslab, interval 1, probability 0, space 0, times 0 [ 416.302613][T21540] CPU: 1 UID: 0 PID: 21540 Comm: syz.3.6166 Not tainted syzkaller #0 PREEMPT(voluntary) [ 416.302711][T21540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.302727][T21540] Call Trace: [ 416.302734][T21540] [ 416.302742][T21540] __dump_stack+0x1d/0x30 [ 416.302820][T21540] dump_stack_lvl+0xe8/0x140 [ 416.302846][T21540] dump_stack+0x15/0x1b [ 416.302944][T21540] should_fail_ex+0x265/0x280 [ 416.303046][T21540] should_failslab+0x8c/0xb0 [ 416.303149][T21540] kmem_cache_alloc_noprof+0x50/0x310 [ 416.303249][T21540] ? audit_log_start+0x365/0x6c0 [ 416.303310][T21540] audit_log_start+0x365/0x6c0 [ 416.303356][T21540] audit_seccomp+0x48/0x100 [ 416.303384][T21540] ? __seccomp_filter+0x68c/0x10d0 [ 416.303407][T21540] __seccomp_filter+0x69d/0x10d0 [ 416.303519][T21540] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 416.303551][T21540] ? vfs_write+0x7e8/0x960 [ 416.303590][T21540] __secure_computing+0x82/0x150 [ 416.303706][T21540] syscall_trace_enter+0xcf/0x1e0 [ 416.303732][T21540] do_syscall_64+0xac/0x200 [ 416.303834][T21540] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 416.303867][T21540] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 416.304014][T21540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.304043][T21540] RIP: 0033:0x7f0a76b1eec9 [ 416.304062][T21540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.304085][T21540] RSP: 002b:00007f0a75587038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 416.304177][T21540] RAX: ffffffffffffffda RBX: 00007f0a76d75fa0 RCX: 00007f0a76b1eec9 [ 416.304192][T21540] RDX: 0000000000000010 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 416.304207][T21540] RBP: 00007f0a75587090 R08: 0000000000000000 R09: 0000000000000000 [ 416.304303][T21540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.304322][T21540] R13: 00007f0a76d76038 R14: 00007f0a76d75fa0 R15: 00007fffac793b68 [ 416.304351][T21540] [ 416.578202][T21550] FAULT_INJECTION: forcing a failure. [ 416.578202][T21550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.591607][T21550] CPU: 1 UID: 0 PID: 21550 Comm: syz.4.6170 Not tainted syzkaller #0 PREEMPT(voluntary) [ 416.591643][T21550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.591660][T21550] Call Trace: [ 416.591669][T21550] [ 416.591680][T21550] __dump_stack+0x1d/0x30 [ 416.591724][T21550] dump_stack_lvl+0xe8/0x140 [ 416.591751][T21550] dump_stack+0x15/0x1b [ 416.591768][T21550] should_fail_ex+0x265/0x280 [ 416.591805][T21550] should_fail+0xb/0x20 [ 416.591871][T21550] should_fail_usercopy+0x1a/0x20 [ 416.591903][T21550] _copy_from_user+0x1c/0xb0 [ 416.591924][T21550] __sys_bpf+0x178/0x7b0 [ 416.592001][T21550] __x64_sys_bpf+0x41/0x50 [ 416.592033][T21550] x64_sys_call+0x2aea/0x2ff0 [ 416.592063][T21550] do_syscall_64+0xd2/0x200 [ 416.592088][T21550] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 416.592127][T21550] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 416.592269][T21550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.592300][T21550] RIP: 0033:0x7f156240eec9 [ 416.592318][T21550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.592337][T21550] RSP: 002b:00007f1560e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.592378][T21550] RAX: ffffffffffffffda RBX: 00007f1562665fa0 RCX: 00007f156240eec9 [ 416.592392][T21550] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 416.592407][T21550] RBP: 00007f1560e77090 R08: 0000000000000000 R09: 0000000000000000 [ 416.592421][T21550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.592438][T21550] R13: 00007f1562666038 R14: 00007f1562665fa0 R15: 00007ffe2624ce78 [ 416.592464][T21550] [ 416.773397][T21552] net_ratelimit: 47 callbacks suppressed [ 416.773416][T21552] netlink: zone id is out of range [ 416.785655][T21552] netlink: zone id is out of range [ 416.790957][T21552] netlink: zone id is out of range [ 416.796393][T21552] netlink: zone id is out of range [ 416.803554][T21548] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6169'. [ 416.845350][T21552] netlink: zone id is out of range [ 416.850623][T21552] netlink: zone id is out of range [ 416.856281][T13550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.858465][T21552] netlink: zone id is out of range [ 416.874795][T21552] netlink: zone id is out of range [ 416.934241][T21552] netlink: zone id is out of range [ 416.939656][T21552] netlink: zone id is out of range [ 416.944082][T21553] binfmt_misc: register: failed to install interpreter file ./file0 [ 416.954768][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6173'. [ 417.014254][T21552] loop2: detected capacity change from 0 to 1764 [ 417.083574][ T29] kauditd_printk_skb: 1624 callbacks suppressed [ 417.083592][ T29] audit: type=1326 audit(1759204103.096:63724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.119761][ T29] audit: type=1326 audit(1759204103.126:63725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.143590][ T29] audit: type=1326 audit(1759204103.126:63726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.167738][ T29] audit: type=1326 audit(1759204103.126:63727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.191580][ T29] audit: type=1326 audit(1759204103.126:63728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.216211][ T29] audit: type=1326 audit(1759204103.126:63729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.240695][ T29] audit: type=1326 audit(1759204103.126:63730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.265456][ T29] audit: type=1326 audit(1759204103.126:63731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.289818][ T29] audit: type=1326 audit(1759204103.126:63732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.313812][ T29] audit: type=1326 audit(1759204103.126:63733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.3.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 417.351812][T21572] : renamed from vlan1 (while UP) [ 418.626992][T21604] loop3: detected capacity change from 0 to 1024 [ 418.638831][T21604] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.6191: Failed to acquire dquot type 0 [ 418.655245][T21604] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 418.671206][T21604] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6191: corrupted inode contents [ 418.684604][T21604] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.6191: mark_inode_dirty error [ 418.696219][T21604] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6191: corrupted inode contents [ 418.709613][T21604] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.6191: mark_inode_dirty error [ 418.769566][T21604] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6191: corrupted inode contents [ 418.796987][T21609] loop1: detected capacity change from 0 to 256 [ 418.805513][T21604] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 419.115833][T21604] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6191: corrupted inode contents [ 419.139171][T21609] FAT-fs (loop1): Directory bread(block 64) failed [ 419.146885][T21604] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.6191: mark_inode_dirty error [ 419.160220][T21609] FAT-fs (loop1): Directory bread(block 65) failed [ 419.196798][T21609] FAT-fs (loop1): Directory bread(block 66) failed [ 419.216749][T21604] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 419.253467][T21609] FAT-fs (loop1): Directory bread(block 67) failed [ 419.270693][T21604] EXT4-fs (loop3): 1 truncate cleaned up [ 419.277103][T21604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.291388][T21609] FAT-fs (loop1): Directory bread(block 68) failed [ 419.299570][T21609] FAT-fs (loop1): Directory bread(block 69) failed [ 419.306421][T21609] FAT-fs (loop1): Directory bread(block 70) failed [ 419.314427][T21609] FAT-fs (loop1): Directory bread(block 71) failed [ 419.321232][T21609] FAT-fs (loop1): Directory bread(block 72) failed [ 419.328007][T21609] FAT-fs (loop1): Directory bread(block 73) failed [ 419.399104][T13550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.433829][T21621] netlink: 'syz.1.6196': attribute type 6 has an invalid length. [ 419.481013][T21632] : renamed from vlan1 (while UP) [ 419.555599][T21637] loop2: detected capacity change from 0 to 256 [ 419.564892][T21635] binfmt_misc: register: failed to install interpreter file ./file0 [ 419.575301][T21639] binfmt_misc: register: failed to install interpreter file ./file0 [ 419.596766][T21639] loop4: detected capacity change from 0 to 1764 [ 419.641678][T21645] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21645 comm=syz.1.6206 [ 419.641825][T21646] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21646 comm=syz.2.6207 [ 419.713898][T21652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6209'. [ 420.045398][T21662] loop4: detected capacity change from 0 to 2048 [ 420.052527][T21662] EXT4-fs: Ignoring removed orlov option [ 420.067480][T21662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.319929][T21022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.463647][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6217'. [ 420.472801][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6217'. [ 420.655076][T21685] netlink: 'syz.2.6218': attribute type 6 has an invalid length. [ 420.710286][T21686] loop3: detected capacity change from 0 to 512 [ 420.770448][T21686] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.6217: corrupted in-inode xattr: invalid ea_ino [ 420.923160][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6221'. [ 420.950170][T21695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6222'. [ 420.962517][T21686] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6217: couldn't read orphan inode 15 (err -117) [ 420.989929][T21686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.239380][ T3381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 421.248809][ T3381] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 421.281641][T21706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6225'. [ 421.340279][T13550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.344471][T21710] loop2: detected capacity change from 0 to 512 [ 421.414156][T21710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.439171][T21710] ext4 filesystem being mounted at /47/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.544193][T21710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6226'. [ 421.574768][T21721] binfmt_misc: register: failed to install interpreter file ./file0 [ 421.654322][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.676366][T21726] loop1: detected capacity change from 0 to 256 [ 421.686471][T21728] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 421.693034][T21728] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 421.700577][T21728] vhci_hcd vhci_hcd.0: Device attached [ 421.721573][T21729] vhci_hcd: connection closed [ 421.721634][T21726] FAT-fs (loop1): Directory bread(block 64) failed [ 421.726733][T21732] loop2: detected capacity change from 0 to 512 [ 421.741050][T21726] FAT-fs (loop1): Directory bread(block 65) failed [ 421.749684][T21251] vhci_hcd: stop threads [ 421.754148][T21251] vhci_hcd: release socket [ 421.758678][T21251] vhci_hcd: disconnect device [ 421.765725][T21732] EXT4-fs (loop2): orphan cleanup on readonly fs [ 421.772821][T21732] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.6233: bad orphan inode 13 [ 421.785262][T21732] ext4_test_bit(bit=12, block=18) = 1 [ 421.790685][T21732] is_bad_inode(inode)=0 [ 421.795258][T21732] NEXT_ORPHAN(inode)=2130706432 [ 421.800213][T21732] max_ino=32 [ 421.803465][T21732] i_nlink=1 [ 421.814166][T21726] FAT-fs (loop1): Directory bread(block 66) failed [ 421.828069][T21726] FAT-fs (loop1): Directory bread(block 67) failed [ 421.835895][T21732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.851556][T21726] FAT-fs (loop1): Directory bread(block 68) failed [ 421.860179][T21732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.870698][T21726] FAT-fs (loop1): Directory bread(block 69) failed [ 421.878264][T21726] FAT-fs (loop1): Directory bread(block 70) failed [ 421.900326][T21726] FAT-fs (loop1): Directory bread(block 71) failed [ 421.913291][T21726] FAT-fs (loop1): Directory bread(block 72) failed [ 421.920313][T21726] FAT-fs (loop1): Directory bread(block 73) failed [ 421.920777][T21741] net_ratelimit: 34 callbacks suppressed [ 421.920795][T21741] netlink: zone id is out of range [ 421.937916][T21741] netlink: zone id is out of range [ 421.943345][T21741] netlink: zone id is out of range [ 421.948511][T21741] netlink: zone id is out of range [ 421.953877][T21741] netlink: zone id is out of range [ 421.959167][T21741] netlink: zone id is out of range [ 421.964453][T21741] netlink: zone id is out of range [ 421.999763][T21746] loop1: detected capacity change from 0 to 1024 [ 422.002208][T21741] netlink: zone id is out of range [ 422.011848][T21741] netlink: zone id is out of range [ 422.017151][T21741] netlink: zone id is out of range [ 422.031254][T21747] loop2: detected capacity change from 0 to 1764 [ 422.040160][T21746] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6240: Failed to acquire dquot type 0 [ 422.059456][T21746] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 422.075779][T21746] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6240: corrupted inode contents [ 422.088049][T21746] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.6240: mark_inode_dirty error [ 422.099763][T21746] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6240: corrupted inode contents [ 422.112316][ T29] kauditd_printk_skb: 761 callbacks suppressed [ 422.112334][ T29] audit: type=1326 audit(1759204108.126:64491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21736 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a76b15d67 code=0x7ffc0000 [ 422.113073][T21746] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.6240: mark_inode_dirty error [ 422.118575][ T29] audit: type=1326 audit(1759204108.126:64492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21736 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a76abaf79 code=0x7ffc0000 [ 422.118615][ T29] audit: type=1326 audit(1759204108.126:64493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21736 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 422.146867][T21746] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6240: corrupted inode contents [ 422.154381][ T29] audit: type=1326 audit(1759204108.126:64494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e6b3eec9 code=0x7ffc0000 [ 422.180709][T21746] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 422.202875][ T29] audit: type=1326 audit(1759204108.126:64495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.2.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e6b3eec9 code=0x7ffc0000 [ 422.255058][T21746] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6240: corrupted inode contents [ 422.274211][ T29] audit: type=1326 audit(1759204108.156:64496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21736 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a76b15d67 code=0x7ffc0000 [ 422.287637][T21746] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.6240: mark_inode_dirty error [ 422.310475][ T29] audit: type=1326 audit(1759204108.156:64497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21736 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a76abaf79 code=0x7ffc0000 [ 422.321691][T21746] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 422.345003][ T29] audit: type=1326 audit(1759204108.156:64498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21736 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 422.345041][ T29] audit: type=1326 audit(1759204108.196:64499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21736 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a76b15d67 code=0x7ffc0000 [ 422.355892][T21746] EXT4-fs (loop1): 1 truncate cleaned up [ 422.377808][ T29] audit: type=1326 audit(1759204108.196:64500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21736 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a76abaf79 code=0x7ffc0000 [ 422.432283][T21746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.526410][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.557399][T21758] loop2: detected capacity change from 0 to 512 [ 422.574449][T21758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.589221][T21758] ext4 filesystem being mounted at /51/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.608346][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6244'. [ 422.648954][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.688245][T21769] binfmt_misc: register: failed to install interpreter file ./file0 [ 422.726131][T21769] loop3: detected capacity change from 0 to 1764 [ 422.851733][T21781] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21781 comm=syz.3.6252 [ 423.027684][T21793] loop1: detected capacity change from 0 to 1024 [ 423.037408][T21786] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 423.044095][T21786] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.051711][T21786] vhci_hcd vhci_hcd.0: Device attached [ 423.104707][T21793] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6254: Failed to acquire dquot type 0 [ 423.153405][T21787] vhci_hcd: connection closed [ 423.153732][ T12] vhci_hcd: stop threads [ 423.162901][ T12] vhci_hcd: release socket [ 423.167353][ T12] vhci_hcd: disconnect device [ 423.184116][T21793] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 423.227823][T21793] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6254: corrupted inode contents [ 423.240993][T21793] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.6254: mark_inode_dirty error [ 423.258208][T21793] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6254: corrupted inode contents [ 423.284525][T21793] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.6254: mark_inode_dirty error [ 423.303440][T21793] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6254: corrupted inode contents [ 423.327221][T21793] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 423.347614][T21793] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6254: corrupted inode contents [ 423.374086][T21793] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.6254: mark_inode_dirty error [ 423.397581][T21793] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 423.416495][T21793] EXT4-fs (loop1): 1 truncate cleaned up [ 423.428031][T21793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.575252][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.608997][T21796] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 423.615582][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.623469][T21796] vhci_hcd vhci_hcd.0: Device attached [ 423.660157][T21796] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 423.666833][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.674426][T21796] vhci_hcd vhci_hcd.0: Device attached [ 423.715567][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6257'. [ 423.762394][T21804] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 423.769259][T21804] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.777034][T21804] vhci_hcd vhci_hcd.0: Device attached [ 423.802395][T21796] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 423.835499][T21796] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 423.842318][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 423.849820][T21796] vhci_hcd vhci_hcd.0: Device attached [ 423.862879][ T9] usb 3-1: new low-speed USB device number 4 using vhci_hcd [ 423.892549][T21804] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(16) [ 423.899207][T21804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 423.906941][T21804] vhci_hcd vhci_hcd.0: Device attached [ 423.956128][T21796] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 423.962885][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 423.970707][T21796] vhci_hcd vhci_hcd.0: Device attached [ 423.976920][T21827] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 423.977381][T21822] vhci_hcd: connection closed [ 423.983772][T21827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.983885][T21827] vhci_hcd vhci_hcd.0: Device attached [ 423.989727][T21806] vhci_hcd: connection closed [ 423.997007][T21812] vhci_hcd: connection closed [ 424.007210][T21816] vhci_hcd: connection closed [ 424.015932][ T12] vhci_hcd: stop threads [ 424.025417][ T12] vhci_hcd: release socket [ 424.029988][ T12] vhci_hcd: disconnect device [ 424.037953][ T12] vhci_hcd: stop threads [ 424.042341][ T12] vhci_hcd: release socket [ 424.047043][ T12] vhci_hcd: disconnect device [ 424.052492][ T12] vhci_hcd: stop threads [ 424.056774][ T12] vhci_hcd: release socket [ 424.061322][ T12] vhci_hcd: disconnect device [ 424.068083][ T12] vhci_hcd: stop threads [ 424.072467][ T12] vhci_hcd: release socket [ 424.077066][ T12] vhci_hcd: disconnect device [ 424.090205][T21827] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 424.097053][T21827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 424.104790][T21827] vhci_hcd vhci_hcd.0: Device attached [ 424.123926][T21799] vhci_hcd: connection closed [ 424.124045][T21797] vhci_hcd: connection reset by peer [ 424.127295][ T12] vhci_hcd: stop threads [ 424.138585][ T12] vhci_hcd: release socket [ 424.143099][ T12] vhci_hcd: disconnect device [ 424.148142][ T12] vhci_hcd: stop threads [ 424.152711][ T12] vhci_hcd: release socket [ 424.157333][ T12] vhci_hcd: disconnect device [ 424.171337][T21827] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 424.178033][T21827] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 424.185722][T21827] vhci_hcd vhci_hcd.0: Device attached [ 424.192761][T21827] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 424.201027][T21837] loop2: detected capacity change from 0 to 8192 [ 424.205013][T21827] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 424.213997][T21827] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 424.221534][T21827] vhci_hcd vhci_hcd.0: Device attached [ 424.229437][T21827] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(15) [ 424.236143][T21827] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.243763][T21827] vhci_hcd vhci_hcd.0: Device attached [ 424.250763][T21827] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(17) [ 424.252216][ T3408] usb 7-1: new low-speed USB device number 5 using vhci_hcd [ 424.257393][T21827] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 424.257533][T21827] vhci_hcd vhci_hcd.0: Device attached [ 424.266906][T21837] loop2: p1 p2 p3 p4 [ 424.282743][T21837] loop2: p2 start 151000334 is beyond EOD, truncated [ 424.283513][T21844] vhci_hcd: connection closed [ 424.289607][T21837] loop2: p3 start 331777 is beyond EOD, truncated [ 424.289635][T21837] loop2: p4 size 263168 extends beyond EOD, truncated [ 424.308138][T21838] vhci_hcd: connection closed [ 424.308558][T21842] vhci_hcd: connection closed [ 424.308700][ T12] vhci_hcd: stop threads [ 424.313456][T21840] vhci_hcd: connection closed [ 424.322828][ T12] vhci_hcd: release socket [ 424.332074][ T12] vhci_hcd: disconnect device [ 424.337024][ T12] vhci_hcd: stop threads [ 424.341378][ T12] vhci_hcd: release socket [ 424.346018][ T12] vhci_hcd: disconnect device [ 424.351267][ T12] vhci_hcd: stop threads [ 424.355789][ T12] vhci_hcd: release socket [ 424.360240][ T12] vhci_hcd: disconnect device [ 424.365569][ T12] vhci_hcd: stop threads [ 424.369978][ T12] vhci_hcd: release socket [ 424.374458][ T12] vhci_hcd: disconnect device [ 424.412877][T21834] vhci_hcd: connection closed [ 424.413050][T21828] vhci_hcd: connection reset by peer [ 424.424124][ T12] vhci_hcd: stop threads [ 424.428460][ T12] vhci_hcd: release socket [ 424.432927][ T12] vhci_hcd: disconnect device [ 424.438297][ T12] vhci_hcd: stop threads [ 424.442646][ T12] vhci_hcd: release socket [ 424.447478][ T12] vhci_hcd: disconnect device [ 424.848488][T21861] binfmt_misc: register: failed to install interpreter file ./file0 [ 425.043050][T21874] netlink: 'syz.0.6276': attribute type 6 has an invalid length. [ 425.763881][T21893] binfmt_misc: register: failed to install interpreter file ./file0 [ 425.780931][T21893] loop1: detected capacity change from 0 to 1764 [ 425.873396][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6289'. [ 425.912688][T21908] netlink: 'syz.1.6288': attribute type 6 has an invalid length. [ 426.092951][ T1036] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 426.106147][ T1036] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 426.142954][T21929] binfmt_misc: register: failed to install interpreter file ./file0 [ 426.164271][T21929] loop1: detected capacity change from 0 to 1764 [ 426.314916][T21935] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 426.321586][T21935] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 426.324277][T21937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6303'. [ 426.329190][T21935] vhci_hcd vhci_hcd.0: Device attached [ 426.357003][T21935] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6302'. [ 426.372573][T21938] vhci_hcd: connection closed [ 426.372736][T21251] vhci_hcd: stop threads [ 426.383183][T21251] vhci_hcd: release socket [ 426.387893][T21251] vhci_hcd: disconnect device [ 427.281752][T21964] loop3: detected capacity change from 0 to 1024 [ 427.300614][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6314'. [ 427.335615][T21964] __quota_error: 694 callbacks suppressed [ 427.335631][T21964] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 427.350788][T21964] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 427.360880][T21964] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.6313: Failed to acquire dquot type 0 [ 427.414260][T21964] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 427.467429][T21964] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6313: corrupted inode contents [ 427.496760][T21964] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.6313: mark_inode_dirty error [ 427.508730][ T29] audit: type=1326 audit(1759204113.506:65193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 427.533610][ T29] audit: type=1326 audit(1759204113.506:65194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 427.557261][ T29] audit: type=1326 audit(1759204113.506:65195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 427.559570][T21964] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6313: corrupted inode contents [ 427.581651][ T29] audit: type=1326 audit(1759204113.506:65196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 427.581691][ T29] audit: type=1326 audit(1759204113.506:65197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 427.619315][T21964] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.6313: mark_inode_dirty error [ 427.641694][ T29] audit: type=1326 audit(1759204113.506:65198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 427.665309][T21964] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6313: corrupted inode contents [ 427.677245][ T29] audit: type=1326 audit(1759204113.506:65199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 427.691247][T21964] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 427.713215][ T29] audit: type=1326 audit(1759204113.506:65200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21971 comm="syz.0.6316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 427.772196][T21964] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.6313: corrupted inode contents [ 427.794535][T21964] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.6313: mark_inode_dirty error [ 427.806468][T21981] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 427.813001][T21981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 427.820531][T21981] vhci_hcd vhci_hcd.0: Device attached [ 427.821514][T21964] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 427.831820][T21981] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6319'. [ 427.845112][T21964] EXT4-fs (loop3): 1 truncate cleaned up [ 427.851253][T21964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.871883][T21982] vhci_hcd: connection closed [ 427.872088][T21251] vhci_hcd: stop threads [ 427.881153][T21251] vhci_hcd: release socket [ 427.885732][T21251] vhci_hcd: disconnect device [ 428.061508][T21993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21993 comm=syz.2.6323 [ 428.119906][T13550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.585753][T22013] loop4: detected capacity change from 0 to 128 [ 428.679347][T22013] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.767617][T22013] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.871687][T22015] loop1: detected capacity change from 0 to 8192 [ 428.908434][T22015] loop1: p1 p2 p3 p4 [ 428.935446][T22015] loop1: p2 start 151000334 is beyond EOD, truncated [ 428.942347][T22015] loop1: p3 start 331777 is beyond EOD, truncated [ 428.948853][T22015] loop1: p4 size 263168 extends beyond EOD, truncated [ 428.959146][ T9] usb 3-1: enqueue for inactive port 0 [ 428.968929][ T9] usb 3-1: enqueue for inactive port 0 [ 428.980167][T21022] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.091177][ T9] vhci_hcd: vhci_device speed not set [ 429.177720][T22032] tipc: Started in network mode [ 429.182764][T22032] tipc: Node identity 56addd11d90c, cluster identity 4711 [ 429.190047][T22032] tipc: Enabled bearer , priority 0 [ 429.292479][T22032] syzkaller0: entered promiscuous mode [ 429.298126][T22032] syzkaller0: entered allmulticast mode [ 429.313830][T22032] tipc: Resetting bearer [ 429.342197][ T3408] usb 7-1: enqueue for inactive port 0 [ 429.347817][ T3408] usb 7-1: enqueue for inactive port 0 [ 429.414927][T22047] net_ratelimit: 45 callbacks suppressed [ 429.414948][T22047] netlink: zone id is out of range [ 429.422915][ T3408] vhci_hcd: vhci_device speed not set [ 429.435067][T22047] netlink: zone id is out of range [ 429.458961][T22047] netlink: zone id is out of range [ 429.464303][T22047] netlink: zone id is out of range [ 429.480513][T22047] netlink: zone id is out of range [ 429.495182][T22047] netlink: zone id is out of range [ 429.496510][T22051] binfmt_misc: register: failed to install interpreter file ./file0 [ 429.501062][T22047] netlink: zone id is out of range [ 429.541242][T22047] netlink: zone id is out of range [ 429.575514][T22047] netlink: zone id is out of range [ 429.585765][T22047] netlink: zone id is out of range [ 429.603458][T22051] loop1: detected capacity change from 0 to 1764 [ 429.717631][T22061] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22061 comm=syz.1.6347 [ 429.807416][T22071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6351'. [ 429.930951][T22023] tipc: Resetting bearer [ 429.938597][T22023] tipc: Disabling bearer [ 430.662135][T22098] binfmt_misc: register: failed to install interpreter file ./file0 [ 430.685203][T22098] loop1: detected capacity change from 0 to 1764 [ 430.956490][T22107] loop1: detected capacity change from 0 to 2048 [ 431.008378][T22107] EXT4-fs: Ignoring removed orlov option [ 431.093759][T22107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.327654][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.619820][T22132] loop2: detected capacity change from 0 to 128 [ 431.628050][T22132] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.640811][T22132] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.683588][ T3380] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 431.691747][ T3380] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 431.719089][T20840] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.361526][ T29] kauditd_printk_skb: 631 callbacks suppressed [ 432.361542][ T29] audit: type=1326 audit(1759204118.366:65832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f6aaa5d67 code=0x7ffc0000 [ 432.371270][T22151] FAULT_INJECTION: forcing a failure. [ 432.371270][T22151] name failslab, interval 1, probability 0, space 0, times 0 [ 432.391666][ T29] audit: type=1326 audit(1759204118.366:65833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f6aa4af79 code=0x7ffc0000 [ 432.404365][T22151] CPU: 1 UID: 0 PID: 22151 Comm: syz.1.6378 Not tainted syzkaller #0 PREEMPT(voluntary) [ 432.404507][T22151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.404524][T22151] Call Trace: [ 432.404533][T22151] [ 432.404544][T22151] __dump_stack+0x1d/0x30 [ 432.404575][T22151] dump_stack_lvl+0xe8/0x140 [ 432.404637][T22151] dump_stack+0x15/0x1b [ 432.404660][T22151] should_fail_ex+0x265/0x280 [ 432.404705][T22151] should_failslab+0x8c/0xb0 [ 432.404741][T22151] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 432.404806][T22151] ? shmem_alloc_inode+0x34/0x50 [ 432.404850][T22151] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 432.404880][T22151] shmem_alloc_inode+0x34/0x50 [ 432.404910][T22151] alloc_inode+0x40/0x170 [ 432.404987][T22151] new_inode+0x1d/0xe0 [ 432.405020][T22151] shmem_get_inode+0x244/0x750 [ 432.405054][T22151] __shmem_file_setup+0x113/0x210 [ 432.405136][T22151] shmem_file_setup+0x3b/0x50 [ 432.405193][T22151] __se_sys_memfd_create+0x2c3/0x590 [ 432.405226][T22151] __x64_sys_memfd_create+0x31/0x40 [ 432.405258][T22151] x64_sys_call+0x2abe/0x2ff0 [ 432.405289][T22151] do_syscall_64+0xd2/0x200 [ 432.405317][T22151] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 432.405368][T22151] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 432.405415][T22151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.405446][T22151] RIP: 0033:0x7f1191daeec9 [ 432.405473][T22151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.405526][T22151] RSP: 002b:00007f119080ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 432.405553][T22151] RAX: ffffffffffffffda RBX: 0000000000000522 RCX: 00007f1191daeec9 [ 432.405566][T22151] RDX: 00007f119080eef0 RSI: 0000000000000000 RDI: 00007f1191e32960 [ 432.405663][T22151] RBP: 00002000000010c0 R08: 00007f119080ebb7 R09: 00007f119080ee40 [ 432.405682][T22151] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 432.405700][T22151] R13: 00007f119080eef0 R14: 00007f119080eeb0 R15: 00002000000003c0 [ 432.405726][T22151] [ 432.465841][T22153] loop1: detected capacity change from 0 to 512 [ 432.468634][ T29] audit: type=1326 audit(1759204118.366:65834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 432.608988][ T29] audit: type=1326 audit(1759204118.416:65835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f6aaa5d67 code=0x7ffc0000 [ 432.616576][T22153] EXT4-fs: Ignoring removed bh option [ 432.619060][ T29] audit: type=1326 audit(1759204118.416:65836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f6aa4af79 code=0x7ffc0000 [ 432.637155][T22153] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.638120][ T29] audit: type=1326 audit(1759204118.416:65837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 432.691957][T22153] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 432.697067][ T29] audit: type=1326 audit(1759204118.426:65838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f6aaa5d67 code=0x7ffc0000 [ 432.784863][ T29] audit: type=1326 audit(1759204118.426:65839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f6aa4af79 code=0x7ffc0000 [ 432.809313][ T29] audit: type=1326 audit(1759204118.426:65840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 432.826978][T22153] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 432.832948][ T29] audit: type=1326 audit(1759204118.436:65841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22138 comm="syz.0.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f6aaa5d67 code=0x7ffc0000 [ 432.872411][T22153] EXT4-fs (loop1): orphan cleanup on readonly fs [ 433.015130][T22153] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6379: Failed to acquire dquot type 1 [ 433.027207][T22153] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6379: Invalid block bitmap block 0 in block_group 0 [ 433.042964][T22153] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6379: Invalid block bitmap block 0 in block_group 0 [ 433.057641][T22153] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6379: Invalid block bitmap block 0 in block_group 0 [ 433.091952][T22153] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6379: Failed to acquire dquot type 1 [ 433.110034][T22153] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6379: Failed to acquire dquot type 1 [ 433.125904][T22153] EXT4-fs (loop1): 1 orphan inode deleted [ 433.132941][T22153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.179610][T22153] syz.1.6379 (22153) used greatest stack depth: 9072 bytes left [ 433.194270][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.211934][T22167] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 433.238944][T22171] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22171 comm=syz.2.6386 [ 433.258566][T22163] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 433.265921][T22163] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.274114][T22163] vhci_hcd vhci_hcd.0: Device attached [ 433.312178][T22169] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 433.318920][T22169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.326493][T22169] vhci_hcd vhci_hcd.0: Device attached [ 433.332644][T22163] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(5) [ 433.339433][T22163] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 433.347402][T22163] vhci_hcd vhci_hcd.0: Device attached [ 433.353956][T22177] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 433.361187][T22177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.369893][T22177] vhci_hcd vhci_hcd.0: Device attached [ 433.378915][T22165] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 433.385774][T22165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.393437][T22167] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 433.400158][T22167] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 433.407623][T22165] vhci_hcd vhci_hcd.0: Device attached [ 433.407634][T22167] vhci_hcd vhci_hcd.0: Device attached [ 433.411421][T22189] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(18) [ 433.425900][T22189] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 433.433977][T22189] vhci_hcd vhci_hcd.0: Device attached [ 433.445659][T22183] loop1: detected capacity change from 0 to 256 [ 433.462266][T22183] FAT-fs (loop1): Directory bread(block 64) failed [ 433.470367][T22183] FAT-fs (loop1): Directory bread(block 65) failed [ 433.479516][T22183] FAT-fs (loop1): Directory bread(block 66) failed [ 433.487853][T22183] FAT-fs (loop1): Directory bread(block 67) failed [ 433.496018][T22169] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 433.502919][T22169] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 433.510430][T22169] vhci_hcd vhci_hcd.0: Device attached [ 433.517470][T22183] FAT-fs (loop1): Directory bread(block 68) failed [ 433.524641][T22172] vhci_hcd: connection closed [ 433.524858][ T12] vhci_hcd: stop threads [ 433.533875][ T12] vhci_hcd: release socket [ 433.538388][ T12] vhci_hcd: disconnect device [ 433.543168][ T3408] usb 7-1: new low-speed USB device number 6 using vhci_hcd [ 433.550787][ T3408] usb 7-1: enqueue for inactive port 0 [ 433.557832][T22190] vhci_hcd: connection closed [ 433.557942][T22180] vhci_hcd: connection closed [ 433.562940][ T3408] usb 7-1: enqueue for inactive port 0 [ 433.575184][ T12] vhci_hcd: stop threads [ 433.579459][ T12] vhci_hcd: release socket [ 433.584070][ T12] vhci_hcd: disconnect device [ 433.588923][T22173] vhci_hcd: connection closed [ 433.590226][T22174] vhci_hcd: connection closed [ 433.597752][ T3408] usb 7-1: enqueue for inactive port 0 [ 433.608373][T22183] FAT-fs (loop1): Directory bread(block 69) failed [ 433.616374][T22183] FAT-fs (loop1): Directory bread(block 70) failed [ 433.623347][T22183] FAT-fs (loop1): Directory bread(block 71) failed [ 433.630027][T22183] FAT-fs (loop1): Directory bread(block 72) failed [ 433.637913][T22183] FAT-fs (loop1): Directory bread(block 73) failed [ 433.645593][T22169] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(11) [ 433.652351][T22169] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 433.659999][T22169] vhci_hcd vhci_hcd.0: Device attached [ 433.667625][ T12] vhci_hcd: stop threads [ 433.669718][T22187] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(15) [ 433.671970][ T12] vhci_hcd: release socket [ 433.678571][T22187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 433.678703][T22187] vhci_hcd vhci_hcd.0: Device attached [ 433.683339][ T12] vhci_hcd: disconnect device [ 433.683796][T22177] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 433.707728][T22177] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 433.715258][T22177] vhci_hcd vhci_hcd.0: Device attached [ 433.723765][ T3408] vhci_hcd: vhci_device speed not set [ 433.729803][ T12] vhci_hcd: stop threads [ 433.734113][ T12] vhci_hcd: release socket [ 433.738574][ T12] vhci_hcd: disconnect device [ 433.743497][T22195] vhci_hcd: connection closed [ 433.743553][T22196] vhci_hcd: connection closed [ 433.748436][T22198] vhci_hcd: connection closed [ 433.753914][T22192] vhci_hcd: connection closed [ 433.766485][ T12] vhci_hcd: stop threads [ 433.776244][ T12] vhci_hcd: release socket [ 433.780728][ T12] vhci_hcd: disconnect device [ 433.790672][ T12] vhci_hcd: stop threads [ 433.795169][ T12] vhci_hcd: release socket [ 433.799648][ T12] vhci_hcd: disconnect device [ 433.804670][ T3380] usb 1-1: new low-speed USB device number 4 using vhci_hcd [ 433.813871][T22184] vhci_hcd: connection closed [ 433.814425][ T12] vhci_hcd: stop threads [ 433.823747][ T12] vhci_hcd: release socket [ 433.828349][ T12] vhci_hcd: disconnect device [ 433.833546][ T12] vhci_hcd: stop threads [ 433.837906][ T12] vhci_hcd: release socket [ 433.842429][ T12] vhci_hcd: disconnect device [ 433.942586][ T12] vhci_hcd: stop threads [ 433.946896][ T12] vhci_hcd: release socket [ 433.951335][T22175] vhci_hcd: connection reset by peer [ 433.951453][ T12] vhci_hcd: disconnect device [ 433.963026][ T12] vhci_hcd: stop threads [ 433.967404][ T12] vhci_hcd: release socket [ 433.971941][ T12] vhci_hcd: disconnect device [ 433.977311][ T12] vhci_hcd: stop threads [ 433.981703][ T12] vhci_hcd: release socket [ 433.986309][ T12] vhci_hcd: disconnect device [ 433.996428][T22207] binfmt_misc: register: failed to install interpreter file ./file0 [ 434.017334][T22207] loop1: detected capacity change from 0 to 1764 [ 434.150503][T22217] loop2: detected capacity change from 0 to 256 [ 434.235119][T22224] binfmt_misc: register: failed to install interpreter file ./file0 [ 434.735582][T22242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22242 comm=syz.2.6403 [ 434.796449][T22246] loop3: detected capacity change from 0 to 512 [ 434.806603][T22246] EXT4-fs (loop3): orphan cleanup on readonly fs [ 434.813848][T22246] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.6405: bad orphan inode 13 [ 434.826846][T22246] ext4_test_bit(bit=12, block=18) = 1 [ 434.832494][T22246] is_bad_inode(inode)=0 [ 434.836853][T22246] NEXT_ORPHAN(inode)=2130706432 [ 434.841806][T22246] max_ino=32 [ 434.845325][T22246] i_nlink=1 [ 434.857285][T22246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.875758][T22246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.935326][T22253] loop2: detected capacity change from 0 to 256 [ 434.987217][T22255] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 434.994133][T22255] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 435.002271][T22255] vhci_hcd vhci_hcd.0: Device attached [ 435.041037][T22255] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6408'. [ 435.055875][T22264] binfmt_misc: register: failed to install interpreter file ./file0 [ 435.069562][T22269] loop1: detected capacity change from 0 to 512 [ 435.081750][T22256] vhci_hcd: connection closed [ 435.081992][T21251] vhci_hcd: stop threads [ 435.091412][T21251] vhci_hcd: release socket [ 435.095919][T21251] vhci_hcd: disconnect device [ 435.125231][T22269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.138040][T22269] ext4 filesystem being mounted at /61/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.157299][T22269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6412'. [ 435.201840][T22281] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22281 comm=syz.4.6416 [ 435.229012][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.246786][T22285] FAULT_INJECTION: forcing a failure. [ 435.246786][T22285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.260057][T22285] CPU: 1 UID: 0 PID: 22285 Comm: syz.0.6419 Not tainted syzkaller #0 PREEMPT(voluntary) [ 435.260092][T22285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 435.260160][T22285] Call Trace: [ 435.260242][T22285] [ 435.260252][T22285] __dump_stack+0x1d/0x30 [ 435.260277][T22285] dump_stack_lvl+0xe8/0x140 [ 435.260300][T22285] dump_stack+0x15/0x1b [ 435.260319][T22285] should_fail_ex+0x265/0x280 [ 435.260401][T22285] should_fail+0xb/0x20 [ 435.260430][T22285] should_fail_usercopy+0x1a/0x20 [ 435.260502][T22285] _copy_to_user+0x20/0xa0 [ 435.260525][T22285] simple_read_from_buffer+0xb5/0x130 [ 435.260578][T22285] proc_fail_nth_read+0x10e/0x150 [ 435.260639][T22285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.260678][T22285] vfs_read+0x1a5/0x770 [ 435.260703][T22285] ? __rcu_read_unlock+0x4f/0x70 [ 435.260728][T22285] ? __fget_files+0x184/0x1c0 [ 435.260755][T22285] ? __sys_bind+0x223/0x2a0 [ 435.260845][T22285] ksys_read+0xda/0x1a0 [ 435.260872][T22285] __x64_sys_read+0x40/0x50 [ 435.260897][T22285] x64_sys_call+0x27bc/0x2ff0 [ 435.260923][T22285] do_syscall_64+0xd2/0x200 [ 435.260946][T22285] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 435.260977][T22285] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 435.261014][T22285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.261038][T22285] RIP: 0033:0x7f1f6aaad8dc [ 435.261057][T22285] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 435.261105][T22285] RSP: 002b:00007f1f6950f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.261128][T22285] RAX: ffffffffffffffda RBX: 00007f1f6ad05fa0 RCX: 00007f1f6aaad8dc [ 435.261143][T22285] RDX: 000000000000000f RSI: 00007f1f6950f0a0 RDI: 0000000000000004 [ 435.261237][T22285] RBP: 00007f1f6950f090 R08: 0000000000000000 R09: 0000000000000000 [ 435.261251][T22285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.261265][T22285] R13: 00007f1f6ad06038 R14: 00007f1f6ad05fa0 R15: 00007ffdda5a92c8 [ 435.261288][T22285] [ 435.511176][T22288] net_ratelimit: 23 callbacks suppressed [ 435.511194][T22288] netlink: zone id is out of range [ 435.522747][T22288] netlink: zone id is out of range [ 435.528140][T22288] netlink: zone id is out of range [ 435.533607][T22288] netlink: zone id is out of range [ 435.539834][T22288] netlink: zone id is out of range [ 435.545360][T22288] netlink: zone id is out of range [ 435.551115][T22288] netlink: zone id is out of range [ 435.559840][T22288] netlink: zone id is out of range [ 435.567065][T22293] binfmt_misc: register: failed to install interpreter file ./file0 [ 435.575746][T22288] netlink: zone id is out of range [ 435.581609][T22288] netlink: zone id is out of range [ 435.601108][T22293] loop1: detected capacity change from 0 to 1764 [ 436.174096][T22306] netlink: 'syz.1.6426': attribute type 6 has an invalid length. [ 436.230329][T22312] loop2: detected capacity change from 0 to 256 [ 436.275487][T22316] loop1: detected capacity change from 0 to 1024 [ 436.290311][T22316] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6431: Failed to acquire dquot type 0 [ 436.304622][T22316] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 436.319926][T22316] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6431: corrupted inode contents [ 436.332560][T22316] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.6431: mark_inode_dirty error [ 436.357505][T22316] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6431: corrupted inode contents [ 436.415642][T22316] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.6431: mark_inode_dirty error [ 436.427574][T22326] binfmt_misc: register: failed to install interpreter file ./file0 [ 436.440126][T22316] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6431: corrupted inode contents [ 436.452474][T22326] loop4: detected capacity change from 0 to 1764 [ 436.453900][T22316] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 436.470708][T22316] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6431: corrupted inode contents [ 436.482913][T22316] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.6431: mark_inode_dirty error [ 436.494569][T22316] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 436.504307][T22316] EXT4-fs (loop1): 1 truncate cleaned up [ 436.510622][T22316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.611461][T22339] loop2: detected capacity change from 0 to 256 [ 436.651953][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.683191][T22341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6441'. [ 436.851592][T22357] loop2: detected capacity change from 0 to 512 [ 436.878081][T22350] loop1: detected capacity change from 0 to 256 [ 436.900754][T22350] /dev/loop1: Can't open blockdev [ 436.912893][T22357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.926131][T22357] ext4 filesystem being mounted at /95/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.962261][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6448'. [ 437.096497][T22362] binfmt_misc: register: failed to install interpreter file ./file0 [ 437.190675][T22362] loop3: detected capacity change from 0 to 1764 [ 437.275175][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.487554][ T29] kauditd_printk_skb: 1230 callbacks suppressed [ 437.487579][ T29] audit: type=1400 audit(1759204123.496:67064): avc: denied { read write } for pid=22371 comm="syz.1.6452" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 437.503164][T22372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.518102][ T29] audit: type=1400 audit(1759204123.496:67065): avc: denied { open } for pid=22371 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 437.518370][ T29] audit: type=1400 audit(1759204123.516:67066): avc: denied { ioctl } for pid=22371 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 437.576412][ T29] audit: type=1400 audit(1759204123.566:67067): avc: denied { unlink } for pid=20840 comm="syz-executor" name="file0" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 437.604315][T22372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.646998][ T29] audit: type=1400 audit(1759204123.656:67068): avc: denied { getopt } for pid=22376 comm="syz.2.6453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 437.707146][ T29] audit: type=1400 audit(1759204123.696:67069): avc: denied { connect } for pid=22376 comm="syz.2.6453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 437.727720][ T29] audit: type=1400 audit(1759204123.696:67070): avc: denied { name_connect } for pid=22376 comm="syz.2.6453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 437.748416][ T29] audit: type=1400 audit(1759204123.696:67071): avc: denied { write } for pid=22371 comm="syz.1.6452" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 437.810290][ T29] audit: type=1326 audit(1759204123.786:67072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22371 comm="syz.1.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1191daeec9 code=0x7ffc0000 [ 437.835367][ T29] audit: type=1326 audit(1759204123.786:67073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22371 comm="syz.1.6452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1191daeec9 code=0x7ffc0000 [ 437.909129][T22388] FAULT_INJECTION: forcing a failure. [ 437.909129][T22388] name failslab, interval 1, probability 0, space 0, times 0 [ 437.921930][T22388] CPU: 1 UID: 0 PID: 22388 Comm: syz.4.6456 Not tainted syzkaller #0 PREEMPT(voluntary) [ 437.921966][T22388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 437.921984][T22388] Call Trace: [ 437.921994][T22388] [ 437.922004][T22388] __dump_stack+0x1d/0x30 [ 437.922032][T22388] dump_stack_lvl+0xe8/0x140 [ 437.922108][T22388] dump_stack+0x15/0x1b [ 437.922128][T22388] should_fail_ex+0x265/0x280 [ 437.922167][T22388] should_failslab+0x8c/0xb0 [ 437.922250][T22388] kmem_cache_alloc_noprof+0x50/0x310 [ 437.922280][T22388] ? copy_fs_struct+0x31/0x110 [ 437.922321][T22388] copy_fs_struct+0x31/0x110 [ 437.922378][T22388] ksys_unshare+0x2c6/0x6d0 [ 437.922463][T22388] ? ksys_write+0x192/0x1a0 [ 437.922490][T22388] __x64_sys_unshare+0x1f/0x30 [ 437.922624][T22388] x64_sys_call+0x2911/0x2ff0 [ 437.922653][T22388] do_syscall_64+0xd2/0x200 [ 437.922680][T22388] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 437.922782][T22388] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 437.922864][T22388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.922888][T22388] RIP: 0033:0x7f156240eec9 [ 437.922908][T22388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.923001][T22388] RSP: 002b:00007f1560e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 437.923020][T22388] RAX: ffffffffffffffda RBX: 00007f1562666180 RCX: 00007f156240eec9 [ 437.923035][T22388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 437.923051][T22388] RBP: 00007f1560e35090 R08: 0000000000000000 R09: 0000000000000000 [ 437.923065][T22388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.923096][T22388] R13: 00007f1562666218 R14: 00007f1562666180 R15: 00007ffe2624ce78 [ 437.923115][T22388] [ 438.922159][ T3380] usb 1-1: enqueue for inactive port 0 [ 438.928634][ T3380] usb 1-1: enqueue for inactive port 0 [ 438.950839][T22402] loop4: detected capacity change from 0 to 512 [ 438.976725][T22402] EXT4-fs (loop4): orphan cleanup on readonly fs [ 438.990342][T22402] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.6461: bad orphan inode 13 [ 439.008786][T22407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6463'. [ 439.017959][T22407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6463'. [ 439.028704][T22402] ext4_test_bit(bit=12, block=18) = 1 [ 439.028721][ T3380] vhci_hcd: vhci_device speed not set [ 439.034461][T22402] is_bad_inode(inode)=0 [ 439.044132][T22402] NEXT_ORPHAN(inode)=2130706432 [ 439.049146][T22402] max_ino=32 [ 439.052629][T22402] i_nlink=1 [ 439.056358][T22402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.069532][T22402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.128841][T22407] loop1: detected capacity change from 0 to 512 [ 439.137351][T22411] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6461'. [ 439.154599][T22412] netlink: 'syz.0.6464': attribute type 6 has an invalid length. [ 439.172121][T22407] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.6463: corrupted in-inode xattr: invalid ea_ino [ 439.177701][T22416] binfmt_misc: register: failed to install interpreter file ./file0 [ 439.193874][T22407] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.6463: couldn't read orphan inode 15 (err -117) [ 439.207350][T22407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.224259][T22416] loop3: detected capacity change from 0 to 1764 [ 439.459056][T22425] binfmt_misc: register: failed to install interpreter file ./file0 [ 439.464574][T22427] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22427 comm=syz.0.6469 [ 439.492359][T22425] loop3: detected capacity change from 0 to 1764 [ 439.875194][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.025923][T22443] loop4: detected capacity change from 0 to 512 [ 440.055712][T22443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.069892][T22443] ext4 filesystem being mounted at /78/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.119706][T22443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6475'. [ 440.231140][T21022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.389526][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6478'. [ 440.392643][T22457] netlink: 'syz.0.6477': attribute type 6 has an invalid length. [ 440.399045][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6478'. [ 440.536210][T22456] loop4: detected capacity change from 0 to 512 [ 440.604860][T22456] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.6478: corrupted in-inode xattr: invalid ea_ino [ 440.622543][T22456] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6478: couldn't read orphan inode 15 (err -117) [ 440.636573][T22456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.052044][T22471] 9pnet_fd: Insufficient options for proto=fd [ 441.153979][T22482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6485'. [ 441.242650][T22486] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6486'. [ 441.285086][T22488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22488 comm=syz.1.6487 [ 441.462991][T22493] loop2: detected capacity change from 0 to 8192 [ 441.470846][T21022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.503548][T22493] loop2: p1 p2 p3 p4 [ 441.572291][T22493] loop2: p2 start 151000334 is beyond EOD, truncated [ 441.579248][T22493] loop2: p3 start 331777 is beyond EOD, truncated [ 441.585781][T22493] loop2: p4 size 263168 extends beyond EOD, truncated [ 442.149836][T22508] loop1: detected capacity change from 0 to 1024 [ 442.160189][T22508] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6493: Failed to acquire dquot type 0 [ 442.173874][T22507] binfmt_misc: register: failed to install interpreter file ./file0 [ 442.184953][T22508] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 442.200458][T22508] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6493: corrupted inode contents [ 442.213125][T22508] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.6493: mark_inode_dirty error [ 442.226238][T22508] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6493: corrupted inode contents [ 442.238608][T22508] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.6493: mark_inode_dirty error [ 442.252194][T22508] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6493: corrupted inode contents [ 442.255976][T22511] net_ratelimit: 45 callbacks suppressed [ 442.255995][T22511] netlink: zone id is out of range [ 442.267003][T22508] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 442.270404][T22511] netlink: zone id is out of range [ 442.270414][T22511] netlink: zone id is out of range [ 442.270420][T22511] netlink: zone id is out of range [ 442.270432][T22511] netlink: zone id is out of range [ 442.270441][T22511] netlink: zone id is out of range [ 442.276954][T22508] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.6493: corrupted inode contents [ 442.285162][T22511] netlink: zone id is out of range [ 442.333794][T22513] binfmt_misc: register: failed to install interpreter file ./file0 [ 442.345215][T22508] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.6493: mark_inode_dirty error [ 442.366980][T22511] netlink: zone id is out of range [ 442.372429][T22511] netlink: zone id is out of range [ 442.377749][T22511] netlink: zone id is out of range [ 442.402462][T22508] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 442.403597][T22517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6496'. [ 442.427889][T22518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6497'. [ 442.443503][T22508] EXT4-fs (loop1): 1 truncate cleaned up [ 442.449811][T22508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.511272][ T29] kauditd_printk_skb: 525 callbacks suppressed [ 442.511292][ T29] audit: type=1326 audit(1759204128.516:67597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.554731][T22523] binfmt_misc: register: failed to install interpreter file ./file0 [ 442.573303][T22523] loop3: detected capacity change from 0 to 1764 [ 442.581381][ T29] audit: type=1326 audit(1759204128.556:67598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.605429][ T29] audit: type=1326 audit(1759204128.556:67599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.629134][ T29] audit: type=1326 audit(1759204128.556:67600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.653452][ T29] audit: type=1326 audit(1759204128.556:67601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.677310][ T29] audit: type=1326 audit(1759204128.556:67602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.701449][ T29] audit: type=1326 audit(1759204128.556:67603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.725359][ T29] audit: type=1326 audit(1759204128.556:67604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.749826][ T29] audit: type=1326 audit(1759204128.556:67605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.773558][ T29] audit: type=1326 audit(1759204128.556:67606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22521 comm="syz.3.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a76b1eec9 code=0x7ffc0000 [ 442.908222][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.919083][T22530] netlink: 'syz.2.6500': attribute type 6 has an invalid length. [ 443.005773][T22534] loop3: detected capacity change from 0 to 2048 [ 443.013864][T22534] EXT4-fs: Ignoring removed orlov option [ 443.027644][T22534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.056411][T22543] binfmt_misc: register: failed to install interpreter file ./file0 [ 443.092839][T22539] loop2: detected capacity change from 0 to 2048 [ 443.099833][T22539] EXT4-fs: Ignoring removed orlov option [ 443.114595][T22539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.190107][T13550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.232963][T22552] loop3: detected capacity change from 0 to 256 [ 443.266517][T22552] FAT-fs (loop3): Directory bread(block 64) failed [ 443.287592][T22552] FAT-fs (loop3): Directory bread(block 65) failed [ 443.304156][T22552] FAT-fs (loop3): Directory bread(block 66) failed [ 443.311134][T22552] FAT-fs (loop3): Directory bread(block 67) failed [ 443.320517][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.335553][T22552] FAT-fs (loop3): Directory bread(block 68) failed [ 443.349010][T22552] FAT-fs (loop3): Directory bread(block 69) failed [ 443.356828][T22552] FAT-fs (loop3): Directory bread(block 70) failed [ 443.364131][T22552] FAT-fs (loop3): Directory bread(block 71) failed [ 443.370965][T22552] FAT-fs (loop3): Directory bread(block 72) failed [ 443.378138][T22552] FAT-fs (loop3): Directory bread(block 73) failed [ 443.721946][T22561] chnl_net:caif_netlink_parms(): no params data found [ 443.738670][T22578] netlink: 'syz.4.6514': attribute type 6 has an invalid length. [ 443.768383][T22561] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.775547][T22561] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.783082][T22561] bridge_slave_0: entered allmulticast mode [ 443.789813][T22561] bridge_slave_0: entered promiscuous mode [ 443.797061][T22561] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.804224][T22561] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.811910][T22561] bridge_slave_1: entered allmulticast mode [ 443.818920][T22561] bridge_slave_1: entered promiscuous mode [ 443.849697][T22561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.860114][T22587] binfmt_misc: register: failed to install interpreter file ./file0 [ 443.860249][T22561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.889258][T22561] team0: Port device team_slave_0 added [ 443.895963][T22561] team0: Port device team_slave_1 added [ 443.912781][T22561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.919839][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.946565][T22561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.962498][T22561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.970125][T22561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.996383][T22561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.030974][T22561] hsr_slave_0: entered promiscuous mode [ 444.037858][T22561] hsr_slave_1: entered promiscuous mode [ 444.106607][T22561] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.174070][T22561] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.248319][T22561] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.319597][T22561] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.421164][T22561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.430038][T22561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.438639][T22561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.448490][T22561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.930468][T22561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.948770][T22561] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.960742][T21251] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.967910][T21251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.979703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.986886][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.108779][T22630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22630 comm=syz.1.6530 [ 445.110733][T22561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.322642][T22561] veth0_vlan: entered promiscuous mode [ 445.331430][T22561] veth1_vlan: entered promiscuous mode [ 445.366906][T22561] veth0_macvtap: entered promiscuous mode [ 445.383909][T22561] veth1_macvtap: entered promiscuous mode [ 445.401234][T22561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.421387][T22561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.436499][T21246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.602157][T21246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.650978][T21246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.668744][T21246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.711922][T22651] binfmt_misc: register: failed to install interpreter file ./file0 [ 445.775601][T22651] loop3: detected capacity change from 0 to 1764 [ 447.129527][T22668] binfmt_misc: register: failed to install interpreter file ./file0 [ 447.143315][T22664] binfmt_misc: register: failed to install interpreter file ./file0 [ 447.152787][T22668] loop4: detected capacity change from 0 to 1764 [ 447.177253][T22670] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22670 comm=syz.1.6541 [ 447.242077][T22667] loop2: detected capacity change from 0 to 2048 [ 447.248871][T22667] EXT4-fs: Ignoring removed orlov option [ 447.267935][T22667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.358826][T22685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6545'. [ 447.368232][T22685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6545'. [ 447.467947][T22685] loop3: detected capacity change from 0 to 512 [ 447.479474][T22685] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.6545: corrupted in-inode xattr: invalid ea_ino [ 447.499112][T22685] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.6545: couldn't read orphan inode 15 (err -117) [ 447.521289][T22685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.534540][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.543715][ T29] kauditd_printk_skb: 1200 callbacks suppressed [ 447.543735][ T29] audit: type=1326 audit(1759204133.546:68807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.3.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2fe02d710 code=0x7ffc0000 [ 447.573874][ T29] audit: type=1326 audit(1759204133.546:68808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.3.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe2fe02dc17 code=0x7ffc0000 [ 447.597509][ T29] audit: type=1326 audit(1759204133.546:68809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.3.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe2fe02d710 code=0x7ffc0000 [ 447.621288][ T29] audit: type=1326 audit(1759204133.546:68810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.3.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe02eec9 code=0x7ffc0000 [ 447.645436][ T29] audit: type=1326 audit(1759204133.546:68811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.3.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe02eec9 code=0x7ffc0000 [ 447.669666][ T29] audit: type=1326 audit(1759204133.546:68812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.3.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fe2fe02eec9 code=0x7ffc0000 [ 447.720152][T22691] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22691 comm=syz.2.6546 [ 448.065525][T22694] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 448.072292][T22694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.079972][T22694] vhci_hcd vhci_hcd.0: Device attached [ 448.112174][T22698] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 448.119063][T22698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.126681][T22698] vhci_hcd vhci_hcd.0: Device attached [ 448.180541][T22704] loop4: detected capacity change from 0 to 128 [ 448.196277][T22694] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 448.199095][ T29] audit: type=1326 audit(1759204134.206:68813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.3.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe02eec9 code=0x7ffc0000 [ 448.203139][T22694] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 448.203402][T22694] vhci_hcd vhci_hcd.0: Device attached [ 448.228081][ T29] audit: type=1326 audit(1759204134.206:68814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.3.6545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe02eec9 code=0x7ffc0000 [ 448.236700][T22698] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 448.289496][T22704] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.306885][T22694] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(10) [ 448.307020][T22704] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.313551][T22694] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 448.313697][T22694] vhci_hcd vhci_hcd.0: Device attached [ 448.343536][T22561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.353602][T22694] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(14) [ 448.360882][T22694] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.368981][T22694] vhci_hcd vhci_hcd.0: Device attached [ 448.375231][ T2952] usb 3-1: new low-speed USB device number 5 using vhci_hcd [ 448.392271][T22694] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 448.399127][T22694] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.406781][T22694] vhci_hcd vhci_hcd.0: Device attached [ 448.426440][ T29] audit: type=1400 audit(1759204134.436:68815): avc: denied { read write } for pid=22702 comm="syz.4.6549" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 448.428317][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 448.450995][ T29] audit: type=1400 audit(1759204134.436:68816): avc: denied { open } for pid=22702 comm="syz.4.6549" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 448.461666][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 448.496747][T22710] vhci_hcd: connection closed [ 448.496975][T22703] vhci_hcd: connection closed [ 448.502437][T22712] vhci_hcd: connection closed [ 448.507678][ T12] vhci_hcd: stop threads [ 448.508011][T22708] vhci_hcd: connection closed [ 448.512617][ T12] vhci_hcd: release socket [ 448.512637][ T12] vhci_hcd: disconnect device [ 448.513512][T22716] netlink: 'syz.3.6550': attribute type 6 has an invalid length. [ 448.525704][T22699] vhci_hcd: connection closed [ 448.526436][ T12] vhci_hcd: stop threads [ 448.547947][ T12] vhci_hcd: release socket [ 448.552455][ T12] vhci_hcd: disconnect device [ 448.566720][ T12] vhci_hcd: stop threads [ 448.572187][ T12] vhci_hcd: release socket [ 448.577018][ T12] vhci_hcd: disconnect device [ 448.587788][T22695] vhci_hcd: connection reset by peer [ 448.594035][T21022] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.606016][ T12] vhci_hcd: stop threads [ 448.611122][ T12] vhci_hcd: release socket [ 448.615999][ T12] vhci_hcd: disconnect device [ 448.621675][ T12] vhci_hcd: stop threads [ 448.626057][ T12] vhci_hcd: release socket [ 448.630645][ T12] vhci_hcd: disconnect device [ 448.633142][T22720] loop2: detected capacity change from 0 to 512 [ 448.638440][ T12] vhci_hcd: stop threads [ 448.645965][ T12] vhci_hcd: release socket [ 448.650410][ T12] vhci_hcd: disconnect device [ 448.665998][T22720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.679537][T22720] ext4 filesystem being mounted at /119/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.699252][T22720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6553'. [ 448.731223][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.755611][T22727] binfmt_misc: register: failed to install interpreter file ./file0 [ 448.773150][T22727] loop2: detected capacity change from 0 to 1764 [ 449.199838][T22738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22738 comm=syz.1.6559 [ 449.790551][T22748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22748 comm=syz.2.6562 [ 449.827488][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6564'. [ 449.901063][T22755] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 449.907702][T22755] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 449.915185][T22755] vhci_hcd vhci_hcd.0: Device attached [ 449.928789][T22758] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6565'. [ 449.972771][T22756] vhci_hcd: connection closed [ 449.973029][ T36] vhci_hcd: stop threads [ 449.982124][ T36] vhci_hcd: release socket [ 449.986733][ T36] vhci_hcd: disconnect device [ 450.113978][T22760] net_ratelimit: 12 callbacks suppressed [ 450.113993][T22760] netlink: zone id is out of range [ 450.126005][T22760] netlink: zone id is out of range [ 450.131354][T22760] netlink: zone id is out of range [ 450.136727][T22760] netlink: zone id is out of range [ 450.143975][T22760] netlink: zone id is out of range [ 450.149419][T22760] netlink: zone id is out of range [ 450.155110][T22760] netlink: zone id is out of range [ 450.161588][T22760] netlink: zone id is out of range [ 450.169205][T22760] netlink: zone id is out of range [ 450.176817][T22761] binfmt_misc: register: failed to install interpreter file ./file0 [ 450.187414][T22760] netlink: zone id is out of range [ 450.205178][T22760] loop1: detected capacity change from 0 to 1764 [ 450.803264][T22769] loop4: detected capacity change from 0 to 256 [ 450.861801][T22769] FAT-fs (loop4): Directory bread(block 64) failed [ 450.870814][T22769] FAT-fs (loop4): Directory bread(block 65) failed [ 450.877485][T22769] FAT-fs (loop4): Directory bread(block 66) failed [ 450.884284][T22769] FAT-fs (loop4): Directory bread(block 67) failed [ 450.890866][T22769] FAT-fs (loop4): Directory bread(block 68) failed [ 450.897475][T22769] FAT-fs (loop4): Directory bread(block 69) failed [ 450.904603][T22769] FAT-fs (loop4): Directory bread(block 70) failed [ 450.911300][T22769] FAT-fs (loop4): Directory bread(block 71) failed [ 450.917949][T22769] FAT-fs (loop4): Directory bread(block 72) failed [ 450.924790][T22769] FAT-fs (loop4): Directory bread(block 73) failed [ 451.204595][T22784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6576'. [ 451.213820][T22784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6576'. [ 451.225540][T22786] binfmt_misc: register: failed to install interpreter file ./file0 [ 451.323561][T22784] loop1: detected capacity change from 0 to 512 [ 451.333348][T22784] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.6576: corrupted in-inode xattr: invalid ea_ino [ 451.347931][T22784] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.6576: couldn't read orphan inode 15 (err -117) [ 451.360779][T22784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.429212][T22794] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 451.436407][T22794] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 451.444476][T22794] vhci_hcd vhci_hcd.0: Device attached [ 451.486506][T22794] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6579'. [ 451.592211][T22795] vhci_hcd: connection closed [ 451.696270][T21251] vhci_hcd: stop threads [ 451.705443][T21251] vhci_hcd: release socket [ 451.709891][T21251] vhci_hcd: disconnect device [ 451.835797][ T23] vhci_hcd: vhci_device speed not set [ 451.854123][T22805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22805 comm=syz.4.6582 [ 452.361484][T22810] loop3: detected capacity change from 0 to 256 [ 452.382022][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6584'. [ 452.424697][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.428986][T22810] FAT-fs (loop3): Directory bread(block 64) failed [ 452.442002][T22810] FAT-fs (loop3): Directory bread(block 65) failed [ 452.450830][T22810] FAT-fs (loop3): Directory bread(block 66) failed [ 452.459788][T22810] FAT-fs (loop3): Directory bread(block 67) failed [ 452.469909][T22810] FAT-fs (loop3): Directory bread(block 68) failed [ 452.477919][T22810] FAT-fs (loop3): Directory bread(block 69) failed [ 452.484966][T22810] FAT-fs (loop3): Directory bread(block 70) failed [ 452.491690][T22810] FAT-fs (loop3): Directory bread(block 71) failed [ 452.499803][T22810] FAT-fs (loop3): Directory bread(block 72) failed [ 452.506773][T22810] FAT-fs (loop3): Directory bread(block 73) failed [ 452.522709][T22816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6586'. [ 452.531840][T22816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6586'. [ 452.583674][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 452.583768][ T29] audit: type=1326 audit(1759204138.586:69624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22809 comm="syz.3.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe2fe02eec9 code=0x7ffc0000 [ 452.613721][ T29] audit: type=1326 audit(1759204138.586:69625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22809 comm="syz.3.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe02eec9 code=0x7ffc0000 [ 452.637631][ T29] audit: type=1326 audit(1759204138.586:69626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22809 comm="syz.3.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2fe02eec9 code=0x7ffc0000 [ 452.693443][ T29] audit: type=1326 audit(1759204138.696:69627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 452.717758][ T29] audit: type=1326 audit(1759204138.696:69628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 452.802813][ T29] audit: type=1326 audit(1759204138.706:69629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 452.826620][ T29] audit: type=1326 audit(1759204138.706:69630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 452.834087][T22826] : renamed from vlan1 (while UP) [ 452.850334][ T29] audit: type=1326 audit(1759204138.706:69631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 452.879815][ T29] audit: type=1326 audit(1759204138.706:69632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 452.903591][ T29] audit: type=1326 audit(1759204138.706:69633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22814 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 453.077993][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6590'. [ 453.096154][T22832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6591'. [ 453.105291][T22832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6591'. [ 453.206356][T22832] loop4: detected capacity change from 0 to 512 [ 453.216662][T22832] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.6591: corrupted in-inode xattr: invalid ea_ino [ 453.230396][T22832] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6591: couldn't read orphan inode 15 (err -117) [ 453.244364][T22832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.347810][T22839] loop1: detected capacity change from 0 to 512 [ 453.386980][T22839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.402225][T22839] ext4 filesystem being mounted at /93/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.427853][ T2952] usb 3-1: enqueue for inactive port 0 [ 453.437036][T22839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6593'. [ 453.439491][ T2952] usb 3-1: enqueue for inactive port 0 [ 453.470879][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6594'. [ 453.523101][ T2952] vhci_hcd: vhci_device speed not set [ 453.536705][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.688732][T22863] binfmt_misc: register: failed to install interpreter file ./file0 [ 453.733090][T22863] loop1: detected capacity change from 0 to 1764 [ 453.945465][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6602'. [ 454.149510][T21022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.170778][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6605'. [ 454.430293][T22885] netlink: 'syz.1.6606': attribute type 6 has an invalid length. [ 454.681963][T22895] loop1: detected capacity change from 0 to 8192 [ 454.712432][T22895] loop1: p1 p2 p3 p4 [ 454.717266][T22895] loop1: p2 start 151000334 is beyond EOD, truncated [ 454.724177][T22895] loop1: p3 start 331777 is beyond EOD, truncated [ 454.730808][T22895] loop1: p4 size 263168 extends beyond EOD, truncated [ 454.851879][T22902] binfmt_misc: register: failed to install interpreter file ./file0 [ 454.946938][T22906] loop1: detected capacity change from 0 to 2048 [ 454.954858][T22906] EXT4-fs: Ignoring removed orlov option [ 454.968624][T22899] loop2: detected capacity change from 0 to 2048 [ 454.976840][T22899] EXT4-fs: Ignoring removed orlov option [ 454.979758][T22906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.013682][T22899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.038404][T22913] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 455.044966][T22913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.052648][T22913] vhci_hcd vhci_hcd.0: Device attached [ 455.060950][T22913] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 455.067501][T22913] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.075188][T22913] vhci_hcd vhci_hcd.0: Device attached [ 455.085558][T22913] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 455.092197][T22913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 455.099767][T22913] vhci_hcd vhci_hcd.0: Device attached [ 455.108150][T22913] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 455.119524][T22913] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(13) [ 455.126167][T22913] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 455.133692][T22913] vhci_hcd vhci_hcd.0: Device attached [ 455.141127][T22913] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(15) [ 455.148014][T22913] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 455.156213][T22913] vhci_hcd vhci_hcd.0: Device attached [ 455.164647][T22913] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(17) [ 455.171376][T22913] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 455.179125][T22913] vhci_hcd vhci_hcd.0: Device attached [ 455.221468][T21226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.252554][T22922] vhci_hcd: connection closed [ 455.252781][T22924] vhci_hcd: connection closed [ 455.257917][ T7360] vhci_hcd: stop threads [ 455.262872][T22920] vhci_hcd: connection closed [ 455.266941][ T7360] vhci_hcd: release socket [ 455.276260][ T7360] vhci_hcd: disconnect device [ 455.281370][T22918] vhci_hcd: connection closed [ 455.292198][ T3380] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 455.306357][T22914] vhci_hcd: connection reset by peer [ 455.311894][T22916] vhci_hcd: connection closed [ 455.312032][ T7360] vhci_hcd: stop threads [ 455.321037][ T7360] vhci_hcd: release socket [ 455.325518][ T7360] vhci_hcd: disconnect device [ 455.356798][T22928] loop3: detected capacity change from 0 to 8192 [ 455.365402][ T7360] vhci_hcd: stop threads [ 455.369867][ T7360] vhci_hcd: release socket [ 455.374517][ T7360] vhci_hcd: disconnect device [ 455.381350][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.392841][ T7360] vhci_hcd: stop threads [ 455.397137][ T7360] vhci_hcd: release socket [ 455.401726][ T7360] vhci_hcd: disconnect device [ 455.408383][ T7360] vhci_hcd: stop threads [ 455.412766][ T7360] vhci_hcd: release socket [ 455.417296][ T7360] vhci_hcd: disconnect device [ 455.422752][ T7360] vhci_hcd: stop threads [ 455.427053][ T7360] vhci_hcd: release socket [ 455.431531][ T7360] vhci_hcd: disconnect device [ 455.441367][T22928] loop3: p1 p2 p3 p4 [ 455.446205][T22928] loop3: p2 start 151000334 is beyond EOD, truncated [ 455.453029][T22928] loop3: p3 start 331777 is beyond EOD, truncated [ 455.459648][T22928] loop3: p4 size 263168 extends beyond EOD, truncated [ 455.491600][T22940] loop2: detected capacity change from 0 to 8192 [ 455.544853][T22940] loop2: p1 p2 p3 p4 [ 455.550048][T22940] loop2: p2 start 151000334 is beyond EOD, truncated [ 455.556926][T22940] loop2: p3 start 331777 is beyond EOD, truncated [ 455.563587][T22940] loop2: p4 size 263168 extends beyond EOD, truncated [ 456.016319][T22949] binfmt_misc: register: failed to install interpreter file ./file0 [ 457.091556][T22959] net_ratelimit: 23 callbacks suppressed [ 457.091580][T22959] netlink: zone id is out of range [ 457.500967][T22959] netlink: zone id is out of range [ 457.500994][T22961] binfmt_misc: register: failed to install interpreter file ./file0 [ 457.528520][T22959] netlink: zone id is out of range [ 457.533912][T22959] netlink: zone id is out of range [ 457.540114][T22959] netlink: zone id is out of range [ 457.547831][T22959] netlink: zone id is out of range [ 457.573356][T22959] netlink: zone id is out of range [ 457.586452][T22961] loop1: detected capacity change from 0 to 1764 [ 457.594474][T22959] netlink: zone id is out of range [ 457.599718][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 457.599736][ T29] audit: type=1326 audit(1759204143.606:70237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f6aaa5d67 code=0x7ffc0000 [ 457.629658][ T29] audit: type=1326 audit(1759204143.606:70238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f6aa4af79 code=0x7ffc0000 [ 457.654126][ T29] audit: type=1326 audit(1759204143.606:70239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 457.678245][ T29] audit: type=1326 audit(1759204143.606:70240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f6aaa5d67 code=0x7ffc0000 [ 457.700501][T22959] netlink: zone id is out of range [ 457.702402][ T29] audit: type=1326 audit(1759204143.606:70241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f6aa4af79 code=0x7ffc0000 [ 457.717595][T22959] netlink: zone id is out of range [ 457.731717][ T29] audit: type=1326 audit(1759204143.606:70242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 457.761244][ T29] audit: type=1326 audit(1759204143.616:70243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f6aaa5d67 code=0x7ffc0000 [ 457.786233][ T29] audit: type=1326 audit(1759204143.616:70244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f6aa4af79 code=0x7ffc0000 [ 457.810074][ T29] audit: type=1326 audit(1759204143.616:70245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1f6aaaeec9 code=0x7ffc0000 [ 457.833923][ T29] audit: type=1326 audit(1759204143.646:70246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22955 comm="syz.0.6628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f6aaa5d67 code=0x7ffc0000 [ 457.990008][T22972] loop2: detected capacity change from 0 to 2048 [ 457.996823][T22972] EXT4-fs: Ignoring removed orlov option [ 458.055960][T22972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.078590][T22982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.087678][T22982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.103385][T22984] : renamed from vlan1 (while UP) [ 458.759872][T22993] __nla_validate_parse: 1 callbacks suppressed [ 458.759892][T22993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6640'. [ 458.775437][T22993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6640'. [ 458.900958][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.914410][T22997] loop4: detected capacity change from 0 to 256 [ 458.930259][T22997] FAT-fs (loop4): Directory bread(block 64) failed [ 458.937132][T22997] FAT-fs (loop4): Directory bread(block 65) failed [ 458.943983][T22997] FAT-fs (loop4): Directory bread(block 66) failed [ 458.955208][T22999] loop3: detected capacity change from 0 to 512 [ 458.968117][T22997] FAT-fs (loop4): Directory bread(block 67) failed [ 458.997661][T22997] FAT-fs (loop4): Directory bread(block 68) failed [ 459.174305][T22997] FAT-fs (loop4): Directory bread(block 69) failed [ 459.186568][T22997] FAT-fs (loop4): Directory bread(block 70) failed [ 459.194565][T22997] FAT-fs (loop4): Directory bread(block 71) failed [ 459.201391][T22997] FAT-fs (loop4): Directory bread(block 72) failed [ 459.223301][T22999] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm +}[@: corrupted in-inode xattr: invalid ea_ino [ 459.262741][T22997] FAT-fs (loop4): Directory bread(block 73) failed [ 459.306010][T22999] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm +}[@: couldn't read orphan inode 15 (err -117) [ 459.403708][T22999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.419317][T23012] binfmt_misc: register: failed to install interpreter file ./file0 [ 459.441483][T23012] loop4: detected capacity change from 0 to 1764 [ 459.492800][T23010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.502280][T23010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.585200][T22561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.697119][T23023] loop3: detected capacity change from 0 to 256 [ 459.711788][T23023] FAT-fs (loop3): Directory bread(block 64) failed [ 459.720060][T23023] FAT-fs (loop3): Directory bread(block 65) failed [ 459.727212][T23023] FAT-fs (loop3): Directory bread(block 66) failed [ 459.734994][T23023] FAT-fs (loop3): Directory bread(block 67) failed [ 459.741681][T23023] FAT-fs (loop3): Directory bread(block 68) failed [ 459.748908][T23023] FAT-fs (loop3): Directory bread(block 69) failed [ 459.756831][T23023] FAT-fs (loop3): Directory bread(block 70) failed [ 459.763849][T23023] FAT-fs (loop3): Directory bread(block 71) failed [ 459.770886][T23023] FAT-fs (loop3): Directory bread(block 72) failed [ 459.804057][T23023] FAT-fs (loop3): Directory bread(block 73) failed [ 459.916682][T23030] binfmt_misc: register: failed to install interpreter file ./file0 [ 460.382246][ T3380] usb 9-1: enqueue for inactive port 0 [ 460.389291][ T3380] usb 9-1: enqueue for inactive port 0 [ 460.538656][ T3380] vhci_hcd: vhci_device speed not set [ 460.614542][T23043] loop4: detected capacity change from 0 to 512 [ 460.644986][T23044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6657'. [ 460.654035][T23044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6657'. [ 460.712806][T23043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.727687][T23043] ext4 filesystem being mounted at /110/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.751435][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6658'. [ 460.766444][T23045] loop3: detected capacity change from 0 to 512 [ 460.778695][T23045] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm +}[@: corrupted in-inode xattr: invalid ea_ino [ 460.792034][T23045] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm +}[@: couldn't read orphan inode 15 (err -117) [ 460.804495][T23045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.818015][T21022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.828646][T23049] netlink: 'syz.2.6659': attribute type 6 has an invalid length. [ 460.880835][T23059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6662'. [ 460.910503][T23061] loop2: detected capacity change from 0 to 512 [ 461.010677][T23061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.130520][T23061] ext4 filesystem being mounted at /139/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.159430][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6663'. [ 461.214096][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.423235][T22561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.678846][T23083] binfmt_misc: register: failed to install interpreter file ./file0 [ 461.699932][T23083] loop3: detected capacity change from 0 to 1764 [ 461.745802][T23085] loop2: detected capacity change from 0 to 512 [ 461.757474][T23085] EXT4-fs: Ignoring removed mblk_io_submit option [ 461.826713][T23085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 461.868245][T23085] EXT4-fs (loop2): 1 truncate cleaned up [ 461.876866][T23085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.950685][T23093] loop3: detected capacity change from 0 to 512 [ 461.976803][T23093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.003722][T23093] ext4 filesystem being mounted at /24/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.021196][T23095] loop1: detected capacity change from 0 to 8192 [ 462.030298][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6672'. [ 462.055518][T23095] loop1: p1 p2 p3 p4 [ 462.061257][T23095] loop1: p2 start 151000334 is beyond EOD, truncated [ 462.068107][T23095] loop1: p3 start 331777 is beyond EOD, truncated [ 462.074859][T23095] loop1: p4 size 263168 extends beyond EOD, truncated [ 462.100193][T22561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.221532][T23113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23113 comm=syz.1.6679 [ 462.370936][T23122] loop4: detected capacity change from 0 to 1024 [ 462.384094][T23122] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.6681: Failed to acquire dquot type 0 [ 462.396829][T23122] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 462.412750][T23122] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.6681: corrupted inode contents [ 462.425855][T23122] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.6681: mark_inode_dirty error [ 462.439472][T23122] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.6681: corrupted inode contents [ 462.452415][T23122] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.6681: mark_inode_dirty error [ 462.464603][T23122] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.6681: corrupted inode contents [ 462.477347][T23122] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 462.486271][T23122] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.6681: corrupted inode contents [ 462.499876][T23122] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.6681: mark_inode_dirty error [ 462.511378][T23122] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 462.520957][T23122] EXT4-fs (loop4): 1 truncate cleaned up [ 462.527333][T23122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.565309][T23099] ================================================================== [ 462.573529][T23099] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 462.582166][T23099] [ 462.584533][T23099] write to 0xffff8881073ef6ac of 4 bytes by task 23105 on cpu 1: [ 462.592555][T23099] xas_set_mark+0x12b/0x140 [ 462.597183][T23099] __folio_start_writeback+0x1dd/0x440 [ 462.602682][T23099] ext4_bio_write_folio+0x5ad/0x9f0 [ 462.608012][T23099] mpage_process_page_bufs+0x4a1/0x620 [ 462.613497][T23099] mpage_prepare_extent_to_map+0x786/0xc00 [ 462.619330][T23099] ext4_do_writepages+0xa05/0x2750 [ 462.624492][T23099] ext4_writepages+0x176/0x300 [ 462.629276][T23099] do_writepages+0x1c3/0x310 [ 462.633883][T23099] file_write_and_wait_range+0x156/0x2c0 [ 462.639545][T23099] generic_buffers_fsync_noflush+0x45/0x120 [ 462.645469][T23099] ext4_sync_file+0x1ab/0x690 [ 462.650245][T23099] vfs_fsync_range+0x10d/0x130 [ 462.655044][T23099] ext4_buffered_write_iter+0x34f/0x3c0 [ 462.660621][T23099] ext4_file_write_iter+0xdbf/0xf00 [ 462.666038][T23099] iter_file_splice_write+0x663/0xa60 [ 462.671545][T23099] direct_splice_actor+0x153/0x2a0 [ 462.677047][T23099] splice_direct_to_actor+0x30f/0x680 [ 462.682435][T23099] do_splice_direct+0xda/0x150 [ 462.687299][T23099] do_sendfile+0x380/0x650 [ 462.691739][T23099] __x64_sys_sendfile64+0x105/0x150 [ 462.696982][T23099] x64_sys_call+0x2bb0/0x2ff0 [ 462.701709][T23099] do_syscall_64+0xd2/0x200 [ 462.706311][T23099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.712225][T23099] [ 462.714573][T23099] read to 0xffff8881073ef6ac of 4 bytes by task 23099 on cpu 0: [ 462.722652][T23099] filemap_write_and_wait_range+0xfc/0x340 [ 462.728577][T23099] filemap_invalidate_pages+0xa4/0x1a0 [ 462.734338][T23099] kiocb_invalidate_pages+0x6e/0x80 [ 462.739551][T23099] __iomap_dio_rw+0x5d1/0x1240 [ 462.744336][T23099] iomap_dio_rw+0x40/0x90 [ 462.748782][T23099] ext4_file_write_iter+0xad9/0xf00 [ 462.754018][T23099] iter_file_splice_write+0x663/0xa60 [ 462.759414][T23099] direct_splice_actor+0x153/0x2a0 [ 462.764887][T23099] splice_direct_to_actor+0x30f/0x680 [ 462.770707][T23099] do_splice_direct+0xda/0x150 [ 462.775578][T23099] do_sendfile+0x380/0x650 [ 462.780106][T23099] __x64_sys_sendfile64+0x105/0x150 [ 462.785441][T23099] x64_sys_call+0x2bb0/0x2ff0 [ 462.790223][T23099] do_syscall_64+0xd2/0x200 [ 462.794741][T23099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.800661][T23099] [ 462.803050][T23099] value changed: 0x0a000021 -> 0x04000021 [ 462.808783][T23099] [ 462.811176][T23099] Reported by Kernel Concurrency Sanitizer on: [ 462.817527][T23099] CPU: 0 UID: 0 PID: 23099 Comm: syz.2.6670 Not tainted syzkaller #0 PREEMPT(voluntary) [ 462.827461][T23099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.837535][T23099] ================================================================== [ 462.861759][T20840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.911940][T21022] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.