last executing test programs: 5.275953107s ago: executing program 2 (id=1927): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x19) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x808) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c9500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, 0x0) 3.913256593s ago: executing program 3 (id=1989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000100000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) 3.880420874s ago: executing program 3 (id=1991): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) r6 = dup(0xffffffffffffffff) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x19) write$binfmt_aout(r6, 0x0, 0x808) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c9500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r8, 0xc0404806, &(0x7f0000000040)) ioctl$HIDIOCSFEATURE(r8, 0xc0404806, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getegid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 2.738968846s ago: executing program 3 (id=2015): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 2.664070698s ago: executing program 3 (id=2018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) open_by_handle_at(r4, &(0x7f0000000200)=@xfs={0x1c, 0x81, {0x7fffffff, 0x7fffffff, 0x6, 0x7}}, 0x101000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1f, 0x2, 0x1000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r6}, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_vif\x00') socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x43a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x8080000001}, 0x18) iopl(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sync() socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) 2.388350793s ago: executing program 0 (id=2021): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000680)='kmem_cache_free\x00', r0}, 0x18) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 2.322190504s ago: executing program 0 (id=2022): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4046851, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='inet_sk_error_report\x00', r0}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) 2.288983895s ago: executing program 0 (id=2023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=@xfs={0x1c, 0x81, {0x7fffffff, 0x7fffffff, 0x6, 0x7}}, 0x101000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x43a, 0x0) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) iopl(0x1) sync() syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.780377635s ago: executing program 0 (id=2027): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) r6 = dup(0xffffffffffffffff) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x19) write$binfmt_aout(r6, 0x0, 0x808) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c9500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r8, 0xc0404806, &(0x7f0000000040)) ioctl$HIDIOCSFEATURE(r8, 0xc0404806, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getegid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.611664478s ago: executing program 3 (id=2030): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0x9b) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) 1.573734029s ago: executing program 3 (id=2031): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket(0x1e, 0x4, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) gettid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3}, 0xc) 1.555523319s ago: executing program 1 (id=2032): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001f00)=""/50, 0x32}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x1, 0x0, 0x3, 0x0, 0x0, 0x60bddab2, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1}, 0x140, 0x4, 0x40000, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x8000) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, 0xffffffffffffffff, 0x100000000) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x42, 0x80}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYRESHEX=r2], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000003c0)={0x1d, r6, 0xfffffffffffffffd, {0x0, 0xf0, 0x4}, 0x2}, 0x18) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0xe) bind$can_j1939(r5, &(0x7f0000000240)={0x1d, r6, 0x1, {0x2, 0xf0, 0x1}, 0x2}, 0x18) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00', 0x400}) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4(r8, &(0x7f0000000100)=@l2, &(0x7f0000000040)=0x80, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) 1.5252199s ago: executing program 1 (id=2033): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000680)='kmem_cache_free\x00', r0}, 0x18) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 1.466113481s ago: executing program 1 (id=2034): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000008017afd3a20e7dc7242129e946b4dd2c121f150426c1caebb5ff88e956"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000380), 0x5, 0x4f3, &(0x7f0000000700)="$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") openat(0xffffffffffffffff, 0x0, 0x80040, 0x6f) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pivot_root(0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x60, 0x3, 0x0, 0x0, 0x0, 0x8}}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x7, 0x0, &(0x7f0000000500)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.362155503s ago: executing program 2 (id=2035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=@xfs={0x1c, 0x81, {0x7fffffff, 0x7fffffff, 0x6, 0x7}}, 0x101000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x43a, 0x0) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) iopl(0x1) sync() syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") 1.361513113s ago: executing program 1 (id=2045): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x19) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x808) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000c9500000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, 0x0) 1.103193068s ago: executing program 4 (id=2037): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff019) fallocate(r0, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) 888.101352ms ago: executing program 0 (id=2038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=@xfs={0x1c, 0x81, {0x7fffffff, 0x7fffffff, 0x6, 0x7}}, 0x101000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x43a, 0x0) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) iopl(0x1) sync() syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 832.668653ms ago: executing program 4 (id=2039): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0600000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f21684eee115ebf5a24314de463b057801838d9bc5340b552750972184d9171858fab336140a6d69fe6d5db234aec88497a033544ac459ddda7b86fe84975316568597749046fc6a9bc24584264f67b04fefdfc17edde18fd9b627824ed4f8a7e341a329533b39a9bacb3b5d87f847b56f160ee5d0a4011e048774d77c756e2d452272394f8eda246181dead693b855c6911515bcbd42bbd2a11c91dd1b8bb262b6b5d1026d7e8cff45bd9a3333daa29df72607e8d5709efe48530fb40e5915413b86444ecc2049a44fcb5e2cdcbe4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x9, 0xc, 0x22, @private0, @loopback, 0x40, 0xe0, 0x7fffffff, 0x10}}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth1_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000d00)={0x100, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x193661676c87dcc4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf1e82d159b4ba26d}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000b00ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r13, 0x80049367, &(0x7f00000000c0)) syz_io_uring_setup(0x37a6, &(0x7f0000000340)={0x0, 0x7c77, 0x400, 0x1, 0x52}, &(0x7f00000003c0), &(0x7f00000004c0)) 749.324055ms ago: executing program 2 (id=2040): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='itimer_state\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x200000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x100000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x8}, 0x8) 644.725327ms ago: executing program 4 (id=2041): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = memfd_secret(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200f2a7ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}], 0x1}}], 0x1, 0x4000000) 597.921217ms ago: executing program 2 (id=2042): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}}, 0x200000d4) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x13}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xfffffffffffffe45, &(0x7f0000000180)={@multicast, @random="933026ed8387", @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @info_request={0xf, 0x0, 0x0, 0x70, 0x83}}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff010011d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcebc7586186fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35eff00006b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba17a647a171c2fc73a8c7541c7ffaafba62195fce77382ae962f30d4a377d760040975a44aa73a4e687d06f96f0987b980f6f883534dfc71ace539eeeb08cff54e0e05d5e0563660a3664c67d0eb9cdf4eab93ab4bf1972a2acc5c5d43dc2f2b66d7493c390d042d896a1ad772f6d4c2cf38ba0"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) pwritev(r1, &(0x7f0000000380), 0x0, 0x4, 0x6) 596.405858ms ago: executing program 4 (id=2043): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') (rerun: 64) pread64(r2, 0x0, 0x0, 0x4fd7) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) (async) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 446.06204ms ago: executing program 4 (id=2044): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000680)='kmem_cache_free\x00', r0}, 0x18) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 445.540261ms ago: executing program 4 (id=2046): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3, 0x0, 0x107}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x16, 0x4, 0x90c, 0x47, @mcast1, @local, 0x1, 0x8000, 0x3, 0x66}}) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, r8, 0x0, 0xc, 0x2) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80000}, 0x20040855) write(r6, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') 418.381791ms ago: executing program 2 (id=2047): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0x9b) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 345.095163ms ago: executing program 2 (id=2048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) dup2(r3, r4) 297.581544ms ago: executing program 1 (id=2049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1, 0xfffffffd}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (fail_nth: 8) 463.57µs ago: executing program 0 (id=2050): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0x2}, 0x18) 0s ago: executing program 1 (id=2051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8008, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x5}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000080)}, 0xea12, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r8, 0x1, 0xfffffffd}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r12}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) kernel console output (not intermixed with test programs): .4.1586: mark_inode_dirty error [ 120.488526][ T8200] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1586: corrupted inode contents [ 120.502516][ T8220] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.510883][ T8200] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 120.522548][ T8200] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1586: corrupted inode contents [ 120.535630][ T8223] loop1: detected capacity change from 0 to 2048 [ 120.543544][ T8200] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1586: mark_inode_dirty error [ 120.543924][ T3414] hid-generic 0003:0000:0000.0035: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 120.566218][ T8200] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 120.576910][ T8200] EXT4-fs (loop4): 1 truncate cleaned up [ 120.591954][ T52] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.604732][ T8200] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.679953][ T8232] 9pnet_fd: Insufficient options for proto=fd [ 120.688924][ T8233] loop3: detected capacity change from 0 to 512 [ 120.706906][ T8233] EXT4-fs: Ignoring removed nobh option [ 120.731772][ T8233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1596: corrupted inode contents [ 120.744832][ T8243] loop4: detected capacity change from 0 to 1024 [ 120.768028][ T8243] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.776216][ T8233] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1596: mark_inode_dirty error [ 120.779423][ T8243] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 120.797729][ T8246] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1598'. [ 120.809141][ T8243] JBD2: no valid journal superblock found [ 120.815306][ T8243] EXT4-fs (loop4): Could not load journal inode [ 120.822687][ T8233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1596: corrupted inode contents [ 120.825744][ T8246] 9pnet_fd: Insufficient options for proto=fd [ 120.842449][ T8233] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1596: mark_inode_dirty error [ 120.854470][ T8233] Quota error (device loop3): write_blk: dquota write failed [ 120.867347][ T8233] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 120.877946][ T8233] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1596: Failed to acquire dquot type 0 [ 120.898396][ T8233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1596: corrupted inode contents [ 120.921071][ T8233] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1596: mark_inode_dirty error [ 120.940536][ T8233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1596: corrupted inode contents [ 120.954374][ T8233] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1596: mark_inode_dirty error [ 120.966356][ T8233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1596: corrupted inode contents [ 120.978814][ T8233] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 120.988519][ T8233] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1596: corrupted inode contents [ 121.004118][ T8233] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1596: mark_inode_dirty error [ 121.007948][ T8257] loop4: detected capacity change from 0 to 128 [ 121.023398][ T8233] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 121.041291][ T8257] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.060006][ T8257] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.077178][ T8233] EXT4-fs (loop3): 1 truncate cleaned up [ 121.084389][ T8233] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.117003][ T52] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.125246][ T8250] 9pnet_fd: Insufficient options for proto=fd [ 121.158702][ T8263] loop4: detected capacity change from 0 to 512 [ 121.198542][ T8263] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.211958][ T8266] loop3: detected capacity change from 0 to 512 [ 121.239861][ T8266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.257251][ T8266] EXT4-fs (loop3): 1 truncate cleaned up [ 121.266768][ T8270] 9pnet_fd: Insufficient options for proto=fd [ 121.287654][ T8263] EXT4-fs (loop4): 1 truncate cleaned up [ 121.409513][ T8280] loop4: detected capacity change from 0 to 512 [ 121.416786][ T8280] EXT4-fs: Ignoring removed nobh option [ 121.431152][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1615: corrupted inode contents [ 121.432675][ T8283] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1614'. [ 121.485294][ T8283] 9pnet_fd: Insufficient options for proto=fd [ 121.510713][ T8280] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1615: mark_inode_dirty error [ 121.522479][ T8287] loop1: detected capacity change from 0 to 512 [ 121.530401][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1615: corrupted inode contents [ 121.542882][ T8287] EXT4-fs: Ignoring removed nobh option [ 121.557877][ T8280] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1615: mark_inode_dirty error [ 121.573622][ T8287] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1616: corrupted inode contents [ 121.588119][ T8280] Quota error (device loop4): write_blk: dquota write failed [ 121.597031][ T8287] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1616: mark_inode_dirty error [ 121.622642][ T8280] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 121.632746][ T8280] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1615: Failed to acquire dquot type 0 [ 121.664908][ T8292] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1617'. [ 121.726751][ T8287] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1616: corrupted inode contents [ 121.740597][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1615: corrupted inode contents [ 121.758998][ T8287] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1616: mark_inode_dirty error [ 121.770601][ T29] audit: type=1326 audit(1757373087.652:7712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3f55ebe9 code=0x7ffc0000 [ 121.794306][ T29] audit: type=1326 audit(1757373087.652:7713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc3f55ebe9 code=0x7ffc0000 [ 121.818076][ T29] audit: type=1326 audit(1757373087.652:7714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc3f55ebe9 code=0x7ffc0000 [ 121.841629][ T29] audit: type=1326 audit(1757373087.652:7715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8290 comm="syz.3.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc3f55ebe9 code=0x7ffc0000 [ 121.868329][ T8299] loop2: detected capacity change from 0 to 1024 [ 121.875635][ T8299] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 121.886848][ T8299] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 121.899796][ T8299] JBD2: no valid journal superblock found [ 121.900728][ T8280] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1615: mark_inode_dirty error [ 121.905551][ T8299] EXT4-fs (loop2): Could not load journal inode [ 121.918727][ T8287] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1616: Failed to acquire dquot type 0 [ 121.935765][ T8287] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1616: corrupted inode contents [ 121.948119][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1615: corrupted inode contents [ 121.957049][ T8287] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1616: mark_inode_dirty error [ 121.972401][ T8280] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1615: mark_inode_dirty error [ 121.984280][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1615: corrupted inode contents [ 121.998592][ T8280] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 122.007627][ T8300] loop3: detected capacity change from 0 to 512 [ 122.024186][ T8280] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1615: corrupted inode contents [ 122.025379][ T8287] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1616: corrupted inode contents [ 122.060179][ T8280] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1615: mark_inode_dirty error [ 122.076352][ T8280] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 122.078437][ T8287] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1616: mark_inode_dirty error [ 122.091388][ T8300] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.118351][ T8287] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1616: corrupted inode contents [ 122.147953][ T8280] EXT4-fs (loop4): 1 truncate cleaned up [ 122.162634][ T8280] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.176166][ T8287] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 122.200612][ T8287] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1616: corrupted inode contents [ 122.235629][ T8287] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1616: mark_inode_dirty error [ 122.251703][ T8287] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 122.261284][ T8287] EXT4-fs (loop1): 1 truncate cleaned up [ 122.267686][ T8287] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.279258][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1615'. [ 122.290933][ T8316] bridge0: entered promiscuous mode [ 122.297563][ T8316] bridge0: port 3(macvlan2) entered blocking state [ 122.304246][ T8316] bridge0: port 3(macvlan2) entered disabled state [ 122.318433][ T8316] macvlan2: entered allmulticast mode [ 122.323883][ T8316] bridge0: entered allmulticast mode [ 122.355780][ T8316] macvlan2: left allmulticast mode [ 122.361063][ T8316] bridge0: left allmulticast mode [ 122.367600][ T8316] bridge0: left promiscuous mode [ 122.413146][ T8322] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 122.435520][ T8323] 9pnet_fd: Insufficient options for proto=fd [ 122.475296][ T8322] loop1: detected capacity change from 0 to 512 [ 122.488020][ T8322] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.520450][ T8322] EXT4-fs (loop1): 1 truncate cleaned up [ 122.531151][ T8327] netlink: 'syz.4.1630': attribute type 13 has an invalid length. [ 122.541833][ T8327] gretap0: refused to change device tx_queue_len [ 122.550771][ T8327] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.616424][ T8333] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.670076][ T8333] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.706018][ T8339] loop4: detected capacity change from 0 to 1024 [ 122.713893][ T8339] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 122.724919][ T8339] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 122.737018][ T8339] JBD2: no valid journal superblock found [ 122.742865][ T8339] EXT4-fs (loop4): Could not load journal inode [ 122.751252][ T8333] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.819196][ T8343] loop4: detected capacity change from 0 to 512 [ 122.828962][ T8333] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.833252][ T8343] EXT4-fs: Ignoring removed nobh option [ 122.849486][ T8343] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1636: corrupted inode contents [ 122.866210][ T8343] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1636: mark_inode_dirty error [ 122.879400][ T8343] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1636: corrupted inode contents [ 122.891613][ T8343] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1636: mark_inode_dirty error [ 122.904578][ T8343] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1636: Failed to acquire dquot type 0 [ 122.936779][ T8343] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1636: corrupted inode contents [ 122.953444][ T160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.962617][ T2035] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.971486][ T8343] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1636: mark_inode_dirty error [ 122.978621][ T2035] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.984404][ T8343] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1636: corrupted inode contents [ 123.005092][ T8353] 9pnet_fd: Insufficient options for proto=fd [ 123.019702][ T8343] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1636: mark_inode_dirty error [ 123.038974][ T8343] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1636: corrupted inode contents [ 123.052310][ T8343] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 123.061179][ T8343] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1636: corrupted inode contents [ 123.061976][ T2035] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.074066][ T8343] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1636: mark_inode_dirty error [ 123.087219][ T8355] loop3: detected capacity change from 0 to 512 [ 123.108238][ T8343] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 123.117897][ T8343] EXT4-fs (loop4): 1 truncate cleaned up [ 123.124279][ T8343] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.136425][ T8355] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.161066][ T8361] 9pnet_fd: Insufficient options for proto=fd [ 123.235217][ T8370] loop1: detected capacity change from 0 to 1024 [ 123.247807][ T8370] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.259334][ T8370] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.273989][ T8370] JBD2: no valid journal superblock found [ 123.280091][ T8370] EXT4-fs (loop1): Could not load journal inode [ 123.298040][ T8376] loop3: detected capacity change from 0 to 512 [ 123.305067][ T8376] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.316763][ T8376] EXT4-fs (loop3): 1 truncate cleaned up [ 123.408752][ T8386] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.420322][ T8391] loop4: detected capacity change from 0 to 512 [ 123.436941][ T8391] EXT4-fs: Ignoring removed nobh option [ 123.454456][ T8391] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1654: corrupted inode contents [ 123.471164][ T8396] netlink: 'syz.1.1656': attribute type 13 has an invalid length. [ 123.490718][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.502841][ T8391] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1654: mark_inode_dirty error [ 123.519636][ T8386] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.533028][ T8400] loop2: detected capacity change from 0 to 512 [ 123.541380][ T8391] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1654: corrupted inode contents [ 123.553696][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.576149][ T8391] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1654: mark_inode_dirty error [ 123.595201][ T8400] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.605857][ T8396] gretap0: refused to change device tx_queue_len [ 123.618763][ T8391] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1654: Failed to acquire dquot type 0 [ 123.639019][ T8396] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 123.665854][ T8386] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.760686][ T8391] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1654: corrupted inode contents [ 123.786566][ T8386] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.797632][ T8391] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1654: mark_inode_dirty error [ 123.854832][ T8391] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1654: corrupted inode contents [ 123.876184][ T8391] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1654: mark_inode_dirty error [ 123.906148][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.919148][ T2035] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.933789][ T8391] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1654: corrupted inode contents [ 123.949629][ T2035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.962372][ T2035] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.972677][ T8391] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 123.981720][ T8391] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1654: corrupted inode contents [ 123.994771][ T8391] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1654: mark_inode_dirty error [ 124.006137][ T8391] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 124.016705][ T8391] EXT4-fs (loop4): 1 truncate cleaned up [ 124.022970][ T8391] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.080173][ T8409] loop2: detected capacity change from 0 to 1024 [ 124.098466][ T8409] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.109636][ T8409] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.131465][ T8409] JBD2: no valid journal superblock found [ 124.137375][ T8409] EXT4-fs (loop2): Could not load journal inode [ 124.161245][ T8415] loop4: detected capacity change from 0 to 512 [ 124.169319][ T8415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.193483][ T8415] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 124.193483][ T8415] [ 124.204578][ T8415] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 124.220849][ T8420] loop2: detected capacity change from 0 to 512 [ 124.227733][ T8420] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.244673][ T8420] EXT4-fs (loop2): 1 truncate cleaned up [ 124.333740][ T8436] loop2: detected capacity change from 0 to 512 [ 124.349725][ T8436] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.369533][ T8434] loop1: detected capacity change from 0 to 512 [ 124.376315][ T8434] EXT4-fs: Ignoring removed nobh option [ 124.389763][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1668: corrupted inode contents [ 124.402603][ T8434] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1668: mark_inode_dirty error [ 124.419407][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1668: corrupted inode contents [ 124.432202][ T8434] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1668: mark_inode_dirty error [ 124.444884][ T8434] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1668: Failed to acquire dquot type 0 [ 124.457310][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1668: corrupted inode contents [ 124.486181][ T8434] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1668: mark_inode_dirty error [ 124.508134][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1668: corrupted inode contents [ 124.539957][ T8434] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1668: mark_inode_dirty error [ 124.557403][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1668: corrupted inode contents [ 124.571361][ T8434] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 124.580205][ T8434] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1668: corrupted inode contents [ 124.605316][ T8434] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1668: mark_inode_dirty error [ 124.621164][ T8434] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 124.631817][ T8434] EXT4-fs (loop1): 1 truncate cleaned up [ 124.637979][ T8448] loop3: detected capacity change from 0 to 512 [ 124.638496][ T8434] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.660074][ T8448] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.698088][ T8448] EXT4-fs (loop3): 1 truncate cleaned up [ 124.720436][ T8447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.760499][ T8447] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.779329][ T8434] __nla_validate_parse: 3 callbacks suppressed [ 124.779347][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 124.800739][ T8434] bridge0: entered promiscuous mode [ 124.807956][ T8434] bridge0: port 3(macvlan2) entered blocking state [ 124.814593][ T8434] bridge0: port 3(macvlan2) entered disabled state [ 124.822203][ T8434] macvlan2: entered allmulticast mode [ 124.827624][ T8434] bridge0: entered allmulticast mode [ 124.827808][ T8453] loop3: detected capacity change from 0 to 2048 [ 124.839808][ T8434] macvlan2: left allmulticast mode [ 124.845070][ T8434] bridge0: left allmulticast mode [ 124.850974][ T8434] bridge0: left promiscuous mode [ 124.862480][ T8447] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.000159][ T8447] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.061329][ T8467] loop4: detected capacity change from 0 to 512 [ 125.090834][ T8469] loop3: detected capacity change from 0 to 1024 [ 125.099621][ T160] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.109848][ T8469] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 125.121065][ T8469] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 125.133255][ T160] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.150378][ T8469] JBD2: no valid journal superblock found [ 125.156296][ T8469] EXT4-fs (loop3): Could not load journal inode [ 125.156761][ T160] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.174482][ T8467] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.185031][ T160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.233515][ T8482] loop2: detected capacity change from 0 to 2048 [ 125.261821][ T8481] loop3: detected capacity change from 0 to 512 [ 125.285492][ T8481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.303091][ T8485] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.316337][ T8481] EXT4-fs (loop3): 1 truncate cleaned up [ 125.406473][ T8488] loop4: detected capacity change from 0 to 512 [ 125.413660][ T8488] EXT4-fs: Ignoring removed nobh option [ 125.422278][ T8485] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.444314][ T8488] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1688: corrupted inode contents [ 125.474186][ T8488] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1688: mark_inode_dirty error [ 125.487116][ T8488] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1688: corrupted inode contents [ 125.501855][ T8485] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.514456][ T8488] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1688: mark_inode_dirty error [ 125.527688][ T8488] __quota_error: 141 callbacks suppressed [ 125.527706][ T8488] Quota error (device loop4): write_blk: dquota write failed [ 125.545379][ T8488] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 125.548595][ T8498] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1689'. [ 125.555719][ T8488] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1688: Failed to acquire dquot type 0 [ 125.585980][ T8488] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1688: corrupted inode contents [ 125.599658][ T8488] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1688: mark_inode_dirty error [ 125.614660][ T29] audit: type=1326 audit(1757373091.562:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 125.638488][ T29] audit: type=1326 audit(1757373091.562:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 125.662278][ T29] audit: type=1326 audit(1757373091.562:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 125.668672][ T8488] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1688: corrupted inode contents [ 125.695940][ T29] audit: type=1326 audit(1757373091.632:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 125.701691][ T8488] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1688: mark_inode_dirty error [ 125.722202][ T29] audit: type=1326 audit(1757373091.632:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 125.734886][ T8488] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1688: corrupted inode contents [ 125.757606][ T29] audit: type=1326 audit(1757373091.632:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 125.793151][ T29] audit: type=1326 audit(1757373091.632:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 125.816815][ T29] audit: type=1326 audit(1757373091.632:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 125.842256][ T8488] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 125.849611][ T8485] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.851735][ T8488] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1688: corrupted inode contents [ 125.874491][ T8488] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1688: mark_inode_dirty error [ 125.886041][ T8488] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 125.896719][ T8488] EXT4-fs (loop4): 1 truncate cleaned up [ 125.903368][ T8488] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.979189][ T8519] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1699'. [ 126.033950][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 126.047409][ T8529] bridge0: entered promiscuous mode [ 126.055125][ T8529] bridge0: port 3(macvlan2) entered blocking state [ 126.061759][ T8529] bridge0: port 3(macvlan2) entered disabled state [ 126.073555][ T8529] macvlan2: entered allmulticast mode [ 126.079061][ T8529] bridge0: entered allmulticast mode [ 126.085086][ T8529] macvlan2: left allmulticast mode [ 126.090372][ T8529] bridge0: left allmulticast mode [ 126.096825][ T8529] bridge0: left promiscuous mode [ 126.174715][ T8541] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1706'. [ 126.228075][ T8540] loop2: detected capacity change from 0 to 512 [ 126.235796][ T8540] EXT4-fs: Ignoring removed nobh option [ 126.281902][ T8549] 9pnet_fd: Insufficient options for proto=fd [ 126.314982][ T8552] loop4: detected capacity change from 0 to 1024 [ 126.331469][ T8552] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 126.342693][ T8552] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 126.379185][ T8540] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1707: corrupted inode contents [ 126.392194][ T8540] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.1707: mark_inode_dirty error [ 126.404258][ T8540] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.1707: corrupted inode contents [ 126.437246][ T8552] JBD2: no valid journal superblock found [ 126.443065][ T8552] EXT4-fs (loop4): Could not load journal inode [ 126.450711][ T8540] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.1707: mark_inode_dirty error [ 126.462506][ T8540] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1707: Failed to acquire dquot type 0 [ 126.475399][ T8540] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1707: corrupted inode contents [ 126.487870][ T8540] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.1707: mark_inode_dirty error [ 126.501013][ T8540] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1707: corrupted inode contents [ 126.513331][ T8540] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1707: mark_inode_dirty error [ 126.525723][ T8540] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1707: corrupted inode contents [ 126.549613][ T8560] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1714'. [ 126.568415][ T8540] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 126.642194][ T8540] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1707: corrupted inode contents [ 126.662790][ T8565] loop4: detected capacity change from 0 to 512 [ 126.681069][ T8565] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.695741][ T8540] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.1707: mark_inode_dirty error [ 126.709322][ T8565] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 126.709322][ T8565] [ 126.720074][ T8565] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 126.738905][ T8540] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 126.750066][ T8540] EXT4-fs (loop2): 1 truncate cleaned up [ 126.756134][ T8540] EXT4-fs mount: 210 callbacks suppressed [ 126.756166][ T8540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.770866][ T8565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.775842][ T8540] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.799684][ T8540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.826001][ T8570] loop0: detected capacity change from 0 to 2048 [ 126.849822][ T8570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.872525][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 126.893434][ T8540] bridge0: entered promiscuous mode [ 126.910119][ T8540] bridge0: port 3(macvlan2) entered blocking state [ 126.916934][ T8540] bridge0: port 3(macvlan2) entered disabled state [ 126.924076][ T8540] macvlan2: entered allmulticast mode [ 126.929529][ T8540] bridge0: entered allmulticast mode [ 126.936281][ T8540] macvlan2: left allmulticast mode [ 126.941458][ T8540] bridge0: left allmulticast mode [ 126.957241][ T8540] bridge0: left promiscuous mode [ 127.015030][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.077953][ T8582] loop2: detected capacity change from 0 to 128 [ 127.086279][ T8582] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.101954][ T8582] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.126415][ T3703] hid_parser_main: 211 callbacks suppressed [ 127.126433][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x0 [ 127.140354][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x0 [ 127.147814][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x0 [ 127.155240][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x0 [ 127.162828][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x0 [ 127.170479][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x0 [ 127.178111][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x4 [ 127.185626][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x0 [ 127.189328][ T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.193163][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x0 [ 127.210066][ T3703] hid-generic 0003:0000:0000.0036: unknown main item tag 0x0 [ 127.217792][ T8584] loop0: detected capacity change from 0 to 512 [ 127.219174][ T3703] hid-generic 0003:0000:0000.0036: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 127.231933][ T8584] EXT4-fs: Ignoring removed nobh option [ 127.260620][ T8584] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1720: corrupted inode contents [ 127.277077][ T8584] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1720: mark_inode_dirty error [ 127.290433][ T8590] 9pnet_fd: Insufficient options for proto=fd [ 127.307101][ T8584] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1720: corrupted inode contents [ 127.319988][ T8584] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1720: mark_inode_dirty error [ 127.335044][ T8584] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1720: Failed to acquire dquot type 0 [ 127.353713][ T8584] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1720: corrupted inode contents [ 127.366859][ T8584] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1720: mark_inode_dirty error [ 127.379539][ T8584] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1720: corrupted inode contents [ 127.391884][ T8584] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1720: mark_inode_dirty error [ 127.407705][ T8584] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1720: corrupted inode contents [ 127.424909][ T8584] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 127.433811][ T8584] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1720: corrupted inode contents [ 127.447139][ T8584] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1720: mark_inode_dirty error [ 127.459638][ T8584] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 127.469402][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 127.481991][ T8593] bridge0: entered promiscuous mode [ 127.487650][ T8584] EXT4-fs (loop0): 1 truncate cleaned up [ 127.487990][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.493842][ T8584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.517630][ T8593] bridge0: port 3(macvlan2) entered blocking state [ 127.524194][ T8593] bridge0: port 3(macvlan2) entered disabled state [ 127.532003][ T8584] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.542908][ T8593] macvlan2: entered allmulticast mode [ 127.548407][ T8593] bridge0: entered allmulticast mode [ 127.555458][ T8584] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.572644][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1720'. [ 127.582428][ T8593] macvlan2: left allmulticast mode [ 127.587589][ T8593] bridge0: left allmulticast mode [ 127.593553][ T8593] bridge0: left promiscuous mode [ 127.619581][ T8580] bridge0: entered promiscuous mode [ 127.626104][ T8580] bridge0: port 3(macvlan2) entered blocking state [ 127.632697][ T8580] bridge0: port 3(macvlan2) entered disabled state [ 127.640665][ T8580] macvlan2: entered allmulticast mode [ 127.646068][ T8580] bridge0: entered allmulticast mode [ 127.652117][ T8580] macvlan2: left allmulticast mode [ 127.657331][ T8580] bridge0: left allmulticast mode [ 127.662955][ T8580] bridge0: left promiscuous mode [ 127.672756][ T8597] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1726'. [ 127.744027][ T8603] loop2: detected capacity change from 0 to 1024 [ 127.753057][ T8603] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 127.764126][ T8603] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 127.776339][ T8603] JBD2: no valid journal superblock found [ 127.782293][ T8603] EXT4-fs (loop2): Could not load journal inode [ 127.798790][ T8610] loop4: detected capacity change from 0 to 512 [ 127.806389][ T8610] EXT4-fs: Ignoring removed nobh option [ 127.821356][ T8610] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1727: corrupted inode contents [ 127.842984][ T8617] loop3: detected capacity change from 0 to 512 [ 127.864996][ T8610] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1727: mark_inode_dirty error [ 127.880910][ T8610] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1727: corrupted inode contents [ 127.896285][ T8617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.908971][ T8610] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1727: mark_inode_dirty error [ 127.920529][ T8617] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.942210][ T8610] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1727: Failed to acquire dquot type 0 [ 127.989782][ T8610] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1727: corrupted inode contents [ 128.002336][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.027566][ T8634] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.038146][ T8610] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1727: mark_inode_dirty error [ 128.052016][ T8632] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.062245][ T8610] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1727: corrupted inode contents [ 128.074344][ T8610] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1727: mark_inode_dirty error [ 128.089228][ T8639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.098129][ T8639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.115548][ T8610] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1727: corrupted inode contents [ 128.151175][ T8634] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.158547][ T1043] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.189379][ T8610] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 128.198626][ T8610] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1727: corrupted inode contents [ 128.201427][ T8632] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.225658][ T8610] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1727: mark_inode_dirty error [ 128.240374][ T8610] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 128.249967][ T160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.265096][ T8634] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.276102][ T8610] EXT4-fs (loop4): 1 truncate cleaned up [ 128.282498][ T8610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.295425][ T160] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.318341][ T8610] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.333969][ T8634] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.367059][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.384127][ T8632] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.403062][ T8651] loop4: detected capacity change from 0 to 512 [ 128.410555][ T8651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.420788][ T160] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.422439][ T8651] EXT4-fs (loop4): 1 truncate cleaned up [ 128.435455][ T8651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.450509][ T160] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.473449][ T8632] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.489634][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.511722][ T8659] loop4: detected capacity change from 0 to 128 [ 128.542326][ T8659] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.554317][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.566056][ T8663] loop3: detected capacity change from 0 to 512 [ 128.573071][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.581854][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.591491][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.599439][ T8659] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.611032][ T8663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.624507][ T8663] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.653165][ T36] hid-generic 0003:0000:0000.0038: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 128.672515][ T8667] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.682853][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.703200][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.721728][ T8667] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.730613][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.740253][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.758639][ T36] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.768487][ T8675] 9pnet_fd: Insufficient options for proto=fd [ 128.811140][ T8667] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.891539][ T8667] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.907990][ T8681] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.993061][ T8690] loop3: detected capacity change from 0 to 512 [ 129.003023][ T8681] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.010098][ T8690] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.025525][ T8690] EXT4-fs (loop3): 1 truncate cleaned up [ 129.031947][ T8690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.051842][ T8681] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.066449][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.095843][ T8693] loop3: detected capacity change from 0 to 2048 [ 129.111628][ T8681] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.139451][ T8693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.179472][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.191550][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.203914][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.224381][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.262796][ T8697] loop0: detected capacity change from 0 to 512 [ 129.265356][ T8700] loop4: detected capacity change from 0 to 1024 [ 129.276926][ T8697] EXT4-fs: Ignoring removed nobh option [ 129.283278][ T8700] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 129.294345][ T8700] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 129.306098][ T8697] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1760: corrupted inode contents [ 129.319722][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.320227][ T8697] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.1760: mark_inode_dirty error [ 129.329165][ T8700] JBD2: no valid journal superblock found [ 129.342795][ T8697] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.1760: corrupted inode contents [ 129.346118][ T8700] EXT4-fs (loop4): Could not load journal inode [ 129.359294][ T8697] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1760: mark_inode_dirty error [ 129.376215][ T8697] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1760: Failed to acquire dquot type 0 [ 129.394586][ T8697] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1760: corrupted inode contents [ 129.407650][ T8704] loop3: detected capacity change from 0 to 128 [ 129.414289][ T8697] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.1760: mark_inode_dirty error [ 129.416418][ T8704] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.427921][ T8697] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1760: corrupted inode contents [ 129.439471][ T8704] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.473764][ T8697] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1760: mark_inode_dirty error [ 129.495128][ T8697] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1760: corrupted inode contents [ 129.507506][ T52] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.508043][ T8697] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 129.525990][ T8697] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1760: corrupted inode contents [ 129.539457][ T8697] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.1760: mark_inode_dirty error [ 129.565509][ T8697] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 129.576572][ T8712] FAULT_INJECTION: forcing a failure. [ 129.576572][ T8712] name failslab, interval 1, probability 0, space 0, times 0 [ 129.589428][ T8712] CPU: 1 UID: 0 PID: 8712 Comm: syz.4.1766 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.589457][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.589469][ T8712] Call Trace: [ 129.589474][ T8712] [ 129.589481][ T8712] __dump_stack+0x1d/0x30 [ 129.589505][ T8712] dump_stack_lvl+0xe8/0x140 [ 129.589525][ T8712] dump_stack+0x15/0x1b [ 129.589590][ T8712] should_fail_ex+0x265/0x280 [ 129.589691][ T8712] should_failslab+0x8c/0xb0 [ 129.589729][ T8712] kmem_cache_alloc_noprof+0x50/0x310 [ 129.589752][ T8712] ? skb_clone+0x151/0x1f0 [ 129.589777][ T8712] skb_clone+0x151/0x1f0 [ 129.589877][ T8712] pfkey_sendmsg+0x2cc/0x900 [ 129.589902][ T8712] ? avc_has_perm+0xf7/0x180 [ 129.590008][ T8712] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 129.590039][ T8712] __sock_sendmsg+0x142/0x180 [ 129.590088][ T8712] ____sys_sendmsg+0x31e/0x4e0 [ 129.590114][ T8712] ___sys_sendmsg+0x17b/0x1d0 [ 129.590153][ T8712] __x64_sys_sendmsg+0xd4/0x160 [ 129.590281][ T8712] x64_sys_call+0x191e/0x2ff0 [ 129.590350][ T8712] do_syscall_64+0xd2/0x200 [ 129.590376][ T8712] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 129.590442][ T8712] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 129.590467][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.590489][ T8712] RIP: 0033:0x7f0e0c0bebe9 [ 129.590572][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.590590][ T8712] RSP: 002b:00007f0e0ab27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.590636][ T8712] RAX: ffffffffffffffda RBX: 00007f0e0c2f5fa0 RCX: 00007f0e0c0bebe9 [ 129.590652][ T8712] RDX: 0000000000048080 RSI: 0000200000000500 RDI: 0000000000000006 [ 129.590664][ T8712] RBP: 00007f0e0ab27090 R08: 0000000000000000 R09: 0000000000000000 [ 129.590696][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.590708][ T8712] R13: 00007f0e0c2f6038 R14: 00007f0e0c2f5fa0 R15: 00007ffe2d0a4f28 [ 129.590725][ T8712] [ 129.590979][ T8697] EXT4-fs (loop0): 1 truncate cleaned up [ 129.660772][ T8717] loop3: detected capacity change from 0 to 512 [ 129.663656][ T8697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.676695][ T8717] EXT4-fs: Ignoring removed nobh option [ 129.677753][ T8697] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.718491][ T8717] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1768: corrupted inode contents [ 129.854190][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.863506][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.868251][ T8717] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1768: mark_inode_dirty error [ 129.885059][ T8717] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1768: corrupted inode contents [ 129.897254][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.911332][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.920655][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.929531][ T8717] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1768: mark_inode_dirty error [ 129.943028][ T8726] loop4: detected capacity change from 0 to 512 [ 129.951194][ T8717] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1768: Failed to acquire dquot type 0 [ 129.963395][ T8717] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1768: corrupted inode contents [ 129.977592][ T8717] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1768: mark_inode_dirty error [ 129.990735][ T8717] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1768: corrupted inode contents [ 130.003152][ T8717] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1768: mark_inode_dirty error [ 130.015922][ T8717] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1768: corrupted inode contents [ 130.037480][ T8726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.050365][ T8717] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 130.059247][ T8726] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.069950][ T8717] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1768: corrupted inode contents [ 130.071091][ T8727] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.093197][ T8717] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1768: mark_inode_dirty error [ 130.111102][ T8717] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 130.120816][ T8717] EXT4-fs (loop3): 1 truncate cleaned up [ 130.125859][ T8737] __nla_validate_parse: 3 callbacks suppressed [ 130.125874][ T8737] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1775'. [ 130.127118][ T8717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.135302][ T8737] 9pnet_fd: Insufficient options for proto=fd [ 130.144018][ T8717] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.173990][ T8717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.185141][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.197578][ T8727] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.224330][ T8742] loop4: detected capacity change from 0 to 512 [ 130.234035][ T8742] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.246032][ T8742] EXT4-fs (loop4): 1 truncate cleaned up [ 130.252658][ T8742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.276955][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 130.289986][ T8717] bridge0: entered promiscuous mode [ 130.296803][ T8717] bridge0: port 3(macvlan2) entered blocking state [ 130.297715][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.303410][ T8717] bridge0: port 3(macvlan2) entered disabled state [ 130.319456][ T8717] macvlan2: entered allmulticast mode [ 130.324833][ T8717] bridge0: entered allmulticast mode [ 130.331072][ T8717] macvlan2: left allmulticast mode [ 130.336248][ T8717] bridge0: left allmulticast mode [ 130.343375][ T8717] bridge0: left promiscuous mode [ 130.361134][ T8727] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.373328][ T8754] veth0: entered promiscuous mode [ 130.380181][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 130.380455][ T8753] loop4: detected capacity change from 0 to 2048 [ 130.421862][ T8753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.425335][ T8758] loop3: detected capacity change from 0 to 512 [ 130.442415][ T8758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.463527][ T8727] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.477720][ T8758] EXT4-fs (loop3): 1 truncate cleaned up [ 130.484869][ T8758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.509530][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.552373][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.612544][ T8769] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1786'. [ 130.617461][ T8771] loop4: detected capacity change from 0 to 512 [ 130.630371][ T8769] 9pnet_fd: Insufficient options for proto=fd [ 130.640400][ T8771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.653763][ T8771] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.667294][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 130.667310][ T29] audit: type=1326 audit(1757373096.612:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.699211][ T29] audit: type=1326 audit(1757373096.612:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.723372][ T29] audit: type=1326 audit(1757373096.612:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.747062][ T29] audit: type=1326 audit(1757373096.612:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.770881][ T29] audit: type=1326 audit(1757373096.612:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.794508][ T29] audit: type=1326 audit(1757373096.612:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.818317][ T29] audit: type=1326 audit(1757373096.612:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.841857][ T29] audit: type=1326 audit(1757373096.612:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.865300][ T29] audit: type=1326 audit(1757373096.612:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.888884][ T29] audit: type=1326 audit(1757373096.612:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8770 comm="syz.4.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 130.923754][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.926807][ T8778] FAULT_INJECTION: forcing a failure. [ 130.926807][ T8778] name failslab, interval 1, probability 0, space 0, times 0 [ 130.945982][ T8778] CPU: 1 UID: 0 PID: 8778 Comm: syz.3.1789 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.946070][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.946078][ T8778] Call Trace: [ 130.946081][ T8778] [ 130.946085][ T8778] __dump_stack+0x1d/0x30 [ 130.946132][ T8778] dump_stack_lvl+0xe8/0x140 [ 130.946142][ T8778] dump_stack+0x15/0x1b [ 130.946150][ T8778] should_fail_ex+0x265/0x280 [ 130.946161][ T8778] ? audit_log_d_path+0x8d/0x150 [ 130.946263][ T8778] should_failslab+0x8c/0xb0 [ 130.946276][ T8778] __kmalloc_cache_noprof+0x4c/0x320 [ 130.946362][ T8778] audit_log_d_path+0x8d/0x150 [ 130.946382][ T8778] audit_log_d_path_exe+0x42/0x70 [ 130.946395][ T8778] audit_log_task+0x1e9/0x250 [ 130.946426][ T8778] audit_seccomp+0x61/0x100 [ 130.946437][ T8778] ? __seccomp_filter+0x68c/0x10d0 [ 130.946447][ T8778] __seccomp_filter+0x69d/0x10d0 [ 130.946458][ T8778] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.946509][ T8778] ? vfs_write+0x7e8/0x960 [ 130.946519][ T8778] ? __rcu_read_unlock+0x4f/0x70 [ 130.946529][ T8778] ? __fget_files+0x184/0x1c0 [ 130.946619][ T8778] __secure_computing+0x82/0x150 [ 130.946629][ T8778] syscall_trace_enter+0xcf/0x1e0 [ 130.946641][ T8778] do_syscall_64+0xac/0x200 [ 130.946654][ T8778] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.946701][ T8778] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.946792][ T8778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.946808][ T8778] RIP: 0033:0x7fbc3f55ebe9 [ 130.946819][ T8778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.946859][ T8778] RSP: 002b:00007fbc3dfbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 130.946869][ T8778] RAX: ffffffffffffffda RBX: 00007fbc3f795fa0 RCX: 00007fbc3f55ebe9 [ 130.946876][ T8778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 130.946882][ T8778] RBP: 00007fbc3dfbf090 R08: 0000000000000000 R09: 0000000000000000 [ 130.946888][ T8778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.946958][ T8778] R13: 00007fbc3f796038 R14: 00007fbc3f795fa0 R15: 00007fff93ca35c8 [ 130.946969][ T8778] [ 131.299175][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1795'. [ 131.464934][ T8805] loop4: detected capacity change from 0 to 512 [ 131.490587][ T8805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.503534][ T8805] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.556450][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.576342][ T8809] loop4: detected capacity change from 0 to 1024 [ 131.583317][ T8809] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 131.594268][ T8809] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 131.604706][ T8809] JBD2: no valid journal superblock found [ 131.610519][ T8809] EXT4-fs (loop4): Could not load journal inode [ 131.633822][ T8811] loop4: detected capacity change from 0 to 1024 [ 131.640972][ T8811] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 131.651922][ T8811] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 131.662509][ T8811] JBD2: no valid journal superblock found [ 131.668279][ T8811] EXT4-fs (loop4): Could not load journal inode [ 131.728258][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1806'. [ 132.066990][ T8831] 9pnet_fd: Insufficient options for proto=fd [ 132.086031][ T8833] loop3: detected capacity change from 0 to 512 [ 132.100262][ T8833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.112876][ T8833] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.165949][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.207427][ T8840] loop3: detected capacity change from 0 to 1024 [ 132.214506][ T8840] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.225726][ T8840] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 132.236579][ T8840] JBD2: no valid journal superblock found [ 132.242351][ T8840] EXT4-fs (loop3): Could not load journal inode [ 132.253959][ T160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.266063][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.278656][ T160] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.299755][ T160] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.321365][ T8846] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 132.330180][ T8846] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 132.341602][ T8846] bridge0: port 3(vlan1) entered blocking state [ 132.348081][ T8846] bridge0: port 3(vlan1) entered disabled state [ 132.355629][ T8846] vlan1: entered allmulticast mode [ 132.360878][ T8846] bridge0: entered allmulticast mode [ 132.366935][ T8846] vlan1: left allmulticast mode [ 132.372107][ T8846] bridge0: left allmulticast mode [ 132.373359][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1817'. [ 132.459942][ T8855] loop3: detected capacity change from 0 to 128 [ 132.466766][ T8855] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.479280][ T8855] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.497187][ T3414] hid_parser_main: 146 callbacks suppressed [ 132.497200][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x0 [ 132.510871][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x0 [ 132.518429][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x0 [ 132.525893][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x0 [ 132.533319][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x0 [ 132.540745][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x0 [ 132.548113][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x4 [ 132.553220][ T2035] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.555591][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x0 [ 132.571249][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x0 [ 132.578715][ T3414] hid-generic 0003:0000:0000.003A: unknown main item tag 0x0 [ 132.578806][ T2035] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.595613][ T3414] hid-generic 0003:0000:0000.003A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 132.614018][ T2035] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.626091][ T2035] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.637536][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.662783][ T8867] loop3: detected capacity change from 0 to 512 [ 132.680619][ T8867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.684304][ C1] hrtimer: interrupt took 35704 ns [ 132.693504][ T8867] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.713088][ T8870] loop4: detected capacity change from 0 to 512 [ 132.722587][ T8870] EXT4-fs: Ignoring removed nobh option [ 132.741458][ T8870] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1823: corrupted inode contents [ 132.754334][ T8870] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1823: mark_inode_dirty error [ 132.766985][ T8870] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1823: corrupted inode contents [ 132.769771][ T8864] loop0: detected capacity change from 0 to 512 [ 132.780381][ T8870] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1823: mark_inode_dirty error [ 132.798762][ T8870] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1823: Failed to acquire dquot type 0 [ 132.811798][ T8870] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1823: corrupted inode contents [ 132.824262][ T8870] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1823: mark_inode_dirty error [ 132.836795][ T8870] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1823: corrupted inode contents [ 132.841230][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.850090][ T8870] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1823: mark_inode_dirty error [ 132.870396][ T8870] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1823: corrupted inode contents [ 132.882931][ T8870] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 132.884155][ T8864] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1824: bg 0: block 248: padding at end of block bitmap is not set [ 132.892430][ T8870] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1823: corrupted inode contents [ 132.893142][ T8870] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1823: mark_inode_dirty error [ 132.931110][ T8870] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 132.940498][ T8870] EXT4-fs (loop4): 1 truncate cleaned up [ 132.944217][ T8864] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1824: Failed to acquire dquot type 1 [ 132.946636][ T8870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.946744][ T8870] ext4 filesystem being mounted at /417/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.986263][ T8870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.997589][ T8864] EXT4-fs (loop0): 1 truncate cleaned up [ 133.025192][ T8864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.040864][ T8864] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.081235][ T8881] loop3: detected capacity change from 0 to 2048 [ 133.089542][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1823'. [ 133.100644][ T8881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.101621][ T8870] bridge0: entered promiscuous mode [ 133.119781][ T8870] bridge0: port 3(macvlan2) entered blocking state [ 133.126356][ T8870] bridge0: port 3(macvlan2) entered disabled state [ 133.133190][ T8870] macvlan2: entered allmulticast mode [ 133.138783][ T8870] bridge0: entered allmulticast mode [ 133.144854][ T8870] macvlan2: left allmulticast mode [ 133.150064][ T8870] bridge0: left allmulticast mode [ 133.156075][ T8870] bridge0: left promiscuous mode [ 133.156254][ T8864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.172493][ T8864] syz.0.1824 (8864) used greatest stack depth: 9160 bytes left [ 133.205464][ T8888] netlink: 'syz.0.1829': attribute type 13 has an invalid length. [ 133.243812][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.272268][ T8894] 9pnet_fd: Insufficient options for proto=fd [ 133.285951][ T8890] loop4: detected capacity change from 0 to 512 [ 133.293021][ T8890] EXT4-fs: Ignoring removed nobh option [ 133.304312][ T8898] loop0: detected capacity change from 0 to 128 [ 133.317948][ T8890] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1831: corrupted inode contents [ 133.320311][ T8898] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.341621][ T8890] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1831: mark_inode_dirty error [ 133.354105][ T8898] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.367881][ T8890] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1831: corrupted inode contents [ 133.385548][ T8890] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1831: mark_inode_dirty error [ 133.433585][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.453953][ T8904] loop0: detected capacity change from 0 to 512 [ 133.462631][ T8890] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1831: Failed to acquire dquot type 0 [ 133.479366][ T8890] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1831: corrupted inode contents [ 133.493124][ T8890] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1831: mark_inode_dirty error [ 133.500135][ T8904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.517471][ T8890] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1831: corrupted inode contents [ 133.523787][ T8904] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.541402][ T8890] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1831: mark_inode_dirty error [ 133.553184][ T8890] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1831: corrupted inode contents [ 133.566715][ T8890] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 133.576387][ T8890] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1831: corrupted inode contents [ 133.589114][ T8890] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1831: mark_inode_dirty error [ 133.600668][ T8890] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 133.611560][ T8890] EXT4-fs (loop4): 1 truncate cleaned up [ 133.618651][ T8890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.642484][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.654048][ T8890] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.695809][ T8911] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.712877][ T8890] bridge0: entered promiscuous mode [ 133.721338][ T8890] bridge0: port 3(macvlan2) entered blocking state [ 133.728137][ T8890] bridge0: port 3(macvlan2) entered disabled state [ 133.735701][ T8890] macvlan2: entered allmulticast mode [ 133.741896][ T8890] bridge0: entered allmulticast mode [ 133.751105][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.760477][ T8890] macvlan2: left allmulticast mode [ 133.765606][ T8890] bridge0: left allmulticast mode [ 133.771299][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.779965][ T8890] bridge0: left promiscuous mode [ 133.799589][ T8911] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.851730][ T8911] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.867040][ T8916] loop2: detected capacity change from 0 to 512 [ 133.875582][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.885601][ T8916] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.899332][ T8916] EXT4-fs (loop2): 1 truncate cleaned up [ 133.905681][ T8916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.013140][ T8911] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.025039][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.087348][ T8925] loop4: detected capacity change from 0 to 2048 [ 134.185216][ T8927] netlink: 'syz.1.1842': attribute type 13 has an invalid length. [ 134.240430][ T8925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.257708][ T8922] loop2: detected capacity change from 0 to 512 [ 134.258060][ T8931] loop1: detected capacity change from 0 to 512 [ 134.258756][ T8931] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.263314][ T8931] EXT4-fs (loop1): 1 truncate cleaned up [ 134.288450][ T8931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.316903][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.371269][ T8939] loop3: detected capacity change from 0 to 128 [ 134.378728][ T8939] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.382353][ T8922] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1840: bg 0: block 248: padding at end of block bitmap is not set [ 134.390875][ T8939] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.428259][ T8922] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1840: Failed to acquire dquot type 1 [ 134.453628][ T8922] EXT4-fs (loop2): 1 truncate cleaned up [ 134.462483][ T3414] hid-generic 0003:0000:0000.003B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 134.483058][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.497128][ T8922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.511597][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.514013][ T8922] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.542730][ T8945] loop3: detected capacity change from 0 to 512 [ 134.550561][ T8945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.562348][ T8945] EXT4-fs (loop3): 1 truncate cleaned up [ 134.569850][ T8945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.592117][ T8946] loop4: detected capacity change from 0 to 512 [ 134.599064][ T8946] EXT4-fs: Ignoring removed nobh option [ 134.605610][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.619751][ T8946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1846: corrupted inode contents [ 134.629279][ T8922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.632065][ T8946] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1846: mark_inode_dirty error [ 134.652655][ T8946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1846: corrupted inode contents [ 134.653042][ T8922] syz.2.1840 (8922) used greatest stack depth: 9096 bytes left [ 134.673916][ T8946] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1846: mark_inode_dirty error [ 134.693976][ T8946] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1846: Failed to acquire dquot type 0 [ 134.706654][ T8946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1846: corrupted inode contents [ 134.724918][ T8953] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.735372][ T8946] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1846: mark_inode_dirty error [ 134.748561][ T8946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1846: corrupted inode contents [ 134.762056][ T8946] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1846: mark_inode_dirty error [ 134.773976][ T8946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1846: corrupted inode contents [ 134.790200][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.791214][ T8946] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 134.799067][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.807443][ T8946] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1846: corrupted inode contents [ 134.827998][ T23] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.829060][ T8953] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.849860][ T8946] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1846: mark_inode_dirty error [ 134.861210][ T8946] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 134.871794][ T8946] EXT4-fs (loop4): 1 truncate cleaned up [ 134.878422][ T8946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.892243][ T8946] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.913267][ T8953] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.934421][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.960728][ T8953] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.977600][ T8966] netlink: 'syz.4.1853': attribute type 13 has an invalid length. [ 135.032640][ T8970] 9pnet_fd: Insufficient options for proto=fd [ 135.048426][ T2035] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.067957][ T2035] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.077183][ T2035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.086249][ T2035] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.224639][ T8976] loop1: detected capacity change from 0 to 2048 [ 135.250439][ T8976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.376499][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.619314][ T8981] loop2: detected capacity change from 0 to 512 [ 135.626313][ T8981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.645758][ T8981] EXT4-fs (loop2): 1 truncate cleaned up [ 135.795781][ T8987] loop3: detected capacity change from 0 to 512 [ 135.803256][ T8987] EXT4-fs: Ignoring removed nobh option [ 135.820331][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1861: corrupted inode contents [ 135.832566][ T8987] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.1861: mark_inode_dirty error [ 135.845078][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.1861: corrupted inode contents [ 135.857499][ T8987] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.1861: mark_inode_dirty error [ 135.870169][ T8987] __quota_error: 331 callbacks suppressed [ 135.870247][ T8987] Quota error (device loop3): write_blk: dquota write failed [ 135.883701][ T8987] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 135.938420][ T8987] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.1861: Failed to acquire dquot type 0 [ 135.951682][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1861: corrupted inode contents [ 135.964323][ T8987] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.1861: mark_inode_dirty error [ 135.978656][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1861: corrupted inode contents [ 135.991927][ T8987] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1861: mark_inode_dirty error [ 136.003458][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1861: corrupted inode contents [ 136.016688][ T8987] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 136.025490][ T8987] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1861: corrupted inode contents [ 136.038810][ T8987] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.1861: mark_inode_dirty error [ 136.050874][ T8987] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 136.060721][ T8987] EXT4-fs (loop3): 1 truncate cleaned up [ 136.075305][ T29] audit: type=1326 audit(1757373102.012:8406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96db9aebe9 code=0x7ffc0000 [ 136.108944][ T8987] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.130482][ T29] audit: type=1326 audit(1757373102.042:8407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96db9aebe9 code=0x7ffc0000 [ 136.154110][ T29] audit: type=1326 audit(1757373102.042:8408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96db9aebe9 code=0x7ffc0000 [ 136.178047][ T29] audit: type=1326 audit(1757373102.042:8409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96db9aebe9 code=0x7ffc0000 [ 136.202040][ T29] audit: type=1326 audit(1757373102.042:8410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96db9aebe9 code=0x7ffc0000 [ 136.225485][ T29] audit: type=1326 audit(1757373102.042:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96db9aebe9 code=0x7ffc0000 [ 136.249004][ T29] audit: type=1326 audit(1757373102.042:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96db9aebe9 code=0x7ffc0000 [ 136.272814][ T29] audit: type=1326 audit(1757373102.042:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.1.1857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96db9aebe9 code=0x7ffc0000 [ 136.340291][ T8999] netlink: 'syz.4.1865': attribute type 13 has an invalid length. [ 136.348476][ T8999] netlink: 'syz.4.1865': attribute type 27 has an invalid length. [ 136.357725][ T8986] __nla_validate_parse: 1 callbacks suppressed [ 136.357743][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1861'. [ 136.375871][ T8986] bridge0: entered promiscuous mode [ 136.382893][ T8986] bridge0: port 3(macvlan2) entered blocking state [ 136.389576][ T8986] bridge0: port 3(macvlan2) entered disabled state [ 136.396371][ T8986] macvlan2: entered allmulticast mode [ 136.401936][ T8986] bridge0: entered allmulticast mode [ 136.408373][ T8986] macvlan2: left allmulticast mode [ 136.413517][ T8986] bridge0: left allmulticast mode [ 136.419530][ T8986] bridge0: left promiscuous mode [ 136.443140][ T9002] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1859'. [ 136.475720][ T9002] 9pnet_fd: Insufficient options for proto=fd [ 136.476181][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.495021][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.516254][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.524576][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.535556][ T9005] 9pnet_fd: Insufficient options for proto=fd [ 136.553458][ T9005] IPv6: Can't replace route, no match found [ 136.654311][ T9034] loop3: detected capacity change from 0 to 512 [ 136.661381][ T9033] FAULT_INJECTION: forcing a failure. [ 136.661381][ T9033] name failslab, interval 1, probability 0, space 0, times 0 [ 136.661591][ T9034] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.674310][ T9033] CPU: 1 UID: 0 PID: 9033 Comm: syz.2.1875 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.674411][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.674423][ T9033] Call Trace: [ 136.674430][ T9033] [ 136.674438][ T9033] __dump_stack+0x1d/0x30 [ 136.674459][ T9033] dump_stack_lvl+0xe8/0x140 [ 136.674478][ T9033] dump_stack+0x15/0x1b [ 136.674495][ T9033] should_fail_ex+0x265/0x280 [ 136.674550][ T9033] ? audit_log_d_path+0x8d/0x150 [ 136.674586][ T9033] should_failslab+0x8c/0xb0 [ 136.674611][ T9033] __kmalloc_cache_noprof+0x4c/0x320 [ 136.674648][ T9033] audit_log_d_path+0x8d/0x150 [ 136.674676][ T9033] audit_log_d_path_exe+0x42/0x70 [ 136.674704][ T9033] audit_log_task+0x1e9/0x250 [ 136.674794][ T9033] audit_seccomp+0x61/0x100 [ 136.674940][ T9033] ? __seccomp_filter+0x68c/0x10d0 [ 136.675026][ T9033] __seccomp_filter+0x69d/0x10d0 [ 136.675103][ T9033] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.675128][ T9033] ? vfs_write+0x7e8/0x960 [ 136.675153][ T9033] __secure_computing+0x82/0x150 [ 136.675173][ T9033] syscall_trace_enter+0xcf/0x1e0 [ 136.675197][ T9033] do_syscall_64+0xac/0x200 [ 136.675271][ T9033] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.675293][ T9033] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.675396][ T9033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.675417][ T9033] RIP: 0033:0x7fe4a131ebe9 [ 136.675497][ T9033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.675514][ T9033] RSP: 002b:00007fe49fd7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 136.675535][ T9033] RAX: ffffffffffffffda RBX: 00007fe4a1555fa0 RCX: 00007fe4a131ebe9 [ 136.675548][ T9033] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.675560][ T9033] RBP: 00007fe49fd7f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.675572][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.675584][ T9033] R13: 00007fe4a1556038 R14: 00007fe4a1555fa0 R15: 00007ffe8264d5b8 [ 136.675639][ T9033] [ 136.893492][ T9034] EXT4-fs (loop3): 1 truncate cleaned up [ 136.901905][ T9040] netlink: 'syz.2.1877': attribute type 13 has an invalid length. [ 136.910157][ T9040] netlink: 'syz.2.1877': attribute type 27 has an invalid length. [ 137.037109][ T9055] loop2: detected capacity change from 0 to 2048 [ 137.143628][ T9060] 9pnet_fd: Insufficient options for proto=fd [ 137.155899][ T9060] IPv6: Can't replace route, no match found [ 137.205472][ T9066] 9pnet_fd: Insufficient options for proto=fd [ 137.297447][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1888'. [ 137.319042][ T9070] netlink: 'syz.0.1889': attribute type 13 has an invalid length. [ 137.327044][ T9070] netlink: 'syz.0.1889': attribute type 27 has an invalid length. [ 137.349687][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 137.442958][ T9077] loop2: detected capacity change from 0 to 512 [ 137.468655][ T9080] netlink: 'syz.4.1902': attribute type 13 has an invalid length. [ 137.476604][ T9080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1902'. [ 137.496336][ T9083] loop3: detected capacity change from 0 to 2048 [ 137.512031][ T9077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.541329][ T9077] EXT4-fs (loop2): 1 truncate cleaned up [ 137.543004][ T9086] loop0: detected capacity change from 0 to 512 [ 137.575206][ T9086] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.624672][ T9086] EXT4-fs: Ignoring removed orlov option [ 137.630538][ T9086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.643415][ T9093] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.668316][ T9086] EXT4-fs (loop0): can't enable nombcache during remount [ 137.694622][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.703597][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.720870][ T9093] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.825090][ T9093] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.931880][ T9118] loop4: detected capacity change from 0 to 512 [ 137.944322][ T9118] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.965468][ T9093] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.989445][ T9118] EXT4-fs (loop4): 1 truncate cleaned up [ 138.040064][ T2003] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.056887][ T2003] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.073736][ T2003] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.082571][ T2003] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.085977][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1907'. [ 138.136946][ T9127] loop4: detected capacity change from 0 to 512 [ 138.143816][ T9127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.155320][ T9127] EXT4-fs (loop4): 1 truncate cleaned up [ 138.221076][ T9134] loop4: detected capacity change from 0 to 256 [ 138.528707][ T9142] loop1: detected capacity change from 0 to 512 [ 138.535304][ T9142] EXT4-fs: Ignoring removed nobh option [ 138.550169][ T9142] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1915: corrupted inode contents [ 138.562262][ T9142] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1915: mark_inode_dirty error [ 138.579090][ T9142] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1915: corrupted inode contents [ 138.595680][ T9142] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1915: mark_inode_dirty error [ 138.607832][ T9142] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1915: Failed to acquire dquot type 0 [ 138.620613][ T9142] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1915: corrupted inode contents [ 138.633301][ T9142] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1915: mark_inode_dirty error [ 138.645103][ T9142] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1915: corrupted inode contents [ 138.658013][ T9142] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1915: mark_inode_dirty error [ 138.670563][ T9142] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1915: corrupted inode contents [ 138.683090][ T9142] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 138.709131][ T9148] 9pnet_fd: Insufficient options for proto=fd [ 138.716934][ T9142] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1915: corrupted inode contents [ 138.739549][ T9142] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1915: mark_inode_dirty error [ 138.753686][ T9154] loop0: detected capacity change from 0 to 2048 [ 138.755359][ T9150] loop3: detected capacity change from 0 to 2048 [ 138.767792][ T9142] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 138.778084][ T9142] EXT4-fs (loop1): 1 truncate cleaned up [ 138.784686][ T9142] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.966655][ T9176] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.996744][ T9182] loop3: detected capacity change from 0 to 128 [ 139.006230][ T9182] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.020555][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.030901][ T9176] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.032555][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.043471][ T9182] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.072287][ T23] hid_parser_main: 145 callbacks suppressed [ 139.072332][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x0 [ 139.085813][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x0 [ 139.093373][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x0 [ 139.101090][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x0 [ 139.108563][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x0 [ 139.116282][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x0 [ 139.123953][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x4 [ 139.131598][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x0 [ 139.139382][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x0 [ 139.142821][ T9192] loop0: detected capacity change from 0 to 512 [ 139.146784][ T23] hid-generic 0003:0000:0000.003D: unknown main item tag 0x0 [ 139.163070][ T9190] validate_nla: 1 callbacks suppressed [ 139.163084][ T9190] netlink: 'syz.1.1933': attribute type 13 has an invalid length. [ 139.186354][ T9192] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.203538][ T9190] gretap0: refused to change device tx_queue_len [ 139.219230][ T9190] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.228554][ T9194] loop4: detected capacity change from 0 to 1024 [ 139.235111][ T23] hid-generic 0003:0000:0000.003D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 139.251268][ T9194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.253150][ T9192] EXT4-fs (loop0): 1 truncate cleaned up [ 139.267347][ T9176] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.277749][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.320240][ T9176] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.357599][ T9210] loop1: detected capacity change from 0 to 512 [ 139.364998][ T9210] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.379790][ T9210] EXT4-fs (loop1): 1 truncate cleaned up [ 139.406354][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.415370][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.426569][ T23] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.463466][ T9225] loop0: detected capacity change from 0 to 128 [ 139.473950][ T9225] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.490887][ T9227] loop3: detected capacity change from 0 to 512 [ 139.499830][ T9227] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.510412][ T9225] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.528042][ T9227] EXT4-fs (loop3): 1 truncate cleaned up [ 139.549215][ T160] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.582370][ T9222] 9pnet_virtio: no channels available for device 0x0000000000000000 [ 139.594738][ T9239] netlink: 'syz.0.1950': attribute type 13 has an invalid length. [ 139.604968][ T9239] gretap0: refused to change device tx_queue_len [ 139.612095][ T9239] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.746387][ T9259] loop0: detected capacity change from 0 to 128 [ 139.754378][ T9259] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.758462][ T9261] loop3: detected capacity change from 0 to 512 [ 139.766667][ T9259] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.773435][ T9261] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.793648][ T9261] EXT4-fs (loop3): 1 truncate cleaned up [ 139.811634][ T2003] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.855151][ T9271] netlink: 'syz.0.1964': attribute type 13 has an invalid length. [ 139.865073][ T9271] gretap0: refused to change device tx_queue_len [ 139.872341][ T9271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.933240][ T9285] loop3: detected capacity change from 0 to 128 [ 139.939933][ T9285] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.952961][ T9285] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.975308][ T23] hid-generic 0003:0000:0000.003F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 140.000411][ T160] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.019974][ T9290] loop3: detected capacity change from 0 to 512 [ 140.027263][ T9290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.039149][ T9290] EXT4-fs (loop3): 1 truncate cleaned up [ 140.164524][ T9313] loop3: detected capacity change from 0 to 128 [ 140.171326][ T9313] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.188517][ T9313] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.211619][ T9308] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1981'. [ 140.213024][ T10] hid-generic 0003:0000:0000.0040: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 140.233142][ T9308] 9pnet_fd: Insufficient options for proto=fd [ 140.241724][ T160] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.301643][ T9326] loop1: detected capacity change from 0 to 512 [ 140.311884][ T9326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.326450][ T9326] EXT4-fs (loop1): 1 truncate cleaned up [ 140.396904][ T9335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.404808][ T9343] loop1: detected capacity change from 0 to 128 [ 140.406185][ T9335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.412241][ T9343] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.422619][ T10] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.440532][ T9343] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.478402][ T23] hid-generic 0003:0000:0000.0042: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 140.498803][ T9339] Falling back ldisc for ttyS3. [ 140.524948][ T31] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.649048][ T9352] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1997'. [ 140.659214][ T9352] 9pnet_fd: Insufficient options for proto=fd [ 140.694145][ T9360] 9pnet_virtio: no channels available for device 0x0000000000000000 [ 140.708891][ T9362] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2000'. [ 140.780132][ T9371] loop1: detected capacity change from 0 to 512 [ 140.787002][ T9371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.800913][ T9371] EXT4-fs (loop1): 1 truncate cleaned up [ 140.846131][ T9376] loop1: detected capacity change from 0 to 128 [ 140.853269][ T9376] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.865516][ T9376] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.889706][ T23] hid-generic 0003:0000:0000.0043: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 140.908042][ T2003] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.922821][ T9378] loop0: detected capacity change from 0 to 2048 [ 141.005427][ T9380] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2008'. [ 141.016187][ T9380] 9pnet_fd: Insufficient options for proto=fd [ 141.101130][ T29] kauditd_printk_skb: 1005 callbacks suppressed [ 141.101146][ T29] audit: type=1326 audit(1757373107.042:9417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 141.140687][ T29] audit: type=1326 audit(1757373107.042:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 141.164213][ T29] audit: type=1326 audit(1757373107.042:9419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 141.188233][ T29] audit: type=1326 audit(1757373107.042:9420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 141.211709][ T29] audit: type=1326 audit(1757373107.042:9421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 141.235127][ T29] audit: type=1326 audit(1757373107.042:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 141.258755][ T29] audit: type=1326 audit(1757373107.042:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 141.282777][ T29] audit: type=1326 audit(1757373107.042:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.0.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebcaebe9 code=0x7ffc0000 [ 141.413496][ T29] audit: type=1326 audit(1757373107.352:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 141.437232][ T29] audit: type=1326 audit(1757373107.352:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e0c0bebe9 code=0x7ffc0000 [ 141.511070][ T9404] loop4: detected capacity change from 0 to 512 [ 141.534365][ T9404] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.595189][ T9404] EXT4-fs (loop4): 1 truncate cleaned up [ 141.657725][ T9414] loop3: detected capacity change from 0 to 512 [ 141.668464][ T9414] EXT4-fs: Ignoring removed nobh option [ 141.684652][ T9415] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2019'. [ 141.695221][ T9414] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2018: corrupted inode contents [ 141.708680][ T9414] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.2018: mark_inode_dirty error [ 141.735782][ T9415] 9pnet_fd: Insufficient options for proto=fd [ 141.743774][ T9414] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.2018: corrupted inode contents [ 141.763228][ T9414] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.2018: mark_inode_dirty error [ 141.787559][ T9414] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2018: Failed to acquire dquot type 0 [ 141.830350][ T9414] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2018: corrupted inode contents [ 141.855767][ T9414] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.2018: mark_inode_dirty error [ 141.881061][ T9414] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2018: corrupted inode contents [ 141.949814][ T9414] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2018: mark_inode_dirty error [ 141.984467][ T9414] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2018: corrupted inode contents [ 141.996653][ T9414] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 142.006396][ T9414] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.2018: corrupted inode contents [ 142.019804][ T9414] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.2018: mark_inode_dirty error [ 142.059317][ T9426] loop0: detected capacity change from 0 to 512 [ 142.070191][ T9426] EXT4-fs: Ignoring removed nobh option [ 142.076123][ T9414] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 142.100658][ T9426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2023: corrupted inode contents [ 142.119400][ T9414] EXT4-fs (loop3): 1 truncate cleaned up [ 142.125329][ T9426] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.2023: mark_inode_dirty error [ 142.137344][ T9414] ext4 filesystem being mounted at /469/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.149488][ T9426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2023: corrupted inode contents [ 142.164289][ T9426] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2023: mark_inode_dirty error [ 142.176607][ T9426] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2023: Failed to acquire dquot type 0 [ 142.189543][ T9426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2023: corrupted inode contents [ 142.202051][ T9426] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2023: mark_inode_dirty error [ 142.228356][ T9426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2023: corrupted inode contents [ 142.245600][ T9426] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2023: mark_inode_dirty error [ 142.257334][ T9426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2023: corrupted inode contents [ 142.270553][ T9426] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 142.279541][ T9426] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2023: corrupted inode contents [ 142.292969][ T9426] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2023: mark_inode_dirty error [ 142.305023][ T9426] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 142.315548][ T9426] EXT4-fs (loop0): 1 truncate cleaned up [ 142.322237][ T9426] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.409228][ T9435] 9pnet_virtio: no channels available for device 0x0000000000000000 [ 142.435637][ T9437] netlink: 'syz.1.2026': attribute type 13 has an invalid length. [ 142.443683][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2026'. [ 142.469036][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'. [ 142.482174][ T9410] bridge0: entered promiscuous mode [ 142.489054][ T9410] bridge0: port 3(macvlan2) entered blocking state [ 142.495816][ T9410] bridge0: port 3(macvlan2) entered disabled state [ 142.502952][ T9410] macvlan2: entered allmulticast mode [ 142.508406][ T9410] bridge0: entered allmulticast mode [ 142.515316][ T9410] macvlan2: left allmulticast mode [ 142.515884][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.520727][ T9410] bridge0: left allmulticast mode [ 142.521145][ T9410] bridge0: left promiscuous mode [ 142.530399][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.553835][ T23] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.587199][ T9447] netlink: 'syz.1.2029': attribute type 13 has an invalid length. [ 142.613952][ T9447] gretap0: refused to change device tx_queue_len [ 142.625894][ T9447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 142.644779][ T9449] 9pnet_fd: Insufficient options for proto=fd [ 142.732217][ T9459] loop1: detected capacity change from 0 to 128 [ 142.739388][ T9459] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.751646][ T9459] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.774594][ T160] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.775140][ T3414] hid-generic 0003:0000:0000.0045: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 142.798266][ T160] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.815359][ T160] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.824262][ T2035] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.835824][ T160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.884397][ T9464] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.927410][ T9462] loop2: detected capacity change from 0 to 512 [ 142.935364][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.943889][ T9462] EXT4-fs: Ignoring removed nobh option [ 142.949652][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.950439][ T9464] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.979772][ T9462] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2035: corrupted inode contents [ 143.010196][ T9462] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.2035: mark_inode_dirty error [ 143.032809][ T9462] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2035: corrupted inode contents [ 143.060958][ T9464] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.071439][ T9462] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2035: mark_inode_dirty error [ 143.084976][ T9462] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2035: Failed to acquire dquot type 0 [ 143.107118][ T9462] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2035: corrupted inode contents [ 143.134610][ T9462] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.2035: mark_inode_dirty error [ 143.157398][ T9472] loop4: detected capacity change from 0 to 2048 [ 143.166329][ T9464] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.179545][ T9462] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2035: corrupted inode contents [ 143.220448][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.255326][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.278239][ T9462] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2035: mark_inode_dirty error [ 143.296556][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.305473][ T9462] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2035: corrupted inode contents [ 143.306095][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.327229][ T9462] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 143.348417][ T9462] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2035: corrupted inode contents [ 143.370820][ T9462] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.2035: mark_inode_dirty error [ 143.386817][ T9462] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 143.396403][ T9462] EXT4-fs (loop2): 1 truncate cleaned up [ 143.403804][ T9462] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.444079][ T9477] loop0: detected capacity change from 0 to 512 [ 143.460761][ T9477] EXT4-fs: Ignoring removed nobh option [ 143.464533][ T9479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9479 comm=syz.4.2039 [ 143.523307][ T9479] netlink: 'syz.4.2039': attribute type 5 has an invalid length. [ 143.531134][ T9479] netlink: 'syz.4.2039': attribute type 11 has an invalid length. [ 143.552611][ T9477] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2038: corrupted inode contents [ 143.567145][ T9477] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.2038: mark_inode_dirty error [ 143.592214][ T9477] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.2038: corrupted inode contents [ 143.649020][ T9477] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.2038: mark_inode_dirty error [ 143.664947][ T9491] netlink: 'syz.2.2042': attribute type 13 has an invalid length. [ 143.675343][ T9491] gretap0: refused to change device tx_queue_len [ 143.683255][ T9491] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 143.706208][ T9477] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2038: Failed to acquire dquot type 0 [ 143.720471][ T9477] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2038: corrupted inode contents [ 143.750339][ T9477] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.2038: mark_inode_dirty error [ 143.762825][ T9477] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2038: corrupted inode contents [ 143.775309][ T9477] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.2038: mark_inode_dirty error [ 143.799866][ T9477] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2038: corrupted inode contents [ 143.847256][ T9477] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 143.877872][ T9477] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.2038: corrupted inode contents [ 143.899385][ T9477] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.2038: mark_inode_dirty error [ 143.912268][ T9477] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 143.922672][ T9477] EXT4-fs (loop0): 1 truncate cleaned up [ 143.923961][ T9506] netlink: 'syz.1.2049': attribute type 4 has an invalid length. [ 143.928893][ T9477] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.936887][ T9506] FAULT_INJECTION: forcing a failure. [ 143.936887][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 143.959592][ T9506] CPU: 1 UID: 0 PID: 9506 Comm: syz.1.2049 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.959624][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.959681][ T9506] Call Trace: [ 143.959687][ T9506] [ 143.959695][ T9506] __dump_stack+0x1d/0x30 [ 143.959768][ T9506] dump_stack_lvl+0xe8/0x140 [ 143.959791][ T9506] dump_stack+0x15/0x1b [ 143.959883][ T9506] should_fail_ex+0x265/0x280 [ 143.959906][ T9506] should_failslab+0x8c/0xb0 [ 143.959994][ T9506] __kmalloc_noprof+0xa5/0x3e0 [ 143.960023][ T9506] ? flow_action_cookie_create+0x26/0x70 [ 143.960126][ T9506] flow_action_cookie_create+0x26/0x70 [ 143.960156][ T9506] tc_setup_action+0x104/0x440 [ 143.960187][ T9506] tcf_action_offload_add_ex+0x261/0x3c0 [ 143.960275][ T9506] tcf_action_init+0x333/0x6d0 [ 143.960323][ T9506] ? kmem_cache_free+0xdf/0x300 [ 143.960381][ T9506] tc_ctl_action+0x291/0x830 [ 143.960475][ T9506] ? __pfx_tc_ctl_action+0x10/0x10 [ 143.960568][ T9506] rtnetlink_rcv_msg+0x65a/0x6d0 [ 143.960597][ T9506] netlink_rcv_skb+0x123/0x220 [ 143.960619][ T9506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 143.960721][ T9506] rtnetlink_rcv+0x1c/0x30 [ 143.960748][ T9506] netlink_unicast+0x5bd/0x690 [ 143.960775][ T9506] netlink_sendmsg+0x58b/0x6b0 [ 143.960798][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.960885][ T9506] __sock_sendmsg+0x142/0x180 [ 143.960920][ T9506] ____sys_sendmsg+0x31e/0x4e0 [ 143.960950][ T9506] ___sys_sendmsg+0x17b/0x1d0 [ 143.961020][ T9506] __x64_sys_sendmsg+0xd4/0x160 [ 143.961050][ T9506] x64_sys_call+0x191e/0x2ff0 [ 143.961075][ T9506] do_syscall_64+0xd2/0x200 [ 143.961183][ T9506] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.961280][ T9506] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.961306][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.961330][ T9506] RIP: 0033:0x7f96db9aebe9 [ 143.961359][ T9506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.961380][ T9506] RSP: 002b:00007f96da417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.961405][ T9506] RAX: ffffffffffffffda RBX: 00007f96dbbe5fa0 RCX: 00007f96db9aebe9 [ 143.961467][ T9506] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 143.961481][ T9506] RBP: 00007f96da417090 R08: 0000000000000000 R09: 0000000000000000 [ 143.961495][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.961509][ T9506] R13: 00007f96dbbe6038 R14: 00007f96dbbe5fa0 R15: 00007fffcf3c5b18 [ 143.961531][ T9506] [ 144.246298][ T9510] ref_ctr_offset mismatch. inode: 0x63f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 144.260364][ T9457] ================================================================== [ 144.263125][ T9510] netlink: 'syz.1.2051': attribute type 4 has an invalid length. [ 144.268560][ T9457] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 144.283228][ T9457] [ 144.285572][ T9457] write to 0xffff88811da33cc8 of 88 bytes by task 9510 on cpu 0: [ 144.293384][ T9457] __bpf_get_stackid+0x761/0x800 [ 144.298342][ T9457] bpf_get_stackid+0xee/0x120 [ 144.303118][ T9457] bpf_get_stackid_raw_tp+0xf6/0x120 [ 144.308402][ T9457] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 144.313953][ T9457] bpf_trace_run2+0x107/0x1c0 [ 144.318718][ T9457] kfree+0x27b/0x320 [ 144.322790][ T9457] __bpf_prog_put_noref+0x1a3/0x230 [ 144.328015][ T9457] bpf_prog_load+0xfc9/0x1070 [ 144.332792][ T9457] __sys_bpf+0x462/0x7b0 [ 144.337107][ T9457] __x64_sys_bpf+0x41/0x50 [ 144.341611][ T9457] x64_sys_call+0x2aea/0x2ff0 [ 144.346383][ T9457] do_syscall_64+0xd2/0x200 [ 144.350894][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.357048][ T9457] [ 144.359459][ T9457] read to 0xffff88811da33ce8 of 8 bytes by task 9457 on cpu 1: [ 144.367001][ T9457] bcmp+0x23/0x90 [ 144.370719][ T9457] __bpf_get_stackid+0x371/0x800 [ 144.375757][ T9457] bpf_get_stackid+0xee/0x120 [ 144.380435][ T9457] bpf_get_stackid_raw_tp+0xf6/0x120 [ 144.385725][ T9457] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 144.391191][ T9457] bpf_trace_run2+0x107/0x1c0 [ 144.395878][ T9457] kfree+0x27b/0x320 [ 144.399967][ T9457] ___sys_recvmsg+0x135/0x370 [ 144.404735][ T9457] do_recvmmsg+0x1ef/0x540 [ 144.409158][ T9457] __x64_sys_recvmmsg+0xe5/0x170 [ 144.414282][ T9457] x64_sys_call+0x27a6/0x2ff0 [ 144.419050][ T9457] do_syscall_64+0xd2/0x200 [ 144.423598][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.429585][ T9457] [ 144.431913][ T9457] value changed: 0xffffffff844aa295 -> 0xffffffff81624c23 [ 144.439015][ T9457] [ 144.441332][ T9457] Reported by Kernel Concurrency Sanitizer on: [ 144.447480][ T9457] CPU: 1 UID: 0 PID: 9457 Comm: syz.3.2031 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.457208][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.467526][ T9457] ==================================================================