last executing test programs: 34.466300503s ago: executing program 0 (id=44): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) 34.442877053s ago: executing program 0 (id=45): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0xe8030000}, 0x23) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x0, 0x0, 0x4, 0x1}}, 0x26) getpeername$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) sendmsg$nl_xfrm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0xfffffffffff0bd98) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='fsi_master_acf_cmd_same_addr\x00', r1, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) close(r0) 34.268254114s ago: executing program 0 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'bond_slave_0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010000305000000000000080000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 34.132013235s ago: executing program 0 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000056, &(0x7f0000000240)={[{@orlov}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x4004f8}}, {@data_err_ignore}, {@debug}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@grpjquota}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000001380)="$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") r2 = creat(&(0x7f0000003840)='./bus\x00', 0x0) write$P9_RLERROR(r2, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) r3 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0x4, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) fallocate(r3, 0x0, 0x0, 0x1000f8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="5400000010000d0400"/20, @ANYRES32=r5, @ANYBLOB="202000000000000034001280110001006272696467655f736c610165000000001c0005800500050000000000050007"], 0x54}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x8404, 0x9, 0x6}, 0x10) 33.711697677s ago: executing program 0 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c"], 0xb4}}, 0x0) 33.249484489s ago: executing program 0 (id=66): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) 33.23333627s ago: executing program 32 (id=66): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) 1.75048289s ago: executing program 2 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) 1.719497581s ago: executing program 2 (id=893): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000140)=[{0x32, 0x0, [0x8, 0x8, 0x6, 0x9, 0x2, 0xfffffff9, 0x7, 0xe7, 0x2, 0x3ff, 0x332, 0x85b, 0x1, 0x3, 0x7, 0x80000001]}, {0x0, 0x0, [0x1, 0xfffffffc, 0x80000001, 0x4, 0x7fffffff, 0xa6c, 0x97ec, 0x6, 0x4cd, 0xf06, 0x1b, 0x1, 0x7, 0x0, 0x5, 0x100]}], r2, 0x1, 0x1, 0x90}}, 0x20) 1.656006831s ago: executing program 2 (id=894): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f00000009c0)=ANY=[], 0xda00) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x391) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00') read(r5, &(0x7f00000003c0)=""/4119, 0x1017) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xdcc}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r5, &(0x7f0000000080)=""/220, 0xdc, 0x4009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xf, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d1957eeb979dfce7ba5fc4db2ec7f2c73529cf5e63d424b88d60ce74afb0ce06eb4146e77f106566c3ae98dd000ff730cd4b78efeab6c79b6a9d9f8b9ecb4cc869e62a8d7bac438e52c929567e82aff2f1c3eb8fd20ee46f0c8d0e37cde7ff7ce7ef7bd8a62c619b17a1322dcd6bc97d92ec34e0b3a60b995125c5945cb000f232f6f7ef702732bb6065422d7eb3ca34d1d83a", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.244146194s ago: executing program 3 (id=907): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) 1.239792903s ago: executing program 3 (id=908): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000d40)="$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") r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300"], 0x69) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004fff14e39facc6ded39d046befa3bf4c5b7caa4ba139720173ad20e9fe145d0f199eef9cec5f"], 0x50) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.081896674s ago: executing program 3 (id=915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 1.080687575s ago: executing program 2 (id=916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 1.065563904s ago: executing program 2 (id=917): syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 1.046672025s ago: executing program 5 (id=919): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000140)=[{0x32, 0x0, [0x8, 0x8, 0x6, 0x9, 0x2, 0xfffffff9, 0x7, 0xe7, 0x2, 0x3ff, 0x332, 0x85b, 0x1, 0x3, 0x7, 0x80000001]}, {0x0, 0x0, [0x1, 0xfffffffc, 0x80000001, 0x4, 0x7fffffff, 0xa6c, 0x97ec, 0x6, 0x4cd, 0xf06, 0x1b, 0x1, 0x7, 0x0, 0x5, 0x100]}], r2, 0x1, 0x1, 0x90}}, 0x20) 1.009620845s ago: executing program 5 (id=921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.009287045s ago: executing program 5 (id=922): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 952.276695ms ago: executing program 5 (id=923): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = dup2(r0, r0) write$tun(r2, 0x0, 0x46) 952.080815ms ago: executing program 3 (id=924): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$pagemap(r3, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f00000cf000/0x3000)=nil, &(0x7f00003c0000/0x4000)=nil, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0, 0x3}) 951.962255ms ago: executing program 5 (id=925): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="03", 0x1}], 0x1}], 0x1, 0x80) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=r2], 0x30}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="d1ff3b7505c7b388020000000000"], 0x69) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 900.591515ms ago: executing program 1 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (fail_nth: 1) 654.634427ms ago: executing program 2 (id=928): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000100)="28d8", 0x2, 0x44010, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}, 0x1c) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x4040050) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r2, 0x1200, 0x1, '}'}, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 654.327706ms ago: executing program 1 (id=929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) 610.212037ms ago: executing program 1 (id=930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) 584.512537ms ago: executing program 1 (id=931): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0x42, 0x1, 0x2, 0x5f7, 0xf, "00000000fdfffffdffffffff00"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x2e3, 0xa17a, 0xa, 0x2, 0x7, "7727e7867f5c0d8744ec9d810f7bf5a54e2896", 0xa2, 0x9}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x4b34, 0x60) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x7, 0x9, 0x1000, 0x8, 0x18, "bb16c4158cfefb6692c0facebcf74a6cdd357a"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa) 542.231667ms ago: executing program 3 (id=933): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x84b, 0x5}, 0x200, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x3, 0x6, 0x31, 0x8, 0x100, 0x1}, {0x500000, 0x0, 0xfffffffffffffffd, 0x8a6, 0x10, 0x4}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 519.031477ms ago: executing program 4 (id=935): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 494.190727ms ago: executing program 3 (id=936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)={0x210100, 0x80, 0x28}, 0x18) openat(r3, &(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2400, 0x44) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, 0x0, &(0x7f00000005c0)=""/155}, 0x20) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x10e, &(0x7f00000008c0)={[{@discard}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0xb}}, {@errors_remount}, {@nodelalloc}]}, 0x4, 0x464, &(0x7f0000000380)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000200)=@v3, 0x18, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000500)={'bridge_slave_0\x00', @random="01006c031000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000030900010073797a30000000004c000000090a010400000000e3a2474eab2637b308000740000000190900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400000000c0a01010000000000000000070000060900020073797a31000000001400038010000080080003400000000204000b800900010073797a300000000014000000100001", @ANYBLOB="b2d995490ff376e878760fbc56aebde1e1f77e033ecaf2a1da6aa56a81a265e41d20446a708bfaf23ee409bacda5e086a9ecb34bb7915b5434b2a5403c23646392965d5df254d634ef7d1b5702f1be2fb331b2dc5ac644ead315b83d964e56f497162ed581aa"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 493.815147ms ago: executing program 4 (id=937): prctl$PR_GET_SECUREBITS(0x1b) r0 = socket$rds(0x15, 0x5, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x811, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x50, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x7}, {&(0x7f0000000580)=""/159, 0x9f}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/101, 0x65}], 0x1, 0x60, 0xffffffff00000003}}], 0x48, 0x8004}, 0x0) 412.066107ms ago: executing program 1 (id=938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x348b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100800, 0x0, 0x2, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000050000000100010009000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 363.183108ms ago: executing program 4 (id=939): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000340)) getrlimit(0x6, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x141a82, 0x0) dup(r1) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 340.474468ms ago: executing program 4 (id=940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) 325.440868ms ago: executing program 4 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) 310.629048ms ago: executing program 4 (id=942): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000d40)="$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") r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300"], 0x69) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004fff14e39facc6ded39d046befa3bf4c5b7caa4ba139720173ad20e9fe145d0f199eef9cec5f"], 0x50) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./cgroup\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 281.520878ms ago: executing program 1 (id=943): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) (fail_nth: 1) 0s ago: executing program 5 (id=944): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f00000009c0)=ANY=[], 0xda00) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x391) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00') read(r5, &(0x7f00000003c0)=""/4119, 0x1017) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xdcc}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r5, &(0x7f0000000080)=""/220, 0xdc, 0x4009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kernel console output (not intermixed with test programs): 46.019298][ T4161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 46.025613][ T4171] loop2: detected capacity change from 0 to 512 [ 46.033596][ T4161] System zones: 0-2, 18-18, 34-34 [ 46.044066][ T4161] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.207: bg 0: block 248: padding at end of block bitmap is not set [ 46.061322][ T4161] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.207: Failed to acquire dquot type 1 [ 46.074841][ T4161] EXT4-fs (loop4): 1 truncate cleaned up [ 46.081628][ T4161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.094469][ T4161] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.110024][ T4171] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 46.123840][ T4177] Cannot find add_set index 0 as target [ 46.129600][ T4171] System zones: 0-2, 18-18, 34-34 [ 46.150123][ T4171] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.211: bg 0: block 248: padding at end of block bitmap is not set [ 46.174470][ T4161] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.207: deleted inode referenced: 12 [ 46.201596][ T4171] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.211: Failed to acquire dquot type 1 [ 46.221543][ T4171] EXT4-fs (loop2): 1 truncate cleaned up [ 46.241102][ T4171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.257532][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.273534][ T4171] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.292413][ T4171] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz.2.211: deleted inode referenced: 12 [ 46.345563][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.394758][ T4194] FAULT_INJECTION: forcing a failure. [ 46.394758][ T4194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.407971][ T4194] CPU: 0 UID: 0 PID: 4194 Comm: syz.4.218 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 46.418642][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.428861][ T4194] Call Trace: [ 46.432168][ T4194] [ 46.435111][ T4194] dump_stack_lvl+0xf2/0x150 [ 46.439733][ T4194] dump_stack+0x15/0x20 [ 46.443981][ T4194] should_fail_ex+0x223/0x230 [ 46.448759][ T4194] should_fail+0xb/0x10 [ 46.452957][ T4194] should_fail_usercopy+0x1a/0x20 [ 46.457996][ T4194] _copy_from_user+0x1e/0xb0 [ 46.462623][ T4194] copy_msghdr_from_user+0x54/0x2a0 [ 46.467902][ T4194] __sys_sendmsg+0x171/0x270 [ 46.472531][ T4194] __x64_sys_sendmsg+0x46/0x50 [ 46.477366][ T4194] x64_sys_call+0x2689/0x2d60 [ 46.482133][ T4194] do_syscall_64+0xc9/0x1c0 [ 46.486660][ T4194] ? clear_bhb_loop+0x55/0xb0 [ 46.491356][ T4194] ? clear_bhb_loop+0x55/0xb0 [ 46.496097][ T4194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.502035][ T4194] RIP: 0033:0x7f408825e719 [ 46.506540][ T4194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.526235][ T4194] RSP: 002b:00007f4086ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.534676][ T4194] RAX: ffffffffffffffda RBX: 00007f4088415f80 RCX: 00007f408825e719 [ 46.542762][ T4194] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 46.550870][ T4194] RBP: 00007f4086ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.558870][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.566971][ T4194] R13: 0000000000000000 R14: 00007f4088415f80 R15: 00007fffd6e17098 [ 46.575041][ T4194] [ 46.725642][ T4214] FAULT_INJECTION: forcing a failure. [ 46.725642][ T4214] name failslab, interval 1, probability 0, space 0, times 0 [ 46.738405][ T4214] CPU: 0 UID: 0 PID: 4214 Comm: syz.4.225 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 46.749012][ T4214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.759159][ T4214] Call Trace: [ 46.762450][ T4214] [ 46.765445][ T4214] dump_stack_lvl+0xf2/0x150 [ 46.770059][ T4214] dump_stack+0x15/0x20 [ 46.774227][ T4214] should_fail_ex+0x223/0x230 [ 46.778995][ T4214] ? __alloc_skb+0x10b/0x310 [ 46.783678][ T4214] should_failslab+0x8f/0xb0 [ 46.788330][ T4214] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 46.794295][ T4214] __alloc_skb+0x10b/0x310 [ 46.798810][ T4214] audit_log_start+0x368/0x6b0 [ 46.803718][ T4214] audit_seccomp+0x4b/0x130 [ 46.808303][ T4214] __seccomp_filter+0x6fa/0x1180 [ 46.813286][ T4214] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 46.819075][ T4214] ? vfs_write+0x596/0x920 [ 46.823589][ T4214] ? __schedule+0x6fa/0x930 [ 46.828202][ T4214] __secure_computing+0x9f/0x1c0 [ 46.833210][ T4214] syscall_trace_enter+0xd1/0x1f0 [ 46.838275][ T4214] do_syscall_64+0xaa/0x1c0 [ 46.842797][ T4214] ? clear_bhb_loop+0x55/0xb0 [ 46.847482][ T4214] ? clear_bhb_loop+0x55/0xb0 [ 46.852201][ T4214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.858186][ T4214] RIP: 0033:0x7f408825e719 [ 46.862609][ T4214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.882273][ T4214] RSP: 002b:00007f4086ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 46.890764][ T4214] RAX: ffffffffffffffda RBX: 00007f4088415f80 RCX: 00007f408825e719 [ 46.898808][ T4214] RDX: 0000000000000005 RSI: 0000000000000402 RDI: 0000000000000003 [ 46.906813][ T4214] RBP: 00007f4086ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.914793][ T4214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.922808][ T4214] R13: 0000000000000000 R14: 00007f4088415f80 R15: 00007fffd6e17098 [ 46.930796][ T4214] [ 47.009014][ T4213] loop2: detected capacity change from 0 to 512 [ 47.024068][ T4218] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 47.030619][ T4218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.039574][ T4218] vhci_hcd vhci_hcd.0: Device attached [ 47.052710][ T4218] loop3: detected capacity change from 0 to 512 [ 47.061817][ T4222] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 47.070093][ T4222] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 47.084662][ T4218] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.097373][ T4218] EXT4-fs (loop3): 1 orphan inode deleted [ 47.103256][ T4218] EXT4-fs (loop3): 1 truncate cleaned up [ 47.113032][ T4218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.150390][ T4213] EXT4-fs (loop2): too many log groups per flexible block group [ 47.158266][ T4213] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 47.168905][ T4219] vhci_hcd: connection closed [ 47.169177][ T285] vhci_hcd: stop threads [ 47.176331][ T4213] EXT4-fs (loop2): mount failed [ 47.178171][ T285] vhci_hcd: release socket [ 47.187551][ T285] vhci_hcd: disconnect device [ 47.205746][ T4242] Cannot find add_set index 0 as target [ 47.230212][ T3474] vhci_hcd: vhci_device speed not set [ 47.263291][ T4250] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 47.271652][ T4250] team0: Device veth0_macvtap failed to register rx_handler [ 47.276049][ T4251] rdma_op ffff888112df7580 conn xmit_rdma 0000000000000000 [ 47.309255][ T4255] loop2: detected capacity change from 0 to 1024 [ 47.332989][ T4255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.346473][ T4255] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.430881][ T4255] rdma_op ffff888118d16580 conn xmit_rdma 0000000000000000 [ 47.599647][ T4268] loop2: detected capacity change from 0 to 512 [ 47.678967][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.907135][ T4294] loop3: detected capacity change from 0 to 512 [ 48.019942][ T4303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.029065][ T4303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.040635][ T4303] IPVS: Error connecting to the multicast addr [ 48.114622][ T4310] loop4: detected capacity change from 0 to 512 [ 48.131084][ T4310] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 48.139529][ T4310] System zones: 0-2, 18-18, 34-34 [ 48.159801][ T4310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.266: bg 0: block 248: padding at end of block bitmap is not set [ 48.178120][ T4310] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.266: Failed to acquire dquot type 1 [ 48.196266][ T4310] EXT4-fs (loop4): 1 truncate cleaned up [ 48.203472][ T4310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.216361][ T4310] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.247229][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.257356][ T4322] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 48.265975][ T4322] team0: Device veth0_macvtap failed to register rx_handler [ 48.447679][ T4343] netlink: 'syz.5.280': attribute type 10 has an invalid length. [ 48.456458][ T4343] team0: Device veth0_macvtap failed to register rx_handler [ 48.471551][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 48.471567][ T29] audit: type=1326 audit(1731593529.469:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.508764][ T29] audit: type=1326 audit(1731593529.469:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.532288][ T29] audit: type=1326 audit(1731593529.469:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.556065][ T29] audit: type=1326 audit(1731593529.469:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.579405][ T29] audit: type=1326 audit(1731593529.469:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.602804][ T29] audit: type=1326 audit(1731593529.469:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.626208][ T29] audit: type=1326 audit(1731593529.469:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.649674][ T29] audit: type=1326 audit(1731593529.469:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.673214][ T29] audit: type=1326 audit(1731593529.469:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.696784][ T29] audit: type=1326 audit(1731593529.469:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f571c96e719 code=0x7ffc0000 [ 48.742564][ T4346] __nla_validate_parse: 12 callbacks suppressed [ 48.742607][ T4346] netlink: 100 bytes leftover after parsing attributes in process `syz.3.281'. [ 48.791975][ T9] usb 3-1: enqueue for inactive port 0 [ 48.798601][ T9] usb 3-1: enqueue for inactive port 0 [ 48.848593][ T4352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 48.864826][ T4348] loop3: detected capacity change from 0 to 512 [ 48.872347][ T9] vhci_hcd: vhci_device speed not set [ 48.981240][ T4348] EXT4-fs (loop3): too many log groups per flexible block group [ 48.989046][ T4348] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 48.997048][ T4348] EXT4-fs (loop3): mount failed [ 49.194422][ T4359] loop1: detected capacity change from 0 to 4096 [ 49.203018][ T4357] netlink: 268 bytes leftover after parsing attributes in process `syz.3.285'. [ 49.243902][ T4359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.279067][ T4359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.354858][ T4376] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 49.361482][ T4376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 49.369136][ T4376] vhci_hcd vhci_hcd.0: Device attached [ 49.385839][ T4376] loop2: detected capacity change from 0 to 512 [ 49.397357][ T4376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.433125][ T4382] loop4: detected capacity change from 0 to 4096 [ 49.439820][ T4382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.475915][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.485947][ T4382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.498865][ T4376] EXT4-fs (loop2): 1 orphan inode deleted [ 49.504749][ T4376] EXT4-fs (loop2): 1 truncate cleaned up [ 49.510778][ T4376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.524878][ T4376] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 49.550473][ T4376] EXT4-fs (loop2): Remounting filesystem read-only [ 49.579318][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.607568][ T4377] vhci_hcd: connection closed [ 49.610512][ T11] vhci_hcd: stop threads [ 49.619557][ T11] vhci_hcd: release socket [ 49.624050][ T11] vhci_hcd: disconnect device [ 49.645060][ T4393] netlink: 268 bytes leftover after parsing attributes in process `syz.4.298'. [ 49.688199][ T4397] rdma_op ffff888115c00980 conn xmit_rdma 0000000000000000 [ 49.712378][ T4399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4399 comm=syz.1.302 [ 49.776770][ T3474] vhci_hcd: vhci_device speed not set [ 49.786429][ T4407] loop1: detected capacity change from 0 to 512 [ 49.806683][ T4407] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.302: iget: bad extended attribute block 1 [ 49.819509][ T4407] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.302: couldn't read orphan inode 15 (err -117) [ 49.833533][ T4407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.018886][ T4413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.307'. [ 50.048351][ T4415] loop4: detected capacity change from 0 to 512 [ 50.057213][ T4415] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 50.067901][ T4415] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 50.111873][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.410128][ T4453] rdma_op ffff888114e2e580 conn xmit_rdma 0000000000000000 [ 50.444950][ T4459] loop3: detected capacity change from 0 to 512 [ 50.457465][ T4459] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 50.468266][ T4459] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 50.511530][ T4471] netlink: 44 bytes leftover after parsing attributes in process `syz.5.315'. [ 50.570677][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.660520][ T4486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.318'. [ 50.724561][ T4499] veth0_to_team: entered promiscuous mode [ 50.730394][ T4499] veth0_to_team: entered allmulticast mode [ 50.783148][ T4510] netlink: 268 bytes leftover after parsing attributes in process `syz.1.323'. [ 50.796046][ T4512] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 50.804338][ T4512] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 50.837450][ T4517] loop5: detected capacity change from 0 to 1024 [ 50.864803][ T4517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.866246][ T4526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4526 comm=syz.1.327 [ 50.886981][ T4517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.941097][ T4536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 50.961103][ T4537] loop1: detected capacity change from 0 to 512 [ 50.969267][ T4539] loop2: detected capacity change from 0 to 512 [ 50.975618][ T4537] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.327: iget: bad extended attribute block 1 [ 50.975760][ T4537] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.327: couldn't read orphan inode 15 (err -117) [ 50.976243][ T4537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.994831][ T4542] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 51.018495][ T4542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.026213][ T4542] vhci_hcd vhci_hcd.0: Device attached [ 51.039926][ T4542] loop4: detected capacity change from 0 to 512 [ 51.046744][ T4517] rdma_op ffff888115720980 conn xmit_rdma 0000000000000000 [ 51.055902][ T4542] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.067673][ T4542] EXT4-fs (loop4): 1 orphan inode deleted [ 51.073567][ T4542] EXT4-fs (loop4): 1 truncate cleaned up [ 51.079704][ T4542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.096323][ T4547] FAULT_INJECTION: forcing a failure. [ 51.096323][ T4547] name failslab, interval 1, probability 0, space 0, times 0 [ 51.109108][ T4547] CPU: 1 UID: 0 PID: 4547 Comm: syz.2.333 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 51.119720][ T4547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.129875][ T4547] Call Trace: [ 51.133179][ T4547] [ 51.136179][ T4547] dump_stack_lvl+0xf2/0x150 [ 51.140801][ T4547] dump_stack+0x15/0x20 [ 51.143467][ T4551] loop5: detected capacity change from 0 to 512 [ 51.145048][ T4547] should_fail_ex+0x223/0x230 [ 51.156031][ T4547] ? audit_log_start+0x34c/0x6b0 [ 51.161065][ T4547] should_failslab+0x8f/0xb0 [ 51.165666][ T4547] kmem_cache_alloc_noprof+0x4c/0x290 [ 51.171142][ T4547] audit_log_start+0x34c/0x6b0 [ 51.175973][ T4547] audit_seccomp+0x4b/0x130 [ 51.180476][ T4547] __seccomp_filter+0x6fa/0x1180 [ 51.185472][ T4547] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 51.191112][ T4547] ? vfs_write+0x596/0x920 [ 51.195553][ T4547] ? __rcu_read_unlock+0x4e/0x70 [ 51.200501][ T4547] ? __fget_files+0x1d4/0x210 [ 51.205280][ T4547] __secure_computing+0x9f/0x1c0 [ 51.210278][ T4547] syscall_trace_enter+0xd1/0x1f0 [ 51.215448][ T4547] ? fpregs_assert_state_consistent+0x83/0xa0 [ 51.221688][ T4547] do_syscall_64+0xaa/0x1c0 [ 51.226255][ T4547] ? clear_bhb_loop+0x55/0xb0 [ 51.231028][ T4547] ? clear_bhb_loop+0x55/0xb0 [ 51.235761][ T4547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.241710][ T4547] RIP: 0033:0x7fd36cb7e719 [ 51.246307][ T4547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.265920][ T4547] RSP: 002b:00007fd36b7f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 51.274416][ T4547] RAX: ffffffffffffffda RBX: 00007fd36cd35f80 RCX: 00007fd36cb7e719 [ 51.282559][ T4547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 51.290537][ T4547] RBP: 00007fd36b7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 51.298509][ T4547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.306507][ T4547] R13: 0000000000000000 R14: 00007fd36cd35f80 R15: 00007ffdb8d90248 [ 51.314487][ T4547] [ 51.329668][ T4543] vhci_hcd: connection closed [ 51.331497][ T28] vhci_hcd: stop threads [ 51.340595][ T28] vhci_hcd: release socket [ 51.345091][ T28] vhci_hcd: disconnect device [ 51.370244][ T3474] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 51.377681][ T3474] usb 9-1: enqueue for inactive port 0 [ 51.383213][ T3474] usb 9-1: enqueue for inactive port 0 [ 51.388731][ T3474] usb 9-1: enqueue for inactive port 0 [ 51.413882][ T4553] loop2: detected capacity change from 0 to 512 [ 51.452146][ T4553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.464968][ T4553] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.477237][ T4553] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.336: corrupted xattr block 33: bad e_name length [ 51.480401][ T3474] vhci_hcd: vhci_device speed not set [ 51.491976][ T4553] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 51.505280][ T4553] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.336: corrupted xattr block 33: bad e_name length [ 51.519213][ T4553] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 51.519630][ T4563] FAULT_INJECTION: forcing a failure. [ 51.519630][ T4563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.528483][ T4553] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.336: corrupted xattr block 33: bad e_name length [ 51.541296][ T4563] CPU: 0 UID: 0 PID: 4563 Comm: syz.3.339 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 51.541329][ T4563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.557629][ T4553] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 51.565302][ T4563] Call Trace: [ 51.565313][ T4563] [ 51.565321][ T4563] dump_stack_lvl+0xf2/0x150 [ 51.565356][ T4563] dump_stack+0x15/0x20 [ 51.565378][ T4563] should_fail_ex+0x223/0x230 [ 51.604350][ T4563] should_fail+0xb/0x10 [ 51.608521][ T4563] should_fail_usercopy+0x1a/0x20 [ 51.613654][ T4563] _copy_to_user+0x20/0xa0 [ 51.618116][ T4563] simple_read_from_buffer+0xa0/0x110 [ 51.623507][ T4563] proc_fail_nth_read+0xf9/0x140 [ 51.628470][ T4563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.634034][ T4563] vfs_read+0x1a2/0x700 [ 51.638274][ T4563] ? __fget_files+0x1d4/0x210 [ 51.642986][ T4563] ksys_read+0xeb/0x1b0 [ 51.647153][ T4563] __x64_sys_read+0x42/0x50 [ 51.651744][ T4563] x64_sys_call+0x27d3/0x2d60 [ 51.656434][ T4563] do_syscall_64+0xc9/0x1c0 [ 51.661022][ T4563] ? clear_bhb_loop+0x55/0xb0 [ 51.665751][ T4563] ? clear_bhb_loop+0x55/0xb0 [ 51.670441][ T4563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.676389][ T4563] RIP: 0033:0x7f7f7dc0d15c [ 51.680811][ T4563] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 51.700474][ T4563] RSP: 002b:00007f7f7c866030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 51.708919][ T4563] RAX: ffffffffffffffda RBX: 00007f7f7ddc6058 RCX: 00007f7f7dc0d15c [ 51.716898][ T4563] RDX: 000000000000000f RSI: 00007f7f7c8660a0 RDI: 0000000000000005 [ 51.724943][ T4563] RBP: 00007f7f7c866090 R08: 0000000000000000 R09: 0000000000000000 [ 51.732917][ T4563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.740918][ T4563] R13: 0000000000000001 R14: 00007f7f7ddc6058 R15: 00007ffc57d9b728 [ 51.748901][ T4563] [ 51.762857][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.775510][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.800344][ T4569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 51.830904][ T4577] loop2: detected capacity change from 0 to 512 [ 51.852011][ T4579] loop3: detected capacity change from 0 to 1024 [ 51.869732][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.882860][ T4582] loop2: detected capacity change from 0 to 512 [ 51.891285][ T4579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.891358][ T4586] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 51.905291][ T4579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.911681][ T4586] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 51.951002][ T4582] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 51.962492][ T4582] System zones: 0-2, 18-18, 34-34 [ 51.968258][ T4579] rdma_op ffff888115cddd80 conn xmit_rdma 0000000000000000 [ 51.979949][ T4582] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.346: bg 0: block 248: padding at end of block bitmap is not set [ 52.015690][ T4582] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.346: Failed to acquire dquot type 1 [ 52.027571][ T4582] EXT4-fs (loop2): 1 truncate cleaned up [ 52.033722][ T4582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.047356][ T4582] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.081762][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.109507][ T4598] loop3: detected capacity change from 0 to 512 [ 52.118555][ T4598] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.146993][ T4598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 52.155374][ T4598] System zones: 1-12 [ 52.160018][ T4598] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.173250][ T4598] EXT4-fs (loop3): 1 truncate cleaned up [ 52.179621][ T4598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.197881][ T4598] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 52.217499][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.242208][ T4608] FAULT_INJECTION: forcing a failure. [ 52.242208][ T4608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.255484][ T4608] CPU: 0 UID: 0 PID: 4608 Comm: syz.2.355 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 52.266144][ T4608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.276238][ T4608] Call Trace: [ 52.279550][ T4608] [ 52.282500][ T4608] dump_stack_lvl+0xf2/0x150 [ 52.287129][ T4608] dump_stack+0x15/0x20 [ 52.291311][ T4608] should_fail_ex+0x223/0x230 [ 52.296111][ T4608] should_fail+0xb/0x10 [ 52.300346][ T4608] should_fail_usercopy+0x1a/0x20 [ 52.305384][ T4608] _copy_from_user+0x1e/0xb0 [ 52.310040][ T4608] __sys_bpf+0x14e/0x7a0 [ 52.314367][ T4608] __x64_sys_bpf+0x43/0x50 [ 52.318914][ T4608] x64_sys_call+0x2625/0x2d60 [ 52.323634][ T4608] do_syscall_64+0xc9/0x1c0 [ 52.328159][ T4608] ? clear_bhb_loop+0x55/0xb0 [ 52.332865][ T4608] ? clear_bhb_loop+0x55/0xb0 [ 52.337637][ T4608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.343557][ T4608] RIP: 0033:0x7fd36cb7e719 [ 52.347977][ T4608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.367629][ T4608] RSP: 002b:00007fd36b7f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.376052][ T4608] RAX: ffffffffffffffda RBX: 00007fd36cd35f80 RCX: 00007fd36cb7e719 [ 52.384051][ T4608] RDX: 0000000000000020 RSI: 0000000020000880 RDI: 0000000000000002 [ 52.392113][ T4608] RBP: 00007fd36b7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 52.400163][ T4608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.408143][ T4608] R13: 0000000000000000 R14: 00007fd36cd35f80 R15: 00007ffdb8d90248 [ 52.416134][ T4608] [ 52.439250][ T4614] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 52.445807][ T4614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.453469][ T4614] vhci_hcd vhci_hcd.0: Device attached [ 52.463451][ T4614] loop5: detected capacity change from 0 to 512 [ 52.468950][ T4621] loop3: detected capacity change from 0 to 1024 [ 52.471982][ T4614] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 52.487648][ T4614] EXT4-fs (loop5): 1 orphan inode deleted [ 52.493580][ T4614] EXT4-fs (loop5): 1 truncate cleaned up [ 52.499582][ T4614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.512980][ T4621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.526688][ T4621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.551105][ T4616] vhci_hcd: connection closed [ 52.551365][ T3412] vhci_hcd: stop threads [ 52.560374][ T3412] vhci_hcd: release socket [ 52.562491][ T4629] loop2: detected capacity change from 0 to 512 [ 52.564830][ T3412] vhci_hcd: disconnect device [ 52.581673][ T4629] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 52.589781][ T4629] System zones: 0-2, 18-18, 34-34 [ 52.596463][ T4629] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.361: bg 0: block 248: padding at end of block bitmap is not set [ 52.612840][ T4629] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.361: Failed to acquire dquot type 1 [ 52.632711][ T4629] EXT4-fs (loop2): 1 truncate cleaned up [ 52.638596][ T4633] loop3: detected capacity change from 0 to 512 [ 52.645705][ T4629] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.678268][ T4633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 52.686496][ T4633] System zones: 0-2, 18-18, 34-34 [ 52.692600][ T4633] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.362: bg 0: block 248: padding at end of block bitmap is not set [ 52.707619][ T4633] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.362: Failed to acquire dquot type 1 [ 52.719427][ T4633] EXT4-fs (loop3): 1 truncate cleaned up [ 52.725561][ T4633] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.744198][ T4643] FAULT_INJECTION: forcing a failure. [ 52.744198][ T4643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.757389][ T4643] CPU: 1 UID: 0 PID: 4643 Comm: syz.2.366 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 52.768091][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.778168][ T4643] Call Trace: [ 52.781465][ T4643] [ 52.784393][ T4643] dump_stack_lvl+0xf2/0x150 [ 52.788989][ T4643] dump_stack+0x15/0x20 [ 52.793146][ T4643] should_fail_ex+0x223/0x230 [ 52.797840][ T4643] should_fail+0xb/0x10 [ 52.802006][ T4643] should_fail_usercopy+0x1a/0x20 [ 52.807032][ T4643] _copy_from_user+0x1e/0xb0 [ 52.811654][ T4643] copy_msghdr_from_user+0x54/0x2a0 [ 52.817055][ T4643] __sys_sendmsg+0x171/0x270 [ 52.821678][ T4643] __x64_sys_sendmsg+0x46/0x50 [ 52.826579][ T4643] x64_sys_call+0x2689/0x2d60 [ 52.831287][ T4643] do_syscall_64+0xc9/0x1c0 [ 52.835831][ T4643] ? clear_bhb_loop+0x55/0xb0 [ 52.840556][ T4643] ? clear_bhb_loop+0x55/0xb0 [ 52.845340][ T4643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.851251][ T4643] RIP: 0033:0x7fd36cb7e719 [ 52.855697][ T4643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.875323][ T4643] RSP: 002b:00007fd36b7f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.883787][ T4643] RAX: ffffffffffffffda RBX: 00007fd36cd35f80 RCX: 00007fd36cb7e719 [ 52.891767][ T4643] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 52.899883][ T4643] RBP: 00007fd36b7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 52.907852][ T4643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.915882][ T4643] R13: 0000000000000000 R14: 00007fd36cd35f80 R15: 00007ffdb8d90248 [ 52.924012][ T4643] [ 52.931243][ T4645] syz_tun: entered promiscuous mode [ 52.937609][ T4645] batadv_slave_0: entered promiscuous mode [ 52.980057][ T4650] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 53.027111][ T4656] loop2: detected capacity change from 0 to 1024 [ 53.075592][ T4671] loop3: detected capacity change from 0 to 512 [ 53.079117][ T4672] FAULT_INJECTION: forcing a failure. [ 53.079117][ T4672] name failslab, interval 1, probability 0, space 0, times 0 [ 53.094546][ T4672] CPU: 1 UID: 0 PID: 4672 Comm: syz.1.378 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 53.094879][ T4671] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 53.105262][ T4672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.105298][ T4672] Call Trace: [ 53.105307][ T4672] [ 53.115899][ T4671] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 53.126014][ T4672] dump_stack_lvl+0xf2/0x150 [ 53.155588][ T4672] dump_stack+0x15/0x20 [ 53.159921][ T4672] should_fail_ex+0x223/0x230 [ 53.164610][ T4672] ? audit_log_start+0x34c/0x6b0 [ 53.169549][ T4672] should_failslab+0x8f/0xb0 [ 53.174261][ T4672] kmem_cache_alloc_noprof+0x4c/0x290 [ 53.179645][ T4672] audit_log_start+0x34c/0x6b0 [ 53.184483][ T4672] audit_seccomp+0x4b/0x130 [ 53.189025][ T4672] __seccomp_filter+0x6fa/0x1180 [ 53.193982][ T4672] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 53.199671][ T4672] ? vfs_write+0x596/0x920 [ 53.204104][ T4672] ? __pfx_kfree_link+0x10/0x10 [ 53.208964][ T4672] ? __rcu_read_unlock+0x4e/0x70 [ 53.213995][ T4672] ? __fget_files+0x1d4/0x210 [ 53.218680][ T4672] __secure_computing+0x9f/0x1c0 [ 53.223631][ T4672] syscall_trace_enter+0xd1/0x1f0 [ 53.228714][ T4672] ? fpregs_assert_state_consistent+0x83/0xa0 [ 53.234868][ T4672] do_syscall_64+0xaa/0x1c0 [ 53.239415][ T4672] ? clear_bhb_loop+0x55/0xb0 [ 53.244301][ T4672] ? clear_bhb_loop+0x55/0xb0 [ 53.249082][ T4672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.255063][ T4672] RIP: 0033:0x7f0c4bf7e719 [ 53.259524][ T4672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.279140][ T4672] RSP: 002b:00007f0c4abf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 53.287556][ T4672] RAX: ffffffffffffffda RBX: 00007f0c4c135f80 RCX: 00007f0c4bf7e719 [ 53.295569][ T4672] RDX: 0000000000000000 RSI: 0000000000000029 RDI: 00000000798e263a [ 53.302026][ T4623] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, [ 53.303538][ T4672] RBP: 00007f0c4abf7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.303558][ T4672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.303574][ T4672] R13: 0000000000000000 R14: 00007f0c4c135f80 R15: 00007ffcf4d9aa98 [ 53.311826][ T4623] block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 53.319777][ T4672] [ 53.362259][ T4623] EXT4-fs (loop5): Remounting filesystem read-only [ 53.373557][ T4676] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 53.405028][ T4678] loop5: detected capacity change from 0 to 512 [ 53.416298][ T4678] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 53.427074][ T4678] EXT4-fs warning (device loop5): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 53.492348][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 53.492395][ T29] audit: type=1326 audit(1731593534.489:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4bf7e719 code=0x7ffc0000 [ 53.531491][ T4691] FAULT_INJECTION: forcing a failure. [ 53.531491][ T4691] name failslab, interval 1, probability 0, space 0, times 0 [ 53.544278][ T4691] CPU: 1 UID: 0 PID: 4691 Comm: syz.1.388 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 53.554944][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.565107][ T4691] Call Trace: [ 53.568410][ T4691] [ 53.571355][ T4691] dump_stack_lvl+0xf2/0x150 [ 53.575965][ T4691] dump_stack+0x15/0x20 [ 53.580220][ T4691] should_fail_ex+0x223/0x230 [ 53.584949][ T4691] ? audit_log_start+0x34c/0x6b0 [ 53.589910][ T4691] should_failslab+0x8f/0xb0 [ 53.594662][ T4691] kmem_cache_alloc_noprof+0x4c/0x290 [ 53.600083][ T4691] audit_log_start+0x34c/0x6b0 [ 53.602106][ T29] audit: type=1326 audit(1731593534.519:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c4bf7e719 code=0x7ffc0000 [ 53.604882][ T4691] audit_seccomp+0x4b/0x130 [ 53.628201][ T29] audit: type=1326 audit(1731593534.519:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4bf7e719 code=0x7ffc0000 [ 53.632636][ T4691] __seccomp_filter+0x6fa/0x1180 [ 53.655901][ T29] audit: type=1326 audit(1731593534.519:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c4bf7d0b0 code=0x7ffc0000 [ 53.655929][ T29] audit: type=1326 audit(1731593534.519:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4bf7e719 code=0x7ffc0000 [ 53.660866][ T4691] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 53.684181][ T29] audit: type=1326 audit(1731593534.529:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c4bf7d0b0 code=0x7ffc0000 [ 53.707377][ T4691] ? vfs_write+0x596/0x920 [ 53.713029][ T29] audit: type=1326 audit(1731593534.529:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c4bf7d1ff code=0x7ffc0000 [ 53.736247][ T4691] ? __pfx_kfree_link+0x10/0x10 [ 53.736285][ T4691] ? __rcu_read_unlock+0x4e/0x70 [ 53.773917][ T4691] ? __fget_files+0x1d4/0x210 [ 53.778677][ T4691] __secure_computing+0x9f/0x1c0 [ 53.783701][ T4691] syscall_trace_enter+0xd1/0x1f0 [ 53.788762][ T4691] ? fpregs_assert_state_consistent+0x83/0xa0 [ 53.794869][ T4691] do_syscall_64+0xaa/0x1c0 [ 53.799399][ T4691] ? clear_bhb_loop+0x55/0xb0 [ 53.804105][ T4691] ? clear_bhb_loop+0x55/0xb0 [ 53.808850][ T4691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.814960][ T4691] RIP: 0033:0x7f0c4bf7d3aa [ 53.819408][ T4691] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 13 8c 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 73 8c 02 00 8b 44 24 [ 53.839020][ T4691] RSP: 002b:00007f0c4abf6ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 53.847498][ T4691] RAX: ffffffffffffffda RBX: 00007f0c4c135f80 RCX: 00007f0c4bf7d3aa [ 53.855528][ T4691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 53.863533][ T4691] RBP: 00007f0c4abf7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.871510][ T4691] R10: 0000000000000005 R11: 0000000000000293 R12: 0000000000000001 [ 53.879557][ T4691] R13: 0000000000000000 R14: 00007f0c4c135f80 R15: 00007ffcf4d9aa98 [ 53.887538][ T4691] [ 53.890890][ T4691] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 53.899081][ T4691] audit: out of memory in audit_log_start [ 53.925757][ T29] audit: type=1326 audit(1731593534.919:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4690 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c4bfb0805 code=0x7ffc0000 [ 53.952036][ T4700] __nla_validate_parse: 4 callbacks suppressed [ 53.952052][ T4700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 53.967267][ T4700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.390'. [ 54.031013][ T4702] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 54.037567][ T4702] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.045232][ T4702] vhci_hcd vhci_hcd.0: Device attached [ 54.067204][ T4706] loop4: detected capacity change from 0 to 128 [ 54.075264][ T4702] loop3: detected capacity change from 0 to 512 [ 54.082773][ T4702] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.095240][ T4706] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.107795][ T4702] EXT4-fs (loop3): 1 orphan inode deleted [ 54.113744][ T4702] EXT4-fs (loop3): 1 truncate cleaned up [ 54.126902][ T4702] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 54.142307][ T4702] EXT4-fs (loop3): Remounting filesystem read-only [ 54.159948][ T4703] vhci_hcd: connection closed [ 54.160307][ T50] vhci_hcd: stop threads [ 54.169325][ T50] vhci_hcd: release socket [ 54.173824][ T50] vhci_hcd: disconnect device [ 54.174701][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 54.230274][ T3392] vhci_hcd: vhci_device speed not set [ 54.527486][ T4735] loop5: detected capacity change from 0 to 512 [ 54.567177][ T4739] loop5: detected capacity change from 0 to 512 [ 54.669531][ T4752] loop1: detected capacity change from 0 to 128 [ 54.678553][ T4752] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.690078][ T4752] FAULT_INJECTION: forcing a failure. [ 54.690078][ T4752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.703680][ T4752] CPU: 1 UID: 0 PID: 4752 Comm: syz.1.410 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 54.714442][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.724664][ T4752] Call Trace: [ 54.727995][ T4752] [ 54.730964][ T4752] dump_stack_lvl+0xf2/0x150 [ 54.735607][ T4752] dump_stack+0x15/0x20 [ 54.739795][ T4752] should_fail_ex+0x223/0x230 [ 54.744557][ T4752] should_fail+0xb/0x10 [ 54.748733][ T4752] should_fail_usercopy+0x1a/0x20 [ 54.753767][ T4752] _copy_from_user+0x1e/0xb0 [ 54.758367][ T4752] do_ip6t_set_ctl+0x42c/0x8c0 [ 54.763150][ T4752] nf_setsockopt+0x195/0x1b0 [ 54.767818][ T4752] ipv6_setsockopt+0x10f/0x130 [ 54.772673][ T4752] rawv6_setsockopt+0x21e/0x410 [ 54.777539][ T4752] sock_common_setsockopt+0x64/0x80 [ 54.782823][ T4752] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 54.788798][ T4752] __sys_setsockopt+0x1cc/0x240 [ 54.793675][ T4752] __x64_sys_setsockopt+0x66/0x80 [ 54.798815][ T4752] x64_sys_call+0x278d/0x2d60 [ 54.803560][ T4752] do_syscall_64+0xc9/0x1c0 [ 54.808076][ T4752] ? clear_bhb_loop+0x55/0xb0 [ 54.812763][ T4752] ? clear_bhb_loop+0x55/0xb0 [ 54.817542][ T4752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.823460][ T4752] RIP: 0033:0x7f0c4bf7e719 [ 54.827882][ T4752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.847798][ T4752] RSP: 002b:00007f0c4abf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 54.856273][ T4752] RAX: ffffffffffffffda RBX: 00007f0c4c135f80 RCX: 00007f0c4bf7e719 [ 54.864282][ T4752] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 54.872264][ T4752] RBP: 00007f0c4abf7090 R08: 0000000000000520 R09: 0000000000000000 [ 54.880306][ T4752] R10: 0000000020000e40 R11: 0000000000000246 R12: 0000000000000001 [ 54.888309][ T4752] R13: 0000000000000000 R14: 00007f0c4c135f80 R15: 00007ffcf4d9aa98 [ 54.896365][ T4752] [ 54.914564][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.412'. [ 54.931660][ T4757] Cannot find add_set index 0 as target [ 54.974700][ T4764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'. [ 54.983749][ T4764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.415'. [ 55.130778][ T4774] loop1: detected capacity change from 0 to 1024 [ 55.147785][ T4774] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.161794][ T4774] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.419: corrupted xattr block 128: overlapping e_value [ 55.175998][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 55.186126][ T4774] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.419: corrupted xattr block 128: overlapping e_value [ 55.200357][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 55.209548][ T4774] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.419: corrupted xattr block 128: overlapping e_value [ 55.227023][ T4774] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 55.289540][ T4783] netlink: 268 bytes leftover after parsing attributes in process `syz.2.422'. [ 55.397779][ T4797] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 55.406055][ T4797] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 55.417508][ T4799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.428'. [ 55.433281][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.446654][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.458488][ T4801] IPVS: Error connecting to the multicast addr [ 55.575696][ T4818] loop2: detected capacity change from 0 to 1024 [ 55.591447][ T4820] loop1: detected capacity change from 0 to 1024 [ 55.653855][ T4828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.662604][ T4828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.674656][ T4830] rdma_op ffff888119942d80 conn xmit_rdma 0000000000000000 [ 55.680572][ T4820] rdma_op ffff888119b07580 conn xmit_rdma 0000000000000000 [ 55.720842][ T4832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 55.729759][ T4832] netlink: 52 bytes leftover after parsing attributes in process `syz.1.441'. [ 55.829906][ T4842] loop5: detected capacity change from 0 to 512 [ 55.854018][ T4844] loop1: detected capacity change from 0 to 512 [ 55.862420][ T4842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 55.880293][ T4842] System zones: 0-2, 18-18, 34-34 [ 55.895958][ T4844] EXT4-fs (loop1): too many log groups per flexible block group [ 55.903764][ T4844] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 55.912098][ T4842] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.445: bg 0: block 248: padding at end of block bitmap is not set [ 55.936142][ T4844] EXT4-fs (loop1): mount failed [ 55.944880][ T4842] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.445: Failed to acquire dquot type 1 [ 55.947039][ T4853] loop2: detected capacity change from 0 to 512 [ 55.964358][ T4842] EXT4-fs (loop5): 1 truncate cleaned up [ 55.970446][ T4853] EXT4-fs warning (device loop2): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 55.970600][ T4842] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.981291][ T4853] EXT4-fs warning (device loop2): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 56.045960][ T4857] loop1: detected capacity change from 0 to 512 [ 56.062354][ T4857] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 56.070597][ T4857] System zones: 0-2, 18-18, 34-34 [ 56.076564][ T4857] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.451: bg 0: block 248: padding at end of block bitmap is not set [ 56.092798][ T4857] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.451: Failed to acquire dquot type 1 [ 56.107171][ T4857] EXT4-fs (loop1): 1 truncate cleaned up [ 56.113836][ T4857] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.170738][ T4868] Cannot find add_set index 0 as target [ 56.207855][ T4881] loop3: detected capacity change from 0 to 512 [ 56.221497][ T4881] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 56.229755][ T4881] System zones: 0-2, 18-18, 34-34 [ 56.235839][ T4881] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.461: bg 0: block 248: padding at end of block bitmap is not set [ 56.243611][ T4887] loop1: detected capacity change from 0 to 2048 [ 56.253911][ T4881] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.461: Failed to acquire dquot type 1 [ 56.268404][ T4881] EXT4-fs (loop3): 1 truncate cleaned up [ 56.274731][ T4881] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.287022][ T4887] 0ªX¹¦D: renamed from gretap0 (while UP) [ 56.295961][ T4887] 0ªX¹¦D: entered allmulticast mode [ 56.301923][ T4887] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 56.370724][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.379181][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.565393][ T4913] loop4: detected capacity change from 0 to 512 [ 56.582238][ T4913] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 56.590386][ T4913] System zones: 0-2, 18-18, 34-34 [ 56.596282][ T4913] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.474: bg 0: block 248: padding at end of block bitmap is not set [ 56.611526][ T4913] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.474: Failed to acquire dquot type 1 [ 56.626557][ T4913] EXT4-fs (loop4): 1 truncate cleaned up [ 56.632887][ T4913] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.744074][ T4938] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 56.750630][ T4938] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 56.758185][ T4938] vhci_hcd vhci_hcd.0: Device attached [ 56.767220][ T4938] loop3: detected capacity change from 0 to 512 [ 56.774191][ T4938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.785649][ T4938] EXT4-fs (loop3): 1 orphan inode deleted [ 56.791439][ T4938] EXT4-fs (loop3): 1 truncate cleaned up [ 56.799528][ T4938] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 56.815044][ T4938] EXT4-fs (loop3): Remounting filesystem read-only [ 56.838163][ T4940] vhci_hcd: connection closed [ 56.838626][ T50] vhci_hcd: stop threads [ 56.847618][ T50] vhci_hcd: release socket [ 56.852161][ T50] vhci_hcd: disconnect device [ 56.904399][ T4958] loop2: detected capacity change from 0 to 512 [ 56.943717][ T4958] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 56.953439][ T4958] System zones: 0-2, 18-18, 34-34 [ 56.959265][ T4958] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.494: bg 0: block 248: padding at end of block bitmap is not set [ 56.975031][ T4958] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.494: Failed to acquire dquot type 1 [ 56.987247][ T4958] EXT4-fs (loop2): 1 truncate cleaned up [ 56.995139][ T4958] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.029266][ T4975] loop4: detected capacity change from 0 to 512 [ 57.043175][ T4979] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 57.049768][ T4979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.057370][ T4979] vhci_hcd vhci_hcd.0: Device attached [ 57.078168][ T4979] loop5: detected capacity change from 0 to 512 [ 57.086188][ T4979] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.101585][ T4979] EXT4-fs (loop5): 1 orphan inode deleted [ 57.107413][ T4979] EXT4-fs (loop5): 1 truncate cleaned up [ 57.157593][ T4980] vhci_hcd: connection closed [ 57.157765][ T3412] vhci_hcd: stop threads [ 57.166799][ T3412] vhci_hcd: release socket [ 57.171359][ T3412] vhci_hcd: disconnect device [ 57.192507][ T4993] FAULT_INJECTION: forcing a failure. [ 57.192507][ T4993] name failslab, interval 1, probability 0, space 0, times 0 [ 57.205322][ T4993] CPU: 1 UID: 0 PID: 4993 Comm: syz.2.508 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 57.215992][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.226153][ T4993] Call Trace: [ 57.229437][ T4993] [ 57.232527][ T4993] dump_stack_lvl+0xf2/0x150 [ 57.237174][ T4993] dump_stack+0x15/0x20 [ 57.241423][ T4993] should_fail_ex+0x223/0x230 [ 57.246119][ T4993] ? getname_flags+0x81/0x3b0 [ 57.250928][ T4993] should_failslab+0x8f/0xb0 [ 57.255578][ T4993] kmem_cache_alloc_noprof+0x4c/0x290 [ 57.261071][ T4993] getname_flags+0x81/0x3b0 [ 57.265587][ T4993] user_path_at+0x26/0x110 [ 57.270077][ T4993] do_fchownat+0x92/0x1a0 [ 57.274415][ T4993] ? __bpf_trace_sys_enter+0x9/0x10 [ 57.279710][ T4993] __x64_sys_lchown+0x4a/0x60 [ 57.284408][ T4993] x64_sys_call+0x2a17/0x2d60 [ 57.289179][ T4993] do_syscall_64+0xc9/0x1c0 [ 57.293737][ T4993] ? clear_bhb_loop+0x55/0xb0 [ 57.298423][ T4993] ? clear_bhb_loop+0x55/0xb0 [ 57.303110][ T4993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.309105][ T4993] RIP: 0033:0x7fd36cb7e719 [ 57.313539][ T4993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.333161][ T4993] RSP: 002b:00007fd36b7f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 57.341581][ T4993] RAX: ffffffffffffffda RBX: 00007fd36cd35f80 RCX: 00007fd36cb7e719 [ 57.349623][ T4993] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 57.357600][ T4993] RBP: 00007fd36b7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 57.365693][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.373756][ T4993] R13: 0000000000000000 R14: 00007fd36cd35f80 R15: 00007ffdb8d90248 [ 57.381742][ T4993] [ 57.449323][ T5005] veth0_to_team: entered promiscuous mode [ 57.455261][ T5005] veth0_to_team: entered allmulticast mode [ 57.527123][ T5014] loop4: detected capacity change from 0 to 1024 [ 57.544331][ T5017] loop3: detected capacity change from 0 to 512 [ 57.561750][ T5017] EXT4-fs (loop3): too many log groups per flexible block group [ 57.569924][ T5017] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 57.578363][ T5017] EXT4-fs (loop3): mount failed [ 57.634330][ T5014] rdma_op ffff888119ea7980 conn xmit_rdma 0000000000000000 [ 57.739530][ T5039] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 57.746192][ T5039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.753816][ T5039] vhci_hcd vhci_hcd.0: Device attached [ 57.765101][ T5039] loop3: detected capacity change from 0 to 512 [ 57.772398][ T5039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.784128][ T5039] EXT4-fs (loop3): 1 orphan inode deleted [ 57.790004][ T5039] EXT4-fs (loop3): 1 truncate cleaned up [ 57.800579][ T5039] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 57.819239][ T5039] EXT4-fs (loop3): Remounting filesystem read-only [ 57.835525][ T5057] loop5: detected capacity change from 0 to 512 [ 57.844025][ T5042] vhci_hcd: connection closed [ 57.844319][ T293] vhci_hcd: stop threads [ 57.853358][ T293] vhci_hcd: release socket [ 57.857789][ T293] vhci_hcd: disconnect device [ 57.864642][ T5057] EXT4-fs (loop5): too many log groups per flexible block group [ 57.871444][ T5059] loop2: detected capacity change from 0 to 2048 [ 57.872399][ T5057] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 57.885704][ T5057] EXT4-fs (loop5): mount failed [ 57.910601][ T5059] loop2: p1 < > p4 [ 57.915070][ T5059] loop2: p4 size 8388608 extends beyond EOD, truncated [ 57.917438][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.930628][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.939136][ T5059] syz.2.534[5059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.939208][ T5059] syz.2.534[5059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.945320][ T5063] IPVS: Error connecting to the multicast addr [ 57.953790][ T5059] syz.2.534[5059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.989627][ T5066] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 58.013751][ T5066] team0: Device veth0_macvtap failed to register rx_handler [ 58.029667][ T5068] loop1: detected capacity change from 0 to 1024 [ 58.097484][ T5068] rdma_op ffff888104411d80 conn xmit_rdma 0000000000000000 [ 58.202121][ T5079] loop1: detected capacity change from 0 to 2048 [ 58.250534][ T5079] loop1: p1 < > p4 [ 58.254967][ T5079] loop1: p4 size 8388608 extends beyond EOD, truncated [ 58.271442][ T5079] syz.1.541[5079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.271539][ T5079] syz.1.541[5079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.283861][ T5079] syz.1.541[5079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.332752][ T5085] FAULT_INJECTION: forcing a failure. [ 58.332752][ T5085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.357284][ T5085] CPU: 0 UID: 0 PID: 5085 Comm: syz.1.544 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 58.367989][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.378142][ T5085] Call Trace: [ 58.381436][ T5085] [ 58.384383][ T5085] dump_stack_lvl+0xf2/0x150 [ 58.389085][ T5085] dump_stack+0x15/0x20 [ 58.393263][ T5085] should_fail_ex+0x223/0x230 [ 58.398001][ T5085] should_fail+0xb/0x10 [ 58.402169][ T5085] should_fail_usercopy+0x1a/0x20 [ 58.407217][ T5085] _copy_from_iter+0xd5/0xd00 [ 58.411905][ T5085] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 58.417467][ T5085] copy_page_from_iter+0x14f/0x280 [ 58.422607][ T5085] tun_get_user+0x686/0x24e0 [ 58.427290][ T5085] ? _parse_integer+0x27/0x30 [ 58.431975][ T5085] ? ref_tracker_alloc+0x1f5/0x2f0 [ 58.437220][ T5085] tun_chr_write_iter+0x188/0x240 [ 58.442282][ T5085] vfs_write+0x77f/0x920 [ 58.446541][ T5085] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 58.452107][ T5085] ksys_write+0xeb/0x1b0 [ 58.456378][ T5085] __x64_sys_write+0x42/0x50 [ 58.460981][ T5085] x64_sys_call+0x27dd/0x2d60 [ 58.465755][ T5085] do_syscall_64+0xc9/0x1c0 [ 58.470295][ T5085] ? clear_bhb_loop+0x55/0xb0 [ 58.475023][ T5085] ? clear_bhb_loop+0x55/0xb0 [ 58.479734][ T5085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.485643][ T5085] RIP: 0033:0x7f0c4bf7d1ff [ 58.490063][ T5085] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 58.509832][ T5085] RSP: 002b:00007f0c4abf7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 58.518440][ T5085] RAX: ffffffffffffffda RBX: 00007f0c4c135f80 RCX: 00007f0c4bf7d1ff [ 58.526506][ T5085] RDX: 0000000000000036 RSI: 0000000020000100 RDI: 00000000000000c8 [ 58.534488][ T5085] RBP: 00007f0c4abf7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.542563][ T5085] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 58.550575][ T5085] R13: 0000000000000000 R14: 00007f0c4c135f80 R15: 00007ffcf4d9aa98 [ 58.558616][ T5085] [ 58.608201][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 58.608224][ T29] audit: type=1326 audit(1731593539.599:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 58.612718][ T5090] loop3: detected capacity change from 0 to 512 [ 58.614489][ T29] audit: type=1326 audit(1731593539.599:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 58.660892][ T5092] loop4: detected capacity change from 0 to 512 [ 58.667352][ T29] audit: type=1326 audit(1731593539.599:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 58.697287][ T29] audit: type=1326 audit(1731593539.599:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 58.704562][ T5090] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 58.720647][ T29] audit: type=1326 audit(1731593539.599:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 58.729346][ T5090] System zones: 0-2, 18-18, 34-34 [ 58.752197][ T29] audit: type=1326 audit(1731593539.599:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 58.759066][ T5090] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.546: bg 0: block 248: padding at end of block bitmap is not set [ 58.780431][ T29] audit: type=1326 audit(1731593539.599:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 58.798058][ T5090] Quota error (device loop3): write_blk: dquota write failed [ 58.817949][ T29] audit: type=1326 audit(1731593539.599:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 58.817976][ T29] audit: type=1326 audit(1731593539.599:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5089 comm="syz.3.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 58.825423][ T5090] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.546: Failed to acquire dquot type 1 [ 58.830143][ T5092] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 58.883483][ T5092] System zones: 0-2, 18-18, 34-34 [ 58.898232][ T5092] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.547: bg 0: block 248: padding at end of block bitmap is not set [ 58.900577][ T5090] EXT4-fs (loop3): 1 truncate cleaned up [ 58.920606][ T5090] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.931221][ T5101] veth0_to_team: entered promiscuous mode [ 58.937040][ T5101] veth0_to_team: entered allmulticast mode [ 58.941385][ T5092] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.547: Failed to acquire dquot type 1 [ 58.968044][ T5092] EXT4-fs (loop4): 1 truncate cleaned up [ 58.974458][ T5105] __nla_validate_parse: 18 callbacks suppressed [ 58.974476][ T5105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 58.974809][ T5092] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.980973][ T5105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.551'. [ 59.036515][ T5111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5111 comm=syz.2.555 [ 59.064174][ T5113] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 59.070720][ T5113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.078280][ T5113] vhci_hcd vhci_hcd.0: Device attached [ 59.108610][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 59.113010][ T5113] loop3: detected capacity change from 0 to 512 [ 59.127719][ T5113] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.138858][ T5126] Cannot find add_set index 0 as target [ 59.140425][ T5124] loop2: detected capacity change from 0 to 512 [ 59.154686][ T5130] loop5: detected capacity change from 0 to 512 [ 59.165847][ T5124] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.555: iget: bad extended attribute block 1 [ 59.166210][ T5113] EXT4-fs (loop3): 1 orphan inode deleted [ 59.184272][ T5113] EXT4-fs (loop3): 1 truncate cleaned up [ 59.185061][ T5133] loop4: detected capacity change from 0 to 1024 [ 59.191734][ T5124] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.555: couldn't read orphan inode 15 (err -117) [ 59.202101][ T5113] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 59.214125][ T5124] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.225409][ T5113] EXT4-fs (loop3): Remounting filesystem read-only [ 59.229296][ T5130] EXT4-fs (loop5): too many log groups per flexible block group [ 59.242902][ T5130] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 59.249755][ T5130] EXT4-fs (loop5): mount failed [ 59.251369][ T5116] vhci_hcd: connection closed [ 59.255084][ T3412] vhci_hcd: stop threads [ 59.264117][ T3412] vhci_hcd: release socket [ 59.268586][ T3412] vhci_hcd: disconnect device [ 59.302381][ T5140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.562'. [ 59.311453][ T5140] netlink: 36 bytes leftover after parsing attributes in process `syz.5.562'. [ 59.320234][ T3392] usb 7-1: new low-speed USB device number 5 using vhci_hcd [ 59.327691][ T3392] usb 7-1: enqueue for inactive port 0 [ 59.334601][ T3392] usb 7-1: enqueue for inactive port 0 [ 59.335611][ T5133] rdma_op ffff888114f15980 conn xmit_rdma 0000000000000000 [ 59.340163][ T3392] usb 7-1: enqueue for inactive port 0 [ 59.376484][ T5145] loop5: detected capacity change from 0 to 512 [ 59.391335][ T5145] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 59.399569][ T5145] System zones: 0-2, 18-18, 34-34 [ 59.405432][ T5145] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.564: bg 0: block 248: padding at end of block bitmap is not set [ 59.420132][ T5145] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.564: Failed to acquire dquot type 1 [ 59.420206][ T3392] vhci_hcd: vhci_device speed not set [ 59.437210][ T5145] EXT4-fs (loop5): 1 truncate cleaned up [ 59.443290][ T5145] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.513515][ T5151] netlink: 'syz.5.566': attribute type 10 has an invalid length. [ 59.521927][ T5151] team0: Device veth0_macvtap failed to register rx_handler [ 59.855300][ T5156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'. [ 59.864308][ T5156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.568'. [ 59.928816][ T5164] loop4: detected capacity change from 0 to 512 [ 59.936156][ T5164] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 59.938500][ T5162] loop2: detected capacity change from 0 to 4096 [ 59.946808][ T5164] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 59.972522][ T5162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.057904][ T5180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 60.069332][ T5182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.579'. [ 60.078338][ T5182] netlink: 52 bytes leftover after parsing attributes in process `syz.1.579'. [ 60.100205][ T5184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5184 comm=syz.1.580 [ 60.156596][ T5190] loop1: detected capacity change from 0 to 512 [ 60.159085][ T5191] loop2: detected capacity change from 0 to 512 [ 60.165802][ T5190] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.580: iget: bad extended attribute block 1 [ 60.182652][ T5190] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.580: couldn't read orphan inode 15 (err -117) [ 60.196058][ T5190] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.203859][ T5191] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 60.212088][ T5191] System zones: 0-2, 18-18, 34-34 [ 60.217773][ T5191] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.583: bg 0: block 248: padding at end of block bitmap is not set [ 60.232617][ T5191] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.583: Failed to acquire dquot type 1 [ 60.244469][ T5191] EXT4-fs (loop2): 1 truncate cleaned up [ 60.250618][ T5191] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.310057][ T5198] loop2: detected capacity change from 0 to 4096 [ 60.316861][ T5198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.373541][ T5203] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 60.486647][ T5221] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 60.506354][ T5223] FAULT_INJECTION: forcing a failure. [ 60.506354][ T5223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.519540][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.2.597 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 60.530253][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.540325][ T5223] Call Trace: [ 60.543678][ T5223] [ 60.546612][ T5223] dump_stack_lvl+0xf2/0x150 [ 60.551242][ T5223] dump_stack+0x15/0x20 [ 60.555510][ T5223] should_fail_ex+0x223/0x230 [ 60.560365][ T5223] should_fail+0xb/0x10 [ 60.564549][ T5223] should_fail_usercopy+0x1a/0x20 [ 60.569596][ T5223] _copy_from_user+0x1e/0xb0 [ 60.574194][ T5223] memdup_user+0x64/0xc0 [ 60.578531][ T5223] strndup_user+0x68/0xa0 [ 60.582944][ T5223] __se_sys_mount+0x4e/0x2d0 [ 60.587614][ T5223] ? fput+0x14e/0x190 [ 60.591620][ T5223] ? ksys_write+0x17a/0x1b0 [ 60.596239][ T5223] __x64_sys_mount+0x67/0x80 [ 60.600891][ T5223] x64_sys_call+0x203e/0x2d60 [ 60.605696][ T5223] do_syscall_64+0xc9/0x1c0 [ 60.610211][ T5223] ? clear_bhb_loop+0x55/0xb0 [ 60.614968][ T5223] ? clear_bhb_loop+0x55/0xb0 [ 60.619675][ T5223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.625598][ T5223] RIP: 0033:0x7fd36cb7e719 [ 60.630055][ T5223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.649747][ T5223] RSP: 002b:00007fd36b7f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.658164][ T5223] RAX: ffffffffffffffda RBX: 00007fd36cd35f80 RCX: 00007fd36cb7e719 [ 60.666166][ T5223] RDX: 0000000020000640 RSI: 0000000020000000 RDI: 0000000000000000 [ 60.674163][ T5223] RBP: 00007fd36b7f1090 R08: 0000000020000200 R09: 0000000000000000 [ 60.682139][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.690109][ T5223] R13: 0000000000000000 R14: 00007fd36cd35f80 R15: 00007ffdb8d90248 [ 60.698303][ T5223] [ 60.717702][ T5226] netlink: 'syz.5.598': attribute type 10 has an invalid length. [ 60.726798][ T5226] team0: Device veth0_macvtap failed to register rx_handler [ 60.749169][ T5227] Cannot find add_set index 0 as target [ 60.794652][ T5238] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 60.814777][ T5240] Cannot find add_set index 0 as target [ 60.970927][ T5255] FAULT_INJECTION: forcing a failure. [ 60.970927][ T5255] name failslab, interval 1, probability 0, space 0, times 0 [ 60.983657][ T5255] CPU: 0 UID: 0 PID: 5255 Comm: syz.4.610 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 60.994323][ T5255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.998181][ T5259] loop1: detected capacity change from 0 to 512 [ 61.004496][ T5255] Call Trace: [ 61.004506][ T5255] [ 61.004516][ T5255] dump_stack_lvl+0xf2/0x150 [ 61.004550][ T5255] dump_stack+0x15/0x20 [ 61.025778][ T5255] should_fail_ex+0x223/0x230 [ 61.030488][ T5255] ? getname_flags+0x81/0x3b0 [ 61.035184][ T5255] should_failslab+0x8f/0xb0 [ 61.039782][ T5255] kmem_cache_alloc_noprof+0x4c/0x290 [ 61.045174][ T5255] getname_flags+0x81/0x3b0 [ 61.049701][ T5255] __x64_sys_rename+0x33/0x70 [ 61.054443][ T5255] x64_sys_call+0x1a84/0x2d60 [ 61.059207][ T5255] do_syscall_64+0xc9/0x1c0 [ 61.063724][ T5255] ? clear_bhb_loop+0x55/0xb0 [ 61.068485][ T5255] ? clear_bhb_loop+0x55/0xb0 [ 61.073250][ T5255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.079170][ T5255] RIP: 0033:0x7f408825e719 [ 61.083607][ T5255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.103224][ T5255] RSP: 002b:00007f4086ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 61.111713][ T5255] RAX: ffffffffffffffda RBX: 00007f4088415f80 RCX: 00007f408825e719 [ 61.119709][ T5255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 61.127699][ T5255] RBP: 00007f4086ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.135740][ T5255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.143742][ T5255] R13: 0000000000000000 R14: 00007f4088415f80 R15: 00007fffd6e17098 [ 61.151811][ T5255] [ 61.157573][ T5259] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 61.168263][ T5259] EXT4-fs warning (device loop1): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 61.233157][ T5267] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 61.268979][ T5272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5272 comm=syz.4.618 [ 61.325069][ T5273] loop4: detected capacity change from 0 to 512 [ 61.333040][ T5273] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.618: iget: bad extended attribute block 1 [ 61.345743][ T5273] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.618: couldn't read orphan inode 15 (err -117) [ 61.358720][ T5273] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.586290][ T5281] loop5: detected capacity change from 0 to 512 [ 61.594327][ T5281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.632168][ T5281] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.754338][ T5301] Cannot find add_set index 0 as target [ 61.866520][ T5312] FAULT_INJECTION: forcing a failure. [ 61.866520][ T5312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.879757][ T5312] CPU: 1 UID: 0 PID: 5312 Comm: syz.1.634 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 61.890364][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.900539][ T5312] Call Trace: [ 61.903826][ T5312] [ 61.906766][ T5312] dump_stack_lvl+0xf2/0x150 [ 61.911367][ T5312] dump_stack+0x15/0x20 [ 61.915554][ T5312] should_fail_ex+0x223/0x230 [ 61.920384][ T5312] should_fail+0xb/0x10 [ 61.924653][ T5312] should_fail_usercopy+0x1a/0x20 [ 61.929693][ T5312] _copy_from_user+0x1e/0xb0 [ 61.934292][ T5312] __sys_bpf+0x14e/0x7a0 [ 61.938550][ T5312] __x64_sys_bpf+0x43/0x50 [ 61.943062][ T5312] x64_sys_call+0x2625/0x2d60 [ 61.947828][ T5312] do_syscall_64+0xc9/0x1c0 [ 61.952422][ T5312] ? clear_bhb_loop+0x55/0xb0 [ 61.957102][ T5312] ? clear_bhb_loop+0x55/0xb0 [ 61.961786][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.967795][ T5312] RIP: 0033:0x7f0c4bf7e719 [ 61.972373][ T5312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.992086][ T5312] RSP: 002b:00007f0c4abf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.000508][ T5312] RAX: ffffffffffffffda RBX: 00007f0c4c135f80 RCX: 00007f0c4bf7e719 [ 62.008580][ T5312] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 0000000000000018 [ 62.016577][ T5312] RBP: 00007f0c4abf7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.024613][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.032586][ T5312] R13: 0000000000000000 R14: 00007f0c4c135f80 R15: 00007ffcf4d9aa98 [ 62.040601][ T5312] [ 62.149431][ T5328] loop3: detected capacity change from 0 to 512 [ 62.157744][ T5328] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 62.168555][ T5328] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 62.215692][ T5336] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 62.330596][ T5349] loop1: detected capacity change from 0 to 4096 [ 62.337451][ T5349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.399970][ T5360] loop1: detected capacity change from 0 to 2048 [ 62.441712][ T5360] loop1: p1 < > p4 [ 62.446142][ T5360] loop1: p4 size 8388608 extends beyond EOD, truncated [ 62.456625][ T5360] syz.1.656[5360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.456754][ T5360] syz.1.656[5360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.468678][ T5360] syz.1.656[5360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.522590][ T5372] loop1: detected capacity change from 0 to 2048 [ 62.571340][ T5372] loop1: p1 < > p4 [ 62.579095][ T5372] loop1: p4 size 8388608 extends beyond EOD, truncated [ 62.634706][ T5372] syz.1.662[5372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.743922][ T5393] loop5: detected capacity change from 0 to 2048 [ 62.786909][ T5399] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 62.802699][ T5395] loop4: detected capacity change from 0 to 4096 [ 62.810594][ T5399] team0: Device veth0_macvtap failed to register rx_handler [ 62.820669][ T5395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.822873][ T5393] loop5: p1 < > p4 [ 62.847185][ T5393] loop5: p4 size 8388608 extends beyond EOD, truncated [ 63.097102][ T5429] loop5: detected capacity change from 0 to 2048 [ 63.159040][ T5433] +}[@ calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.169289][ T5429] loop5: p1 < > p4 [ 63.173896][ T5429] loop5: p4 size 8388608 extends beyond EOD, truncated [ 63.186561][ T5429] bpf_get_probe_write_proto: 5 callbacks suppressed [ 63.186580][ T5429] syz.5.690[5429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.193730][ T5429] syz.5.690[5429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.209356][ T5437] loop3: detected capacity change from 0 to 512 [ 63.232137][ T5429] syz.5.690[5429] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.270735][ T5437] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 63.292653][ T5437] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 63.382551][ T5446] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 63.402958][ T5449] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 63.409580][ T5449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.417295][ T5449] vhci_hcd vhci_hcd.0: Device attached [ 63.445686][ T5449] loop2: detected capacity change from 0 to 512 [ 63.458022][ T5449] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.479655][ T5449] EXT4-fs (loop2): 1 orphan inode deleted [ 63.485504][ T5449] EXT4-fs (loop2): 1 truncate cleaned up [ 63.498083][ T5456] loop4: detected capacity change from 0 to 512 [ 63.520700][ T5451] vhci_hcd: connection closed [ 63.520979][ T3412] vhci_hcd: stop threads [ 63.529984][ T3412] vhci_hcd: release socket [ 63.534526][ T3412] vhci_hcd: disconnect device [ 63.541584][ T5456] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.702: couldn't read orphan inode 26 (err -116) [ 63.565799][ T5456] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.578875][ T5456] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.586492][ T5456] vhci_hcd: invalid port number 23 [ 63.647342][ T29] kauditd_printk_skb: 875 callbacks suppressed [ 63.647462][ T29] audit: type=1326 audit(1731593544.639:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.4.702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f408825e719 code=0x0 [ 63.713258][ T29] audit: type=1326 audit(1731593544.709:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4bf7e719 code=0x7ffc0000 [ 63.736245][ T5472] loop5: detected capacity change from 0 to 2048 [ 63.736696][ T29] audit: type=1326 audit(1731593544.709:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0c4bf7e719 code=0x7ffc0000 [ 63.766697][ T29] audit: type=1326 audit(1731593544.709:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5469 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4bf7e719 code=0x7ffc0000 [ 63.803214][ T5474] loop1: detected capacity change from 0 to 1024 [ 63.811078][ T5472] loop5: p1 < > p4 [ 63.815367][ T5472] loop5: p4 size 8388608 extends beyond EOD, truncated [ 63.841180][ T5472] syz.5.708[5472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.841375][ T5472] syz.5.708[5472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.852875][ T5472] syz.5.708[5472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.862948][ T5474] rdma_op ffff888115723580 conn xmit_rdma 0000000000000000 [ 63.917374][ T29] audit: type=1107 audit(1731593544.909:3690): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='…' [ 63.918487][ T5482] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 63.941443][ T5484] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 63.948062][ T5484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.955653][ T5484] vhci_hcd vhci_hcd.0: Device attached [ 63.966969][ T5484] loop1: detected capacity change from 0 to 512 [ 63.976224][ T5484] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.991101][ T5484] EXT4-fs (loop1): 1 orphan inode deleted [ 63.996884][ T5484] EXT4-fs (loop1): 1 truncate cleaned up [ 64.006225][ T5484] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 64.021668][ T5484] EXT4-fs (loop1): Remounting filesystem read-only [ 64.038581][ T5485] vhci_hcd: connection closed [ 64.038895][ T50] vhci_hcd: stop threads [ 64.048012][ T50] vhci_hcd: release socket [ 64.049493][ T5493] loop3: detected capacity change from 0 to 4096 [ 64.052453][ T50] vhci_hcd: disconnect device [ 64.063766][ T5493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.090193][ T29] audit: type=1326 audit(1731593545.079:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 64.116023][ T29] audit: type=1326 audit(1731593545.089:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 64.139460][ T29] audit: type=1326 audit(1731593545.089:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 64.162915][ T29] audit: type=1326 audit(1731593545.089:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 64.186308][ T29] audit: type=1326 audit(1731593545.089:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7dc0e719 code=0x7ffc0000 [ 64.225480][ T5500] netlink: 'syz.5.720': attribute type 10 has an invalid length. [ 64.234130][ T5500] team0: Device veth0_macvtap failed to register rx_handler [ 64.254052][ T5504] loop2: detected capacity change from 0 to 2048 [ 64.263529][ T5506] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 64.270076][ T5506] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.277626][ T5506] vhci_hcd vhci_hcd.0: Device attached [ 64.296034][ T5506] loop3: detected capacity change from 0 to 512 [ 64.300593][ T5504] loop2: p1 < > p4 [ 64.304612][ T5506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.306901][ T5504] loop2: p4 size 8388608 extends beyond EOD, truncated [ 64.329256][ T5506] EXT4-fs (loop3): 1 orphan inode deleted [ 64.335062][ T5506] EXT4-fs (loop3): 1 truncate cleaned up [ 64.345382][ T5506] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 64.368786][ T5506] EXT4-fs (loop3): Remounting filesystem read-only [ 64.378308][ T5515] loop2: detected capacity change from 0 to 512 [ 64.388071][ T5507] vhci_hcd: connection closed [ 64.388387][ T3412] vhci_hcd: stop threads [ 64.396399][ T5515] EXT4-fs warning (device loop2): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 64.397397][ T3412] vhci_hcd: release socket [ 64.397411][ T3412] vhci_hcd: disconnect device [ 64.417303][ T5515] EXT4-fs warning (device loop2): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 64.460257][ T35] vhci_hcd: vhci_device speed not set [ 64.495099][ T5521] __nla_validate_parse: 11 callbacks suppressed [ 64.495116][ T5521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.725'. [ 64.544209][ T5523] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 64.550779][ T5523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.558381][ T5523] vhci_hcd vhci_hcd.0: Device attached [ 64.567256][ T5523] loop4: detected capacity change from 0 to 512 [ 64.574161][ T5523] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.596357][ T5523] EXT4-fs (loop4): 1 orphan inode deleted [ 64.602206][ T5523] EXT4-fs (loop4): 1 truncate cleaned up [ 64.618429][ T5524] vhci_hcd: connection closed [ 64.618750][ T3412] vhci_hcd: stop threads [ 64.627758][ T3412] vhci_hcd: release socket [ 64.631639][ T5528] loop1: detected capacity change from 0 to 4096 [ 64.632280][ T3412] vhci_hcd: disconnect device [ 64.638966][ T5528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.789979][ T5543] loop1: detected capacity change from 0 to 2048 [ 64.820633][ T5543] loop1: p1 < > p4 [ 64.824936][ T5543] loop1: p4 size 8388608 extends beyond EOD, truncated [ 64.922394][ T5551] loop1: detected capacity change from 0 to 4096 [ 64.929235][ T5551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.952223][ T5556] netlink: 112 bytes leftover after parsing attributes in process `syz.3.742'. [ 65.023363][ T5566] loop1: detected capacity change from 0 to 2048 [ 65.070248][ T5574] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 65.076840][ T5574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.084365][ T5574] vhci_hcd vhci_hcd.0: Device attached [ 65.090625][ T5566] loop1: p1 < > p4 [ 65.095807][ T5566] loop1: p4 size 8388608 extends beyond EOD, truncated [ 65.103585][ T5275] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 65.121365][ T5574] loop3: detected capacity change from 0 to 512 [ 65.137294][ T5574] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.148893][ T5275] EXT4-fs (loop4): Remounting filesystem read-only [ 65.161242][ T5582] loop5: detected capacity change from 0 to 4096 [ 65.167517][ T5574] EXT4-fs (loop3): 1 orphan inode deleted [ 65.167877][ T5582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.173362][ T5574] EXT4-fs (loop3): 1 truncate cleaned up [ 65.195091][ T5574] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 65.221980][ T5574] EXT4-fs (loop3): Remounting filesystem read-only [ 65.241436][ T5575] vhci_hcd: connection closed [ 65.256343][ T50] vhci_hcd: stop threads [ 65.265444][ T50] vhci_hcd: release socket [ 65.269901][ T50] vhci_hcd: disconnect device [ 65.278526][ T5586] netlink: 112 bytes leftover after parsing attributes in process `syz.4.755'. [ 65.323515][ T5595] loop5: detected capacity change from 0 to 512 [ 65.336674][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 65.352664][ T5595] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 65.360827][ T5595] System zones: 0-2, 18-18, 34-34 [ 65.366665][ T5595] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.759: bg 0: block 248: padding at end of block bitmap is not set [ 65.380984][ T35] vhci_hcd: vhci_device speed not set [ 65.383681][ T5595] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.759: Failed to acquire dquot type 1 [ 65.398452][ T5600] Cannot find add_set index 0 as target [ 65.400620][ T5595] EXT4-fs (loop5): 1 truncate cleaned up [ 65.411926][ T5595] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.433665][ T5610] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 65.440235][ T5610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.447826][ T5610] vhci_hcd vhci_hcd.0: Device attached [ 65.460790][ T5610] loop2: detected capacity change from 0 to 512 [ 65.467630][ T5610] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.480330][ T5610] EXT4-fs (loop2): 1 orphan inode deleted [ 65.486081][ T5610] EXT4-fs (loop2): 1 truncate cleaned up [ 65.486360][ T5615] loop5: detected capacity change from 0 to 4096 [ 65.498467][ T5615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.508505][ T5611] vhci_hcd: connection closed [ 65.508634][ T285] vhci_hcd: stop threads [ 65.517656][ T285] vhci_hcd: release socket [ 65.520629][ T5615] EXT4-fs error (device loop5): ext4_do_update_inode:5121: inode #15: comm syz.5.766: corrupted inode contents [ 65.522109][ T285] vhci_hcd: disconnect device [ 65.538939][ T5615] EXT4-fs error (device loop5): ext4_dirty_inode:5984: inode #15: comm syz.5.766: mark_inode_dirty error [ 65.550650][ T5615] EXT4-fs error (device loop5): ext4_do_update_inode:5121: inode #15: comm syz.5.766: corrupted inode contents [ 65.562860][ T5615] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.766: mark_inode_dirty error [ 65.574249][ T5615] EXT4-fs error (device loop5): ext4_do_update_inode:5121: inode #15: comm syz.5.766: corrupted inode contents [ 65.586604][ T5615] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.766: mark_inode_dirty error [ 65.598009][ T5615] EXT4-fs error (device loop5): ext4_do_update_inode:5121: inode #15: comm syz.5.766: corrupted inode contents [ 65.610031][ T5615] EXT4-fs error (device loop5): ext4_truncate:4208: inode #15: comm syz.5.766: mark_inode_dirty error [ 65.621307][ T5615] EXT4-fs error (device loop5) in ext4_setattr:5523: Corrupt filesystem [ 65.629968][ T5618] EXT4-fs error (device loop5): ext4_do_update_inode:5121: inode #15: comm syz.5.766: corrupted inode contents [ 65.645797][ T5615] 9pnet_fd: Insufficient options for proto=fd [ 65.673724][ T3634] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 65.712184][ T5624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5624 comm=syz.5.768 [ 65.771381][ T5627] loop5: detected capacity change from 0 to 512 [ 65.779456][ T5627] EXT4-fs error (device loop5): ext4_orphan_get:1388: inode #15: comm syz.5.768: iget: bad extended attribute block 1 [ 65.781441][ T5630] netlink: 112 bytes leftover after parsing attributes in process `syz.3.770'. [ 65.792771][ T5627] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.768: couldn't read orphan inode 15 (err -117) [ 65.819639][ T5627] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.900402][ T5642] loop3: detected capacity change from 0 to 512 [ 65.921448][ T5642] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 65.929565][ T5642] System zones: 0-2, 18-18, 34-34 [ 65.935691][ T5642] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.776: bg 0: block 248: padding at end of block bitmap is not set [ 65.950236][ T5642] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.776: Failed to acquire dquot type 1 [ 65.962013][ T5642] EXT4-fs (loop3): 1 truncate cleaned up [ 65.968070][ T5642] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.997540][ T5646] FAULT_INJECTION: forcing a failure. [ 65.997540][ T5646] name failslab, interval 1, probability 0, space 0, times 0 [ 66.010311][ T5646] CPU: 1 UID: 0 PID: 5646 Comm: syz.3.777 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 66.020919][ T5646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.030996][ T5646] Call Trace: [ 66.034274][ T5646] [ 66.037203][ T5646] dump_stack_lvl+0xf2/0x150 [ 66.041801][ T5646] dump_stack+0x15/0x20 [ 66.046007][ T5646] should_fail_ex+0x223/0x230 [ 66.050851][ T5646] ? audit_log_start+0x34c/0x6b0 [ 66.055806][ T5646] should_failslab+0x8f/0xb0 [ 66.060413][ T5646] kmem_cache_alloc_noprof+0x4c/0x290 [ 66.065811][ T5646] audit_log_start+0x34c/0x6b0 [ 66.070599][ T5646] audit_seccomp+0x4b/0x130 [ 66.075155][ T5646] __seccomp_filter+0x6fa/0x1180 [ 66.080255][ T5646] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.085957][ T5646] ? vfs_write+0x596/0x920 [ 66.090389][ T5646] ? __rcu_read_unlock+0x4e/0x70 [ 66.095338][ T5646] ? __fget_files+0x1d4/0x210 [ 66.100034][ T5646] __secure_computing+0x9f/0x1c0 [ 66.105023][ T5646] syscall_trace_enter+0xd1/0x1f0 [ 66.110080][ T5646] ? fpregs_assert_state_consistent+0x83/0xa0 [ 66.116173][ T5646] do_syscall_64+0xaa/0x1c0 [ 66.120688][ T5646] ? clear_bhb_loop+0x55/0xb0 [ 66.125370][ T5646] ? clear_bhb_loop+0x55/0xb0 [ 66.130076][ T5646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.136049][ T5646] RIP: 0033:0x7f7f7dc0e719 [ 66.140464][ T5646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.160147][ T5646] RSP: 002b:00007f7f7c887038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 66.168679][ T5646] RAX: ffffffffffffffda RBX: 00007f7f7ddc5f80 RCX: 00007f7f7dc0e719 [ 66.176694][ T5646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 66.184719][ T5646] RBP: 00007f7f7c887090 R08: 0000000000000000 R09: 0000000000000000 [ 66.192706][ T5646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.200678][ T5646] R13: 0000000000000000 R14: 00007f7f7ddc5f80 R15: 00007ffc57d9b728 [ 66.208705][ T5646] [ 66.250533][ T5654] netlink: 112 bytes leftover after parsing attributes in process `syz.4.781'. [ 66.363617][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 66.378554][ T5679] netlink: 112 bytes leftover after parsing attributes in process `syz.3.793'. [ 66.388398][ T5677] Cannot find add_set index 0 as target [ 66.428173][ T5686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 66.434730][ T5686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.442298][ T5686] vhci_hcd vhci_hcd.0: Device attached [ 66.454387][ T5686] loop3: detected capacity change from 0 to 512 [ 66.461639][ T5686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.475578][ T5686] EXT4-fs (loop3): 1 orphan inode deleted [ 66.481443][ T5686] EXT4-fs (loop3): 1 truncate cleaned up [ 66.490634][ T5686] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 66.507228][ T5686] EXT4-fs (loop3): Remounting filesystem read-only [ 66.525210][ T5687] vhci_hcd: connection closed [ 66.525455][ T36] vhci_hcd: stop threads [ 66.534453][ T36] vhci_hcd: release socket [ 66.539062][ T36] vhci_hcd: disconnect device [ 66.587605][ T5711] FAULT_INJECTION: forcing a failure. [ 66.587605][ T5711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.600757][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: syz.1.800 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 66.611512][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.621580][ T5711] Call Trace: [ 66.624860][ T5711] [ 66.627803][ T5711] dump_stack_lvl+0xf2/0x150 [ 66.632443][ T5711] dump_stack+0x15/0x20 [ 66.636608][ T5711] should_fail_ex+0x223/0x230 [ 66.641344][ T5711] should_fail+0xb/0x10 [ 66.645519][ T5711] should_fail_usercopy+0x1a/0x20 [ 66.650556][ T5711] _copy_from_user+0x1e/0xb0 [ 66.655159][ T5711] __x64_sys_epoll_ctl+0x8e/0xf0 [ 66.660141][ T5711] x64_sys_call+0x27c9/0x2d60 [ 66.664835][ T5711] do_syscall_64+0xc9/0x1c0 [ 66.669350][ T5711] ? clear_bhb_loop+0x55/0xb0 [ 66.674116][ T5711] ? clear_bhb_loop+0x55/0xb0 [ 66.678804][ T5711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.684774][ T5711] RIP: 0033:0x7f0c4bf7e719 [ 66.689257][ T5711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.708946][ T5711] RSP: 002b:00007f0c4abd6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 66.717363][ T5711] RAX: ffffffffffffffda RBX: 00007f0c4c136058 RCX: 00007f0c4bf7e719 [ 66.725493][ T5711] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000003 [ 66.733470][ T5711] RBP: 00007f0c4abd6090 R08: 0000000000000000 R09: 0000000000000000 [ 66.741447][ T5711] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.749527][ T5711] R13: 0000000000000001 R14: 00007f0c4c136058 R15: 00007ffcf4d9aa98 [ 66.757517][ T5711] [ 66.767474][ T5713] netlink: 112 bytes leftover after parsing attributes in process `syz.4.806'. [ 66.800540][ T5721] loop5: detected capacity change from 0 to 512 [ 66.811293][ T5721] EXT4-fs (loop5): too many log groups per flexible block group [ 66.819087][ T5721] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 66.826184][ T5721] EXT4-fs (loop5): mount failed [ 66.843113][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.850344][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.896222][ T5719] veth0_to_team: left promiscuous mode [ 66.901780][ T5719] veth0_to_team: left allmulticast mode [ 66.912911][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.923123][ T5719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.947581][ T5719] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.956583][ T5719] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.965622][ T5719] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.974501][ T5719] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.005642][ T5729] FAULT_INJECTION: forcing a failure. [ 67.005642][ T5729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.018860][ T5729] CPU: 1 UID: 0 PID: 5729 Comm: syz.5.813 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 67.029489][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.039621][ T5729] Call Trace: [ 67.043004][ T5729] [ 67.045723][ T5735] loop4: detected capacity change from 0 to 512 [ 67.045947][ T5729] dump_stack_lvl+0xf2/0x150 [ 67.056787][ T5729] dump_stack+0x15/0x20 [ 67.060956][ T5729] should_fail_ex+0x223/0x230 [ 67.065790][ T5729] should_fail+0xb/0x10 [ 67.070088][ T5729] should_fail_usercopy+0x1a/0x20 [ 67.075121][ T5729] _copy_from_user+0x1e/0xb0 [ 67.079724][ T5729] copy_msghdr_from_user+0x54/0x2a0 [ 67.084994][ T5729] __sys_sendmsg+0x171/0x270 [ 67.089629][ T5729] __x64_sys_sendmsg+0x46/0x50 [ 67.094402][ T5729] x64_sys_call+0x2689/0x2d60 [ 67.099094][ T5729] do_syscall_64+0xc9/0x1c0 [ 67.103642][ T5729] ? clear_bhb_loop+0x55/0xb0 [ 67.108327][ T5729] ? clear_bhb_loop+0x55/0xb0 [ 67.113015][ T5729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.119054][ T5729] RIP: 0033:0x7f571c96e719 [ 67.123473][ T5729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.143152][ T5729] RSP: 002b:00007f571b5e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.151612][ T5729] RAX: ffffffffffffffda RBX: 00007f571cb25f80 RCX: 00007f571c96e719 [ 67.159596][ T5729] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 67.167621][ T5729] RBP: 00007f571b5e1090 R08: 0000000000000000 R09: 0000000000000000 [ 67.175600][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.183644][ T5729] R13: 0000000000000000 R14: 00007f571cb25f80 R15: 00007fff0593d998 [ 67.191625][ T5729] [ 67.197281][ T5735] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 67.208056][ T5735] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 67.235867][ T5737] loop5: detected capacity change from 0 to 2048 [ 67.270669][ T5741] netlink: 112 bytes leftover after parsing attributes in process `syz.2.819'. [ 67.302246][ T5737] loop5: p1 < > p4 [ 67.306675][ T5737] loop5: p4 size 8388608 extends beyond EOD, truncated [ 67.311869][ T3321] EXT4-fs unmount: 102 callbacks suppressed [ 67.311973][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.331760][ T5737] syz.5.817[5737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.331843][ T5737] syz.5.817[5737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.345952][ T5737] syz.5.817[5737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.416157][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.436498][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.454724][ T5758] IPVS: Error connecting to the multicast addr [ 67.492175][ T5767] Cannot find add_set index 0 as target [ 67.504419][ T5773] loop3: detected capacity change from 0 to 2048 [ 67.550552][ T5773] loop3: p1 < > p4 [ 67.554888][ T5773] loop3: p4 size 8388608 extends beyond EOD, truncated [ 67.564803][ T5773] syz.3.833[5773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.707705][ T5792] loop3: detected capacity change from 0 to 1024 [ 67.731640][ T5792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.745899][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.762439][ T5792] rdma_op ffff88810866f980 conn xmit_rdma 0000000000000000 [ 67.789376][ T5798] loop3: detected capacity change from 0 to 512 [ 67.812277][ T5798] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 67.820373][ T5798] System zones: 0-2, 18-18, 34-34 [ 67.823083][ T5802] loop5: detected capacity change from 0 to 2048 [ 67.827974][ T5798] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.844: bg 0: block 248: padding at end of block bitmap is not set [ 67.846660][ T5798] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.844: Failed to acquire dquot type 1 [ 67.858318][ T5798] EXT4-fs (loop3): 1 truncate cleaned up [ 67.865985][ T5802] loop5: p1 < > p4 [ 67.866481][ T5798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.871279][ T5802] loop5: p4 size 8388608 extends beyond EOD, truncated [ 67.882442][ T5798] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.935378][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.949803][ T5806] loop5: detected capacity change from 0 to 2048 [ 67.975999][ T5806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.994966][ T5806] 0ªX¹¦D: renamed from gretap0 (while UP) [ 68.007125][ T5806] 0ªX¹¦D: entered allmulticast mode [ 68.013209][ T5806] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 68.103269][ T5820] loop3: detected capacity change from 0 to 4096 [ 68.113091][ T5824] loop1: detected capacity change from 0 to 1024 [ 68.114303][ T5820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.125671][ T5822] loop4: detected capacity change from 0 to 4096 [ 68.133086][ T5822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.141920][ T5820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.156024][ T5822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.171373][ T5824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.185598][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.212230][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.217762][ T5824] rdma_op ffff888115c01d80 conn xmit_rdma 0000000000000000 [ 68.227026][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.244431][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.293393][ T5837] loop4: detected capacity change from 0 to 512 [ 68.309319][ T5837] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 68.320086][ T5837] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 68.370375][ T5852] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 68.436538][ T5860] loop2: detected capacity change from 0 to 4096 [ 68.443372][ T5860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.452681][ T5860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.463962][ T5867] loop3: detected capacity change from 0 to 1024 [ 68.472299][ T5862] netlink: 'syz.5.869': attribute type 11 has an invalid length. [ 68.483133][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.492504][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.505539][ T5870] IPVS: Error connecting to the multicast addr [ 68.516524][ T5867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.530507][ T5867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.539606][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.558975][ T5867] rdma_op ffff888115c00980 conn xmit_rdma 0000000000000000 [ 68.593771][ T5884] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 68.599445][ T5890] vhci_hcd: default hub control req: 0058 v0200 i0007 l0 [ 68.600313][ T5884] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.614961][ T5884] vhci_hcd vhci_hcd.0: Device attached [ 68.639526][ T5884] loop5: detected capacity change from 0 to 512 [ 68.647918][ T5884] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 68.654822][ T5896] loop2: detected capacity change from 0 to 2048 [ 68.676201][ T5884] EXT4-fs (loop5): 1 orphan inode deleted [ 68.679591][ T5899] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 68.681973][ T5884] EXT4-fs (loop5): 1 truncate cleaned up [ 68.682442][ T5884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.688485][ T5899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.688615][ T5899] vhci_hcd vhci_hcd.0: Device attached [ 68.698759][ T5884] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, [ 68.712034][ T5899] loop3: detected capacity change from 0 to 512 [ 68.713943][ T5884] block bitmap and bg descriptor inconsistent: 189 vs 220 free clusters [ 68.721094][ T5899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.728197][ T5884] EXT4-fs (loop5): Remounting filesystem read-only [ 68.735889][ T5896] loop2: p1 < > p4 [ 68.743768][ T5899] EXT4-fs (loop3): 1 orphan inode deleted [ 68.759769][ T5896] loop2: p4 size 8388608 extends beyond EOD, [ 68.762485][ T5899] EXT4-fs (loop3): 1 truncate cleaned up [ 68.768192][ T5896] truncated [ 68.774729][ T5899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.795896][ T5885] vhci_hcd: connection closed [ 68.796201][ T28] vhci_hcd: stop threads [ 68.805258][ T28] vhci_hcd: release socket [ 68.809763][ T28] vhci_hcd: disconnect device [ 68.811140][ T5896] bpf_get_probe_write_proto: 5 callbacks suppressed [ 68.811158][ T5896] syz.2.881[5896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.821208][ T1004] vhci_hcd: vhci_device speed not set [ 68.832100][ T5896] syz.2.881[5896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.833532][ T5900] vhci_hcd: connection closed [ 68.838092][ T5896] syz.2.881[5896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.850473][ T28] vhci_hcd: stop threads [ 68.869536][ T28] vhci_hcd: release socket [ 68.874154][ T28] vhci_hcd: disconnect device [ 68.919829][ T29] kauditd_printk_skb: 1084 callbacks suppressed [ 68.919848][ T29] audit: type=1326 audit(1731593549.909:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36cb7e719 code=0x7ffc0000 [ 68.949743][ T3392] vhci_hcd: vhci_device speed not set [ 68.956966][ T29] audit: type=1326 audit(1731593549.909:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36cb7e719 code=0x7ffc0000 [ 68.980489][ T29] audit: type=1326 audit(1731593549.909:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd36cb7e719 code=0x7ffc0000 [ 68.985620][ T5912] loop2: detected capacity change from 0 to 1024 [ 69.004031][ T29] audit: type=1326 audit(1731593549.909:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.2.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36cb7e719 code=0x7ffc0000 [ 69.041776][ T5912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.054499][ T5912] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.069919][ T5912] rdma_op ffff888114e2e180 conn xmit_rdma 0000000000000000 [ 69.093628][ T29] audit: type=1326 audit(1731593550.089:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36cb7e719 code=0x7ffc0000 [ 69.118414][ T29] audit: type=1326 audit(1731593550.089:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fd36cb7e719 code=0x7ffc0000 [ 69.141853][ T29] audit: type=1326 audit(1731593550.089:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd36cb7e719 code=0x7ffc0000 [ 69.183177][ T29] audit: type=1326 audit(1731593550.179:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408825e719 code=0x7ffc0000 [ 69.206638][ T29] audit: type=1326 audit(1731593550.179:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408825e719 code=0x7ffc0000 [ 69.229957][ T29] audit: type=1326 audit(1731593550.179:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f408825e719 code=0x7ffc0000 [ 69.346613][ T5939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.355179][ T5939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.366371][ T5939] IPVS: Error connecting to the multicast addr [ 69.384215][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.418914][ T3634] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.452818][ T5944] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 69.496753][ T5947] loop5: detected capacity change from 0 to 1024 [ 69.523502][ T5947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.540517][ T5947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.621048][ T5947] rdma_op ffff88810866c980 conn xmit_rdma 0000000000000000 [ 69.626187][ T5960] loop3: detected capacity change from 0 to 512 [ 69.656636][ T5960] EXT4-fs (loop3): too many log groups per flexible block group [ 69.664516][ T5960] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 69.691196][ T5960] EXT4-fs (loop3): mount failed [ 69.798696][ T5981] loop2: detected capacity change from 0 to 2048 [ 69.813768][ T5987] loop1: detected capacity change from 0 to 1024 [ 69.833082][ T5987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.852154][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.852716][ T5981] loop2: p1 < > p4 [ 69.873107][ T5981] loop2: p4 size 8388608 extends beyond EOD, truncated [ 69.885081][ T5987] rdma_op ffff888115721580 conn xmit_rdma 0000000000000000 [ 69.902037][ T5981] syz.2.917[5981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.902124][ T5981] syz.2.917[5981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.924088][ T5981] syz.2.917[5981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.942745][ T6004] FAULT_INJECTION: forcing a failure. [ 69.942745][ T6004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.946169][ T6002] loop4: detected capacity change from 0 to 512 [ 69.954070][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.1.927 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 69.983963][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.994036][ T6004] Call Trace: [ 69.997336][ T6004] [ 70.000314][ T6004] dump_stack_lvl+0xf2/0x150 [ 70.004924][ T6004] dump_stack+0x15/0x20 [ 70.009116][ T6004] should_fail_ex+0x223/0x230 [ 70.013818][ T6004] should_fail+0xb/0x10 [ 70.018078][ T6004] should_fail_usercopy+0x1a/0x20 [ 70.023140][ T6004] _copy_from_user+0x1e/0xb0 [ 70.027746][ T6004] copy_msghdr_from_user+0x54/0x2a0 [ 70.032994][ T6004] __sys_sendmsg+0x171/0x270 [ 70.037650][ T6004] __x64_sys_sendmsg+0x46/0x50 [ 70.042429][ T6004] x64_sys_call+0x2689/0x2d60 [ 70.047123][ T6004] do_syscall_64+0xc9/0x1c0 [ 70.051638][ T6004] ? clear_bhb_loop+0x55/0xb0 [ 70.056343][ T6004] ? clear_bhb_loop+0x55/0xb0 [ 70.061089][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.067061][ T6004] RIP: 0033:0x7f0c4bf7e719 [ 70.071495][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.091153][ T6004] RSP: 002b:00007f0c4abf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.099656][ T6004] RAX: ffffffffffffffda RBX: 00007f0c4c135f80 RCX: 00007f0c4bf7e719 [ 70.107684][ T6004] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 70.115663][ T6004] RBP: 00007f0c4abf7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.123719][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.131725][ T6004] R13: 0000000000000000 R14: 00007f0c4c135f80 R15: 00007ffcf4d9aa98 [ 70.139739][ T6004] [ 70.227106][ T6002] EXT4-fs (loop4): too many log groups per flexible block group [ 70.235020][ T6002] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 70.242600][ T6002] EXT4-fs (loop4): mount failed [ 70.347611][ T6030] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 70.354182][ T6030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.357034][ T6034] loop4: detected capacity change from 0 to 1024 [ 70.361804][ T6030] vhci_hcd vhci_hcd.0: Device attached [ 70.382891][ T6030] loop3: detected capacity change from 0 to 512 [ 70.389785][ T6030] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.401718][ T6034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.402467][ T6030] EXT4-fs (loop3): 1 orphan inode deleted [ 70.419696][ T6030] EXT4-fs (loop3): 1 truncate cleaned up [ 70.427141][ T6034] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.432335][ T6030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.453523][ T6034] rdma_op ffff88810866d180 conn xmit_rdma 0000000000000000 [ 70.473164][ T6032] vhci_hcd: connection closed [ 70.473498][ T293] vhci_hcd: stop threads [ 70.482700][ T293] vhci_hcd: release socket [ 70.487215][ T293] vhci_hcd: disconnect device [ 70.536939][ T6050] loop4: detected capacity change from 0 to 512 [ 70.561575][ T6050] EXT4-fs (loop4): too many log groups per flexible block group [ 70.561799][ T6054] FAULT_INJECTION: forcing a failure. [ 70.561799][ T6054] name failslab, interval 1, probability 0, space 0, times 0 [ 70.569298][ T6050] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 70.581954][ T6054] CPU: 1 UID: 0 PID: 6054 Comm: syz.1.943 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 70.581982][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.581995][ T6054] Call Trace: [ 70.582002][ T6054] [ 70.588919][ T6050] EXT4-fs (loop4): mount failed [ 70.599322][ T6054] dump_stack_lvl+0xf2/0x150 [ 70.625391][ T6054] dump_stack+0x15/0x20 [ 70.629647][ T6054] should_fail_ex+0x223/0x230 [ 70.634364][ T6054] ? audit_log_start+0x34c/0x6b0 [ 70.639393][ T6054] should_failslab+0x8f/0xb0 [ 70.643998][ T6054] kmem_cache_alloc_noprof+0x4c/0x290 [ 70.649396][ T6054] audit_log_start+0x34c/0x6b0 [ 70.654247][ T6054] audit_seccomp+0x4b/0x130 [ 70.658786][ T6054] __seccomp_filter+0x6fa/0x1180 [ 70.663810][ T6054] ? vfs_write+0x596/0x920 [ 70.668250][ T6054] ? __schedule+0x6fa/0x930 [ 70.672777][ T6054] __secure_computing+0x9f/0x1c0 [ 70.677768][ T6054] syscall_trace_enter+0xd1/0x1f0 [ 70.683277][ T6054] do_syscall_64+0xaa/0x1c0 [ 70.687798][ T6054] ? clear_bhb_loop+0x55/0xb0 [ 70.692587][ T6054] ? clear_bhb_loop+0x55/0xb0 [ 70.697353][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.703308][ T6054] RIP: 0033:0x7f0c4bf7e719 [ 70.707737][ T6054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.727475][ T6054] RSP: 002b:00007f0c4abf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 70.735931][ T6054] RAX: ffffffffffffffda RBX: 00007f0c4c135f80 RCX: 00007f0c4bf7e719 [ 70.743947][ T6054] RDX: 0000000000000011 RSI: 0000000000000000 RDI: ffffffffffffffff [ 70.751934][ T6054] RBP: 00007f0c4abf7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.759998][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.767977][ T6054] R13: 0000000000000000 R14: 00007f0c4c135f80 R15: 00007ffcf4d9aa98 [ 70.776018][ T6054] [ 70.780219][ C0] ================================================================== [ 70.788340][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 70.795586][ C0] [ 70.797922][ C0] read-write to 0xffff88810006ceb8 of 8 bytes by interrupt on cpu 1: [ 70.806007][ C0] wq_worker_tick+0x63/0x240 [ 70.810620][ C0] sched_tick+0xd2/0x110 [ 70.814957][ C0] update_process_times+0x15a/0x180 [ 70.820162][ C0] tick_nohz_handler+0x250/0x2d0 [ 70.825151][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 70.830359][ C0] hrtimer_interrupt+0x210/0x7b0 [ 70.835306][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 70.841313][ C0] sysvec_apic_timer_interrupt+0x6e/0x80 [ 70.846979][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.852981][ C0] crng_make_state+0x1c6/0x3e0 [ 70.857763][ C0] _get_random_bytes+0x88/0x190 [ 70.862638][ C0] get_random_bytes+0x1d/0x30 [ 70.867317][ C0] nsim_dev_trap_report_work+0x22d/0x5b0 [ 70.872955][ C0] process_scheduled_works+0x483/0x9a0 [ 70.878425][ C0] worker_thread+0x51d/0x6f0 [ 70.883042][ C0] kthread+0x1d1/0x210 [ 70.887112][ C0] ret_from_fork+0x4b/0x60 [ 70.891565][ C0] ret_from_fork_asm+0x1a/0x30 [ 70.896343][ C0] [ 70.898668][ C0] read-write to 0xffff88810006ceb8 of 8 bytes by interrupt on cpu 0: [ 70.906731][ C0] wq_worker_tick+0x63/0x240 [ 70.911339][ C0] sched_tick+0xd2/0x110 [ 70.915624][ C0] update_process_times+0x15a/0x180 [ 70.920858][ C0] tick_nohz_handler+0x250/0x2d0 [ 70.925819][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 70.931034][ C0] hrtimer_interrupt+0x210/0x7b0 [ 70.935981][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 70.941887][ C0] sysvec_apic_timer_interrupt+0x6e/0x80 [ 70.947536][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 70.953530][ C0] __alloc_skb+0x24f/0x310 [ 70.957987][ C0] nsim_dev_trap_report_work+0x18d/0x5b0 [ 70.963630][ C0] process_scheduled_works+0x483/0x9a0 [ 70.969116][ C0] worker_thread+0x51d/0x6f0 [ 70.973717][ C0] kthread+0x1d1/0x210 [ 70.977813][ C0] ret_from_fork+0x4b/0x60 [ 70.982323][ C0] ret_from_fork_asm+0x1a/0x30 [ 70.987101][ C0] [ 70.989421][ C0] value changed: 0x000000000007a120 -> 0x000000000007c830 [ 70.996554][ C0] [ 70.998872][ C0] Reported by Kernel Concurrency Sanitizer on: [ 71.005018][ C0] CPU: 0 UID: 0 PID: 285 Comm: kworker/u8:5 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 71.015779][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.025867][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 71.032644][ C0] ================================================================== [ 71.199041][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.