last executing test programs: 2.391389661s ago: executing program 3 (id=1334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000040008"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.376225361s ago: executing program 3 (id=1335): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40085) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1b, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000004000000000000000010000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000186000000800000000000000fbffffff18110000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000000000000cb3e0ff010000008520000003000000255081000500000085000000420000001800000006000002000000000200"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000fcffffffffffffff00"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) 2.359154731s ago: executing program 3 (id=1336): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.342918031s ago: executing program 3 (id=1337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000040008"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.328080821s ago: executing program 3 (id=1338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_open_dev$usbmon(&(0x7f00000005c0), 0x1, 0x84800) 2.314834531s ago: executing program 3 (id=1339): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@discard}]}, 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r3 = open(&(0x7f00000000c0)='./file1\x00', 0x181042, 0x1) write$P9_RREADDIR(r3, &(0x7f0000000100)={0xb}, 0xb) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x10}) sendfile(r3, r3, &(0x7f0000000240), 0x7f03) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x2a, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(r2, &(0x7f0000000040), 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r8]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095e800"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r10) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.922431605s ago: executing program 2 (id=1340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x1, 0x0, 0x1, 0x62000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0x7ff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) socket(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='afs_make_vl_call\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x2, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/8, 0xb28}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/62, 0x3e}], 0x1}, 0xef67}], 0x2, 0x30, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.877925915s ago: executing program 2 (id=1341): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) close(r1) read$eventfd(r0, &(0x7f00000003c0), 0x8) r5 = syz_io_uring_setup(0x422d, &(0x7f0000000340)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000000), &(0x7f0000000140)=0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001538d495000000000000000000"], 0x50) fsmount(0xffffffffffffffff, 0x1, 0x1) unshare(0x2c060000) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r8, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r10, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) io_uring_enter(r5, 0x184d, 0x0, 0x42, 0x0, 0x0) 1.654002537s ago: executing program 1 (id=1346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.582700287s ago: executing program 1 (id=1348): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1.575717087s ago: executing program 4 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31830000000000000000190000001800018014000200697036677265300000130000000000005e5aeab7016318eb6dbef7988f94e8c7a65554d9e3500e06e73fa6af76e6144e71e66d4cfbe5f3d45c2474586bb1e5426614275c17618d6f580bfe439d11d892afabb481d0e79e8c75de0edeef86913c0749119cc6eb14b3f58b0c0f145802dad5f73564fed77df562320d4e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 1.556083167s ago: executing program 4 (id=1351): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x6, &(0x7f00000002c0)=[{0x6, 0x0, 0x8, 0xc}, {0x7, 0x7, 0x3, 0x5}, {0x800, 0x8, 0x3, 0xf0d0}, {0x6, 0x2, 0x9, 0x99e}, {0x4, 0x8, 0x0, 0x25c78b3c}, {0x2, 0x0, 0x3, 0xa0}]}) getitimer(0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@delalloc}, {@auto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x80) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1.544393348s ago: executing program 1 (id=1352): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x4000c2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000948f205538e027af6c65eef81c2b655f1aeba2ceac3d57a83c9b30806e44da634e11af6896238c2cd29de1471d2ee11c5468044b56592d76ac7be3f57e9be05e25504c0d446951bc40ac43e6aa06fc9355240fd1e13a1da47c729c9a6146332efc09891b3c2a0c806b90575a5070a9e7b18d8998e76e4d93ac852add856d88a68aba7a25042c2da082db939ee541e37fb876c959603c6904cbaa44158deb63bc2689eb8cdee60568f359"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, &(0x7f00000000c0)=[{0x6, 0x82}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$eJzs3b2LHGUcB/Df7M3ujlrsFlYiOKCFVciltdlDEhCvMmwRLfQwCcjtIuTgxBdcU4mdjaV/gSD4h9jYWQq2gp0RAiMzO7Mvl8nuKrmT5D6fYvPLM8935jcvdzfNPffBy9Pj23ncvf/Fb5FlSXRG/YgHSQyjE42vYs3o2wAAnmYPiiL+LOZaNv/6TXssW3wAAE+dLT//a2n1eauc8dPF9QYAnI+bt959++Dw8Po7eZ7FjenXp+MkIsp/59sP7sZHMYk7cTUG8TCielHoRvW2UJY3iqKYpXlpGK9NZ6fjMjl9/+d6/wd/RFT5/RjEsBpavG1U+bcOr+/ncyv5WdnH8/XxR2X+WgzixUV4LX+tJR/jXrz+6kr/V2IQv3wYH8ckbldNLPNf7uf5m8V3f33+XtlemU9mp+N+NW+p2GsOPrvgewQAAAAAAAAAAAAAAAAAAAAAwLPnSr12Tj+q9XvKoXr9nb2H5X+6kTeG6+vzzPNJs6Pl+kDRKYpiVsT3zfo6V/M8L+qJy3waL6X1woIAAAAAAAAAAAAAAAAAAABwyZ18+tnx0WRy594TKZrVANKI+PtmxH/dz2hl5JWoiuxxk/v1MY8mk05drs9JV0dir5mTRGxsozyJJ3RZthXPPdJzXfzwY2uqPKOTNNo2ZdsP2m0/1vYiSSIWI59059exdXLzdB0fJe3XsL9oPitvXJy9cb1ob6MbZ0Z6j+u5eRR3O8Fe66bBv75QvReqYrZhTiSbvi7e+H3e9spZrM3pVVe1Nd6ti5X4mWdjp+c5snn80e8VidU6AAAAAAAAAAAAAAAAAADgXC1/+7dl4/2N0U7RP7e2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBCLf/+/y5Fuh7eIdWLeyf/17kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwefwTAAD//yDGU8M=") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1cd74f", @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000800050000000000"], 0x1c}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0x24}}, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="e1d9f81700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0xfff5, 0x9}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0xe, 0x0, 0x59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 1.541176897s ago: executing program 0 (id=1353): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2, &(0x7f0000000000)=ANY=[], 0x1, 0x28f, &(0x7f00000007c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0xff, 0x0, 0x0, 0x0, 0x7b10212942b18be4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000002c0), 0x8}, 0x8020, 0xa91, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0xde00, 0x0, 0x8e08, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x1, 0x0, 0x1, 0x62000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0x7ff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) pipe2(&(0x7f0000000040), 0x84000) setsockopt(r4, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='afs_make_vl_call\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x2, 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/8, 0xb28}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/62, 0x3e}], 0x1}, 0xef67}], 0x2, 0x30, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) 1.026485602s ago: executing program 2 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000880)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) ustat(0x7, &(0x7f0000000780)) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r5, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x6, 0x500, 0x6, 0x4, 0x0, @link_local, @local, @link_local, @multicast2}}}}, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) lstat(&(0x7f0000000000)='./file1\x00', 0x0) 828.551033ms ago: executing program 2 (id=1355): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x6, &(0x7f00000002c0)=[{0x6, 0x0, 0x8, 0xc}, {0x7, 0x7, 0x3, 0x5}, {0x800, 0x8, 0x3, 0xf0d0}, {0x6, 0x2, 0x9, 0x99e}, {0x4, 0x8, 0x0, 0x25c78b3c}, {0x2, 0x0, 0x3, 0xa0}]}) getitimer(0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@delalloc}, {@auto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$rds(r1, 0x0, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x80) write$binfmt_script(r5, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x884) 704.709244ms ago: executing program 4 (id=1356): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffffffdbdf251800000008000300", @ANYRES32=r4, @ANYBLOB="300030802c00018008000100200003800800020003000000060001"], 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0x810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 670.795625ms ago: executing program 1 (id=1357): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x2c}}, 0x0) mkdir(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xd, 0xc}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0xffffffffffffffb9}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x94, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) 669.517075ms ago: executing program 0 (id=1358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x111, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) 581.869085ms ago: executing program 0 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 553.331376ms ago: executing program 0 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000040008"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 514.234536ms ago: executing program 4 (id=1361): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40085) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1b, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000004000000000000000010000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000186000000800000000000000fbffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b00600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000000082000000181b00006cc2ff0a54000fe00b0000dd93d988a83e307b3da0a053534f64c5c4e27664e6662e21744c4ae845b09549172eb714b80ff1a3413761c66b12a7c002c7c4ce519e0edc23a50dce2730055f22b6c1ac5de01c307f7f82e8284907504c28d6e650a671bfec3a76e7f51aaa9d4d0cac0d8cac695e5ab179034661f6b2875517148efab367314885863e0306dc909ff6b690878f09b6faf7865a94881214192b974ca83f4d8f9fddb08f82cf3efb9fd92a65f2c4b2ac9adfcaca8c14fb09cec70c8bddf4844a9d49ffb6c8375eae30d151c9b4e17dac83bab14810000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000000cb3e0ff0100000085200000030000002550810005000000850000004200000018000000060000020000000002000000b53400027e0000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000fcffffffffffffff00"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) 491.355846ms ago: executing program 0 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31830000000000000000190000001800018014000200697036677265300000130000000000005e5aeab7016318eb6dbef7988f94e8c7a65554d9e3500e06e73fa6af76e6144e71e66d4cfbe5f3d45c2474586bb1e5426614275c17618d6f580bfe439d11d892afabb481d0e79e8c75de0edeef86913c0749119cc6eb14b3f58b0c0f145802dad5f73564fed77df562320d4e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 482.548596ms ago: executing program 1 (id=1363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 473.333006ms ago: executing program 0 (id=1364): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) close(r1) read$eventfd(r0, &(0x7f00000003c0), 0x8) r5 = syz_io_uring_setup(0x422d, &(0x7f0000000340)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000000), &(0x7f0000000140)=0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001538d495000000000000000000"], 0x50) fsmount(0xffffffffffffffff, 0x1, 0x1) unshare(0x2c060000) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r8, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r10, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) io_uring_enter(r5, 0x184d, 0x0, 0x42, 0x0, 0x0) 464.459446ms ago: executing program 4 (id=1365): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 452.289076ms ago: executing program 1 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x6, &(0x7f00000002c0)=[{0x6, 0x0, 0x8, 0xc}, {0x7, 0x7, 0x3, 0x5}, {0x800, 0x8, 0x3, 0xf0d0}, {0x6, 0x2, 0x9, 0x99e}, {0x4, 0x8, 0x0, 0x25c78b3c}, {0x2, 0x0, 0x3, 0xa0}]}) getitimer(0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@delalloc}, {@auto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x80) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 380.549327ms ago: executing program 4 (id=1367): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x4000c2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000948f205538e027af6c65eef81c2b655f1aeba2ceac3d57a83c9b30806e44da634e11af6896238c2cd29de1471d2ee11c5468044b56592d76ac7be3f57e9be05e25504c0d446951bc40ac43e6aa06fc9355240fd1e13a1da47c729c9a6146332efc09891b3c2a0c806b90575a5070a9e7b18d8998e76e4d93ac852add856d88a68aba7a25042c2da082db939ee541e37fb876c959603c6904cbaa44158deb63bc2689eb8cdee60568f359"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, &(0x7f00000000c0)=[{0x6, 0x82}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000040)='./mnt\x00', 0x800090, &(0x7f0000000540)=ANY=[], 0x6, 0x2d8, &(0x7f0000000a40)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1cd74f", @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000800050000000000"], 0x1c}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYRES32=r1, @ANYBLOB="9a74f27f52e872aa07c9351a98452cd7743293b48f213e81bdd2a3d7d9f727938f64beb882d9a84c73b4ffa93a964600d07b4738af480b43511264685a33f2e20e7e449df5c36cf34941370dfd3821356a40539805c9681d921573ddca257e05bb3a2d45aa9cbfaf554daca37459d7a5c18c923e6c2dab7d81a950417f0c64006b871b60a8e28fe90b620cdd65ffafbd8b6549dc40735255f2d4785872c566d6ec1b677e4636f70932ef82fe142d474deb45df0052042174ab25ecb1f0d985caed7250faffffffffffffff008bb292598893ddc07103f66009fecdea55bbf6d1ecebf0630845deae5c5191933174bbe0151795540f0f7515791733942bdc501a86ed0867a58d00000000000000800fe5b2e8e807c6512cfa4c4352b150c8a9be9ea586081e3a22d4a472e9169e48d5920f5803c494ae90b5c415b8ad65fcadf70fd826f1d5eb6aa9334a710ffbda9af81c59e0cb021440f10c01824791f98f3112e7650c39379e4dcf398f8afee3520fae633693755c386f5bc87720d177a63fe2bdc2c481a6833001128542c3c087df404786321e7e344128dbfc5af05b44cca0f59ef6e9a4f71ef5fd31182083de74d870cabb4c60168df27bf6bdfb4cdd3c6d0c2d191e03b13c7de56779e328645dae70d2124b500ddf94e9329f3be7b5eb49a5109ae78d8e5ca1479106430af3c46e275afc09086c385b437693d819d45dad24b55b6201a9cc9e728ce37143b2c4451db62d1f4bc4ba291186183010e76f3c6dea9ec18bd0db8922319685826651678ebc3c4b3ccaba657ae98072648aea14e4c99071e07722d3a78463241d1479a94c40f464550f961c46cfd72384e860e2eac5fcfb7d48258a1cac9c58c8e09c8c086091df3ea8304684ace341c93de1b075acae45f11f99dae435bd11d7934c6ef204b4c7ce76c03540fdc67877a575838488014cb1d584f4adefa386cdbab54bc220ae21d86f00b7e1ccaa1723"], 0x24}}, 0x800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="e1d9f81700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0xfff5, 0x9}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0xe, 0x0, 0x59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 26.45273ms ago: executing program 2 (id=1368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_open_dev$usbmon(&(0x7f00000005c0), 0x1, 0x84800) 0s ago: executing program 2 (id=1369): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x1, 0x0, 0x1, 0x62000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0x7ff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) socket(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='afs_make_vl_call\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x2, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/8, 0xb28}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/62, 0x3e}], 0x1}, 0xef67}], 0x2, 0x30, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5242 comm="syz.4.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 63.529859][ T5256] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.656: corrupted inode contents [ 63.550313][ T5256] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #19: comm syz.2.656: mark_inode_dirty error [ 63.550851][ T5243] lo speed is unknown, defaulting to 1000 [ 63.573056][ T5256] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.656: corrupted inode contents [ 63.603725][ T5256] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.656: mark_inode_dirty error [ 63.649224][ T5256] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.656: mark inode dirty (error -117) [ 63.671424][ T5256] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 63.703864][ T5263] loop1: detected capacity change from 0 to 8192 [ 63.718879][ T5263] syz.1.662: attempt to access beyond end of device [ 63.718879][ T5263] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 63.732747][ T5263] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 63.740739][ T5263] FAT-fs (loop1): Filesystem has been set read-only [ 63.747913][ T5263] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 63.755982][ T5263] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 63.775908][ T5269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 63.782549][ T5269] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.790253][ T5269] vhci_hcd vhci_hcd.0: Device attached [ 63.888328][ T5279] loop1: detected capacity change from 0 to 164 [ 63.898945][ T5276] loop3: detected capacity change from 0 to 8192 [ 63.928747][ T5276] FAULT_INJECTION: forcing a failure. [ 63.928747][ T5276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.941894][ T5276] CPU: 1 UID: 0 PID: 5276 Comm: syz.3.668 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 63.941929][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.941943][ T5276] Call Trace: [ 63.941950][ T5276] [ 63.941958][ T5276] dump_stack_lvl+0xf2/0x150 [ 63.941992][ T5276] dump_stack+0x15/0x1a [ 63.942059][ T5276] should_fail_ex+0x24a/0x260 [ 63.942095][ T5276] should_fail+0xb/0x10 [ 63.942126][ T5276] should_fail_usercopy+0x1a/0x20 [ 63.942271][ T5276] strncpy_from_user+0x25/0x210 [ 63.942297][ T5276] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 63.942318][ T5276] ? getname_flags+0x81/0x3b0 [ 63.942406][ T5276] getname_flags+0xb0/0x3b0 [ 63.942516][ T5276] user_path_at+0x26/0x120 [ 63.942544][ T5276] do_sys_truncate+0x5b/0x130 [ 63.942575][ T5276] __x64_sys_truncate+0x31/0x40 [ 63.942608][ T5276] x64_sys_call+0x26d0/0x2dc0 [ 63.942641][ T5276] do_syscall_64+0xc9/0x1c0 [ 63.942717][ T5276] ? clear_bhb_loop+0x55/0xb0 [ 63.942743][ T5276] ? clear_bhb_loop+0x55/0xb0 [ 63.942820][ T5276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.942924][ T5276] RIP: 0033:0x7f2129e7d169 [ 63.942943][ T5276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.942964][ T5276] RSP: 002b:00007f21284e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 63.942984][ T5276] RAX: ffffffffffffffda RBX: 00007f212a095fa0 RCX: 00007f2129e7d169 [ 63.943058][ T5276] RDX: 0000000000000000 RSI: 0000000000005c00 RDI: 0000400000000140 [ 63.943071][ T5276] RBP: 00007f21284e7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.943085][ T5276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.943098][ T5276] R13: 0000000000000000 R14: 00007f212a095fa0 R15: 00007ffdfe4ef778 [ 63.943118][ T5276] [ 64.215797][ T3374] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 64.378984][ T5298] loop3: detected capacity change from 0 to 8192 [ 64.389472][ T5298] syz.3.678: attempt to access beyond end of device [ 64.389472][ T5298] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 64.404505][ T5298] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 64.412404][ T5298] FAT-fs (loop3): Filesystem has been set read-only [ 64.420616][ T5298] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 64.428788][ T5298] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 64.472281][ T5300] __nla_validate_parse: 7 callbacks suppressed [ 64.472296][ T5300] netlink: 88 bytes leftover after parsing attributes in process `syz.3.679'. [ 64.487500][ T5300] netlink: 88 bytes leftover after parsing attributes in process `syz.3.679'. [ 64.514605][ T5302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.680'. [ 64.597848][ T5305] loop3: detected capacity change from 0 to 512 [ 64.606624][ T5305] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.642225][ T5305] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.681: corrupted inode contents [ 64.671176][ T5305] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.681: mark_inode_dirty error [ 64.692900][ T5305] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.681: corrupted inode contents [ 64.715824][ T5270] vhci_hcd: connection reset by peer [ 64.721408][ T1822] vhci_hcd: stop threads [ 64.725688][ T1822] vhci_hcd: release socket [ 64.730135][ T5305] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.681: mark_inode_dirty error [ 64.730163][ T1822] vhci_hcd: disconnect device [ 64.750926][ T5305] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.681: mark inode dirty (error -117) [ 64.763651][ T5305] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 64.862178][ T5322] netlink: 88 bytes leftover after parsing attributes in process `syz.0.690'. [ 64.871273][ T5322] netlink: 88 bytes leftover after parsing attributes in process `syz.0.690'. [ 65.020861][ T5329] loop1: detected capacity change from 0 to 1024 [ 65.036034][ T5332] netlink: 132 bytes leftover after parsing attributes in process `syz.4.693'. [ 65.048663][ T5336] FAULT_INJECTION: forcing a failure. [ 65.048663][ T5336] name failslab, interval 1, probability 0, space 0, times 0 [ 65.061410][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.2.694 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 65.061524][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.061536][ T5336] Call Trace: [ 65.061543][ T5336] [ 65.061551][ T5336] dump_stack_lvl+0xf2/0x150 [ 65.061584][ T5336] dump_stack+0x15/0x1a [ 65.061642][ T5336] should_fail_ex+0x24a/0x260 [ 65.061678][ T5336] should_failslab+0x8f/0xb0 [ 65.061707][ T5336] kmem_cache_alloc_noprof+0x52/0x320 [ 65.061728][ T5336] ? audit_log_start+0x34c/0x6b0 [ 65.061823][ T5336] audit_log_start+0x34c/0x6b0 [ 65.061859][ T5336] audit_seccomp+0x4b/0x130 [ 65.061891][ T5336] __seccomp_filter+0x6fa/0x1180 [ 65.061919][ T5336] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 65.062013][ T5336] ? vfs_write+0x644/0x920 [ 65.062050][ T5336] __secure_computing+0x9f/0x1c0 [ 65.062180][ T5336] syscall_trace_enter+0xd1/0x1f0 [ 65.062207][ T5336] do_syscall_64+0xaa/0x1c0 [ 65.062391][ T5336] ? clear_bhb_loop+0x55/0xb0 [ 65.062426][ T5336] ? clear_bhb_loop+0x55/0xb0 [ 65.062454][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.062481][ T5336] RIP: 0033:0x7fad5fc3d169 [ 65.062514][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.062531][ T5336] RSP: 002b:00007fad5e2a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 65.062548][ T5336] RAX: ffffffffffffffda RBX: 00007fad5fe55fa0 RCX: 00007fad5fc3d169 [ 65.062562][ T5336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 65.062592][ T5336] RBP: 00007fad5e2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.062604][ T5336] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 65.062616][ T5336] R13: 0000000000000000 R14: 00007fad5fe55fa0 R15: 00007ffca1de0f98 [ 65.062637][ T5336] [ 65.292328][ T5325] netlink: 'syz.0.691': attribute type 11 has an invalid length. [ 65.318934][ T5343] program syz.1.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.559661][ T5343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.569714][ T5351] netlink: 'syz.3.700': attribute type 21 has an invalid length. [ 65.577566][ T5351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.700'. [ 65.590060][ T5351] loop3: detected capacity change from 0 to 512 [ 65.601569][ T5343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.642091][ T5351] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.662166][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 65.671180][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 65.680076][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.702'. [ 66.513175][ T5383] loop2: detected capacity change from 0 to 512 [ 66.539938][ T5385] loop3: detected capacity change from 0 to 512 [ 66.547905][ T5383] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.560795][ T5385] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.566650][ T5383] FAULT_INJECTION: forcing a failure. [ 66.566650][ T5383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.584245][ T5383] CPU: 1 UID: 0 PID: 5383 Comm: syz.2.713 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 66.584300][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.584312][ T5383] Call Trace: [ 66.584319][ T5383] [ 66.584327][ T5383] dump_stack_lvl+0xf2/0x150 [ 66.584380][ T5383] dump_stack+0x15/0x1a [ 66.584446][ T5383] should_fail_ex+0x24a/0x260 [ 66.584517][ T5383] should_fail+0xb/0x10 [ 66.584550][ T5383] should_fail_usercopy+0x1a/0x20 [ 66.584586][ T5383] strncpy_from_user+0x25/0x210 [ 66.584608][ T5383] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 66.584668][ T5383] ? getname_flags+0x81/0x3b0 [ 66.584714][ T5383] getname_flags+0xb0/0x3b0 [ 66.584753][ T5383] __x64_sys_mkdirat+0x41/0x60 [ 66.584798][ T5383] x64_sys_call+0x1b6f/0x2dc0 [ 66.584848][ T5383] do_syscall_64+0xc9/0x1c0 [ 66.584883][ T5383] ? clear_bhb_loop+0x55/0xb0 [ 66.584914][ T5383] ? clear_bhb_loop+0x55/0xb0 [ 66.584946][ T5383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.585006][ T5383] RIP: 0033:0x7fad5fc3b9d7 [ 66.585024][ T5383] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.585045][ T5383] RSP: 002b:00007fad5e2a6e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 66.585067][ T5383] RAX: ffffffffffffffda RBX: 00007fad5e2a6ef0 RCX: 00007fad5fc3b9d7 [ 66.585081][ T5383] RDX: 00000000000001ff RSI: 0000400000000340 RDI: 00000000ffffff9c [ 66.585110][ T5383] RBP: 00004000000003c0 R08: 0000400000000000 R09: 0000000000000000 [ 66.585124][ T5383] R10: 00004000000003c0 R11: 0000000000000246 R12: 0000400000000340 [ 66.585137][ T5383] R13: 00007fad5e2a6eb0 R14: 0000000000000000 R15: 0000400000001280 [ 66.585158][ T5383] [ 66.606080][ T5385] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.711: corrupted inode contents [ 66.663698][ T5383] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.713: Abort forced by user [ 66.665111][ T5385] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.711: mark_inode_dirty error [ 66.669310][ T5383] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 66.674118][ T5385] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.711: corrupted inode contents [ 66.816399][ T5385] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.711: mark_inode_dirty error [ 66.828761][ T5385] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.711: mark inode dirty (error -117) [ 66.833292][ T5389] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 66.841633][ T5385] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 66.858754][ T5389] bond0: (slave bond_slave_0): Releasing backup interface [ 66.872078][ T5389] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.992998][ T5409] loop2: detected capacity change from 0 to 512 [ 67.007972][ T5409] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.021924][ T5409] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.719: Abort forced by user [ 67.032504][ T5409] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 67.034368][ T5415] tipc: Withdrawal distribution failure [ 67.484460][ T5456] FAULT_INJECTION: forcing a failure. [ 67.484460][ T5456] name failslab, interval 1, probability 0, space 0, times 0 [ 67.497252][ T5456] CPU: 0 UID: 0 PID: 5456 Comm: syz.2.737 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 67.497317][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.497327][ T5456] Call Trace: [ 67.497333][ T5456] [ 67.497341][ T5456] dump_stack_lvl+0xf2/0x150 [ 67.497438][ T5456] dump_stack+0x15/0x1a [ 67.497459][ T5456] should_fail_ex+0x24a/0x260 [ 67.497485][ T5456] should_failslab+0x8f/0xb0 [ 67.497509][ T5456] kmem_cache_alloc_node_noprof+0x59/0x320 [ 67.497536][ T5456] ? __alloc_skb+0x10b/0x310 [ 67.497553][ T5456] __alloc_skb+0x10b/0x310 [ 67.497645][ T5456] netlink_alloc_large_skb+0xad/0xe0 [ 67.497669][ T5456] netlink_sendmsg+0x3b4/0x6e0 [ 67.497697][ T5456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.497723][ T5456] __sock_sendmsg+0x140/0x180 [ 67.497755][ T5456] ____sys_sendmsg+0x326/0x4b0 [ 67.497790][ T5456] __sys_sendmsg+0x19d/0x230 [ 67.497875][ T5456] __x64_sys_sendmsg+0x46/0x50 [ 67.497895][ T5456] x64_sys_call+0x2734/0x2dc0 [ 67.498043][ T5456] do_syscall_64+0xc9/0x1c0 [ 67.498067][ T5456] ? clear_bhb_loop+0x55/0xb0 [ 67.498162][ T5456] ? clear_bhb_loop+0x55/0xb0 [ 67.498184][ T5456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.498206][ T5456] RIP: 0033:0x7fad5fc3d169 [ 67.498263][ T5456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.498277][ T5456] RSP: 002b:00007fad5e2a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.498325][ T5456] RAX: ffffffffffffffda RBX: 00007fad5fe55fa0 RCX: 00007fad5fc3d169 [ 67.498354][ T5456] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000006 [ 67.498364][ T5456] RBP: 00007fad5e2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.498374][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.498384][ T5456] R13: 0000000000000000 R14: 00007fad5fe55fa0 R15: 00007ffca1de0f98 [ 67.498400][ T5456] [ 67.700611][ T5457] FAULT_INJECTION: forcing a failure. [ 67.700611][ T5457] name failslab, interval 1, probability 0, space 0, times 0 [ 67.713274][ T5457] CPU: 1 UID: 0 PID: 5457 Comm: syz.3.730 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 67.713369][ T5457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.713383][ T5457] Call Trace: [ 67.713392][ T5457] [ 67.713401][ T5457] dump_stack_lvl+0xf2/0x150 [ 67.713497][ T5457] dump_stack+0x15/0x1a [ 67.713518][ T5457] should_fail_ex+0x24a/0x260 [ 67.713617][ T5457] should_failslab+0x8f/0xb0 [ 67.713646][ T5457] __kmalloc_cache_node_noprof+0x56/0x320 [ 67.713671][ T5457] ? __get_vm_area_node+0xfb/0x1c0 [ 67.713701][ T5457] __get_vm_area_node+0xfb/0x1c0 [ 67.713797][ T5457] __vmalloc_node_range_noprof+0x280/0xe70 [ 67.713861][ T5457] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 67.713898][ T5457] ? __rcu_read_unlock+0x4e/0x70 [ 67.713996][ T5457] ? avc_has_perm_noaudit+0x1cc/0x210 [ 67.714073][ T5457] ? selinux_capable+0x1f2/0x260 [ 67.714135][ T5457] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 67.714165][ T5457] __vmalloc_noprof+0x5e/0x70 [ 67.714196][ T5457] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 67.714235][ T5457] bpf_prog_alloc_no_stats+0x49/0x380 [ 67.714268][ T5457] ? bpf_prog_alloc+0x28/0x150 [ 67.714330][ T5457] bpf_prog_alloc+0x3a/0x150 [ 67.714365][ T5457] bpf_prog_load+0x4d0/0x1050 [ 67.714411][ T5457] __sys_bpf+0x463/0x7a0 [ 67.714467][ T5457] __x64_sys_bpf+0x43/0x50 [ 67.714494][ T5457] x64_sys_call+0x2914/0x2dc0 [ 67.714523][ T5457] do_syscall_64+0xc9/0x1c0 [ 67.714559][ T5457] ? clear_bhb_loop+0x55/0xb0 [ 67.714652][ T5457] ? clear_bhb_loop+0x55/0xb0 [ 67.714726][ T5457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.714794][ T5457] RIP: 0033:0x7f2129e7d169 [ 67.714811][ T5457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.714855][ T5457] RSP: 002b:00007f21284a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.714877][ T5457] RAX: ffffffffffffffda RBX: 00007f212a096160 RCX: 00007f2129e7d169 [ 67.714889][ T5457] RDX: 0000000000000094 RSI: 0000400000000740 RDI: 0000000000000005 [ 67.714900][ T5457] RBP: 00007f21284a5090 R08: 0000000000000000 R09: 0000000000000000 [ 67.714948][ T5457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.714961][ T5457] R13: 0000000000000000 R14: 00007f212a096160 R15: 00007ffdfe4ef778 [ 67.714983][ T5457] [ 67.714992][ T5457] syz.3.730: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 67.962373][ T5457] CPU: 1 UID: 0 PID: 5457 Comm: syz.3.730 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 67.962399][ T5457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.962410][ T5457] Call Trace: [ 67.962417][ T5457] [ 67.962425][ T5457] dump_stack_lvl+0xf2/0x150 [ 67.962534][ T5457] dump_stack+0x15/0x1a [ 67.962558][ T5457] warn_alloc+0x145/0x1b0 [ 67.962596][ T5457] __vmalloc_node_range_noprof+0x2a5/0xe70 [ 67.962631][ T5457] ? __rcu_read_unlock+0x4e/0x70 [ 67.962722][ T5457] ? avc_has_perm_noaudit+0x1cc/0x210 [ 67.962749][ T5457] ? selinux_capable+0x1f2/0x260 [ 67.962851][ T5457] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 67.962980][ T5457] __vmalloc_noprof+0x5e/0x70 [ 67.963022][ T5457] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 67.963054][ T5457] bpf_prog_alloc_no_stats+0x49/0x380 [ 67.963087][ T5457] ? bpf_prog_alloc+0x28/0x150 [ 67.963171][ T5457] bpf_prog_alloc+0x3a/0x150 [ 67.963233][ T5457] bpf_prog_load+0x4d0/0x1050 [ 67.963271][ T5457] __sys_bpf+0x463/0x7a0 [ 67.963312][ T5457] __x64_sys_bpf+0x43/0x50 [ 67.963399][ T5457] x64_sys_call+0x2914/0x2dc0 [ 67.963430][ T5457] do_syscall_64+0xc9/0x1c0 [ 67.963522][ T5457] ? clear_bhb_loop+0x55/0xb0 [ 67.963555][ T5457] ? clear_bhb_loop+0x55/0xb0 [ 67.963642][ T5457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.963672][ T5457] RIP: 0033:0x7f2129e7d169 [ 67.963690][ T5457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.963780][ T5457] RSP: 002b:00007f21284a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.963798][ T5457] RAX: ffffffffffffffda RBX: 00007f212a096160 RCX: 00007f2129e7d169 [ 67.963809][ T5457] RDX: 0000000000000094 RSI: 0000400000000740 RDI: 0000000000000005 [ 67.963822][ T5457] RBP: 00007f21284a5090 R08: 0000000000000000 R09: 0000000000000000 [ 67.963835][ T5457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.963850][ T5457] R13: 0000000000000000 R14: 00007f212a096160 R15: 00007ffdfe4ef778 [ 67.963941][ T5457] [ 67.963947][ T5457] Mem-Info: [ 68.065205][ T30] kauditd_printk_skb: 267 callbacks suppressed [ 68.065223][ T30] audit: type=1326 audit(1741525913.244:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a80d169 code=0x7fc00000 [ 68.069173][ T5457] active_anon:6385 inactive_anon:0 isolated_anon:0 [ 68.069173][ T5457] active_file:16869 inactive_file:2054 isolated_file:0 [ 68.069173][ T5457] unevictable:0 dirty:308 writeback:0 [ 68.069173][ T5457] slab_reclaimable:2807 slab_unreclaimable:27677 [ 68.069173][ T5457] mapped:31511 shmem:3248 pagetables:762 [ 68.069173][ T5457] sec_pagetables:0 bounce:0 [ 68.069173][ T5457] kernel_misc_reclaimable:0 [ 68.069173][ T5457] free:1872377 free_pcp:16450 free_cma:0 [ 68.246915][ T5457] Node 0 active_anon:33776kB inactive_anon:0kB active_file:67476kB inactive_file:8216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134280kB dirty:1232kB writeback:0kB shmem:21344kB writeback_tmp:0kB kernel_stack:2800kB pagetables:3280kB sec_pagetables:0kB all_unreclaimable? no [ 68.274789][ T5457] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.301690][ T5457] lowmem_reserve[]: 0 2885 7863 0 [ 68.306814][ T5457] Node 0 DMA32 free:2950736kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954368kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 68.335572][ T5457] lowmem_reserve[]: 0 0 4978 0 [ 68.340423][ T5457] Node 0 Normal free:4523412kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:36908kB inactive_anon:0kB active_file:67476kB inactive_file:8216kB unevictable:0kB writepending:1232kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:50584kB local_pcp:31340kB free_cma:0kB [ 68.370810][ T5457] lowmem_reserve[]: 0 0 0 0 [ 68.375378][ T5457] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 68.388200][ T5457] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950736kB [ 68.404438][ T5457] Node 0 Normal: 637*4kB (UM) 492*8kB (UME) 162*16kB (UME) 295*32kB (UME) 119*64kB (UME) 7*128kB (UM) 6*256kB (UME) 5*512kB (UM) 1*1024kB (U) 3*2048kB (U) 1095*4096kB (UM) = 4523412kB [ 68.423022][ T5457] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 68.432449][ T5457] 25042 total pagecache pages [ 68.437190][ T5457] 0 pages in swap cache [ 68.441352][ T5457] Free swap = 124748kB [ 68.445564][ T5457] Total swap = 124996kB [ 68.449734][ T5457] 2097051 pages RAM [ 68.453547][ T5457] 0 pages HighMem/MovableOnly [ 68.458270][ T5457] 80067 pages reserved [ 68.476975][ T3302] EXT4-fs unmount: 60 callbacks suppressed [ 68.476993][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.508943][ T5459] syz.2.738 uses obsolete (PF_INET,SOCK_PACKET) [ 68.725792][ T30] audit: type=1326 audit(1741525913.884:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.0.741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38736ad169 code=0x0 [ 68.779564][ T5474] loop0: detected capacity change from 0 to 512 [ 68.823266][ T5474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.840035][ T5474] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.887695][ T5474] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.741: corrupted inode contents [ 68.903557][ T5474] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.741: mark_inode_dirty error [ 68.916440][ T5474] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.741: corrupted inode contents [ 68.929281][ T5474] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.741: mark_inode_dirty error [ 68.942393][ T5474] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.741: mark inode dirty (error -117) [ 68.957168][ T30] audit: type=1326 audit(1741525914.144:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a80d169 code=0x7ffc0000 [ 68.957705][ T5474] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 68.981517][ T30] audit: type=1326 audit(1741525914.144:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a80d169 code=0x7ffc0000 [ 69.013021][ T30] audit: type=1326 audit(1741525914.144:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f269a80d169 code=0x7ffc0000 [ 69.036467][ T30] audit: type=1326 audit(1741525914.144:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a80d169 code=0x7ffc0000 [ 69.059881][ T30] audit: type=1326 audit(1741525914.144:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a80d169 code=0x7ffc0000 [ 69.089337][ T30] audit: type=1326 audit(1741525914.174:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f269a80d169 code=0x7ffc0000 [ 69.112700][ T30] audit: type=1326 audit(1741525914.174:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a80d169 code=0x7ffc0000 [ 69.136114][ T30] audit: type=1326 audit(1741525914.174:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5484 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f269a80d169 code=0x7ffc0000 [ 69.220950][ T5496] loop4: detected capacity change from 0 to 1024 [ 69.256264][ T5496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.338596][ T5502] program syz.4.750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.354680][ T5501] FAULT_INJECTION: forcing a failure. [ 69.354680][ T5501] name failslab, interval 1, probability 0, space 0, times 0 [ 69.355936][ T3374] vhci_hcd: vhci_device speed not set [ 69.367662][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: syz.1.753 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 69.367695][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.367771][ T5501] Call Trace: [ 69.367779][ T5501] [ 69.367789][ T5501] dump_stack_lvl+0xf2/0x150 [ 69.367846][ T5501] dump_stack+0x15/0x1a [ 69.367873][ T5501] should_fail_ex+0x24a/0x260 [ 69.367910][ T5501] should_failslab+0x8f/0xb0 [ 69.367984][ T5501] kmem_cache_alloc_node_noprof+0x59/0x320 [ 69.368012][ T5501] ? __alloc_skb+0x10b/0x310 [ 69.368039][ T5501] __alloc_skb+0x10b/0x310 [ 69.368068][ T5501] netlink_alloc_large_skb+0xad/0xe0 [ 69.368105][ T5501] netlink_sendmsg+0x3b4/0x6e0 [ 69.368149][ T5501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.368190][ T5501] __sock_sendmsg+0x140/0x180 [ 69.368293][ T5501] ____sys_sendmsg+0x326/0x4b0 [ 69.368471][ T5501] __sys_sendmsg+0x19d/0x230 [ 69.368521][ T5501] __x64_sys_sendmsg+0x46/0x50 [ 69.368552][ T5501] x64_sys_call+0x2734/0x2dc0 [ 69.368644][ T5501] do_syscall_64+0xc9/0x1c0 [ 69.368683][ T5501] ? clear_bhb_loop+0x55/0xb0 [ 69.368718][ T5501] ? clear_bhb_loop+0x55/0xb0 [ 69.368752][ T5501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.368792][ T5501] RIP: 0033:0x7f269a80d169 [ 69.368883][ T5501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.368905][ T5501] RSP: 002b:00007f2698e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.368928][ T5501] RAX: ffffffffffffffda RBX: 00007f269aa25fa0 RCX: 00007f269a80d169 [ 69.368944][ T5501] RDX: 000000000004c880 RSI: 0000400000000080 RDI: 0000000000000003 [ 69.368959][ T5501] RBP: 00007f2698e77090 R08: 0000000000000000 R09: 0000000000000000 [ 69.369012][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.369027][ T5501] R13: 0000000000000000 R14: 00007f269aa25fa0 R15: 00007ffd898f7548 [ 69.369050][ T5501] [ 69.607495][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.636523][ T5508] x_tables: duplicate underflow at hook 2 [ 69.655334][ T5510] __nla_validate_parse: 31 callbacks suppressed [ 69.655349][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 69.670618][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 69.679640][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 69.704563][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 69.713558][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 69.722536][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 69.733833][ T5517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.745115][ T5520] netlink: 132 bytes leftover after parsing attributes in process `syz.3.759'. [ 69.783681][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 69.792758][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 69.801659][ T5510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 69.812798][ T5517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.830950][ T5525] netlink: 'syz.3.761': attribute type 7 has an invalid length. [ 69.894080][ T5531] loop1: detected capacity change from 0 to 1024 [ 69.895275][ T5533] loop0: detected capacity change from 0 to 512 [ 69.919485][ T5533] EXT4-fs (loop0): orphan cleanup on readonly fs [ 69.932714][ T5531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.953848][ T5533] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.764: bg 0: block 248: padding at end of block bitmap is not set [ 70.003480][ T5533] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.764: Failed to acquire dquot type 1 [ 70.017000][ T5533] EXT4-fs (loop0): 1 truncate cleaned up [ 70.023367][ T5533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.036362][ T5542] loop2: detected capacity change from 0 to 512 [ 70.042808][ T5533] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 70.058222][ T5542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.071142][ T5542] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.081795][ T5533] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 70.135610][ T5533] syz.0.764 (5533) used greatest stack depth: 9280 bytes left [ 70.150878][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.155838][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.191467][ T5542] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.766: corrupted inode contents [ 70.220975][ T5542] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #19: comm syz.2.766: mark_inode_dirty error [ 70.230851][ T5559] loop1: detected capacity change from 0 to 512 [ 70.248666][ T5559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.265808][ T5542] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.766: corrupted inode contents [ 70.290959][ T5542] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.766: mark_inode_dirty error [ 70.315892][ T5559] EXT4-fs (loop1): 1 truncate cleaned up [ 70.334805][ T5559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.335240][ T5542] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.766: mark inode dirty (error -117) [ 70.362229][ T5542] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 70.400181][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.473844][ T5571] gretap0: entered promiscuous mode [ 70.481927][ T5571] 0ªX¹¦D: renamed from gretap0 [ 70.488375][ T5571] 0ªX¹¦D: left promiscuous mode [ 70.493267][ T5571] 0ªX¹¦D: entered allmulticast mode [ 70.501064][ T5571] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 70.591083][ T5581] loop3: detected capacity change from 0 to 8192 [ 70.686787][ T5599] loop3: detected capacity change from 0 to 164 [ 70.693482][ T5599] iso9660: Unknown parameter '0x0000000000000003' [ 70.813715][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.827724][ T5613] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.886291][ T5621] program syz.3.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.899649][ T5613] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.960602][ T5613] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.013746][ T5613] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.067990][ T5613] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.080583][ T5613] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.093803][ T5613] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.105630][ T5613] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.194974][ T5652] loop3: detected capacity change from 0 to 512 [ 71.216430][ T5652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.246603][ T5652] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.300269][ T5662] loop2: detected capacity change from 0 to 8192 [ 71.322645][ T5652] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.806: corrupted inode contents [ 71.334964][ T5652] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.806: mark_inode_dirty error [ 71.346785][ T5652] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.806: corrupted inode contents [ 71.358831][ T5652] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.806: mark_inode_dirty error [ 71.371427][ T5652] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.806: mark inode dirty (error -117) [ 71.384754][ T5652] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 71.635632][ T5681] loop2: detected capacity change from 0 to 1024 [ 71.658281][ T5681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.676510][ T5681] SELinux: syz.2.819 (5681) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 71.703745][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.997309][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.122128][ T5723] loop3: detected capacity change from 0 to 128 [ 72.155217][ T5723] syz.3.837: attempt to access beyond end of device [ 72.155217][ T5723] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 72.174532][ T5722] syz.3.837: attempt to access beyond end of device [ 72.174532][ T5722] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 72.189978][ T5723] syz.3.837: attempt to access beyond end of device [ 72.189978][ T5723] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 72.204876][ T5723] syz.3.837: attempt to access beyond end of device [ 72.204876][ T5723] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 72.205216][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.220464][ T5723] syz.3.837: attempt to access beyond end of device [ 72.220464][ T5723] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 72.240592][ T5723] syz.3.837: attempt to access beyond end of device [ 72.240592][ T5723] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 72.254668][ T5723] syz.3.837: attempt to access beyond end of device [ 72.254668][ T5723] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 72.279446][ T5723] syz.3.837: attempt to access beyond end of device [ 72.279446][ T5723] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 72.293055][ T5723] syz.3.837: attempt to access beyond end of device [ 72.293055][ T5723] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 72.306995][ T5723] syz.3.837: attempt to access beyond end of device [ 72.306995][ T5723] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 72.320717][ T5732] loop1: detected capacity change from 0 to 164 [ 72.373033][ T5738] loop0: detected capacity change from 0 to 512 [ 72.381902][ T5738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.395904][ T5738] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.432248][ T5738] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.842: corrupted inode contents [ 72.446473][ T5738] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.842: mark_inode_dirty error [ 72.458381][ T5738] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.842: corrupted inode contents [ 72.471134][ T5738] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.842: mark_inode_dirty error [ 72.483579][ T5738] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.842: mark inode dirty (error -117) [ 72.497166][ T5738] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 72.892651][ T5743] loop2: detected capacity change from 0 to 164 [ 72.900133][ T5743] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 72.909526][ T5743] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 72.919968][ T5743] x_tables: unsorted underflow at hook 3 [ 73.121751][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 73.121769][ T30] audit: type=1400 audit(1741525918.304:2372): avc: denied { mount } for pid=5761 comm="syz.3.852" name="/" dev="ramfs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 73.157087][ T5763] loop2: detected capacity change from 0 to 1024 [ 73.168333][ T5765] FAULT_INJECTION: forcing a failure. [ 73.168333][ T5765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.181682][ T5765] CPU: 0 UID: 0 PID: 5765 Comm: syz.4.853 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 73.181714][ T5765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.181727][ T5765] Call Trace: [ 73.181734][ T5765] [ 73.181742][ T5765] dump_stack_lvl+0xf2/0x150 [ 73.181769][ T5765] dump_stack+0x15/0x1a [ 73.181791][ T5765] should_fail_ex+0x24a/0x260 [ 73.181952][ T5765] should_fail+0xb/0x10 [ 73.181985][ T5765] should_fail_usercopy+0x1a/0x20 [ 73.182024][ T5765] _copy_from_user+0x1c/0xa0 [ 73.182046][ T5765] copy_msghdr_from_user+0x54/0x2a0 [ 73.182162][ T5765] ? __fget_files+0x17c/0x1c0 [ 73.182202][ T5765] __sys_sendmsg+0x13e/0x230 [ 73.182254][ T5765] __x64_sys_sendmsg+0x46/0x50 [ 73.182337][ T5765] x64_sys_call+0x2734/0x2dc0 [ 73.182365][ T5765] do_syscall_64+0xc9/0x1c0 [ 73.182410][ T5765] ? clear_bhb_loop+0x55/0xb0 [ 73.182437][ T5765] ? clear_bhb_loop+0x55/0xb0 [ 73.182476][ T5765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.182509][ T5765] RIP: 0033:0x7fe99d2dd169 [ 73.182591][ T5765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.182611][ T5765] RSP: 002b:00007fe99b941038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.182633][ T5765] RAX: ffffffffffffffda RBX: 00007fe99d4f5fa0 RCX: 00007fe99d2dd169 [ 73.182648][ T5765] RDX: 0000000000040804 RSI: 0000400000000600 RDI: 0000000000000003 [ 73.182662][ T5765] RBP: 00007fe99b941090 R08: 0000000000000000 R09: 0000000000000000 [ 73.182742][ T5765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.182755][ T5765] R13: 0000000000000000 R14: 00007fe99d4f5fa0 R15: 00007ffc5c1825a8 [ 73.182774][ T5765] [ 73.184611][ T5763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.267465][ T30] audit: type=1400 audit(1741525918.424:2373): avc: denied { create } for pid=5772 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.288587][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.308104][ T30] audit: type=1400 audit(1741525918.424:2374): avc: denied { connect } for pid=5772 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.308142][ T30] audit: type=1400 audit(1741525918.424:2375): avc: denied { create } for pid=5772 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 73.364960][ T5779] program syz.2.850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.408296][ T30] audit: type=1326 audit(1741525918.574:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 73.473187][ T30] audit: type=1326 audit(1741525918.574:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 73.496557][ T30] audit: type=1326 audit(1741525918.574:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 73.520223][ T30] audit: type=1326 audit(1741525918.574:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 73.543814][ T30] audit: type=1326 audit(1741525918.574:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 73.567326][ T30] audit: type=1326 audit(1741525918.574:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5777 comm="syz.4.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 73.627624][ T5785] loop4: detected capacity change from 0 to 512 [ 73.637911][ T5785] EXT4-fs: dax option not supported [ 73.668631][ T5792] loop0: detected capacity change from 0 to 164 [ 73.676476][ T5792] Unable to read rock-ridge attributes [ 73.772998][ T5806] loop3: detected capacity change from 0 to 128 [ 73.786500][ T5807] loop0: detected capacity change from 0 to 512 [ 73.791342][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.803821][ T5807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.816570][ T5807] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.830594][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.837547][ T5804] loop4: detected capacity change from 0 to 2048 [ 73.868876][ T5807] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.866: corrupted inode contents [ 73.880907][ T5807] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.866: mark_inode_dirty error [ 73.892481][ T5807] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.866: corrupted inode contents [ 73.893297][ T5804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.905264][ T5807] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.866: mark_inode_dirty error [ 73.942933][ T5807] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.866: mark inode dirty (error -117) [ 73.957068][ T5807] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 73.966819][ T5804] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff18446744073709551615ÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰' [ 74.038521][ T5818] bridge0: port 3(syz_tun) entered blocking state [ 74.045125][ T5818] bridge0: port 3(syz_tun) entered disabled state [ 74.056640][ T5818] syz_tun: entered allmulticast mode [ 74.066448][ T5818] syz_tun: entered promiscuous mode [ 74.072094][ T5818] bridge0: port 3(syz_tun) entered blocking state [ 74.078656][ T5818] bridge0: port 3(syz_tun) entered forwarding state [ 74.100725][ T1033] IPVS: starting estimator thread 0... [ 74.141666][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.172557][ T5832] FAULT_INJECTION: forcing a failure. [ 74.172557][ T5832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.185677][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz.3.877 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 74.185707][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.185733][ T5832] Call Trace: [ 74.185743][ T5832] [ 74.185752][ T5832] dump_stack_lvl+0xf2/0x150 [ 74.185791][ T5832] dump_stack+0x15/0x1a [ 74.185811][ T5832] should_fail_ex+0x24a/0x260 [ 74.185847][ T5832] should_fail+0xb/0x10 [ 74.185934][ T5832] should_fail_usercopy+0x1a/0x20 [ 74.185972][ T5832] _copy_from_user+0x1c/0xa0 [ 74.185995][ T5832] copy_msghdr_from_user+0x54/0x2a0 [ 74.186053][ T5832] ? __fget_files+0x17c/0x1c0 [ 74.186129][ T5832] __sys_sendmsg+0x13e/0x230 [ 74.186166][ T5832] __x64_sys_sendmsg+0x46/0x50 [ 74.186225][ T5832] x64_sys_call+0x2734/0x2dc0 [ 74.186319][ T5832] do_syscall_64+0xc9/0x1c0 [ 74.186478][ T5832] ? clear_bhb_loop+0x55/0xb0 [ 74.186510][ T5832] ? clear_bhb_loop+0x55/0xb0 [ 74.186543][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.186575][ T5832] RIP: 0033:0x7f2129e7d169 [ 74.186664][ T5832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.186683][ T5832] RSP: 002b:00007f21284e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.186744][ T5832] RAX: ffffffffffffffda RBX: 00007f212a095fa0 RCX: 00007f2129e7d169 [ 74.186759][ T5832] RDX: 0000000000040804 RSI: 0000400000000600 RDI: 0000000000000003 [ 74.186809][ T5832] RBP: 00007f21284e7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.186823][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.186836][ T5832] R13: 0000000000000000 R14: 00007f212a095fa0 R15: 00007ffdfe4ef778 [ 74.186857][ T5832] [ 74.207813][ T5836] loop4: detected capacity change from 0 to 128 [ 74.234586][ T5838] loop3: detected capacity change from 0 to 128 [ 74.236967][ T5823] IPVS: using max 2400 ests per chain, 120000 per kthread [ 74.243052][ T5838] EXT4-fs: Ignoring removed nobh option [ 74.332386][ T5841] loop1: detected capacity change from 0 to 512 [ 74.352672][ T5838] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.402294][ T5841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.404919][ T5838] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.417458][ T5841] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.459192][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.462176][ T5841] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.880: corrupted inode contents [ 74.480689][ T5841] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #19: comm syz.1.880: mark_inode_dirty error [ 74.492094][ T5841] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.880: corrupted inode contents [ 74.504068][ T5841] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.880: mark_inode_dirty error [ 74.516646][ T5841] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.880: mark inode dirty (error -117) [ 74.530597][ T5841] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 74.532270][ T5849] futex_wake_op: syz.3.882 tries to shift op by 144; fix this program [ 74.571624][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.599185][ T5855] loop3: detected capacity change from 0 to 128 [ 74.611327][ T5855] futex_wake_op: syz.3.885 tries to shift op by 144; fix this program [ 74.655608][ T5859] loop0: detected capacity change from 0 to 512 [ 74.662467][ T5859] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 75.121099][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.239767][ T5872] futex_wake_op: syz.1.893 tries to shift op by 144; fix this program [ 75.247114][ T5874] __nla_validate_parse: 63 callbacks suppressed [ 75.247139][ T5874] netlink: 132 bytes leftover after parsing attributes in process `syz.4.894'. [ 75.335486][ T5881] loop4: detected capacity change from 0 to 512 [ 75.344527][ T5881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.357758][ T5881] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.391139][ T5881] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.895: corrupted inode contents [ 75.403337][ T5881] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #19: comm syz.4.895: mark_inode_dirty error [ 75.414980][ T5881] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.895: corrupted inode contents [ 75.426988][ T5881] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.895: mark_inode_dirty error [ 75.439257][ T5881] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.895: mark inode dirty (error -117) [ 75.451928][ T5881] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 75.523159][ T5890] loop3: detected capacity change from 0 to 512 [ 75.534380][ T5890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.563714][ T5890] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.599208][ T5890] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.900: corrupted inode contents [ 75.611463][ T5890] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.900: mark_inode_dirty error [ 75.622956][ T5890] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.900: corrupted inode contents [ 75.635105][ T5890] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.900: mark_inode_dirty error [ 75.647138][ T5890] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.900: mark inode dirty (error -117) [ 75.659924][ T5890] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 76.060224][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.128454][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.148016][ T5905] futex_wake_op: syz.1.907 tries to shift op by 144; fix this program [ 76.161778][ T5909] netlink: 132 bytes leftover after parsing attributes in process `syz.4.906'. [ 76.197273][ T5914] loop4: detected capacity change from 0 to 128 [ 76.206955][ T5914] futex_wake_op: syz.4.910 tries to shift op by 144; fix this program [ 76.266060][ T5923] netlink: 2392 bytes leftover after parsing attributes in process `syz.1.915'. [ 76.309613][ T25] IPVS: starting estimator thread 0... [ 76.315579][ T5930] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001 [ 76.325245][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.345972][ T5933] loop4: detected capacity change from 0 to 1024 [ 76.358792][ T5933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.405957][ T5931] IPVS: using max 2544 ests per chain, 127200 per kthread [ 76.428258][ T5940] program syz.4.913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.440308][ T5942] loop3: detected capacity change from 0 to 512 [ 76.440758][ T5943] futex_wake_op: syz.0.920 tries to shift op by 144; fix this program [ 76.458896][ T5942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.472249][ T5942] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.516569][ T5942] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.919: corrupted inode contents [ 76.528842][ T5942] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.919: mark_inode_dirty error [ 76.540399][ T5942] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.919: corrupted inode contents [ 76.552468][ T5942] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.919: mark_inode_dirty error [ 76.564692][ T5942] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.919: mark inode dirty (error -117) [ 76.578256][ T5942] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 76.615527][ T5950] loop0: detected capacity change from 0 to 128 [ 76.625000][ T5950] futex_wake_op: syz.0.923 tries to shift op by 144; fix this program [ 76.655663][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.665205][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.753639][ T5958] netlink: 132 bytes leftover after parsing attributes in process `syz.0.927'. [ 76.848524][ T5963] loop0: detected capacity change from 0 to 512 [ 76.867024][ T5963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.879720][ T5963] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.911824][ T5963] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.929: corrupted inode contents [ 76.923845][ T5963] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.929: mark_inode_dirty error [ 76.935266][ T5963] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.929: corrupted inode contents [ 76.947279][ T5963] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.929: mark_inode_dirty error [ 76.959417][ T5963] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.929: mark inode dirty (error -117) [ 76.972281][ T5963] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 77.155969][ T5972] futex_wake_op: syz.1.932 tries to shift op by 144; fix this program [ 77.222441][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.240244][ T5976] loop1: detected capacity change from 0 to 128 [ 77.250005][ T5976] futex_wake_op: syz.1.935 tries to shift op by 144; fix this program [ 77.345052][ T5987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.939'. [ 77.638895][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.709135][ T6001] futex_wake_op: syz.0.944 tries to shift op by 144; fix this program [ 77.787338][ T6004] loop0: detected capacity change from 0 to 512 [ 77.796169][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.808764][ T6004] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.841997][ T6004] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.945: corrupted inode contents [ 77.854135][ T6004] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.945: mark_inode_dirty error [ 77.865512][ T6004] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.945: corrupted inode contents [ 77.877533][ T6004] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.945: mark_inode_dirty error [ 77.889549][ T6004] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.945: mark inode dirty (error -117) [ 77.902159][ T6004] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 78.078038][ T6019] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 78.099722][ T6021] FAULT_INJECTION: forcing a failure. [ 78.099722][ T6021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.113067][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.1.953 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 78.113098][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.113113][ T6021] Call Trace: [ 78.113121][ T6021] [ 78.113130][ T6021] dump_stack_lvl+0xf2/0x150 [ 78.113163][ T6021] dump_stack+0x15/0x1a [ 78.113188][ T6021] should_fail_ex+0x24a/0x260 [ 78.113293][ T6021] should_fail_alloc_page+0xfd/0x110 [ 78.113374][ T6021] __alloc_frozen_pages_noprof+0x109/0x340 [ 78.113407][ T6021] alloc_pages_mpol+0xb4/0x260 [ 78.113430][ T6021] folio_alloc_mpol_noprof+0x36/0x80 [ 78.113536][ T6021] shmem_get_folio_gfp+0x3d1/0xd90 [ 78.113645][ T6021] ? smp_call_function_many_cond+0x7c9/0xbb0 [ 78.113673][ T6021] shmem_write_begin+0xa2/0x180 [ 78.113752][ T6021] generic_perform_write+0x1a8/0x4a0 [ 78.113781][ T6021] shmem_file_write_iter+0xc2/0xe0 [ 78.113809][ T6021] vfs_write+0x77b/0x920 [ 78.113840][ T6021] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 78.113916][ T6021] ksys_write+0xe8/0x1b0 [ 78.113946][ T6021] __x64_sys_write+0x42/0x50 [ 78.113976][ T6021] x64_sys_call+0x287e/0x2dc0 [ 78.114001][ T6021] do_syscall_64+0xc9/0x1c0 [ 78.114088][ T6021] ? clear_bhb_loop+0x55/0xb0 [ 78.114120][ T6021] ? clear_bhb_loop+0x55/0xb0 [ 78.114148][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.114177][ T6021] RIP: 0033:0x7f269a80bc1f [ 78.114191][ T6021] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 78.114286][ T6021] RSP: 002b:00007f2698e76d40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 78.114308][ T6021] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f269a80bc1f [ 78.114322][ T6021] RDX: 0000000000100000 RSI: 00007f2690a57000 RDI: 0000000000000004 [ 78.114335][ T6021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000607 [ 78.114348][ T6021] R10: 0000400000002242 R11: 0000000000000293 R12: 0000000000000004 [ 78.114361][ T6021] R13: 00007f2698e76dec R14: 00007f2698e76df0 R15: 00007f2690a57000 [ 78.114381][ T6021] [ 78.370934][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 78.379897][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 78.389076][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 78.389663][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 78.406923][ T6029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 78.488589][ T6036] loop1: detected capacity change from 0 to 256 [ 78.544324][ T6039] loop2: detected capacity change from 0 to 512 [ 78.556082][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 78.556098][ T30] audit: type=1400 audit(1741525923.744:2545): avc: denied { read } for pid=6040 comm="syz.3.960" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.589145][ T30] audit: type=1400 audit(1741525923.744:2546): avc: denied { open } for pid=6040 comm="syz.3.960" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.589953][ T6039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.612624][ T30] audit: type=1400 audit(1741525923.744:2547): avc: denied { ioctl } for pid=6040 comm="syz.3.960" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.651605][ T6039] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.679563][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.700945][ T30] audit: type=1326 audit(1741525923.884:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6049 comm="syz.3.963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2129e7d169 code=0x0 [ 78.727147][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.745403][ T6054] loop2: detected capacity change from 0 to 128 [ 78.754780][ T6055] loop3: detected capacity change from 0 to 512 [ 78.763694][ T6055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.776286][ T6055] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.814922][ T6055] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.963: corrupted inode contents [ 78.827387][ T6055] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.963: mark_inode_dirty error [ 78.839126][ T6055] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.963: corrupted inode contents [ 78.851138][ T6055] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.963: mark_inode_dirty error [ 78.863265][ T6055] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.963: mark inode dirty (error -117) [ 78.876919][ T6055] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 79.239740][ T30] audit: type=1326 audit(1741525924.424:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5918 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7fc00000 [ 79.266022][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.301945][ T30] audit: type=1326 audit(1741525924.484:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 79.327030][ T30] audit: type=1326 audit(1741525924.484:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 79.350381][ T30] audit: type=1326 audit(1741525924.484:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 79.373811][ T30] audit: type=1326 audit(1741525924.484:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 79.397191][ T30] audit: type=1326 audit(1741525924.484:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.4.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 79.605406][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.628730][ T6085] loop0: detected capacity change from 0 to 128 [ 79.628884][ T6084] loop3: detected capacity change from 0 to 512 [ 79.638826][ T6085] futex_atomic_op_inuser: 2 callbacks suppressed [ 79.638840][ T6085] futex_wake_op: syz.0.975 tries to shift op by 144; fix this program [ 79.658766][ T6086] loop1: detected capacity change from 0 to 512 [ 79.682901][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.705245][ T6084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.719061][ T6086] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.719410][ T6093] futex_wake_op: syz.4.977 tries to shift op by 144; fix this program [ 79.729875][ T6084] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.781116][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.792596][ T6086] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.972: corrupted inode contents [ 79.809822][ T6086] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #19: comm syz.1.972: mark_inode_dirty error [ 79.821758][ T6086] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.972: corrupted inode contents [ 79.833757][ T6086] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.972: mark_inode_dirty error [ 79.848251][ T6086] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.972: mark inode dirty (error -117) [ 79.866980][ T6086] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 79.867127][ T6105] loop2: detected capacity change from 0 to 1024 [ 79.876510][ T6104] loop4: detected capacity change from 0 to 256 [ 79.908722][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.082246][ T6123] program syz.2.978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.117868][ T6124] loop3: detected capacity change from 0 to 512 [ 80.137241][ T6124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.149861][ T6124] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.182537][ T6124] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.984: corrupted inode contents [ 80.194573][ T6124] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.984: mark_inode_dirty error [ 80.206038][ T6124] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.984: corrupted inode contents [ 80.217966][ T6124] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.984: mark_inode_dirty error [ 80.230020][ T6124] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.984: mark inode dirty (error -117) [ 80.242759][ T6124] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 80.293149][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.301674][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.442431][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.462975][ T6128] __nla_validate_parse: 6 callbacks suppressed [ 80.462995][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 80.478244][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 80.487952][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 80.497004][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 80.706914][ T6141] loop1: detected capacity change from 0 to 512 [ 80.719011][ T6141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.722224][ T6145] futex_wake_op: syz.4.992 tries to shift op by 144; fix this program [ 80.732726][ T6141] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.784470][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.811475][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 80.841337][ T6157] loop4: detected capacity change from 0 to 128 [ 80.851739][ T6157] futex_wake_op: syz.4.996 tries to shift op by 144; fix this program [ 80.909524][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.930405][ T6165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 80.939394][ T6165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 80.951299][ T6166] loop4: detected capacity change from 0 to 512 [ 80.960360][ T6166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.976549][ T6165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 80.985480][ T6165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'. [ 80.995811][ T6166] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.017397][ T6173] loop1: detected capacity change from 0 to 256 [ 81.132169][ T6166] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.997: corrupted inode contents [ 81.147236][ T6166] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #19: comm syz.4.997: mark_inode_dirty error [ 81.159432][ T6166] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.997: corrupted inode contents [ 81.171611][ T6166] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.997: mark_inode_dirty error [ 81.184070][ T6166] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.997: mark inode dirty (error -117) [ 81.196940][ T6166] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 81.226655][ T6181] futex_wake_op: syz.3.1004 tries to shift op by 144; fix this program [ 81.282068][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 81.307218][ T6189] loop3: detected capacity change from 0 to 512 [ 81.317680][ T6189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.330423][ T6189] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.370024][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.388438][ T6197] loop3: detected capacity change from 0 to 128 [ 81.398292][ T6197] futex_wake_op: syz.3.1009 tries to shift op by 144; fix this program [ 81.416160][ T6198] loop0: detected capacity change from 0 to 512 [ 81.424555][ T6198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.437244][ T6198] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.469455][ T6198] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.1008: corrupted inode contents [ 81.481642][ T6198] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.1008: mark_inode_dirty error [ 81.493182][ T6198] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.1008: corrupted inode contents [ 81.505331][ T6198] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.1008: mark_inode_dirty error [ 81.517445][ T6198] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.1008: mark inode dirty (error -117) [ 81.530135][ T6198] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 81.727710][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.977710][ T6219] futex_wake_op: syz.1.1016 tries to shift op by 144; fix this program [ 82.072706][ T6231] loop4: detected capacity change from 0 to 512 [ 82.087252][ T6231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.100045][ T6231] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.111188][ T6234] loop1: detected capacity change from 0 to 512 [ 82.131683][ T6234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.144428][ T6234] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.157156][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.179157][ T6239] loop4: detected capacity change from 0 to 256 [ 82.190734][ T6234] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.1020: corrupted inode contents [ 82.203009][ T6234] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #19: comm syz.1.1020: mark_inode_dirty error [ 82.214785][ T6234] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.1020: corrupted inode contents [ 82.227315][ T6234] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.1020: mark_inode_dirty error [ 82.239578][ T6234] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.1020: mark inode dirty (error -117) [ 82.240984][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.254218][ T6234] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 82.481302][ T6254] futex_wake_op: syz.3.1027 tries to shift op by 144; fix this program [ 82.767478][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.839053][ T6270] loop2: detected capacity change from 0 to 512 [ 82.857869][ T6270] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.893784][ T6270] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1033: corrupted inode contents [ 82.906488][ T6270] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #19: comm syz.2.1033: mark_inode_dirty error [ 82.919212][ T6270] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1033: corrupted inode contents [ 82.931877][ T6270] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.1033: mark_inode_dirty error [ 82.944591][ T6270] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.1033: mark inode dirty (error -117) [ 82.949035][ T6274] loop1: detected capacity change from 0 to 512 [ 82.958731][ T6270] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 82.977342][ T6274] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.028591][ T6280] loop1: detected capacity change from 0 to 128 [ 83.039878][ T6280] futex_wake_op: syz.1.1035 tries to shift op by 144; fix this program [ 83.211745][ T6293] futex_wake_op: syz.0.1039 tries to shift op by 144; fix this program [ 83.531182][ T6306] loop0: detected capacity change from 0 to 1024 [ 83.598263][ T6311] loop3: detected capacity change from 0 to 512 [ 83.606681][ T6311] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.639331][ T6311] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1045: corrupted inode contents [ 83.641145][ T6315] loop2: detected capacity change from 0 to 512 [ 83.652737][ T6311] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.1045: mark_inode_dirty error [ 83.669180][ T6311] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1045: corrupted inode contents [ 83.677394][ T6315] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.681532][ T6311] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.1045: mark_inode_dirty error [ 83.706333][ T6311] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.1045: mark inode dirty (error -117) [ 83.721343][ T6311] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 83.734048][ T6321] program syz.0.1044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.754958][ T6323] loop2: detected capacity change from 0 to 256 [ 83.914653][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 83.914669][ T30] audit: type=1326 audit(1741525929.094:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 83.945014][ T30] audit: type=1326 audit(1741525929.094:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 83.947636][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.968535][ T30] audit: type=1326 audit(1741525929.094:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 83.978634][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.000253][ T30] audit: type=1326 audit(1741525929.094:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 84.031397][ T30] audit: type=1326 audit(1741525929.094:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 84.054991][ T30] audit: type=1326 audit(1741525929.094:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 84.078411][ T30] audit: type=1326 audit(1741525929.094:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 84.101902][ T30] audit: type=1326 audit(1741525929.094:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 84.125308][ T30] audit: type=1326 audit(1741525929.094:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 84.148748][ T30] audit: type=1326 audit(1741525929.094:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 84.474215][ T6349] loop4: detected capacity change from 0 to 512 [ 84.482942][ T6349] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.603233][ T6352] loop2: detected capacity change from 0 to 512 [ 84.617226][ T6352] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.664193][ T6358] loop2: detected capacity change from 0 to 128 [ 84.674382][ T6358] futex_atomic_op_inuser: 1 callbacks suppressed [ 84.674397][ T6358] futex_wake_op: syz.2.1059 tries to shift op by 144; fix this program [ 85.267974][ T6369] futex_wake_op: syz.3.1062 tries to shift op by 144; fix this program [ 85.403716][ T6380] loop4: detected capacity change from 0 to 512 [ 85.413331][ T6380] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.448202][ T6380] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1067: corrupted inode contents [ 85.460376][ T6380] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #19: comm syz.4.1067: mark_inode_dirty error [ 85.473359][ T6380] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1067: corrupted inode contents [ 85.473956][ T6386] loop3: detected capacity change from 0 to 256 [ 85.488096][ T6380] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.1067: mark_inode_dirty error [ 85.503981][ T6380] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.1067: mark inode dirty (error -117) [ 85.517085][ T6380] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 86.202852][ T6394] loop4: detected capacity change from 0 to 512 [ 86.217718][ T6394] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.320514][ T6404] futex_wake_op: syz.3.1075 tries to shift op by 144; fix this program [ 86.336674][ T6405] loop4: detected capacity change from 0 to 512 [ 86.355558][ T6405] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.415070][ T6413] __nla_validate_parse: 25 callbacks suppressed [ 86.415090][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 86.442675][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 86.451777][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 86.461523][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 86.470482][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 86.488216][ T6418] loop3: detected capacity change from 0 to 128 [ 86.505668][ T6418] futex_wake_op: syz.3.1081 tries to shift op by 144; fix this program [ 86.612445][ T6425] loop1: detected capacity change from 0 to 512 [ 86.627994][ T6425] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.657899][ T6430] loop2: detected capacity change from 0 to 512 [ 86.689735][ T6430] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.723252][ T6430] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1083: corrupted inode contents [ 86.737720][ T6430] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #19: comm syz.2.1083: mark_inode_dirty error [ 86.749584][ T6430] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1083: corrupted inode contents [ 86.762765][ T6430] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.1083: mark_inode_dirty error [ 86.774955][ T6430] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.1083: mark inode dirty (error -117) [ 86.778408][ T6436] loop1: detected capacity change from 0 to 256 [ 86.788096][ T6430] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 87.135338][ T6442] futex_wake_op: syz.4.1087 tries to shift op by 144; fix this program [ 87.390500][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 87.461279][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 87.470366][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 87.480126][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 87.489123][ T6456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 87.533829][ T6459] loop3: detected capacity change from 0 to 1024 [ 87.615532][ T6465] loop1: detected capacity change from 0 to 512 [ 87.628866][ T6465] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.684035][ T6475] loop2: detected capacity change from 0 to 512 [ 87.697970][ T6478] futex_wake_op: syz.1.1099 tries to shift op by 144; fix this program [ 87.707670][ T6475] ext4 filesystem being mounted at /266/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.721760][ T6479] program syz.3.1093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.738489][ T6481] loop1: detected capacity change from 0 to 128 [ 87.748637][ T6481] futex_wake_op: syz.1.1100 tries to shift op by 144; fix this program [ 87.934471][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.943127][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.190288][ T6495] loop4: detected capacity change from 0 to 512 [ 88.198696][ T6495] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.230714][ T6495] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1105: corrupted inode contents [ 88.242872][ T6495] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #19: comm syz.4.1105: mark_inode_dirty error [ 88.254748][ T6495] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1105: corrupted inode contents [ 88.267085][ T6495] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.1105: mark_inode_dirty error [ 88.279286][ T6495] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.1105: mark inode dirty (error -117) [ 88.292001][ T6495] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 88.478554][ T6504] loop0: detected capacity change from 0 to 256 [ 88.610974][ T6509] loop1: detected capacity change from 0 to 512 [ 88.638965][ T6509] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.684433][ T6519] futex_wake_op: syz.1.1112 tries to shift op by 144; fix this program [ 89.122850][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 89.122869][ T30] audit: type=1326 audit(1741525934.304:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6539 comm="syz.4.1119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe99d2dd169 code=0x0 [ 89.175269][ T6541] loop4: detected capacity change from 0 to 512 [ 89.183779][ T6541] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.327327][ T6544] loop0: detected capacity change from 0 to 128 [ 89.337013][ T6544] futex_wake_op: syz.0.1120 tries to shift op by 144; fix this program [ 89.631790][ T30] audit: type=1326 audit(1741525934.814:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5fc3d169 code=0x7ffc0000 [ 89.657069][ T30] audit: type=1326 audit(1741525934.814:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5fc3d169 code=0x7ffc0000 [ 89.666001][ T6551] loop2: detected capacity change from 0 to 512 [ 89.680555][ T30] audit: type=1326 audit(1741525934.814:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad5fc3d169 code=0x7ffc0000 [ 89.710482][ T30] audit: type=1326 audit(1741525934.814:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5fc3d169 code=0x7ffc0000 [ 89.727925][ T6551] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.733959][ T30] audit: type=1326 audit(1741525934.814:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5fc3d169 code=0x7ffc0000 [ 89.767871][ T30] audit: type=1326 audit(1741525934.814:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad5fc3d169 code=0x7ffc0000 [ 89.791366][ T30] audit: type=1326 audit(1741525934.814:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5fc3d169 code=0x7ffc0000 [ 89.814794][ T30] audit: type=1326 audit(1741525934.814:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5fc3d169 code=0x7ffc0000 [ 89.838358][ T30] audit: type=1326 audit(1741525934.814:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6548 comm="syz.2.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fad5fc3d169 code=0x7ffc0000 [ 89.884272][ T6559] futex_wake_op: syz.2.1124 tries to shift op by 144; fix this program [ 89.965885][ T6571] loop1: detected capacity change from 0 to 256 [ 89.999551][ T6574] loop2: detected capacity change from 0 to 512 [ 90.019425][ T6574] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.052220][ T6574] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1129: corrupted inode contents [ 90.065527][ T6574] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #19: comm syz.2.1129: mark_inode_dirty error [ 90.082658][ T6574] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1129: corrupted inode contents [ 90.095612][ T6574] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.1129: mark_inode_dirty error [ 90.107868][ T6574] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.1129: mark inode dirty (error -117) [ 90.120832][ T6574] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 90.437539][ T6593] loop3: detected capacity change from 0 to 512 [ 90.447288][ T6593] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.494964][ T6599] futex_wake_op: syz.3.1138 tries to shift op by 144; fix this program [ 90.675465][ T6610] loop3: detected capacity change from 0 to 512 [ 90.684102][ T6610] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.799216][ T6613] loop2: detected capacity change from 0 to 128 [ 90.809967][ T6613] futex_wake_op: syz.2.1143 tries to shift op by 144; fix this program [ 91.205364][ T6627] loop4: detected capacity change from 0 to 512 [ 91.218182][ T6627] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.293379][ T6637] futex_wake_op: syz.4.1151 tries to shift op by 144; fix this program [ 91.307619][ T6638] loop0: detected capacity change from 0 to 1024 [ 91.435417][ T6649] loop4: detected capacity change from 0 to 512 [ 91.443840][ T6649] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.477682][ T6652] loop3: detected capacity change from 0 to 256 [ 91.480723][ T6649] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1154: corrupted inode contents [ 91.497376][ T6649] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #19: comm syz.4.1154: mark_inode_dirty error [ 91.497803][ T6653] program syz.0.1148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.518967][ T6649] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1154: corrupted inode contents [ 91.532299][ T6649] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.1154: mark_inode_dirty error [ 91.544567][ T6649] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.1154: mark inode dirty (error -117) [ 91.557588][ T6649] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 91.666307][ T6658] __nla_validate_parse: 17 callbacks suppressed [ 91.666325][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 91.681742][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 91.691152][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 91.700168][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 91.732486][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.742029][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.857633][ T6665] loop2: detected capacity change from 0 to 512 [ 91.867622][ T6665] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.894091][ T6665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1160'. [ 91.967521][ T6677] futex_wake_op: syz.2.1163 tries to shift op by 144; fix this program [ 92.061236][ T6682] loop2: detected capacity change from 0 to 512 [ 92.069978][ T6682] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.249757][ T6687] loop4: detected capacity change from 0 to 128 [ 92.259830][ T6687] futex_wake_op: syz.4.1167 tries to shift op by 144; fix this program [ 92.583781][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1170'. [ 92.592840][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1170'. [ 92.602546][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1170'. [ 92.611547][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1170'. [ 92.742225][ T6697] loop1: detected capacity change from 0 to 512 [ 92.777528][ T6697] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.804204][ T6697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1171'. [ 92.874503][ T6710] futex_wake_op: syz.1.1175 tries to shift op by 144; fix this program [ 92.936825][ T6719] loop1: detected capacity change from 0 to 256 [ 92.958201][ T6720] loop2: detected capacity change from 0 to 512 [ 92.966880][ T6720] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.998943][ T6720] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1177: corrupted inode contents [ 93.012378][ T6720] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #19: comm syz.2.1177: mark_inode_dirty error [ 93.024147][ T6720] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1177: corrupted inode contents [ 93.036351][ T6720] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.1177: mark_inode_dirty error [ 93.048662][ T6720] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.1177: mark inode dirty (error -117) [ 93.061648][ T6720] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 93.342296][ T6731] loop3: detected capacity change from 0 to 512 [ 93.357507][ T6731] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.455191][ T6738] loop3: detected capacity change from 0 to 512 [ 93.463658][ T6738] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.800500][ T6748] futex_wake_op: syz.2.1188 tries to shift op by 144; fix this program [ 93.849206][ T6757] loop2: detected capacity change from 0 to 128 [ 93.859082][ T6757] futex_wake_op: syz.2.1192 tries to shift op by 144; fix this program [ 93.965194][ T6763] loop4: detected capacity change from 0 to 512 [ 93.977770][ T6763] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.148395][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 94.148409][ T30] audit: type=1326 audit(1741525939.334:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6770 comm="syz.4.1196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe99d2dd169 code=0x0 [ 94.201406][ T6772] loop4: detected capacity change from 0 to 512 [ 94.208186][ T30] audit: type=1326 audit(1741525939.394:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6624 comm="syz.0.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38736ad169 code=0x7fc00000 [ 94.235612][ T6772] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.261280][ T30] audit: type=1326 audit(1741525939.444:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38736ad169 code=0x7ffc0000 [ 94.265946][ T6777] loop3: detected capacity change from 0 to 256 [ 94.291502][ T30] audit: type=1326 audit(1741525939.474:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38736ad169 code=0x7ffc0000 [ 94.315116][ T30] audit: type=1326 audit(1741525939.474:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38736ad169 code=0x7ffc0000 [ 94.338599][ T30] audit: type=1326 audit(1741525939.474:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38736ad169 code=0x7ffc0000 [ 94.362040][ T30] audit: type=1326 audit(1741525939.474:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38736ad169 code=0x7ffc0000 [ 94.364706][ T6772] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1196: corrupted inode contents [ 94.385508][ T30] audit: type=1326 audit(1741525939.474:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f38736ad169 code=0x7ffc0000 [ 94.421002][ T30] audit: type=1326 audit(1741525939.474:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38736ad169 code=0x7ffc0000 [ 94.421035][ T30] audit: type=1326 audit(1741525939.474:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6775 comm="syz.0.1197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f38736ad169 code=0x7ffc0000 [ 94.469696][ T6772] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #19: comm syz.4.1196: mark_inode_dirty error [ 94.469974][ T6772] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1196: corrupted inode contents [ 94.470123][ T6772] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.1196: mark_inode_dirty error [ 94.470244][ T6772] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.1196: mark inode dirty (error -117) [ 94.470440][ T6772] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 94.558052][ T6787] futex_wake_op: syz.0.1201 tries to shift op by 144; fix this program [ 94.738118][ T6798] loop1: detected capacity change from 0 to 512 [ 94.757574][ T6798] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.843782][ T6807] loop2: detected capacity change from 0 to 1024 [ 94.984643][ T6814] loop1: detected capacity change from 0 to 512 [ 94.993840][ T6814] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.016116][ T6818] program syz.2.1207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.068570][ T6824] futex_wake_op: syz.4.1213 tries to shift op by 144; fix this program [ 95.111683][ T6828] loop4: detected capacity change from 0 to 128 [ 95.121438][ T6828] futex_wake_op: syz.4.1215 tries to shift op by 144; fix this program [ 95.177608][ T6836] loop3: detected capacity change from 0 to 512 [ 95.187337][ T6836] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.227238][ T6818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.238465][ T6818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.411261][ T6846] loop3: detected capacity change from 0 to 512 [ 95.420342][ T6846] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.454351][ T6846] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1221: corrupted inode contents [ 95.467545][ T6846] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.1221: mark_inode_dirty error [ 95.479975][ T6846] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1221: corrupted inode contents [ 95.493961][ T6846] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.1221: mark_inode_dirty error [ 95.507558][ T6846] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.1221: mark inode dirty (error -117) [ 95.520313][ T6846] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 95.533975][ T6855] futex_wake_op: syz.0.1225 tries to shift op by 144; fix this program [ 95.592030][ T6861] loop0: detected capacity change from 0 to 256 [ 95.798386][ T6866] loop1: detected capacity change from 0 to 512 [ 95.807997][ T6866] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.048370][ T6885] futex_wake_op: syz.4.1237 tries to shift op by 144; fix this program [ 96.157400][ T6892] loop4: detected capacity change from 0 to 512 [ 96.166062][ T6892] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.226304][ T6897] loop3: detected capacity change from 0 to 512 [ 96.237400][ T6897] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.293465][ T6903] loop3: detected capacity change from 0 to 128 [ 96.303511][ T6903] futex_wake_op: syz.3.1243 tries to shift op by 144; fix this program [ 96.629448][ T6916] futex_wake_op: syz.0.1249 tries to shift op by 144; fix this program [ 96.756246][ T6925] loop0: detected capacity change from 0 to 512 [ 96.764756][ T6925] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.797968][ T6925] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.1253: corrupted inode contents [ 96.810603][ T6925] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #19: comm syz.0.1253: mark_inode_dirty error [ 96.822221][ T6925] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #19: comm syz.0.1253: corrupted inode contents [ 96.834544][ T6925] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.1253: mark_inode_dirty error [ 96.847224][ T6925] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.1253: mark inode dirty (error -117) [ 96.860896][ T6925] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 96.864664][ T6928] loop1: detected capacity change from 0 to 512 [ 96.887625][ T6928] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.914072][ T6928] __nla_validate_parse: 30 callbacks suppressed [ 96.914084][ T6928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1254'. [ 96.953166][ T6934] loop1: detected capacity change from 0 to 256 [ 96.964802][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1256'. [ 96.974493][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1256'. [ 96.984396][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1256'. [ 96.993666][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1256'. [ 97.143219][ T6941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1259'. [ 97.169822][ T6947] futex_wake_op: syz.4.1261 tries to shift op by 144; fix this program [ 97.278127][ T6959] loop3: detected capacity change from 0 to 512 [ 97.286961][ T6959] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.555987][ T6962] loop0: detected capacity change from 0 to 512 [ 97.567464][ T6962] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.593524][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1267'. [ 97.625075][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1268'. [ 97.634189][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1268'. [ 97.643577][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1268'. [ 97.768988][ T6970] loop2: detected capacity change from 0 to 128 [ 97.778684][ T6970] futex_wake_op: syz.2.1269 tries to shift op by 144; fix this program [ 97.830703][ T6980] futex_wake_op: syz.1.1274 tries to shift op by 144; fix this program [ 97.937333][ T6992] loop1: detected capacity change from 0 to 512 [ 97.946316][ T6992] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.980282][ T6992] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.1278: corrupted inode contents [ 97.992467][ T6992] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #19: comm syz.1.1278: mark_inode_dirty error [ 98.004025][ T6994] loop0: detected capacity change from 0 to 1024 [ 98.005823][ T6992] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.1278: corrupted inode contents [ 98.022443][ T6992] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.1278: mark_inode_dirty error [ 98.034601][ T6992] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.1278: mark inode dirty (error -117) [ 98.047431][ T6992] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 98.080699][ T7000] loop3: detected capacity change from 0 to 512 [ 98.107292][ T7000] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.199821][ T7009] program syz.0.1279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.201673][ T7008] loop3: detected capacity change from 0 to 256 [ 98.286324][ T7020] futex_wake_op: syz.4.1287 tries to shift op by 144; fix this program [ 98.412187][ T7029] loop4: detected capacity change from 0 to 512 [ 98.416770][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.427077][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.428696][ T7029] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.728323][ T3302] EXT4-fs unmount: 96 callbacks suppressed [ 98.728338][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.753115][ T7035] loop1: detected capacity change from 0 to 512 [ 98.767543][ T7035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.780299][ T7035] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.819780][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.023376][ T7051] loop1: detected capacity change from 0 to 128 [ 99.066231][ T7055] loop3: detected capacity change from 0 to 512 [ 99.077784][ T7055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.090620][ T7055] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.130599][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.200073][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.212338][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 99.212356][ T30] audit: type=1326 audit(1741525944.394:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.3.1312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2129e7d169 code=0x0 [ 99.255526][ T7064] loop4: detected capacity change from 0 to 512 [ 99.265362][ T7065] loop3: detected capacity change from 0 to 512 [ 99.273900][ T7064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.284652][ T7065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.299197][ T7065] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.300124][ T7064] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.327644][ T7064] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1302: corrupted inode contents [ 99.340588][ T7064] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.1302: mark_inode_dirty error [ 99.342233][ T7065] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1312: corrupted inode contents [ 99.352327][ T7064] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.1302: corrupted inode contents [ 99.364358][ T7065] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #19: comm syz.3.1312: mark_inode_dirty error [ 99.378078][ T7064] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1302: mark_inode_dirty error [ 99.388116][ T7065] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #19: comm syz.3.1312: corrupted inode contents [ 99.410301][ T7065] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.1312: mark_inode_dirty error [ 99.424212][ T7065] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.1312: mark inode dirty (error -117) [ 99.438029][ T7065] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 99.448415][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.517111][ T30] audit: type=1326 audit(1741525944.704:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.4.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 99.558845][ T30] audit: type=1326 audit(1741525944.734:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.4.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 99.582341][ T30] audit: type=1326 audit(1741525944.734:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.4.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 99.605889][ T30] audit: type=1326 audit(1741525944.734:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.4.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 99.629317][ T30] audit: type=1326 audit(1741525944.734:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.4.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 99.652839][ T30] audit: type=1326 audit(1741525944.734:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.4.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 99.676383][ T30] audit: type=1326 audit(1741525944.734:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.4.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 99.699809][ T30] audit: type=1326 audit(1741525944.734:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.4.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 99.723654][ T30] audit: type=1326 audit(1741525944.734:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.4.1305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d2dd169 code=0x7ffc0000 [ 99.833183][ T7085] loop2: detected capacity change from 0 to 256 [ 99.861882][ T7087] loop4: detected capacity change from 0 to 128 [ 99.930165][ T7092] loop1: detected capacity change from 0 to 512 [ 99.938826][ T7092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.951573][ T7092] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.055686][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.074283][ T7095] loop3: detected capacity change from 0 to 512 [ 100.087338][ T7095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.099964][ T7095] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.137963][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.155153][ T7101] futex_atomic_op_inuser: 2 callbacks suppressed [ 100.155170][ T7101] futex_wake_op: syz.3.1315 tries to shift op by 144; fix this program [ 100.802182][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.883222][ T7123] loop4: detected capacity change from 0 to 512 [ 100.898470][ T7126] futex_wake_op: syz.1.1327 tries to shift op by 144; fix this program [ 100.909891][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.930828][ T7123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.947157][ T7132] loop1: detected capacity change from 0 to 128 [ 100.949395][ T7133] loop0: detected capacity change from 0 to 256 [ 100.954112][ T7123] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.963170][ T7132] futex_wake_op: syz.1.1329 tries to shift op by 144; fix this program [ 100.994172][ T7134] loop2: detected capacity change from 0 to 512 [ 101.004531][ T7134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.018041][ T7134] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.019544][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.111766][ T7144] loop4: detected capacity change from 0 to 512 [ 101.120411][ T7144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.133386][ T7144] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.171030][ T7134] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1325: corrupted inode contents [ 101.183181][ T7134] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #19: comm syz.2.1325: mark_inode_dirty error [ 101.194699][ T7134] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #19: comm syz.2.1325: corrupted inode contents [ 101.207976][ T7134] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #19: comm syz.2.1325: mark_inode_dirty error [ 101.220322][ T7134] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #19: comm syz.2.1325: mark inode dirty (error -117) [ 101.234084][ T7134] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 101.444952][ T7162] loop3: detected capacity change from 0 to 1024 [ 101.458250][ T7162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.679747][ T7168] program syz.3.1339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.728838][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.749458][ T7170] futex_wake_op: syz.2.1340 tries to shift op by 144; fix this program [ 101.802377][ T7174] loop0: detected capacity change from 0 to 512 [ 101.818165][ T7174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.840726][ T7174] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.929178][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.937693][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.950678][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.984396][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.025350][ T7189] __nla_validate_parse: 27 callbacks suppressed [ 102.025369][ T7189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1346'. [ 102.117815][ T7199] loop1: detected capacity change from 0 to 256 [ 102.131679][ T7201] loop0: detected capacity change from 0 to 128 [ 102.143233][ T7201] futex_wake_op: syz.0.1353 tries to shift op by 144; fix this program [ 102.156479][ T7202] loop4: detected capacity change from 0 to 512 [ 102.164963][ T7202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.178546][ T7202] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.217137][ T7202] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1351: corrupted inode contents [ 102.229410][ T7202] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #19: comm syz.4.1351: mark_inode_dirty error [ 102.241066][ T7202] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1351: corrupted inode contents [ 102.253346][ T7202] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.1351: mark_inode_dirty error [ 102.265644][ T7202] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.1351: mark inode dirty (error -117) [ 102.278782][ T7202] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 102.632863][ T3376] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 102.640445][ T3376] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 102.647879][ T3376] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 102.655655][ T3376] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 102.685539][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.693587][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.701591][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.709442][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.717247][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.725030][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.732973][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.740956][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.748868][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.756911][ T7207] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 102.834288][ T7211] loop2: detected capacity change from 0 to 512 [ 102.842854][ T7211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.855355][ T7211] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.945611][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.982060][ T7214] loop4: detected capacity change from 0 to 512 [ 102.995146][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'. [ 103.004193][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'. [ 103.013916][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'. [ 103.014626][ T7214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.023053][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'. [ 103.045647][ T7220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1359'. [ 103.070066][ T7214] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.136786][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.232928][ T7240] loop4: detected capacity change from 0 to 256 [ 103.257828][ T7242] loop1: detected capacity change from 0 to 512 [ 103.266448][ T7242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.279118][ T7242] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.310691][ T7242] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.1366: corrupted inode contents [ 103.322917][ T7242] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #19: comm syz.1.1366: mark_inode_dirty error [ 103.334872][ T7242] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.1366: corrupted inode contents [ 103.347283][ T7242] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.1366: mark_inode_dirty error [ 103.359543][ T7242] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.1366: mark inode dirty (error -117) [ 103.372640][ T7242] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 103.623246][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.655576][ T7248] futex_wake_op: syz.2.1369 tries to shift op by 144; fix this program [ 103.665690][ C1] ================================================================== [ 103.673787][ C1] BUG: KCSAN: data-race in mptcp_recvmsg / mptcp_space [ 103.680665][ C1] [ 103.682978][ C1] write to 0xffff888103acf620 of 1 bytes by task 7248 on cpu 0: [ 103.690608][ C1] mptcp_recvmsg+0x8d8/0x1400 [ 103.695286][ C1] inet6_recvmsg+0x171/0x290 [ 103.699874][ C1] sock_recvmsg+0x9a/0x170 [ 103.704295][ C1] ____sys_recvmsg+0xf9/0x280 [ 103.708973][ C1] do_recvmmsg+0x2aa/0x6d0 [ 103.713395][ C1] __x64_sys_recvmmsg+0xe2/0x170 [ 103.718330][ C1] x64_sys_call+0x2a9a/0x2dc0 [ 103.723029][ C1] do_syscall_64+0xc9/0x1c0 [ 103.727625][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.733529][ C1] [ 103.735847][ C1] read to 0xffff888103acf620 of 1 bytes by interrupt on cpu 1: [ 103.743387][ C1] mptcp_space+0x144/0x1e0 [ 103.747885][ C1] __tcp_select_window+0x136/0x970 [ 103.753005][ C1] __tcp_transmit_skb+0x766/0x19d0 [ 103.758122][ C1] __tcp_send_ack+0x1de/0x300 [ 103.762815][ C1] tcp_send_ack+0x27/0x30 [ 103.767155][ C1] __tcp_ack_snd_check+0x369/0x590 [ 103.772269][ C1] tcp_rcv_established+0x938/0xe30 [ 103.777377][ C1] tcp_v6_do_rcv+0x745/0xaa0 [ 103.781992][ C1] tcp_v6_rcv+0x1949/0x1c40 [ 103.786507][ C1] ip6_protocol_deliver_rcu+0x9f2/0x1090 [ 103.792149][ C1] ip6_input+0xbf/0x1c0 [ 103.796303][ C1] ip6_rcv_finish+0x1fa/0x330 [ 103.800980][ C1] ip_sabotage_in+0x139/0x150 [ 103.805666][ C1] nf_hook_slow+0x86/0x1b0 [ 103.810081][ C1] ipv6_rcv+0x113/0x150 [ 103.814230][ C1] __netif_receive_skb+0xa2/0x280 [ 103.819252][ C1] netif_receive_skb+0x4a/0x320 [ 103.824098][ C1] br_pass_frame_up+0x239/0x310 [ 103.828949][ C1] br_handle_frame_finish+0xd46/0xe90 [ 103.834323][ C1] br_nf_hook_thresh+0x1e5/0x220 [ 103.839255][ C1] br_nf_pre_routing_finish_ipv6+0x575/0x5a0 [ 103.845229][ C1] br_nf_pre_routing_ipv6+0x1f6/0x2a0 [ 103.850613][ C1] br_nf_pre_routing+0x517/0xbc0 [ 103.855543][ C1] br_handle_frame+0x4e0/0x9b0 [ 103.860301][ C1] __netif_receive_skb_core+0xb1a/0x2350 [ 103.865937][ C1] __netif_receive_skb+0x5a/0x280 [ 103.870966][ C1] process_backlog+0x22e/0x440 [ 103.875756][ C1] __napi_poll+0x63/0x3c0 [ 103.880093][ C1] net_rx_action+0x3a1/0x7f0 [ 103.884679][ C1] handle_softirqs+0xbf/0x280 [ 103.889367][ C1] do_softirq+0x5e/0x90 [ 103.893523][ C1] __local_bh_enable_ip+0x6e/0x70 [ 103.898544][ C1] __dev_queue_xmit+0xb6e/0x2090 [ 103.903488][ C1] ip6_finish_output2+0x9d9/0xd60 [ 103.908522][ C1] ip6_finish_output+0x438/0x540 [ 103.913491][ C1] ip6_output+0xf5/0x230 [ 103.917744][ C1] ip6_xmit+0x807/0xc80 [ 103.921912][ C1] inet6_csk_xmit+0x1d1/0x210 [ 103.926595][ C1] __tcp_transmit_skb+0x12be/0x19d0 [ 103.931806][ C1] tcp_write_xmit+0x1217/0x3020 [ 103.936679][ C1] __tcp_push_pending_frames+0x6a/0x1a0 [ 103.942238][ C1] tcp_push+0x320/0x340 [ 103.946416][ C1] tcp_sendmsg_locked+0x21a1/0x26a0 [ 103.951622][ C1] tcp_sendmsg+0x30/0x50 [ 103.955870][ C1] inet6_sendmsg+0x77/0xd0 [ 103.960300][ C1] __sock_sendmsg+0x8b/0x180 [ 103.964895][ C1] sock_sendmsg+0xc4/0x130 [ 103.969351][ C1] rds_tcp_xmit+0x3b8/0x610 [ 103.973880][ C1] rds_send_xmit+0xba2/0x1480 [ 103.978570][ C1] rds_send_worker+0x42/0x1d0 [ 103.983269][ C1] process_scheduled_works+0x4db/0xa20 [ 103.988734][ C1] worker_thread+0x51d/0x6f0 [ 103.993330][ C1] kthread+0x4ae/0x520 [ 103.997406][ C1] ret_from_fork+0x4b/0x60 [ 104.001831][ C1] ret_from_fork_asm+0x1a/0x30 [ 104.006601][ C1] [ 104.008930][ C1] value changed: 0x80 -> 0xbf [ 104.013596][ C1] [ 104.015909][ C1] Reported by Kernel Concurrency Sanitizer on: [ 104.022048][ C1] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 104.032722][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.042795][ C1] Workqueue: krdsd rds_send_worker [ 104.047914][ C1] ================================================================== [ 104.086355][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.338553][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 104.338566][ T30] audit: type=1326 audit(1741525949.524:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.3.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2129e7d169 code=0x7fc00000 [ 104.369898][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.