last executing test programs: 6m46.571769173s ago: executing program 2 (id=4066): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 6m46.544019685s ago: executing program 2 (id=4068): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) 6m46.495093209s ago: executing program 3 (id=4071): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 6m46.460756342s ago: executing program 3 (id=4072): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') mknod(&(0x7f0000003480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2000000}, 0xa79}, 0x1c) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {r1}}, './file0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 6m46.294036476s ago: executing program 2 (id=4074): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0xfffffd33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000018c0)='Ob', 0x2}, {&(0x7f0000000240)="4c0f7ff04f5f9c8f3f5325946930ebcd516c92d1e979bf8203dce0ae67adba6da5ab59c424ce88c0a8fa77f857e6ee6e5f7b0428a8faf99f9b08120bf59ed1d2d92da03c724c64dc7b395df0491c71adee2abb798ca5d8d31f37d352a1a186c9c1b8c333dd90eb2959514ab30fbcf2e718e8cba160f89d41bce3fcd229b838ce47e7c329bed5fafc6604b522c492a59fd55fe3582037c888fdd6d39d89e5a6ac9f27196a8053974aff905dfbd7a79ccd3d8e5f07cf824218e096d702ed7b4287603df088e2c9c2eede8d38dfe64efd0d558f8343802c0896", 0xd8}, {&(0x7f0000000340)="769a0bd7d5576f3f77304ae8ea8451ae600bb13ceb699d8b58697152551cb2db9be665eb", 0x24}], 0x3}}], 0x3, 0xc0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x7fffb}, 0x18) socket(0x2, 0x80805, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc", @ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x7e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200"], 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6m45.62457708s ago: executing program 2 (id=4078): openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x1, 0x30}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m45.488581741s ago: executing program 3 (id=4080): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) sendto(r0, &(0x7f00000003c0)="e1118ce4", 0x4, 0x800, &(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast}, 0x3, 0x4, 0x2, 0x2}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 6m45.450395594s ago: executing program 2 (id=4083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x200000d4) (fail_nth: 1) 6m44.854242343s ago: executing program 2 (id=4091): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x1000}, 0x18) mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[], 0x1a4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6b) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000680), 0x1b}, 0x19c09, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu=~0||!') 6m44.811424677s ago: executing program 32 (id=4091): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x1000}, 0x18) mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[], 0x1a4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6b) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000680), 0x1b}, 0x19c09, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu=~0||!') 6m44.579074036s ago: executing program 3 (id=4094): openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x1, 0x30}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m44.544878428s ago: executing program 3 (id=4095): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m44.368141253s ago: executing program 3 (id=4096): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000db71f7768500000021000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 6m44.347111574s ago: executing program 33 (id=4096): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000db71f7768500000021000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 2.803992933s ago: executing program 1 (id=10780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.71895199s ago: executing program 1 (id=10781): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$eventfd(r1, &(0x7f0000000180)=0x5, 0x8) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x7}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x100) ioctl$BLKGETDISKSEQ(r4, 0x80081280, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES8=r3, @ANYBLOB="f2f60f12498d06cd5604474f3fa00ff0f496344b58518fff58c46bcffb2ecbc590e0d5e272b126275eef7b2527c6c3474ebe6e2d6c0aabfacab2a9f59565903194ebf387592815af7d08d90072b8f8f2c1f57e982e460edba4fa369866517e4e8f4e43a77eda184ad910a9f48ce9441c2585e45f4c618c9666a03d308160a9b98bce57618d74246a31f64effba0d356eff017672c88891dfbe128c151d5a8cc46682bb824f995ba46d23788d4eb08b23439022"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x12, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00106d4800"/14], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x800}, 0x18) r9 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000d95c883f00000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r10}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.84573452s ago: executing program 5 (id=10798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000000000000000a008ebe0c0fa9a0522a49a28cd00000000000000000000000000000039c648ee7fe01ed70000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095", @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000100000000000c000300686173683a6970000500040000000000090800000000000200000005000100060000000000ac"], 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000009060102005000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e00040014bba79fd3263d19929f05d5bda330e9b996650e4b7b1f1bd9091ccb0a589f23c24063cd76970600fc3aae9d5482ec2b883"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) r7 = syz_io_uring_setup(0x23a, &(0x7f0000000780)={0x0, 0x1, 0x8000}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TIOCGPTPEER(r10, 0x5441, 0x7) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0xf003}, 0x1, {0x0, r11}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) io_uring_enter(r7, 0x7f5f, 0x8000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) 1.797518345s ago: executing program 1 (id=10799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000000000000000a008ebe0c0fa9a0522a49a28cd00000000000000000000000000000039c648ee7fe01ed70000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095", @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000100000000000c000300686173683a6970000500040000000000090800000000000200000005000100060000000000ac"], 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000009060102005000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e00040014bba79fd3263d19929f05d5bda330e9b996650e4b7b1f1bd9091ccb0a589f23c24063cd76970600fc3aae9d5482ec2b883"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) r7 = syz_io_uring_setup(0x23a, &(0x7f0000000780)={0x0, 0x1, 0x8000}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TIOCGPTPEER(r10, 0x5441, 0x7) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0xf003}, 0x1, {0x0, r11}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) io_uring_enter(r7, 0x7f5f, 0x8000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) 1.47935865s ago: executing program 5 (id=10801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 1.450218612s ago: executing program 6 (id=10803): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB], 0x18) 1.430310394s ago: executing program 5 (id=10804): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000200ff0f00000000000040000000950000000000008f00"], 0x0, 0x79, 0x85, &(0x7f00000003c0)=""/133, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0x2, 0x7, 0x9}, 0x10, 0x1da14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100050000000000", @ANYBLOB="1000ed271424000020000400000000001ade0c9e82aa20e38236958f9a4bca04b6fe8d436b2559d3ce040c33d1a34fce6309cd87b8aedaa1c1555a45d302e8863843fcb6508c715b0c38025df46712178336742113184aad06998c44ab6900"/105], 0x2c, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8848}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000200)={{{0x9}}, 0x0, 0x3, 0x0}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) socket$kcm(0xa, 0x3, 0x87) 1.401114256s ago: executing program 6 (id=10805): creat(&(0x7f0000000080)='./file0\x00', 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") 1.367570049s ago: executing program 1 (id=10806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, 0x0, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0) 1.23236897s ago: executing program 1 (id=10807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) utimes(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x0, 0x3114}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549f22c1ac3a5d5", @ANYRES32=r8, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 1.092229961s ago: executing program 0 (id=10808): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000200ff0f00000000000040000000950000000000008f00"], 0x0, 0x79, 0x85, &(0x7f00000003c0)=""/133, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0x2, 0x7, 0x9}, 0x10, 0x1da14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFHW8aaNql5aLiBUVUJUHBCH1Ngby2Q3G7LrUptIuH8DSCBxgj+BAxIHpJ44wIkjEgdAlANSgYgqRuph0MyO1669Jou93m12Px9pMj/ezHzf283Me367Oy+AiXUpIrYjYjYiXo+IhXJ7Uk7xcmfK93v44P7KzoP7K0lk2Wv/TIr0fFtxwHy5f0ScLc85HxFf/0rEt5PDcVubW7eX6/XavXJ9sd24u9ja3Lq63lheq63V7lSrN5ZuXHvh+vPVgZX1YuMX7355/ZVv/PpXn3zn99tf/H6erXNlWrccA9Yp+kw3Tm46Il45jWAjMFXOZ0ecD44njYiPRMRniut/IaaK/50AwDjLsoXIFvavAwDjLi36wJK0EhFpWjYCKp0+vKfjTFpvttpXbjU37qx2+srOx0x6a71eu3Zh7o/fLXaeSfL1pSKtSC/WqwfWr0fEhYj40dwTxXplpVlfHU2TBwAm3tn99X9EvDeXppVKX4f2+FQPAHhszI86AwDA0Kn/AWDyqP8BYPL0Uf+XH/Zvn3peAIDh6O/vf9/3A4Bxov8fACaP+h8AJsrXXn01n7Kd8vnXq29sbtxuvnF1tda6XWlsrFRWmvfuVtaazbXimT2NR52v3mzeXXouNt5cbNda7cXW5tbNRnPjTvtm8Vzvm7WZoZQKAPhfLlx8+w9JRGy/+EQxxb6xHNTVMN7SAe4FPF6mTnKwBgI81oz2BZOrryq8aCT89tTzAoxGzx/3zPdc/KCf/B9BfM8IPlQuf7z//n9jPMN4OdCz/342qowAQ3e8/v+XBp4PYPiO3f//58HmAxi+LEsOjvk/200CAMbSCb7Cl/1gUI0QYKQe9XDPgXz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGPmXER8J5K0UowFnub/ppVKxJMRcT5mklvr9dq1iHgqLkbEzFy+vrR78HujzTsAcFzp35Ny/K/LC8+eO5g6m/xnrphHxPd++tqP31xut+8t5dv/1d0+tzt8WHXvuBOMKwgA9O+v/exU1N/Vcr60t/3hg/sru9Mp5vGQd7/UHXx0ZefB/WLqpExHlmVZxHzRljjz7ySmy2PmI+KZiJgaQPzttyLiY73KnxR9I+fLkU/3x48y9pNDjZ9+IH5apHXm+cv30QHkBSbN2/n95+Ve118al4p57+t/vrhDnVxx/5uP2L337eyLP11GmuoRP7/mL/Ub47nffPXQxmyhk/ZWxDPTveIn3fjJEfGf7TP+nz7xqR++dERa9rOIy9E7/v5Yi+3G3cXW5tbV9cbyWm2tdqdavbF049oL15+vLhZ91Iu7PdWH/ePFK08dlbe8/GeOiN95588eKP9s99jP9Vn+n7//+rc+vbc6dzD+Fz7b+/1/uojY+/XP68TP9xl/+cwvjxy+O4+/ekT5H/X+X+kz/jt/21rtc1cAYAham1u3l+v12r0TLeR/hQ7iPIcW8iz2t/Nuc/FkQf8SxcLey5JEEsc+4UzvpLwx1tfhp/WqnvrCdLetONgzfzM/45CLkw68FMdZiPPlwsNhBR3dPQkYjr2LPiJ+N+rcAAAAAAAAAAAAAAAAvQzjN0yjLiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADj678BAAD//2PAxWs=") fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100050000000000", @ANYBLOB="1000ed271424000020000400000000001ade0c9e82aa20e38236958f9a4bca04b6fe8d436b2559d3ce040c33d1a34fce6309cd87b8aedaa1c1555a45d302e8863843fcb6508c715b0c38025df46712178336742113184aad06998c44ab6900"/105], 0x2c, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000), 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8848}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000200)={{{0x9}}, 0x0, 0x3, 0x0}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) socket$kcm(0xa, 0x3, 0x87) 1.072119143s ago: executing program 6 (id=10809): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0xe4131f06337482aa, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x900000000000000, 0x8}, 0x10137f, 0x7ff, 0x6, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) 727.777161ms ago: executing program 5 (id=10811): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x400000000000000) 634.217759ms ago: executing program 5 (id=10813): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f0000000340)=0x14) bind$packet(r0, &(0x7f0000000180)={0x11, 0x10192c6ebdd34ac8, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) 576.157173ms ago: executing program 5 (id=10814): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000200ff0f00000000000040000000950000000000008f00"], 0x0, 0x79, 0x85, &(0x7f00000003c0)=""/133, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0x2, 0x7, 0x9}, 0x10, 0x1da14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFHW8aaNql5aLiBUVUJUHBCH1Ngby2Q3G7LrUptIuH8DSCBxgj+BAxIHpJ44wIkjEgdAlANSgYgqRuph0MyO1669Jou93m12Px9pMj/ezHzf283Me367Oy+AiXUpIrYjYjYiXo+IhXJ7Uk7xcmfK93v44P7KzoP7K0lk2Wv/TIr0fFtxwHy5f0ScLc85HxFf/0rEt5PDcVubW7eX6/XavXJ9sd24u9ja3Lq63lheq63V7lSrN5ZuXHvh+vPVgZX1YuMX7355/ZVv/PpXn3zn99tf/H6erXNlWrccA9Yp+kw3Tm46Il45jWAjMFXOZ0ecD44njYiPRMRniut/IaaK/50AwDjLsoXIFvavAwDjLi36wJK0EhFpWjYCKp0+vKfjTFpvttpXbjU37qx2+srOx0x6a71eu3Zh7o/fLXaeSfL1pSKtSC/WqwfWr0fEhYj40dwTxXplpVlfHU2TBwAm3tn99X9EvDeXppVKX4f2+FQPAHhszI86AwDA0Kn/AWDyqP8BYPL0Uf+XH/Zvn3peAIDh6O/vf9/3A4Bxov8fACaP+h8AJsrXXn01n7Kd8vnXq29sbtxuvnF1tda6XWlsrFRWmvfuVtaazbXimT2NR52v3mzeXXouNt5cbNda7cXW5tbNRnPjTvtm8Vzvm7WZoZQKAPhfLlx8+w9JRGy/+EQxxb6xHNTVMN7SAe4FPF6mTnKwBgI81oz2BZOrryq8aCT89tTzAoxGzx/3zPdc/KCf/B9BfM8IPlQuf7z//n9jPMN4OdCz/342qowAQ3e8/v+XBp4PYPiO3f//58HmAxi+LEsOjvk/200CAMbSCb7Cl/1gUI0QYKQe9XDPgXz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGPmXER8J5K0UowFnub/ppVKxJMRcT5mklvr9dq1iHgqLkbEzFy+vrR78HujzTsAcFzp35Ny/K/LC8+eO5g6m/xnrphHxPd++tqP31xut+8t5dv/1d0+tzt8WHXvuBOMKwgA9O+v/exU1N/Vcr60t/3hg/sru9Mp5vGQd7/UHXx0ZefB/WLqpExHlmVZxHzRljjz7ySmy2PmI+KZiJgaQPzttyLiY73KnxR9I+fLkU/3x48y9pNDjZ9+IH5apHXm+cv30QHkBSbN2/n95+Ve118al4p57+t/vrhDnVxx/5uP2L337eyLP11GmuoRP7/mL/Ub47nffPXQxmyhk/ZWxDPTveIn3fjJEfGf7TP+nz7xqR++dERa9rOIy9E7/v5Yi+3G3cXW5tbV9cbyWm2tdqdavbF049oL15+vLhZ91Iu7PdWH/ePFK08dlbe8/GeOiN95588eKP9s99jP9Vn+n7//+rc+vbc6dzD+Fz7b+/1/uojY+/XP68TP9xl/+cwvjxy+O4+/ekT5H/X+X+kz/jt/21rtc1cAYAham1u3l+v12r0TLeR/hQ7iPIcW8iz2t/Nuc/FkQf8SxcLey5JEEsc+4UzvpLwx1tfhp/WqnvrCdLetONgzfzM/45CLkw68FMdZiPPlwsNhBR3dPQkYjr2LPiJ+N+rcAAAAAAAAAAAAAAAAvQzjN0yjLiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADj678BAAD//2PAxWs=") fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100050000000000", @ANYBLOB="1000ed271424000020000400000000001ade0c9e82aa20e38236958f9a4bca04b6fe8d436b2559d3ce040c33d1a34fce6309cd87b8aedaa1c1555a45d302e8863843fcb6508c715b0c38025df46712178336742113184aad06998c44ab6900"/105], 0x2c, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) socket$kcm(0xa, 0x3, 0x87) 464.093702ms ago: executing program 0 (id=10817): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0) 436.976804ms ago: executing program 6 (id=10818): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB], 0x18) 419.014606ms ago: executing program 6 (id=10819): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffff8, @empty, 0xfffffff9}, {0xa, 0x4e20, 0x3fa7, @local, 0x9}, r3, 0x10}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000380)={0x80}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000640)={0x15, 0x110, 0xfa00, {r3, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x81, {"1fb73f99648108f1f040ffd0f9d41a34"}, 0x0, 0x1, 0x9}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) 326.669593ms ago: executing program 1 (id=10820): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000200ff0f00000000000040000000950000000000008f00"], 0x0, 0x79, 0x85, &(0x7f00000003c0)=""/133, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0x2, 0x7, 0x9}, 0x10, 0x1da14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100050000000000", @ANYBLOB="1000ed271424000020000400000000001ade0c9e82aa20e38236958f9a4bca04b6fe8d436b2559d3ce040c33d1a34fce6309cd87b8aedaa1c1555a45d302e8863843fcb6508c715b0c38025df46712178336742113184aad06998c44ab6900"/105], 0x2c, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000), 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000200)={{{0x9}}, 0x0, 0x3, 0x0}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 322.937313ms ago: executing program 0 (id=10821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 303.869925ms ago: executing program 4 (id=10822): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 269.926488ms ago: executing program 4 (id=10823): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x400000000000000) 258.981169ms ago: executing program 0 (id=10824): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000deffffff0000000000000018110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 183.689895ms ago: executing program 0 (id=10825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 183.107655ms ago: executing program 4 (id=10826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000440)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0xfa, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@local, @multicast2]}, @rr={0x7, 0x3, 0x88}, @timestamp={0x44, 0x4, 0xef, 0x0, 0x4}]}}, {{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}, {"4db55a7e0f5be6a17cb8b0d40ab1fa0df469ac0ff7d4e686b8b8d301c06434ec1b0e9979b4108f6feb7a143098522cdf42a5e205393261e39e054f55c41ea55f29d44d8bcfc131642ec56b5e20508a174251808ebb662e5524c81457a1da3589ed935718fad163fa5fe792e12043cb951eba81b5403aa9b5af6eea5c80e9c93f665d75ffbd02c6b67037ee9fcbbaed3685fe62c3b3af155ae24c184263a88007a837f4d4c9933d7bcf9e0cc8a1f6ff7026a4043e8ef2445cd71e98b0e9c5"}}}}}}, 0x0) 165.321066ms ago: executing program 0 (id=10827): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9be085852859e8c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) pipe(&(0x7f0000000300)) mmap(&(0x7f000082f000/0x3000)=nil, 0x3000, 0x1000009, 0x10010, 0xffffffffffffffff, 0x2882c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='percpu_destroy_chunk\x00', r2, 0x0, 0x2}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x5) 60.112894ms ago: executing program 4 (id=10828): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 9.288909ms ago: executing program 4 (id=10829): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffff8, @empty, 0xfffffff9}, {0xa, 0x4e20, 0x3fa7, @local, 0x9}, r3, 0x10}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB], 0x18) 8.697529ms ago: executing program 4 (id=10830): creat(&(0x7f0000000080)='./file0\x00', 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x550, &(0x7f0000001780)="$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") 0s ago: executing program 6 (id=10831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) utimes(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x0, 0x3114}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549f22c1ac3a5d5", @ANYRES32=r8, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 256 [ 735.694006][T17003] veth0_vlan: entered promiscuous mode [ 735.704730][T17003] veth1_vlan: entered promiscuous mode [ 735.722875][T17003] veth0_macvtap: entered promiscuous mode [ 735.733350][T17003] veth1_macvtap: entered promiscuous mode [ 735.756100][T17003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.779131][T17003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.798407][ T8058] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.821034][ T8058] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.846037][ T7143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.855889][T17164] loop6: detected capacity change from 0 to 512 [ 735.866277][ T7143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.895962][T17164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.034624][T17179] 9pnet_fd: Insufficient options for proto=fd [ 736.099304][T17184] lo speed is unknown, defaulting to 1000 [ 736.166385][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.576805][T17198] loop5: detected capacity change from 0 to 1024 [ 736.604786][T17198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 736.659202][T17198] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.9981: lblock 3 mapped to illegal pblock 3 (length 3) [ 736.673794][T17198] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 736.686151][T17198] EXT4-fs (loop5): This should not happen!! Data will be lost [ 736.686151][T17198] [ 736.739188][ T8058] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 736.756374][ T8058] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 736.768799][ T8058] EXT4-fs (loop5): This should not happen!! Data will be lost [ 736.768799][ T8058] [ 736.779715][ T5319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 736.932792][T17216] IPv6: NLM_F_CREATE should be specified when creating new route [ 736.937345][T17215] lo speed is unknown, defaulting to 1000 [ 736.993852][T17220] lo speed is unknown, defaulting to 1000 [ 737.349155][T17229] lo speed is unknown, defaulting to 1000 [ 737.382591][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 737.382604][ T29] audit: type=1326 audit(737.363:23902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.411891][ T29] audit: type=1326 audit(737.363:23903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.435307][ T29] audit: type=1326 audit(737.393:23904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.458407][ T29] audit: type=1326 audit(737.393:23905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.481457][ T29] audit: type=1326 audit(737.403:23906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.504468][ T29] audit: type=1326 audit(737.403:23907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.527693][ T29] audit: type=1326 audit(737.403:23908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.550679][ T29] audit: type=1326 audit(737.403:23909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.574230][ T29] audit: type=1326 audit(737.443:23910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.597212][ T29] audit: type=1326 audit(737.443:23911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17230 comm="syz.0.9991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 737.676259][T17240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=17240 comm=syz.1.9994 [ 737.751593][T17246] lo speed is unknown, defaulting to 1000 [ 738.061867][T17269] lo speed is unknown, defaulting to 1000 [ 738.259436][T17278] lo speed is unknown, defaulting to 1000 [ 738.550304][T17281] lo speed is unknown, defaulting to 1000 [ 738.677765][T17289] __nla_validate_parse: 22 callbacks suppressed [ 738.677781][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10010'. [ 738.708132][T17293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10011'. [ 738.796261][T17301] FAULT_INJECTION: forcing a failure. [ 738.796261][T17301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.809441][T17301] CPU: 1 UID: 0 PID: 17301 Comm: syz.1.10015 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 738.809477][T17301] Tainted: [W]=WARN [ 738.809484][T17301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 738.809512][T17301] Call Trace: [ 738.809518][T17301] [ 738.809526][T17301] __dump_stack+0x1d/0x30 [ 738.809547][T17301] dump_stack_lvl+0xe8/0x140 [ 738.809567][T17301] dump_stack+0x15/0x1b [ 738.809585][T17301] should_fail_ex+0x265/0x280 [ 738.809658][T17301] should_fail+0xb/0x20 [ 738.809677][T17301] should_fail_usercopy+0x1a/0x20 [ 738.809697][T17301] _copy_from_user+0x1c/0xb0 [ 738.809728][T17301] ___sys_sendmsg+0xc1/0x1d0 [ 738.809840][T17301] __x64_sys_sendmsg+0xd4/0x160 [ 738.809896][T17301] x64_sys_call+0x191e/0x2ff0 [ 738.809914][T17301] do_syscall_64+0xd2/0x200 [ 738.809936][T17301] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 738.810014][T17301] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 738.810116][T17301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.810138][T17301] RIP: 0033:0x7f4350f6ebe9 [ 738.810154][T17301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.810168][T17301] RSP: 002b:00007f434f9cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.810184][T17301] RAX: ffffffffffffffda RBX: 00007f4351195fa0 RCX: 00007f4350f6ebe9 [ 738.810195][T17301] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 738.810209][T17301] RBP: 00007f434f9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 738.810221][T17301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.810234][T17301] R13: 00007f4351196038 R14: 00007f4351195fa0 R15: 00007ffd13966e38 [ 738.810253][T17301] [ 738.998763][T17303] FAULT_INJECTION: forcing a failure. [ 738.998763][T17303] name failslab, interval 1, probability 0, space 0, times 0 [ 739.011457][T17303] CPU: 1 UID: 0 PID: 17303 Comm: syz.6.10013 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 739.011488][T17303] Tainted: [W]=WARN [ 739.011494][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.011572][T17303] Call Trace: [ 739.011637][T17303] [ 739.011646][T17303] __dump_stack+0x1d/0x30 [ 739.011668][T17303] dump_stack_lvl+0xe8/0x140 [ 739.011694][T17303] dump_stack+0x15/0x1b [ 739.011788][T17303] should_fail_ex+0x265/0x280 [ 739.011810][T17303] ? xdp_umem_create+0x3c/0x5c0 [ 739.011839][T17303] should_failslab+0x8c/0xb0 [ 739.011931][T17303] __kmalloc_cache_noprof+0x4c/0x320 [ 739.011961][T17303] xdp_umem_create+0x3c/0x5c0 [ 739.012063][T17303] ? should_fail_ex+0xdb/0x280 [ 739.012151][T17303] xsk_setsockopt+0x5ea/0x640 [ 739.012217][T17303] ? __pfx_xsk_setsockopt+0x10/0x10 [ 739.012321][T17303] __sys_setsockopt+0x184/0x200 [ 739.012340][T17303] __x64_sys_setsockopt+0x64/0x80 [ 739.012394][T17303] x64_sys_call+0x20ec/0x2ff0 [ 739.012412][T17303] do_syscall_64+0xd2/0x200 [ 739.012509][T17303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 739.012529][T17303] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 739.012549][T17303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.012623][T17303] RIP: 0033:0x7f0d7b81ebe9 [ 739.012637][T17303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.012652][T17303] RSP: 002b:00007f0d7a266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 739.012670][T17303] RAX: ffffffffffffffda RBX: 00007f0d7ba46090 RCX: 00007f0d7b81ebe9 [ 739.012683][T17303] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000007 [ 739.012702][T17303] RBP: 00007f0d7a266090 R08: 0000000000000020 R09: 0000000000000000 [ 739.012721][T17303] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 739.012734][T17303] R13: 00007f0d7ba46128 R14: 00007f0d7ba46090 R15: 00007ffd863d5a48 [ 739.012750][T17303] [ 739.057191][T17299] loop0: detected capacity change from 0 to 512 [ 739.111916][T17295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10012'. [ 739.150295][T17299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.167350][T17295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10012'. [ 739.196534][T17314] loop5: detected capacity change from 0 to 256 [ 739.262408][T17299] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10014: bg 0: block 64: padding at end of block bitmap is not set [ 739.278336][T17308] team0 (unregistering): Port device team_slave_0 removed [ 739.287688][T17308] team0 (unregistering): Port device team_slave_1 removed [ 739.326254][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.414834][T17318] team0 (unregistering): Port device team_slave_0 removed [ 739.432653][T17318] team0 (unregistering): Port device team_slave_1 removed [ 739.471729][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10022'. [ 739.526436][T17335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10025'. [ 739.623008][T17345] loop5: detected capacity change from 0 to 1024 [ 739.644017][T17345] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 739.655056][T17345] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 739.692432][T17345] JBD2: no valid journal superblock found [ 739.698237][T17345] EXT4-fs (loop5): Could not load journal inode [ 739.749571][T17350] loop4: detected capacity change from 0 to 256 [ 739.876868][T17352] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10032'. [ 739.912355][T17352] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10032'. [ 739.955807][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10036'. [ 740.084271][T17380] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10041'. [ 740.209694][T17383] loop1: detected capacity change from 0 to 512 [ 740.216496][T17383] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 740.224947][T17383] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.10042: inode #1661: comm syz.1.10042: iget: illegal inode # [ 740.243673][T17383] EXT4-fs (loop1): no journal found [ 740.249076][T17383] EXT4-fs (loop1): can't get journal size [ 740.273907][T17383] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 740.283657][T17383] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8056c118, mo2=0002] [ 740.291976][T17383] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 740.300021][T17383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.349882][T17401] loop4: detected capacity change from 0 to 512 [ 740.373036][T17403] bridge_slave_1: left allmulticast mode [ 740.378749][T17403] bridge_slave_1: left promiscuous mode [ 740.384420][T17403] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.393157][T17401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.416221][T17403] bridge_slave_0: left allmulticast mode [ 740.421959][T17403] bridge_slave_0: left promiscuous mode [ 740.427682][T17403] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.605396][T14271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.700139][ T9807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.788363][T17416] loop0: detected capacity change from 0 to 256 [ 741.629816][T17441] 9pnet_fd: Insufficient options for proto=fd [ 741.636865][T17441] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 741.649063][T17441] SELinux: failed to load policy [ 741.655766][T17441] netlink: 'syz.4.10060': attribute type 4 has an invalid length. [ 741.671929][T17441] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 741.882704][T17452] can0: slcan on ttyS3. [ 741.905513][T17452] loop1: detected capacity change from 0 to 128 [ 741.988349][T17449] can0 (unregistered): slcan off ttyS3. [ 742.303131][T17495] loop1: detected capacity change from 0 to 512 [ 742.332159][T17495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.359914][T17479] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10070: bg 0: block 64: padding at end of block bitmap is not set [ 742.418027][T14271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.568609][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 742.568619][ T29] audit: type=1326 audit(742.553:24488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.597953][ T29] audit: type=1326 audit(742.553:24489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.621479][ T29] audit: type=1326 audit(742.553:24490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.644546][ T29] audit: type=1326 audit(742.553:24491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.667584][ T29] audit: type=1326 audit(742.553:24492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.690675][ T29] audit: type=1326 audit(742.553:24493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.713981][ T29] audit: type=1326 audit(742.553:24494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.737152][ T29] audit: type=1326 audit(742.553:24495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.760283][ T29] audit: type=1326 audit(742.553:24496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.783376][ T29] audit: type=1326 audit(742.553:24497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.1.10073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 742.849799][T17512] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 742.856344][T17512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 742.863979][T17512] vhci_hcd vhci_hcd.0: Device attached [ 742.871525][T17515] vhci_hcd: cannot find a urb of seqnum 11 max seqnum 0 [ 742.878899][ T8058] vhci_hcd: stop threads [ 742.883369][ T8058] vhci_hcd: release socket [ 742.887920][ T8058] vhci_hcd: disconnect device [ 742.954827][T17523] siw: device registration error -23 [ 742.969901][T17523] loop4: detected capacity change from 0 to 1024 [ 742.976832][T17523] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 742.987890][T17523] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 743.002779][T17523] JBD2: no valid journal superblock found [ 743.008620][T17523] EXT4-fs (loop4): Could not load journal inode [ 743.201830][T17528] lo speed is unknown, defaulting to 1000 [ 743.418275][T17550] lo speed is unknown, defaulting to 1000 [ 743.683497][T17554] loop0: detected capacity change from 0 to 512 [ 743.718716][T17554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.783548][T17544] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10085: bg 0: block 64: padding at end of block bitmap is not set [ 743.799922][T17562] __nla_validate_parse: 23 callbacks suppressed [ 743.799936][T17562] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10090'. [ 743.819628][T17562] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10090'. [ 743.895597][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.911973][T17570] 9pnet_fd: Insufficient options for proto=fd [ 743.919757][T17570] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 743.929952][T17570] SELinux: failed to load policy [ 743.936510][T17570] netlink: 'syz.6.10093': attribute type 4 has an invalid length. [ 743.944385][T17570] netlink: 152 bytes leftover after parsing attributes in process `syz.6.10093'. [ 743.961899][T17570] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 744.056255][T17582] loop4: detected capacity change from 0 to 256 [ 744.303174][T17596] lo speed is unknown, defaulting to 1000 [ 744.324517][T17576] loop0: detected capacity change from 0 to 512 [ 744.354151][T17576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.402207][T17576] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10095: bg 0: block 64: padding at end of block bitmap is not set [ 744.481349][T17614] 9pnet_fd: Insufficient options for proto=fd [ 744.506935][T17614] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 744.518159][T17614] SELinux: failed to load policy [ 744.549793][T17614] netlink: 'syz.1.10105': attribute type 4 has an invalid length. [ 744.557644][T17614] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10105'. [ 744.612308][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.622169][T17614] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 744.631930][T17617] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10107'. [ 744.654716][T17617] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10107'. [ 744.763722][T17629] loop1: detected capacity change from 0 to 256 [ 745.037234][T17652] 9pnet_fd: Insufficient options for proto=fd [ 745.059213][T17652] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 745.070568][T17652] SELinux: failed to load policy [ 745.077199][T17652] netlink: 'syz.4.10120': attribute type 4 has an invalid length. [ 745.085108][T17652] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10120'. [ 745.098595][T17659] siw: device registration error -23 [ 745.099790][T17654] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10122'. [ 745.116947][T17663] netlink: 'syz.6.10125': attribute type 16 has an invalid length. [ 745.117242][T17662] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10124'. [ 745.124911][T17663] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10125'. [ 745.149446][T17659] loop0: detected capacity change from 0 to 1024 [ 745.156123][T17652] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 745.177251][T17659] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 745.188184][T17659] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 745.198447][T17663] bridge_slave_0: entered allmulticast mode [ 745.249785][T17659] JBD2: no valid journal superblock found [ 745.255591][T17659] EXT4-fs (loop0): Could not load journal inode [ 745.537533][T17682] lo speed is unknown, defaulting to 1000 [ 745.625558][T17684] vlan2: entered allmulticast mode [ 745.630745][T17684] bridge_slave_0: entered allmulticast mode [ 745.659984][T17688] loop6: detected capacity change from 0 to 512 [ 745.700129][T17688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.947361][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.017827][T17713] loop5: detected capacity change from 0 to 512 [ 746.085983][T17719] lo speed is unknown, defaulting to 1000 [ 746.272013][T17713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.389464][T17725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.398250][T17725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.408104][T17725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.416839][T17725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.626840][T17725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.635430][T17725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.927407][ T5319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.454544][T17744] loop6: detected capacity change from 0 to 256 [ 747.818498][T17749] loop1: detected capacity change from 0 to 512 [ 747.840229][T17749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.977075][T14271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.044285][T17757] lo speed is unknown, defaulting to 1000 [ 748.123401][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 748.123415][ T29] audit: type=1326 audit(748.093:24885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.152713][ T29] audit: type=1326 audit(748.093:24886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.175829][ T29] audit: type=1326 audit(748.093:24887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.198894][ T29] audit: type=1326 audit(748.093:24888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.221915][ T29] audit: type=1326 audit(748.093:24889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.244929][ T29] audit: type=1326 audit(748.093:24890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.267909][ T29] audit: type=1326 audit(748.093:24891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.290872][ T29] audit: type=1326 audit(748.093:24892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.313994][ T29] audit: type=1326 audit(748.093:24893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.336965][ T29] audit: type=1326 audit(748.093:24894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17762 comm="syz.5.10157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 748.402435][T17771] lo speed is unknown, defaulting to 1000 [ 748.992189][T17805] FAULT_INJECTION: forcing a failure. [ 748.992189][T17805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.002129][T17799] infiniband syz!: set active [ 749.005378][T17805] CPU: 1 UID: 0 PID: 17805 Comm: syz.5.10172 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 749.005414][T17805] Tainted: [W]=WARN [ 749.005421][T17805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 749.005434][T17805] Call Trace: [ 749.005441][T17805] [ 749.005449][T17805] __dump_stack+0x1d/0x30 [ 749.005495][T17805] dump_stack_lvl+0xe8/0x140 [ 749.005515][T17805] dump_stack+0x15/0x1b [ 749.005531][T17805] should_fail_ex+0x265/0x280 [ 749.005552][T17805] should_fail+0xb/0x20 [ 749.005569][T17805] should_fail_usercopy+0x1a/0x20 [ 749.005591][T17805] _copy_to_user+0x20/0xa0 [ 749.005633][T17805] simple_read_from_buffer+0xb5/0x130 [ 749.005655][T17805] proc_fail_nth_read+0x10e/0x150 [ 749.005735][T17805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 749.005760][T17805] vfs_read+0x1a8/0x770 [ 749.005780][T17805] ? __rcu_read_unlock+0x4f/0x70 [ 749.005877][T17805] ? __fget_files+0x184/0x1c0 [ 749.005902][T17805] ksys_read+0xda/0x1a0 [ 749.005989][T17805] __x64_sys_read+0x40/0x50 [ 749.006010][T17805] x64_sys_call+0x27bc/0x2ff0 [ 749.006070][T17805] do_syscall_64+0xd2/0x200 [ 749.006095][T17805] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 749.006118][T17805] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 749.006142][T17805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.006174][T17805] RIP: 0033:0x7f39965ad5fc [ 749.006190][T17805] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 749.006212][T17805] RSP: 002b:00007f3995017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 749.006231][T17805] RAX: ffffffffffffffda RBX: 00007f39967d5fa0 RCX: 00007f39965ad5fc [ 749.006244][T17805] RDX: 000000000000000f RSI: 00007f39950170a0 RDI: 0000000000000005 [ 749.006257][T17805] RBP: 00007f3995017090 R08: 0000000000000000 R09: 0000000000000000 [ 749.006270][T17805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.006302][T17805] R13: 00007f39967d6038 R14: 00007f39967d5fa0 R15: 00007ffc960273c8 [ 749.006320][T17805] [ 749.114119][T17807] sch_fq: defrate 0 ignored. [ 749.115075][T17799] infiniband syz!: added team_slave_0 [ 749.282969][T17799] RDS/IB: syz!: added [ 749.287189][T17799] smc: adding ib device syz! with port count 1 [ 749.298008][T17799] smc: ib device syz! port 1 has pnetid [ 749.315019][T17811] __nla_validate_parse: 16 callbacks suppressed [ 749.315032][T17811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10174'. [ 749.397432][T17815] FAULT_INJECTION: forcing a failure. [ 749.397432][T17815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.410637][T17815] CPU: 1 UID: 0 PID: 17815 Comm: syz.5.10175 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 749.410672][T17815] Tainted: [W]=WARN [ 749.410679][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 749.410691][T17815] Call Trace: [ 749.410697][T17815] [ 749.410704][T17815] __dump_stack+0x1d/0x30 [ 749.410725][T17815] dump_stack_lvl+0xe8/0x140 [ 749.410816][T17815] dump_stack+0x15/0x1b [ 749.410894][T17815] should_fail_ex+0x265/0x280 [ 749.410916][T17815] should_fail+0xb/0x20 [ 749.410934][T17815] should_fail_usercopy+0x1a/0x20 [ 749.410993][T17815] _copy_from_user+0x1c/0xb0 [ 749.411020][T17815] __copy_msghdr+0x244/0x300 [ 749.411042][T17815] ___sys_sendmsg+0x109/0x1d0 [ 749.411079][T17815] __x64_sys_sendmsg+0xd4/0x160 [ 749.411147][T17815] x64_sys_call+0x191e/0x2ff0 [ 749.411167][T17815] do_syscall_64+0xd2/0x200 [ 749.411193][T17815] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 749.411272][T17815] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 749.411356][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.411397][T17815] RIP: 0033:0x7f39965aebe9 [ 749.411413][T17815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.411429][T17815] RSP: 002b:00007f3995017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.411448][T17815] RAX: ffffffffffffffda RBX: 00007f39967d5fa0 RCX: 00007f39965aebe9 [ 749.411517][T17815] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 749.411577][T17815] RBP: 00007f3995017090 R08: 0000000000000000 R09: 0000000000000000 [ 749.411659][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.411671][T17815] R13: 00007f39967d6038 R14: 00007f39967d5fa0 R15: 00007ffc960273c8 [ 749.411689][T17815] [ 749.642837][T17817] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 749.673901][T17821] loop1: detected capacity change from 0 to 256 [ 749.864247][T17828] loop4: detected capacity change from 0 to 256 [ 749.941567][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10183'. [ 750.026003][T17838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10185'. [ 750.036944][T17839] netlink: 276 bytes leftover after parsing attributes in process `syz.5.10186'. [ 750.125833][T17842] lo speed is unknown, defaulting to 1000 [ 750.137521][T17843] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10186'. [ 750.203735][T17829] loop1: detected capacity change from 0 to 512 [ 750.231481][T17829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.316343][T17829] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10182: bg 0: block 64: padding at end of block bitmap is not set [ 750.411874][T17854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10189'. [ 750.473812][T17863] 9pnet_fd: Insufficient options for proto=fd [ 750.516462][T14271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.533306][T17863] macvlan1: entered promiscuous mode [ 750.539890][T17863] ipvlan0: entered promiscuous mode [ 750.540860][T17865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10193'. [ 750.545608][T17863] ipvlan0: left promiscuous mode [ 750.555973][T17865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10193'. [ 750.568340][T17863] macvlan1: left promiscuous mode [ 750.613318][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10195'. [ 750.711572][T17877] loop1: detected capacity change from 0 to 256 [ 750.752679][T17875] lo speed is unknown, defaulting to 1000 [ 750.798033][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10197'. [ 750.901968][T17884] 9pnet_fd: Insufficient options for proto=fd [ 750.934695][T17887] lo speed is unknown, defaulting to 1000 [ 750.935351][T17884] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 750.952919][T17884] SELinux: failed to load policy [ 750.974425][T17884] netlink: 'syz.5.10199': attribute type 4 has an invalid length. [ 750.998538][T17884] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 751.214915][T17905] FAULT_INJECTION: forcing a failure. [ 751.214915][T17905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.228060][T17905] CPU: 0 UID: 0 PID: 17905 Comm: syz.4.10206 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 751.228095][T17905] Tainted: [W]=WARN [ 751.228103][T17905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 751.228114][T17905] Call Trace: [ 751.228120][T17905] [ 751.228180][T17905] __dump_stack+0x1d/0x30 [ 751.228267][T17905] dump_stack_lvl+0xe8/0x140 [ 751.228284][T17905] dump_stack+0x15/0x1b [ 751.228302][T17905] should_fail_ex+0x265/0x280 [ 751.228341][T17905] should_fail+0xb/0x20 [ 751.228357][T17905] should_fail_usercopy+0x1a/0x20 [ 751.228375][T17905] _copy_from_user+0x1c/0xb0 [ 751.228491][T17905] ___sys_sendmsg+0xc1/0x1d0 [ 751.228519][T17905] __x64_sys_sendmsg+0xd4/0x160 [ 751.228540][T17905] x64_sys_call+0x191e/0x2ff0 [ 751.228561][T17905] do_syscall_64+0xd2/0x200 [ 751.228608][T17905] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 751.228628][T17905] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 751.228653][T17905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.228804][T17905] RIP: 0033:0x7f3e7468ebe9 [ 751.228819][T17905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.228834][T17905] RSP: 002b:00007f3e730ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.228851][T17905] RAX: ffffffffffffffda RBX: 00007f3e748b5fa0 RCX: 00007f3e7468ebe9 [ 751.228862][T17905] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 751.228873][T17905] RBP: 00007f3e730ef090 R08: 0000000000000000 R09: 0000000000000000 [ 751.228884][T17905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.228896][T17905] R13: 00007f3e748b6038 R14: 00007f3e748b5fa0 R15: 00007fff2cceb798 [ 751.229050][T17905] [ 751.426338][T17910] FAULT_INJECTION: forcing a failure. [ 751.426338][T17910] name failslab, interval 1, probability 0, space 0, times 0 [ 751.439149][T17910] CPU: 1 UID: 0 PID: 17910 Comm: syz.0.10204 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 751.439178][T17910] Tainted: [W]=WARN [ 751.439184][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 751.439193][T17910] Call Trace: [ 751.439199][T17910] [ 751.439206][T17910] __dump_stack+0x1d/0x30 [ 751.439225][T17910] dump_stack_lvl+0xe8/0x140 [ 751.439240][T17910] dump_stack+0x15/0x1b [ 751.439299][T17910] should_fail_ex+0x265/0x280 [ 751.439316][T17910] should_failslab+0x8c/0xb0 [ 751.439411][T17910] kmem_cache_alloc_node_noprof+0x57/0x320 [ 751.439437][T17910] ? __alloc_skb+0x101/0x320 [ 751.439504][T17910] __alloc_skb+0x101/0x320 [ 751.439527][T17910] netlink_alloc_large_skb+0xba/0xf0 [ 751.439575][T17910] netlink_sendmsg+0x3cf/0x6b0 [ 751.439593][T17910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.439610][T17910] __sock_sendmsg+0x145/0x180 [ 751.439630][T17910] ____sys_sendmsg+0x31e/0x4e0 [ 751.439671][T17910] ___sys_sendmsg+0x17b/0x1d0 [ 751.439702][T17910] __x64_sys_sendmsg+0xd4/0x160 [ 751.439722][T17910] x64_sys_call+0x191e/0x2ff0 [ 751.439739][T17910] do_syscall_64+0xd2/0x200 [ 751.439795][T17910] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 751.439814][T17910] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 751.439883][T17910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.439900][T17910] RIP: 0033:0x7fa6e34debe9 [ 751.439913][T17910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.440007][T17910] RSP: 002b:00007fa6e1f26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.440023][T17910] RAX: ffffffffffffffda RBX: 00007fa6e3706090 RCX: 00007fa6e34debe9 [ 751.440034][T17910] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 751.440044][T17910] RBP: 00007fa6e1f26090 R08: 0000000000000000 R09: 0000000000000000 [ 751.440101][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.440111][T17910] R13: 00007fa6e3706128 R14: 00007fa6e3706090 R15: 00007ffc158507c8 [ 751.440126][T17910] [ 752.049404][T17937] lo speed is unknown, defaulting to 1000 [ 752.055421][T17934] loop1: detected capacity change from 0 to 512 [ 752.062212][T17923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.070640][T17923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.079373][T17923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.087790][T17923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.130466][T17934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.181459][T17934] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10218: bg 0: block 64: padding at end of block bitmap is not set [ 752.259862][T14271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.298388][T17923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.306907][T17923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.427188][T17957] loop0: detected capacity change from 0 to 512 [ 752.433628][T17959] loop1: detected capacity change from 0 to 512 [ 752.468869][T17955] lo speed is unknown, defaulting to 1000 [ 752.525502][T17957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.593798][T17959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.704008][T17962] loop6: detected capacity change from 0 to 512 [ 752.722429][T17962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.750171][T17962] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10227: bg 0: block 64: padding at end of block bitmap is not set [ 752.766148][T14271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.839881][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.856512][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.930241][T17985] lo speed is unknown, defaulting to 1000 [ 753.202535][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 753.202550][ T29] audit: type=1326 audit(753.183:25157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.246876][ T29] audit: type=1326 audit(753.193:25158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.269970][ T29] audit: type=1326 audit(753.193:25159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.293091][ T29] audit: type=1326 audit(753.193:25160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.316128][ T29] audit: type=1326 audit(753.193:25161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.339196][ T29] audit: type=1326 audit(753.193:25162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.362318][ T29] audit: type=1326 audit(753.193:25163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.385388][ T29] audit: type=1326 audit(753.193:25164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.408614][ T29] audit: type=1326 audit(753.193:25165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.431737][ T29] audit: type=1326 audit(753.193:25166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18019 comm="syz.5.10248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39965aebe9 code=0x7ffc0000 [ 753.518321][T18036] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 753.528360][T18036] SELinux: failed to load policy [ 753.539714][T18036] netlink: 'syz.5.10254': attribute type 4 has an invalid length. [ 753.552154][T18036] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 753.635738][T18043] netem: incorrect gi model size [ 753.640750][T18043] netem: change failed [ 753.699104][T18050] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 753.711301][T18050] SELinux: failed to load policy [ 753.713780][T18034] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 753.729216][T18050] netlink: 'syz.5.10259': attribute type 4 has an invalid length. [ 753.737256][T18050] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 753.981792][T18067] lo speed is unknown, defaulting to 1000 [ 754.038178][T18072] lo speed is unknown, defaulting to 1000 [ 754.102463][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.189836][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.214811][T18067] chnl_net:caif_netlink_parms(): no params data found [ 754.224210][T18097] netem: incorrect gi model size [ 754.229237][T18097] netem: change failed [ 754.259828][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.299835][T18105] 9pnet_fd: Insufficient options for proto=fd [ 754.307487][T18105] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 754.317775][T18105] SELinux: failed to load policy [ 754.325884][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.330217][T18105] netlink: 'syz.1.10278': attribute type 4 has an invalid length. [ 754.343994][T18105] __nla_validate_parse: 18 callbacks suppressed [ 754.344005][T18105] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10278'. [ 754.359561][T18105] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 754.397757][T18067] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.404949][T18067] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.421781][T18067] bridge_slave_0: entered allmulticast mode [ 754.429820][T18067] bridge_slave_0: entered promiscuous mode [ 754.430958][T18113] loop1: detected capacity change from 0 to 512 [ 754.437512][T18067] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.449260][T18067] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.462853][T18067] bridge_slave_1: entered allmulticast mode [ 754.472767][T18067] bridge_slave_1: entered promiscuous mode [ 754.481645][T18113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.503507][T18067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.531658][T18067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.585191][T18067] team0: Port device team_slave_0 added [ 754.592652][T18067] team0: Port device team_slave_1 added [ 754.632152][T14271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.727809][T18136] siw: device registration error -23 [ 754.760341][T18141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10288'. [ 754.785726][T18145] loop6: detected capacity change from 0 to 512 [ 754.796453][T18136] loop0: detected capacity change from 0 to 1024 [ 754.816281][T18145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.842126][T18136] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 754.853044][T18136] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 754.890732][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.907130][T18136] JBD2: no valid journal superblock found [ 754.907127][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.921538][T18136] EXT4-fs (loop0): Could not load journal inode [ 754.929374][ T58] bond0 (unregistering): Released all slaves [ 754.942394][T18067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.949495][T18067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.975449][T18067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.004729][T18142] netem: incorrect gi model size [ 755.009737][T18142] netem: change failed [ 755.054273][T18067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.061294][T18067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.087361][T18067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.119039][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.169383][ T58] hsr_slave_0: left promiscuous mode [ 755.175170][ T58] hsr_slave_1: left promiscuous mode [ 755.188165][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.195549][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.209565][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.216951][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.228322][ T58] veth1_macvtap: left promiscuous mode [ 755.233839][ T58] veth0_macvtap: left promiscuous mode [ 755.240871][ T58] veth1_vlan: left promiscuous mode [ 755.246306][ T58] veth0_vlan: left promiscuous mode [ 755.335653][ T58] team0 (unregistering): Port device team_slave_1 removed [ 755.345784][ T58] team0 (unregistering): Port device team_slave_0 removed [ 755.368029][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10296'. [ 755.401987][ T1035] lo speed is unknown, defaulting to 1000 [ 755.407771][ T1035] infiniband syz2: ib_query_port failed (-19) [ 755.429179][T18067] hsr_slave_0: entered promiscuous mode [ 755.435269][T18067] hsr_slave_1: entered promiscuous mode [ 755.467351][T18067] debugfs: 'hsr0' already exists in 'hsr' [ 755.473125][T18067] Cannot create hsr debugfs directory [ 755.496923][T18181] 9pnet: Could not find request transport: f [ 755.580380][T18197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10300'. [ 755.904547][T18221] netem: incorrect gi model size [ 755.909535][T18221] netem: change failed [ 755.933320][T18067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 755.958181][T18067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 755.965631][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10307'. [ 755.982304][T18067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 756.000639][T18067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 756.082381][T18067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.103014][T18067] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.134554][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.138089][T18219] loop4: detected capacity change from 0 to 512 [ 756.141637][ T8046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.172300][T18219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.175726][T18249] 9pnet: Could not find request transport: f [ 756.192195][T18219] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10305: bg 0: block 64: padding at end of block bitmap is not set [ 756.199111][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.213635][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.275074][T18067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.285475][T18067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.302080][T18261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10310'. [ 756.315258][ T9807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.421576][T18067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.549936][T18294] netlink: 300 bytes leftover after parsing attributes in process `syz.0.10317'. [ 756.673736][T18307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10317'. [ 756.777771][T18067] veth0_vlan: entered promiscuous mode [ 756.801341][T18067] veth1_vlan: entered promiscuous mode [ 756.833646][T18067] veth0_macvtap: entered promiscuous mode [ 756.843398][T18067] veth1_macvtap: entered promiscuous mode [ 756.934494][T18336] loop6: detected capacity change from 0 to 256 [ 756.964258][T18067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.983990][T18067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.000490][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.145277][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.249200][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.269420][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.278023][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.287426][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.296038][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.346044][T18351] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10323'. [ 757.453351][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.505547][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.514387][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.793501][T18361] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10325'. [ 758.008714][T18370] loop6: detected capacity change from 0 to 512 [ 758.176760][T18370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.479999][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 758.480014][ T29] audit: type=1326 audit(758.463:25328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d7b81d550 code=0x7ffc0000 [ 758.531470][T18370] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10327: corrupted inode contents [ 758.544806][ T29] audit: type=1326 audit(758.463:25329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0d7b81d937 code=0x7ffc0000 [ 758.565326][T18370] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10327: mark_inode_dirty error [ 758.567954][ T29] audit: type=1326 audit(758.463:25330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d7b81d550 code=0x7ffc0000 [ 758.602209][ T29] audit: type=1326 audit(758.463:25331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 758.625492][ T29] audit: type=1326 audit(758.463:25332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 758.648702][ T29] audit: type=1326 audit(758.493:25333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 758.671762][ T29] audit: type=1326 audit(758.493:25334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 758.686784][T18370] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10327: corrupted inode contents [ 758.695266][ T29] audit: type=1326 audit(758.493:25335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 758.709583][T18370] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.10327: mark_inode_dirty error [ 758.730330][ T29] audit: type=1326 audit(758.493:25336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.6.10327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 758.795926][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.835651][T18395] loop6: detected capacity change from 0 to 256 [ 758.858607][T18389] loop0: detected capacity change from 0 to 512 [ 758.884723][T18389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.904741][T18389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10331: bg 0: block 64: padding at end of block bitmap is not set [ 758.925434][T18399] netem: incorrect gi model size [ 758.930525][T18399] netem: change failed [ 758.970294][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.311655][T18426] netem: incorrect gi model size [ 759.316801][T18426] netem: change failed [ 759.346185][ T29] audit: type=1326 audit(759.323:25337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18429 comm="syz.5.10345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73978debe9 code=0x7ffc0000 [ 759.581356][T18439] __nla_validate_parse: 8 callbacks suppressed [ 759.581371][T18439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10349'. [ 759.653868][T18448] loop5: detected capacity change from 0 to 512 [ 759.663871][T18448] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 759.692103][T18448] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.10352: Failed to acquire dquot type 1 [ 759.704138][T18448] EXT4-fs (loop5): 1 truncate cleaned up [ 759.713956][T18448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.727539][T18448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.818627][T18457] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10355'. [ 759.829245][T18457] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10355'. [ 759.893406][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10362'. [ 759.927071][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10363'. [ 759.936087][T18477] bridge_slave_1: left allmulticast mode [ 759.941738][T18477] bridge_slave_1: left promiscuous mode [ 759.947439][T18477] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.957712][T18477] bridge_slave_0: left allmulticast mode [ 759.963534][T18477] bridge_slave_0: left promiscuous mode [ 759.969356][T18477] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.123537][T18487] loop6: detected capacity change from 0 to 512 [ 760.150014][T18495] netlink: 300 bytes leftover after parsing attributes in process `syz.0.10371'. [ 760.212395][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10366'. [ 760.225654][T18500] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10371'. [ 760.246118][T18487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.280048][T18486] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10368: corrupted inode contents [ 760.293383][T18486] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10368: mark_inode_dirty error [ 760.304909][T18503] lo speed is unknown, defaulting to 1000 [ 760.312012][T18503] lo speed is unknown, defaulting to 1000 [ 760.318715][T18503] lo speed is unknown, defaulting to 1000 [ 760.324863][T18486] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10368: corrupted inode contents [ 760.341421][T18503] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 760.350769][T18486] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.10368: mark_inode_dirty error [ 760.374079][T18503] lo speed is unknown, defaulting to 1000 [ 760.396509][T18504] loop1: detected capacity change from 0 to 1024 [ 760.407432][T18503] lo speed is unknown, defaulting to 1000 [ 760.421923][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.429002][T18503] lo speed is unknown, defaulting to 1000 [ 760.437503][T18503] lo speed is unknown, defaulting to 1000 [ 760.444779][T18503] lo speed is unknown, defaulting to 1000 [ 760.452761][T18504] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 760.463748][T18504] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 760.470410][T18503] lo speed is unknown, defaulting to 1000 [ 760.482363][T18504] JBD2: no valid journal superblock found [ 760.488186][T18504] EXT4-fs (loop1): Could not load journal inode [ 761.027539][T18520] lo speed is unknown, defaulting to 1000 [ 761.201091][T18528] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10380'. [ 761.353004][T18533] loop0: detected capacity change from 0 to 512 [ 761.377210][T18533] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 761.405789][T18533] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10381: Failed to acquire dquot type 1 [ 761.430373][T18542] loop5: detected capacity change from 0 to 512 [ 761.439782][T18533] EXT4-fs (loop0): 1 truncate cleaned up [ 761.446017][T18533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.455911][T18536] lo speed is unknown, defaulting to 1000 [ 761.473591][T18533] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.489552][T18541] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 761.496203][T18541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 761.503945][T18541] vhci_hcd vhci_hcd.0: Device attached [ 761.543047][T18545] vhci_hcd: cannot find a urb of seqnum 11 max seqnum 0 [ 761.551574][T18542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.565848][ T8058] vhci_hcd: stop threads [ 761.570140][ T8058] vhci_hcd: release socket [ 761.574551][ T8058] vhci_hcd: disconnect device [ 761.591866][T18536] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10383: corrupted inode contents [ 761.604337][T18536] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.10383: mark_inode_dirty error [ 761.617677][T18536] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10383: corrupted inode contents [ 761.629994][T18536] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.10383: mark_inode_dirty error [ 761.657357][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.884177][T18553] lo speed is unknown, defaulting to 1000 [ 761.904209][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10387'. [ 761.915617][T18554] vlan2: entered allmulticast mode [ 761.920764][T18554] bridge_slave_0: entered allmulticast mode [ 762.099483][T18559] loop6: detected capacity change from 0 to 256 [ 762.188791][T18578] siw: device registration error -23 [ 762.208549][T18578] loop0: detected capacity change from 0 to 1024 [ 762.217151][T18578] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 762.228151][T18578] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 762.239212][T18578] JBD2: no valid journal superblock found [ 762.244954][T18578] EXT4-fs (loop0): Could not load journal inode [ 762.573690][T18601] loop6: detected capacity change from 0 to 512 [ 762.586635][T18599] lo speed is unknown, defaulting to 1000 [ 762.632048][T18601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.661534][T18601] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10397: corrupted inode contents [ 762.679769][T18601] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10397: mark_inode_dirty error [ 762.703130][T18601] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10397: corrupted inode contents [ 762.716533][T18601] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.10397: mark_inode_dirty error [ 762.785297][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.844970][T18616] loop6: detected capacity change from 0 to 256 [ 763.079978][T18639] lo speed is unknown, defaulting to 1000 [ 763.363053][T18835] loop1: detected capacity change from 0 to 512 [ 763.373494][T18835] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 763.390367][T18835] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.10416: Failed to acquire dquot type 1 [ 763.402996][T18835] EXT4-fs (loop1): 1 truncate cleaned up [ 763.410328][T18835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.423851][T18835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.523160][T18845] loop1: detected capacity change from 0 to 256 [ 763.579292][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 763.579305][ T29] audit: type=1326 audit(763.563:25688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 763.609596][ T29] audit: type=1326 audit(763.563:25689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 763.632717][ T29] audit: type=1326 audit(763.563:25690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 763.655936][ T29] audit: type=1326 audit(763.563:25691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 763.678976][ T29] audit: type=1326 audit(763.563:25692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 763.701997][ T29] audit: type=1326 audit(763.563:25693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 763.725129][ T29] audit: type=1326 audit(763.563:25694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 763.748205][ T29] audit: type=1326 audit(763.563:25695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 763.771421][ T29] audit: type=1326 audit(763.563:25696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 763.794479][ T29] audit: type=1326 audit(763.563:25697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18851 comm="syz.0.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e34debe9 code=0x7ffc0000 [ 764.041541][T18872] loop5: detected capacity change from 0 to 512 [ 764.056117][T18872] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 764.156089][T18872] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.10428: Failed to acquire dquot type 1 [ 764.179826][T18872] EXT4-fs (loop5): 1 truncate cleaned up [ 764.186269][T18872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.299687][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.308273][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.317710][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.326391][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.536128][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.544700][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.920247][T18894] loop0: detected capacity change from 0 to 256 [ 764.953143][T18872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.236365][T18901] __nla_validate_parse: 10 callbacks suppressed [ 765.236382][T18901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10439'. [ 765.411073][T18902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10439'. [ 765.516908][T18898] loop0: detected capacity change from 0 to 512 [ 765.532745][T18898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.547474][T18898] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10438: bg 0: block 64: padding at end of block bitmap is not set [ 765.613718][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.007310][T18927] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10448'. [ 766.017251][T18927] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10448'. [ 766.107679][T18943] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 766.123214][T18944] loop0: detected capacity change from 0 to 512 [ 766.134380][T18944] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 766.159201][T18944] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10452: Failed to acquire dquot type 1 [ 766.175559][T18944] EXT4-fs (loop0): 1 truncate cleaned up [ 766.183119][T18944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.196713][T18944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.263847][T18955] lo speed is unknown, defaulting to 1000 [ 766.412396][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10463'. [ 766.478460][T18966] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10463'. [ 766.537757][T18965] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10464'. [ 766.547872][T18965] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10464'. [ 766.668624][T18977] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 766.742961][T18981] lo speed is unknown, defaulting to 1000 [ 766.858902][T18985] lo speed is unknown, defaulting to 1000 [ 766.983681][T18990] lo speed is unknown, defaulting to 1000 [ 767.024109][T18994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10475'. [ 767.051762][T18994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10475'. [ 767.122791][T19003] loop1: detected capacity change from 0 to 1024 [ 767.132061][T19003] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 767.142986][T19003] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 767.154832][T19003] JBD2: no valid journal superblock found [ 767.160594][T19003] EXT4-fs (loop1): Could not load journal inode [ 767.251109][T19014] loop0: detected capacity change from 0 to 512 [ 767.260250][T19009] lo speed is unknown, defaulting to 1000 [ 767.286545][T19015] loop4: detected capacity change from 0 to 512 [ 767.306245][T19014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.323504][T19015] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 767.382823][T19015] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.10481: Failed to acquire dquot type 1 [ 767.419744][T19015] EXT4-fs (loop4): 1 truncate cleaned up [ 767.462929][T19015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.491937][T19015] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.505627][T19009] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.10480: corrupted inode contents [ 767.522658][T19009] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.10480: mark_inode_dirty error [ 767.534843][T19009] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.10480: corrupted inode contents [ 767.547706][T19009] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.10480: mark_inode_dirty error [ 767.602694][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.862771][T19043] loop0: detected capacity change from 0 to 512 [ 767.881790][T19038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.890407][T19038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.899709][T19038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.908177][T19038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.117494][T19038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.126041][T19038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.167821][T19050] loop4: detected capacity change from 0 to 512 [ 768.238798][T19043] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 768.295082][T19050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.352081][T19043] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10487: Failed to acquire dquot type 1 [ 768.383197][T19050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10489: corrupted inode contents [ 768.410234][T19043] EXT4-fs (loop0): 1 truncate cleaned up [ 768.421960][T19045] lo speed is unknown, defaulting to 1000 [ 768.428508][T19050] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.10489: mark_inode_dirty error [ 768.440831][T19043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.539047][T19050] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10489: corrupted inode contents [ 768.580321][T19043] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.745398][T19050] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.10489: mark_inode_dirty error [ 768.859830][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 768.859847][ T29] audit: type=1326 audit(768.823:25901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19047 comm="syz.4.10489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 768.954234][T19048] lo speed is unknown, defaulting to 1000 [ 769.103732][ T29] audit: type=1326 audit(768.873:25902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19047 comm="syz.4.10489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 769.245644][T19073] siw: device registration error -23 [ 769.274786][T19073] loop5: detected capacity change from 0 to 1024 [ 769.292427][T19073] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 769.303460][T19073] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 769.366900][T19073] JBD2: no valid journal superblock found [ 769.372763][T19073] EXT4-fs (loop5): Could not load journal inode [ 769.419429][ T29] audit: type=1326 audit(769.393:25903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19079 comm="syz.6.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 769.442701][ T29] audit: type=1326 audit(769.393:25904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19079 comm="syz.6.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 769.468343][ T29] audit: type=1326 audit(769.403:25905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19079 comm="syz.6.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 769.491645][ T29] audit: type=1326 audit(769.403:25906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19079 comm="syz.6.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 769.514958][ T29] audit: type=1326 audit(769.403:25907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19079 comm="syz.6.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 769.538460][ T29] audit: type=1326 audit(769.453:25908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19079 comm="syz.6.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 769.551361][T19081] lo speed is unknown, defaulting to 1000 [ 769.561775][ T29] audit: type=1326 audit(769.453:25909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19079 comm="syz.6.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 769.561908][ T29] audit: type=1326 audit(769.453:25910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19079 comm="syz.6.10499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 769.643986][ T9807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.905456][T19094] loop6: detected capacity change from 0 to 512 [ 769.917204][T19102] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 769.930420][T19094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.953583][T19094] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10503: bg 0: block 64: padding at end of block bitmap is not set [ 769.977243][T19107] loop0: detected capacity change from 0 to 512 [ 769.987349][T19106] lo speed is unknown, defaulting to 1000 [ 769.993939][T19107] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 770.009469][T19107] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10506: Failed to acquire dquot type 1 [ 770.055976][T19107] EXT4-fs (loop0): 1 truncate cleaned up [ 770.056387][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.062151][T19107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.085432][T19107] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.193566][T19115] netem: incorrect gi model size [ 770.199051][T19115] netem: change failed [ 770.284478][T19118] lo speed is unknown, defaulting to 1000 [ 770.372336][T19119] lo speed is unknown, defaulting to 1000 [ 770.422205][T19119] __nla_validate_parse: 4 callbacks suppressed [ 770.422218][T19119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10508'. [ 770.441043][T19119] vlan2: entered allmulticast mode [ 770.649665][T19121] loop4: detected capacity change from 0 to 512 [ 770.766323][T19121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.811061][T19129] loop1: detected capacity change from 0 to 1024 [ 770.834325][T19129] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 770.845326][T19129] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 770.909520][T19129] JBD2: no valid journal superblock found [ 770.915274][T19129] EXT4-fs (loop1): Could not load journal inode [ 770.926387][T19134] loop0: detected capacity change from 0 to 512 [ 770.929637][T19118] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10510: corrupted inode contents [ 770.967103][T19131] lo speed is unknown, defaulting to 1000 [ 770.989262][T19134] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 771.001457][T19118] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.10510: mark_inode_dirty error [ 771.032810][T19118] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10510: corrupted inode contents [ 771.076203][T19134] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10514: Failed to acquire dquot type 1 [ 771.140757][T19118] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.10510: mark_inode_dirty error [ 771.159486][T19134] EXT4-fs (loop0): 1 truncate cleaned up [ 771.182567][T19142] lo speed is unknown, defaulting to 1000 [ 771.190545][T19134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.236392][T19149] loop6: detected capacity change from 0 to 512 [ 771.238716][ T9807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.266933][T19150] loop5: detected capacity change from 0 to 512 [ 771.335060][T19149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.378987][T19148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10519'. [ 771.397605][T19148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10519'. [ 771.412016][T19142] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10516: corrupted inode contents [ 771.424461][T19142] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10516: mark_inode_dirty error [ 771.427597][T19150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.455856][T19142] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10516: corrupted inode contents [ 771.472945][T19146] lo speed is unknown, defaulting to 1000 [ 771.504803][T19142] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.10516: mark_inode_dirty error [ 771.550973][T19162] siw: device registration error -23 [ 771.564033][T19162] loop4: detected capacity change from 0 to 1024 [ 771.572601][T19162] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 771.583811][T19162] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 771.612799][T19162] JBD2: no valid journal superblock found [ 771.618616][T19162] EXT4-fs (loop4): Could not load journal inode [ 771.627164][T19150] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10518: corrupted inode contents [ 771.656807][T19150] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.10518: mark_inode_dirty error [ 771.669414][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.679506][T19150] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10518: corrupted inode contents [ 771.688620][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.693976][T19150] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.10518: mark_inode_dirty error [ 772.037382][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.173748][T19197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10532'. [ 772.185824][T19190] siw: device registration error -23 [ 772.197928][T19190] loop6: detected capacity change from 0 to 1024 [ 772.209813][T19190] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 772.220748][T19190] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 772.269451][T19190] JBD2: no valid journal superblock found [ 772.275207][T19190] EXT4-fs (loop6): Could not load journal inode [ 772.306269][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10535'. [ 772.422630][T19202] lo speed is unknown, defaulting to 1000 [ 772.433870][T19205] loop1: detected capacity change from 0 to 512 [ 772.452768][T19213] netem: incorrect gi model size [ 772.457766][T19213] netem: change failed [ 772.522852][T19205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.554779][T19222] netlink: 300 bytes leftover after parsing attributes in process `syz.4.10542'. [ 772.554793][T19205] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.10534: corrupted inode contents [ 772.584858][T19205] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.10534: mark_inode_dirty error [ 772.596725][T19205] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.10534: corrupted inode contents [ 772.610550][T19216] lo speed is unknown, defaulting to 1000 [ 772.616490][T19205] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.10534: mark_inode_dirty error [ 772.657700][T19228] netlink: 300 bytes leftover after parsing attributes in process `syz.0.10543'. [ 772.720741][T14271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.746377][T19237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10546'. [ 772.759444][T19238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10543'. [ 772.896413][T19247] lo speed is unknown, defaulting to 1000 [ 772.913052][T19251] netem: incorrect gi model size [ 772.914839][T19248] siw: device registration error -23 [ 772.918073][T19251] netem: change failed [ 772.968928][T19248] loop5: detected capacity change from 0 to 1024 [ 772.997762][T19248] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 773.008711][T19248] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 773.018630][T19248] JBD2: no valid journal superblock found [ 773.024452][T19248] EXT4-fs (loop5): Could not load journal inode [ 773.078392][T19258] loop5: detected capacity change from 0 to 512 [ 773.099489][T19258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.117176][T19258] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10555: bg 0: block 64: padding at end of block bitmap is not set [ 773.129223][T19260] lo speed is unknown, defaulting to 1000 [ 773.153074][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.269552][T19271] lo speed is unknown, defaulting to 1000 [ 773.318890][T19273] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10560'. [ 773.560487][T19291] lo speed is unknown, defaulting to 1000 [ 773.567272][T19295] siw: device registration error -23 [ 773.601081][T19295] loop5: detected capacity change from 0 to 1024 [ 773.620958][T19295] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 773.631922][T19295] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 773.711195][T19295] JBD2: no valid journal superblock found [ 773.716949][T19295] EXT4-fs (loop5): Could not load journal inode [ 773.772449][T19314] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 773.942905][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 773.942920][ T29] audit: type=1326 audit(773.923:26368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.008189][ T29] audit: type=1326 audit(773.923:26369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.031374][ T29] audit: type=1326 audit(773.923:26370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.049074][T19327] lo speed is unknown, defaulting to 1000 [ 774.054485][ T29] audit: type=1326 audit(773.923:26371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.083192][ T29] audit: type=1326 audit(773.923:26372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.106325][ T29] audit: type=1326 audit(773.923:26373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.129424][ T29] audit: type=1326 audit(773.923:26374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.152551][ T29] audit: type=1326 audit(773.923:26375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.155140][T19320] loop0: detected capacity change from 0 to 512 [ 774.175627][ T29] audit: type=1326 audit(773.923:26376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.175654][ T29] audit: type=1326 audit(773.923:26377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19330 comm="syz.1.10582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4350f6ebe9 code=0x7ffc0000 [ 774.229547][T19332] lo speed is unknown, defaulting to 1000 [ 774.283275][T19320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.311867][T19320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10578: bg 0: block 64: padding at end of block bitmap is not set [ 774.395753][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.103560][T19384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.112307][T19384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.123338][T19384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.131934][T19384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.343251][T19384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.351923][T19384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.433734][T19398] __nla_validate_parse: 15 callbacks suppressed [ 775.433752][T19398] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10604'. [ 775.459678][T19401] loop1: detected capacity change from 0 to 512 [ 775.504946][T19400] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10604'. [ 775.522243][T19389] loop5: detected capacity change from 0 to 512 [ 775.648094][T19407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10607'. [ 775.673799][T19401] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 775.842274][T19413] siw: device registration error -23 [ 775.893712][T19413] loop4: detected capacity change from 0 to 1024 [ 776.016906][T19413] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 776.027826][T19413] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 776.074319][T19389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.101960][T19401] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.10605: Failed to acquire dquot type 1 [ 776.114795][T19413] JBD2: no valid journal superblock found [ 776.120614][T19413] EXT4-fs (loop4): Could not load journal inode [ 776.138498][T19389] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.10600: bg 0: block 64: padding at end of block bitmap is not set [ 776.155817][T19401] EXT4-fs (loop1): 1 truncate cleaned up [ 776.162874][T19401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.750590][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.761261][T19401] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.877600][T19428] loop4: detected capacity change from 0 to 512 [ 776.883782][T19423] lo speed is unknown, defaulting to 1000 [ 776.938393][T19428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.985868][T19423] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10611: corrupted inode contents [ 776.998847][T19423] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.10611: mark_inode_dirty error [ 777.010224][T19438] loop1: detected capacity change from 0 to 256 [ 777.025572][T19423] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10611: corrupted inode contents [ 777.040877][T19423] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.10611: mark_inode_dirty error [ 777.070185][ T9807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.102177][T19443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10618'. [ 777.214933][T19445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10619'. [ 777.225175][T19445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10619'. [ 777.244784][T19452] siw: device registration error -23 [ 777.260897][T19452] loop5: detected capacity change from 0 to 1024 [ 777.269556][T19452] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 777.280613][T19452] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 777.307029][T19452] JBD2: no valid journal superblock found [ 777.312914][T19452] EXT4-fs (loop5): Could not load journal inode [ 777.432284][T19458] lo speed is unknown, defaulting to 1000 [ 777.545191][T19469] lo speed is unknown, defaulting to 1000 [ 777.685729][T19482] lo speed is unknown, defaulting to 1000 [ 777.713229][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10634'. [ 777.734389][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10634'. [ 777.882810][T19494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10636'. [ 777.898853][T19494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10636'. [ 777.967236][T19492] loop6: detected capacity change from 0 to 512 [ 777.996936][T19492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.035600][T19492] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10635: bg 0: block 64: padding at end of block bitmap is not set [ 778.174086][T19505] lo speed is unknown, defaulting to 1000 [ 778.180583][T19529] 9pnet_fd: Insufficient options for proto=fd [ 778.185168][T19532] loop5: detected capacity change from 0 to 512 [ 778.193266][T19529] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 778.210386][T19529] SELinux: failed to load policy [ 778.216510][T19532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.216966][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.233180][T19529] netlink: 'syz.4.10648': attribute type 4 has an invalid length. [ 778.248454][T19532] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10647: corrupted inode contents [ 778.264529][T19532] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.10647: mark_inode_dirty error [ 778.265140][T19529] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 778.296771][T19527] lo speed is unknown, defaulting to 1000 [ 778.334027][T19532] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10647: corrupted inode contents [ 778.369003][T19532] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.10647: mark_inode_dirty error [ 778.514244][T19541] lo speed is unknown, defaulting to 1000 [ 778.553081][T19549] loop6: detected capacity change from 0 to 512 [ 778.589013][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.670603][T19549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.695386][T19549] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10653: corrupted inode contents [ 778.698652][T19546] lo speed is unknown, defaulting to 1000 [ 778.708258][T19549] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10653: mark_inode_dirty error [ 778.726566][T19549] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10653: corrupted inode contents [ 778.843168][T19549] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.10653: mark_inode_dirty error [ 778.863933][T19561] loop0: detected capacity change from 0 to 512 [ 778.927333][T19561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.115146][T19564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.123836][T19564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.134304][T19564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.142907][T19564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.174134][T19561] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.10656: corrupted inode contents [ 779.193218][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 779.193232][ T29] audit: type=1326 audit(779.153:26655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.283857][T19574] loop4: detected capacity change from 0 to 512 [ 779.329490][T19561] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.10656: mark_inode_dirty error [ 779.353839][T19564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.362436][T19564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.452915][T19574] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 779.488482][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.512747][ T29] audit: type=1326 audit(779.203:26656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.536099][ T29] audit: type=1326 audit(779.203:26657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.559450][ T29] audit: type=1326 audit(779.203:26658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.582596][ T29] audit: type=1326 audit(779.203:26659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.605826][ T29] audit: type=1326 audit(779.203:26660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.629112][ T29] audit: type=1326 audit(779.203:26661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.652196][ T29] audit: type=1326 audit(779.203:26662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.675297][ T29] audit: type=1326 audit(779.203:26663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.698398][ T29] audit: type=1326 audit(779.203:26664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19572 comm="syz.4.10657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 779.800821][T19556] lo speed is unknown, defaulting to 1000 [ 779.878403][T19561] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.10656: corrupted inode contents [ 779.990365][T19561] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.10656: mark_inode_dirty error [ 780.183537][T19574] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.10657: Failed to acquire dquot type 1 [ 780.205787][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.216041][T19574] EXT4-fs (loop4): 1 truncate cleaned up [ 780.222396][T19574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.255167][T19591] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 780.295913][T19574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.363088][T19599] lo speed is unknown, defaulting to 1000 [ 780.568968][T19607] lo speed is unknown, defaulting to 1000 [ 780.615031][T19607] __nla_validate_parse: 5 callbacks suppressed [ 780.615046][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10664'. [ 780.905280][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10671'. [ 780.918947][T19613] lo speed is unknown, defaulting to 1000 [ 780.960667][T19615] lo speed is unknown, defaulting to 1000 [ 781.032442][T19629] loop4: detected capacity change from 0 to 512 [ 781.037242][T19626] lo speed is unknown, defaulting to 1000 [ 781.074783][T19629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.108379][T19629] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10672: corrupted inode contents [ 781.173824][T19629] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.10672: mark_inode_dirty error [ 781.221339][T19629] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10672: corrupted inode contents [ 781.234751][T19629] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.10672: mark_inode_dirty error [ 781.410833][T19636] lo speed is unknown, defaulting to 1000 [ 781.573488][T19656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10678'. [ 781.594145][T19643] lo speed is unknown, defaulting to 1000 [ 781.614843][T19655] lo speed is unknown, defaulting to 1000 [ 781.694456][T19645] lo speed is unknown, defaulting to 1000 [ 781.862971][T19658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10679'. [ 782.006551][T19668] 9pnet_fd: Insufficient options for proto=fd [ 782.021320][T19668] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 782.033536][T19668] SELinux: failed to load policy [ 782.055624][T19668] netlink: 'syz.1.10682': attribute type 4 has an invalid length. [ 782.063580][T19668] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10682'. [ 782.185669][T19668] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 782.325109][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10685'. [ 782.524812][T19681] lo speed is unknown, defaulting to 1000 [ 782.585258][T19679] lo speed is unknown, defaulting to 1000 [ 782.625337][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10689'. [ 782.718675][T19698] loop1: detected capacity change from 0 to 1024 [ 782.731135][T19698] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 782.742132][T19698] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 782.770063][T19698] JBD2: no valid journal superblock found [ 782.775893][T19698] EXT4-fs (loop1): Could not load journal inode [ 782.847545][T19697] lo speed is unknown, defaulting to 1000 [ 782.847886][T19701] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10692'. [ 783.062942][T19719] netem: incorrect gi model size [ 783.067918][T19719] netem: change failed [ 783.121562][T19703] lo speed is unknown, defaulting to 1000 [ 783.147680][T19725] loop1: detected capacity change from 0 to 512 [ 783.173573][T19714] lo speed is unknown, defaulting to 1000 [ 783.190978][T19725] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.10700: corrupted inode contents [ 783.209994][T19725] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.10700: mark_inode_dirty error [ 783.224791][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10701'. [ 783.224948][T19725] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.10700: corrupted inode contents [ 783.252418][T19725] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.10700: mark_inode_dirty error [ 783.297542][T19722] lo speed is unknown, defaulting to 1000 [ 783.460748][T19746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10705'. [ 783.582586][T19744] lo speed is unknown, defaulting to 1000 [ 783.785180][T19760] lo speed is unknown, defaulting to 1000 [ 784.050621][T19766] netem: incorrect gi model size [ 784.055688][T19766] netem: change failed [ 784.200541][ T29] kauditd_printk_skb: 652 callbacks suppressed [ 784.200579][ T29] audit: type=1326 audit(784.183:27315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 784.235111][ T29] audit: type=1326 audit(784.183:27316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 784.258217][ T29] audit: type=1326 audit(784.183:27317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 784.281620][ T29] audit: type=1326 audit(784.183:27318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d7b81d550 code=0x7ffc0000 [ 784.304774][ T29] audit: type=1326 audit(784.183:27319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0d7b820417 code=0x7ffc0000 [ 784.327869][ T29] audit: type=1326 audit(784.183:27320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 784.350853][ T29] audit: type=1326 audit(784.183:27321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0d7b820417 code=0x7ffc0000 [ 784.373974][ T29] audit: type=1326 audit(784.183:27322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0d7b81d84a code=0x7ffc0000 [ 784.396844][ T29] audit: type=1326 audit(784.183:27323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 784.419910][ T29] audit: type=1326 audit(784.183:27324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19770 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0d7b81ebe9 code=0x7ffc0000 [ 784.500079][T19774] lo speed is unknown, defaulting to 1000 [ 784.555947][T19792] loop5: detected capacity change from 0 to 512 [ 784.563256][T19772] lo speed is unknown, defaulting to 1000 [ 784.572231][T19792] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 784.611898][T19792] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.10721: Failed to acquire dquot type 1 [ 784.658963][T19792] EXT4-fs (loop5): 1 truncate cleaned up [ 784.743520][T19790] lo speed is unknown, defaulting to 1000 [ 784.853156][T19804] lo speed is unknown, defaulting to 1000 [ 784.938834][T19807] loop0: detected capacity change from 0 to 512 [ 784.957268][T19821] 9pnet_fd: Insufficient options for proto=fd [ 784.990984][T19821] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 785.003089][T19821] SELinux: failed to load policy [ 785.013530][T19821] netlink: 'syz.1.10729': attribute type 4 has an invalid length. [ 785.025502][T19821] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 785.044922][T19807] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10726: bg 0: block 64: padding at end of block bitmap is not set [ 785.469811][T19848] 9pnet_fd: Insufficient options for proto=fd [ 785.477023][T19848] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 785.488763][T19848] SELinux: failed to load policy [ 785.495545][T19848] netlink: 'syz.1.10740': attribute type 4 has an invalid length. [ 785.516475][T19848] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 785.589639][T19850] lo speed is unknown, defaulting to 1000 [ 785.778208][T19874] __nla_validate_parse: 14 callbacks suppressed [ 785.778225][T19874] netlink: 276 bytes leftover after parsing attributes in process `syz.6.10752'. [ 785.798425][T19872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10751'. [ 785.826852][T19876] loop4: detected capacity change from 0 to 512 [ 785.857557][T19858] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10744: bg 0: block 64: padding at end of block bitmap is not set [ 785.882480][T19882] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10752'. [ 785.933065][T19884] lo speed is unknown, defaulting to 1000 [ 785.966368][T19889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10756'. [ 786.174312][T19912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10765'. [ 786.344559][T19906] lo speed is unknown, defaulting to 1000 [ 786.517358][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.525945][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.535329][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.543949][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.752914][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.761761][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.841120][T19924] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10769'. [ 787.562336][T19921] loop4: detected capacity change from 0 to 512 [ 787.681216][T19921] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10768: bg 0: block 64: padding at end of block bitmap is not set [ 787.712725][T19929] lo speed is unknown, defaulting to 1000 [ 788.210700][T19943] netlink: 276 bytes leftover after parsing attributes in process `syz.0.10777'. [ 788.272235][T19949] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10777'. [ 788.342742][T19948] lo speed is unknown, defaulting to 1000 [ 788.424646][T19965] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10783'. [ 788.611790][T19975] lo speed is unknown, defaulting to 1000 [ 788.622786][T19973] loop6: detected capacity change from 0 to 512 [ 788.676721][T19973] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10786: bg 0: block 64: padding at end of block bitmap is not set [ 788.809874][T19988] lo speed is unknown, defaulting to 1000 [ 788.833878][T19989] loop6: detected capacity change from 0 to 512 [ 788.861019][T19989] EXT4-fs mount: 13 callbacks suppressed [ 788.861035][T19989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.892018][T19988] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10791: corrupted inode contents [ 788.904427][T19988] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10791: mark_inode_dirty error [ 788.916446][T19988] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10791: corrupted inode contents [ 788.928795][T19988] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.10791: mark_inode_dirty error [ 788.953139][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.027820][T20000] netem: incorrect gi model size [ 789.032813][T20000] netem: change failed [ 789.051226][T20001] loop6: detected capacity change from 0 to 512 [ 789.082763][T19996] lo speed is unknown, defaulting to 1000 [ 789.102551][T20001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.144944][T19996] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10793: corrupted inode contents [ 789.182126][T20004] lo speed is unknown, defaulting to 1000 [ 789.258770][T19996] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10793: mark_inode_dirty error [ 789.274247][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 789.274313][ T29] audit: type=1326 audit(789.173:27737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.303794][ T29] audit: type=1326 audit(789.253:27753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.326967][ T29] audit: type=1326 audit(789.253:27754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.349939][ T29] audit: type=1326 audit(789.253:27755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.404630][ T29] audit: type=1326 audit(789.353:27756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.410183][T19996] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10793: corrupted inode contents [ 789.427874][ T29] audit: type=1326 audit(789.353:27757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.453200][T20012] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10798'. [ 789.462747][ T29] audit: type=1326 audit(789.363:27758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.462853][ T29] audit: type=1326 audit(789.363:27759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.462881][ T29] audit: type=1326 audit(789.363:27760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.462913][ T29] audit: type=1326 audit(789.363:27761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.4.10796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7468ebe9 code=0x7ffc0000 [ 789.527025][T19996] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.10793: mark_inode_dirty error [ 789.607735][T17003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.713530][T20030] loop6: detected capacity change from 0 to 512 [ 789.724536][T20029] loop4: detected capacity change from 0 to 512 [ 789.740954][T20030] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 789.752688][T20029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.771247][T20029] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10802: corrupted inode contents [ 789.783957][T20029] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.10802: mark_inode_dirty error [ 789.786822][T20032] netem: incorrect gi model size [ 789.797227][T20029] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.10802: corrupted inode contents [ 789.800322][T20032] netem: change failed [ 789.814664][T20029] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.10802: mark_inode_dirty error [ 789.816375][T20021] lo speed is unknown, defaulting to 1000 [ 789.830598][T20030] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.10805: Failed to acquire dquot type 1 [ 789.845086][T20033] loop5: detected capacity change from 0 to 512 [ 789.898334][T20030] EXT4-fs (loop6): 1 truncate cleaned up [ 789.906122][T20030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.982794][T20030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.986616][T20033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.052904][T20033] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10804: corrupted inode contents [ 790.070491][T20033] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.10804: mark_inode_dirty error [ 790.084270][T20033] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10804: corrupted inode contents [ 790.104441][T20048] loop0: detected capacity change from 0 to 512 [ 790.129702][T20033] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.10804: mark_inode_dirty error [ 790.180019][ T9807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.189806][T20048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.214271][T20027] lo speed is unknown, defaulting to 1000 [ 790.215183][T20048] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.10808: corrupted inode contents [ 790.235082][T20048] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.10808: mark_inode_dirty error [ 790.253646][T20048] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.10808: corrupted inode contents [ 790.279256][T20048] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.10808: mark_inode_dirty error [ 790.310224][T20055] loop4: detected capacity change from 0 to 256 [ 790.349027][T20045] lo speed is unknown, defaulting to 1000 [ 790.379392][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.428195][T20047] lo speed is unknown, defaulting to 1000 [ 790.613164][T20071] loop5: detected capacity change from 0 to 512 [ 790.634652][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.703227][T20077] netem: incorrect gi model size [ 790.703504][T20071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.708385][T20077] netem: change failed [ 790.727403][T20071] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10814: corrupted inode contents [ 790.740017][T20071] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.10814: mark_inode_dirty error [ 790.780084][T20071] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.10814: corrupted inode contents [ 790.833852][T20071] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.10814: mark_inode_dirty error [ 790.893672][T20093] loop1: detected capacity change from 0 to 512 [ 790.902774][T20080] lo speed is unknown, defaulting to 1000 [ 790.944466][T20066] lo speed is unknown, defaulting to 1000 [ 791.022936][T20093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.101301][T20108] loop4: detected capacity change from 0 to 512 [ 791.113247][T20108] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 791.127003][T20093] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.10820: corrupted inode contents [ 791.132429][T20083] lo speed is unknown, defaulting to 1000 [ 791.146022][T20093] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.10820: mark_inode_dirty error [ 791.160420][T20108] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.10830: Failed to acquire dquot type 1 [ 791.188288][T20108] EXT4-fs (loop4): 1 truncate cleaned up [ 791.190149][T20093] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.10820: corrupted inode contents [ 791.206614][T20115] __nla_validate_parse: 5 callbacks suppressed [ 791.206635][T20115] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10831'. [ 791.206727][ T2980] ================================================================== [ 791.229851][ T2980] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 791.233588][T20093] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.10820: mark_inode_dirty error [ 791.236889][ T2980] [ 791.236897][ T2980] write to 0xffffffff868af210 of 88 bytes by task 20115 on cpu 0: [ 791.236914][ T2980] prb_reserve+0x696/0xaf0 [ 791.262563][ T2980] vprintk_store+0x56d/0x860 [ 791.267165][ T2980] vprintk_emit+0x178/0x650 [ 791.271677][ T2980] _printk_deferred+0x82/0xb0 [ 791.276355][ T2980] ___ratelimit+0x4b1/0x4f0 [ 791.280854][ T2980] __nla_validate_parse+0x15e8/0x1d00 [ 791.286221][ T2980] __nla_parse+0x40/0x60 [ 791.290459][ T2980] rtnl_newlink+0x793/0x12d0 [ 791.295054][ T2980] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 791.299992][ T2980] netlink_rcv_skb+0x120/0x220 [ 791.304750][ T2980] rtnetlink_rcv+0x1c/0x30 [ 791.309166][ T2980] netlink_unicast+0x5c0/0x690 [ 791.313933][ T2980] netlink_sendmsg+0x58b/0x6b0 [ 791.318688][ T2980] __sock_sendmsg+0x145/0x180 [ 791.323357][ T2980] ____sys_sendmsg+0x31e/0x4e0 [ 791.328117][ T2980] ___sys_sendmsg+0x17b/0x1d0 [ 791.332784][ T2980] __x64_sys_sendmsg+0xd4/0x160 [ 791.337618][ T2980] x64_sys_call+0x191e/0x2ff0 [ 791.342283][ T2980] do_syscall_64+0xd2/0x200 [ 791.346776][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.352667][ T2980] [ 791.354972][ T2980] read to 0xffffffff868af210 of 8 bytes by task 2980 on cpu 1: [ 791.362496][ T2980] _prb_read_valid+0x383/0x920 [ 791.367249][ T2980] prb_read_valid+0x3c/0x60 [ 791.371786][ T2980] syslog_print+0xeb/0x540 [ 791.376194][ T2980] do_syslog+0x52b/0x7e0 [ 791.380429][ T2980] __x64_sys_syslog+0x41/0x50 [ 791.385097][ T2980] x64_sys_call+0x2f36/0x2ff0 [ 791.389761][ T2980] do_syscall_64+0xd2/0x200 [ 791.394250][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.400128][ T2980] [ 791.402433][ T2980] value changed: 0x000000000000243c -> 0x000000000000443c [ 791.409515][ T2980] [ 791.411819][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 791.417953][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: klogd Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 791.431476][ T2980] Tainted: [W]=WARN [ 791.435257][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 791.445295][ T2980] ================================================================== [ 791.456524][T20099] loop0: detected capacity change from 0 to 512 [ 791.472504][T20108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.493047][T20108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.502885][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.519491][T14271] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.531871][T20099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.559605][T20099] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10827: bg 0: block 64: padding at end of block bitmap is not set [ 791.621501][T15458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.