last executing test programs: 12m52.157115998s ago: executing program 1 (id=1771): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12m52.107971479s ago: executing program 1 (id=1772): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x20000000}, 0x18) get_mempolicy(0x0, 0x0, 0x8000, &(0x7f00007d1000/0x1000)=nil, 0x2) 12m52.002792061s ago: executing program 1 (id=1773): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f00000003c0)) setns(r8, 0x10000000) umount2(&(0x7f0000000440)='./file0\x00', 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='workqueue_execute_end\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010022bd7000fbdb0001006e657464657673696d0000000f0002006e657464037673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x49}, 0x4040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x1, &(0x7f00000004c0)={{0x77359400}, {r10, r11/1000+60000}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x2}, {0x3, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2}}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x10, 0xc}, {0x0, 0x8}}, [@TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x1db, 0x0, 0x0, 0x2, 0x9, 0x7}}, {0x12, 0x2, [0x997a, 0xfff, 0x1, 0x2, 0x2, 0x4, 0xff7d]}}, {{0x1c, 0x1, {0xd3, 0xfe, 0x5, 0xe, 0x2, 0x0, 0x1, 0x9}}, {0x16, 0x2, [0x8c, 0x7, 0x9, 0x2, 0xa8a, 0x7, 0x99c9, 0x6, 0xff]}}, {{0x1c, 0x1, {0x4, 0x6, 0x7, 0x2, 0x2, 0xba, 0x5c3, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0xb0}}, 0x1) 12m51.959377432s ago: executing program 1 (id=1775): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) 12m51.907982372s ago: executing program 1 (id=1776): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 12m51.832006403s ago: executing program 1 (id=1781): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12m51.800534584s ago: executing program 32 (id=1781): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10m8.83971735s ago: executing program 4 (id=4287): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f91124fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x60000480) socket(0x10, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 10m8.698512361s ago: executing program 4 (id=4289): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000200), &(0x7f00000002c0)=0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r5) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) 10m7.719734275s ago: executing program 4 (id=4294): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 10m6.6534681s ago: executing program 4 (id=4295): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"/97], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/161, 0xa1, 0x0, &(0x7f0000000000)=@x25, 0x80) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "62648f4b35b737b9", "21c20c7e7ad9ecfe5bccea278546791cbaf728f83c0a7efa8e26655613653bb4", '\x00', "01d787a90d233d89"}, 0x38) sendfile(r4, r5, &(0x7f0000000100)=0xffb, 0x10001) signalfd(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@errors_continue}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 10m5.780359652s ago: executing program 4 (id=4306): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xc0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 10m3.948440158s ago: executing program 4 (id=4317): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f91124fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x60000480) socket(0x10, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 10m3.928369258s ago: executing program 33 (id=4317): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f91124fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x60000480) socket(0x10, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 1.628697477s ago: executing program 5 (id=11559): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 1.586691067s ago: executing program 2 (id=11560): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 1.42431475s ago: executing program 3 (id=11567): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2581) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x101, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000400)="07cfe4da6a75b087972472272d9b8e18108e07ab02627bc624650cbb4850df205bb911ee0df04ae5ef8926ca73c946bc723012d35f4d91531634ae50d5c9c13a4c4cdbc48403bf6effe10b8494e9b82094d8732df9fb3920181ee1f6f0b3cdc9f5b0a9213e02792f94a4c45cb32ba188db47424caa77b479ac4ad723d4e427fb07a2ebe1c78f871c77d749c9d9b59817ae1afbc4749bc70cb1221a66c5018064", 0xa0, r0}, 0x68) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x6, 0x0) 1.38040077s ago: executing program 3 (id=11569): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'kmem_cache_free\x00'}, {0x20, '\x00'}, {}, {0x20, '/B\x96v.v\x97K\x03\bacsu#\x00'}]}, 0x30) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x13, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="88a56e86560acc9ad9d1355995aff3bd1f537b55118748e3f8c759ac", @ANYBLOB="1c514479500a73bcfc80f31c12cc77657fbc4131d7d37c4455687e9df7", @ANYBLOB="4283800eb6e15b2dcff628ea76efee2a622902ffe81fd994eb1bff6f3beba186c5c91565cb700eb34ea6e251d19b81357f34cf8a9b5684feeedc73f48970924708311bd2c75acd393b2d0ad26ba6d6cf80ef15dbdfed994a520a70ddc59301313c3e0cbe0a78a882829db85d35590b387c40a7f54ad10210eb77c3f76808ded41d76ac639d6c8976dd5079f798f47fe640629825b0b0b7742870e137a8c13b621885f4f009165f"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c000000f04a0e0000000000", @ANYRES32=r3, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000070000000000000000c62dfe8c"], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00'}, 0x18) r6 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240), &(0x7f0000000380)='$\x00LQ->\xa0\x85\'\xf4\xfc\x8f\x96\x96\xfd\xb6\xef\x7f\x04\a\x1b\x1c\xf4\xb8', 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x10, 0x0, 0x9, 0x0}) 1.266548682s ago: executing program 5 (id=11574): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x18204, 0x0, 0x4, 0x9, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xd) inotify_init1(0x40800) 1.238971082s ago: executing program 0 (id=11575): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 1.235283102s ago: executing program 5 (id=11576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000e1d000/0xe000)=nil, 0xe000) socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 1.145026404s ago: executing program 0 (id=11578): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x3500, 0x5dd8, 0x0, 0x9, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000600) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000001400048005000300070200000500030001000000000000a00008801c00078008008500020000002a00060000000000080005"], 0xe0}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r7, 0x0, 0x1000000005}, 0x18) pwritev(r10, &(0x7f0000000280), 0x31, 0x804, 0x8001) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 1.144532714s ago: executing program 5 (id=11579): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7039a189915000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x4, 0x4, 0xf2, @empty, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x8, 0x2, 0x40}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x238, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1dc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0xb1, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421e3569c90"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x3c, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0xd, 0x6, "4ac6768e05c6ec90b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r0}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.115995444s ago: executing program 2 (id=11581): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2581) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x101, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000400)="07cfe4da6a75b087972472272d9b8e18108e07ab02627bc624650cbb4850df205bb911ee0df04ae5ef8926ca73c946bc723012d35f4d91531634ae50d5c9c13a4c4cdbc48403bf6effe10b8494e9b82094d8732df9fb3920181ee1f6f0b3cdc9f5b0a9213e02792f94a4c45cb32ba188db47424caa77b479ac4ad723d4e427fb07a2ebe1c78f871c77d749c9d9b59817ae1afbc4749bc70cb1221a66c5018064", 0xa0, r0}, 0x68) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x6, 0x0) 1.060152195s ago: executing program 2 (id=11582): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x1ff, 0x1000, 0xb814, 0x20, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.042078045s ago: executing program 5 (id=11583): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r0, 0x5410, 0x80000020000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'/14], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@errors_remount}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x3ff}, 0x18) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRESDEC=r3, @ANYRES64=r4, @ANYRES32, @ANYRESHEX=r4, @ANYRESOCT=r4], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) syz_io_uring_setup(0x4022db, &(0x7f0000000400)={0x0, 0xfad9, 0x40}, &(0x7f0000000240), &(0x7f0000000280)) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81100) r11 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r11, &(0x7f0000000600)=""/98, 0x62) 999.131136ms ago: executing program 2 (id=11584): r0 = socket$inet(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c"], 0x40}, 0x20000004) 853.991438ms ago: executing program 0 (id=11587): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 784.965049ms ago: executing program 0 (id=11589): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 779.970159ms ago: executing program 6 (id=11590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), &(0x7f0000000380)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x2f, 0x1) 760.407719ms ago: executing program 0 (id=11591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000e1d000/0xe000)=nil, 0xe000) socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 759.869879ms ago: executing program 6 (id=11592): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2581) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x101, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000400)="07cfe4da6a75b087972472272d9b8e18108e07ab02627bc624650cbb4850df205bb911ee0df04ae5ef8926ca73c946bc723012d35f4d91531634ae50d5c9c13a4c4cdbc48403bf6effe10b8494e9b82094d8732df9fb3920181ee1f6f0b3cdc9f5b0a9213e02792f94a4c45cb32ba188db47424caa77b479ac4ad723d4e427fb07a2ebe1c78f871c77d749c9d9b59817ae1afbc4749bc70cb1221a66c5018064", 0xa0, r0}, 0x68) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) 690.29887ms ago: executing program 0 (id=11593): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r0, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000762dee0f3f095e4fa00000005000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='+}[@\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r7 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r6, r3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @rand_addr=' \x01\x00', 0x204}, {0xa, 0x4e20, 0x0, @empty, 0x10001}, r8, 0x403}}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8000}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6080) write$RDMA_USER_CM_CMD_BIND_IP(r10, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xd83, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, r8}}, 0x30) 677.76639ms ago: executing program 6 (id=11594): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0xffffffffffffffff, 0xee01) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000940)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, &(0x7f00000006c0), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000f0ffffff0180000088090500", @ANYRES32=r1, @ANYBLOB="030000000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="05000000030000000200"/24, @ANYRES32=r1, @ANYBLOB], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$eJzs3c9vG1kdAPCvnV9umm6ysIcFAVuWhYKq2om7G632wnJBQqvVIi2cEGqjxI2i2HEUO6UJkUjPXJGoxAn+BA5IHJB64s4NblzKAalABWqQEPJq7HGbOHFiNXHcxp+PNPJ7MxN/v8/SvBc/2/MCGFpXI2I3IsYj4nZETKf7M+kWH7a25LynT3YW957sLGai0fj0n6PpmTuL7fPbLqfPmYv4JKlPHBG3trW9ulAulzbSeqFeWS/UtrZvrFQWlkvLpbVicX5ufvb9m+8Vz6ytb1V++/i7Kx/98A+///KjP+1+66dJzt9OjyVtO7NA+7Rel7GY2rcveeU+6kewARhJ2zM+6ER4IdmI+FxEvJ2Wn8kNLicAoL8ajeloTO+vd5fp4RwA4OWXvOefikw2n77/n4psNp9vzuHl3ojJbLlaq1+/U91cW4rmHNZMjGXvrJRLs+lc4UyMZZL6XLP8vF7sqN+MiNcj4hcTl5r1/GK1vDSof3oAYMhd7hj//zPRGv974BMCAHiVGckBYPgcHv/HBpIHAHB+vP8HgOGzb/w/6re6AMAFlOv47T8AcPGdOP//Zvzsx+eTCgBwTnz+DwBD5fsff5xsjb30/tdLd7c2V6t3byyVaqv5yuZifrG6sZ5frlaXm/fsqZz0fOVqdX3u3di8V6iXavVCbWv7VqW6uVa/1byv962SHxYAwOC9/tbDv2QiYveDS80t2ms5+EIAXHgucxheI4NOABiY0UEnAAyM+Xggc8Lxrl8RetD9by6dIh+g/659ocv8//H/G/y/cT7pAX1k/h+G1+nm/80ewKvM/D8Mr0YjYz1/ABgyPbyD9xVBuOBe+PN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGJTzS2TzadrgU9FNpvPR1yJiJkYy9xZKZdmI+K1iPjzxNhEUp8bdNIAwCll/55J1/+6Nv3OVOfR8cx/J5qPEfGTX336y3sL9frGXLL/X8/21x+k+4tHBpjofxsAgH1GO3e0x+n2ON5e3/fpk53F9naeCT7+Tmtx0STuXrq1U28ln4uxiJj8d+ZAYzJntDDx7v2IeLOz/dlnx2fSlU874yexr/QtfjRbOHUgfvZA/GzzWOsxeS0+fwa5wLB5mPQ/Hx51/WXjavMxvf4yBzvTXPz8cOf6Atr9316js/9rXe+fXMk1+5qj+r+rvcZ494/f63rs/kjji6MRe4f63/aK0Llm6aj47/QY/69f+srb3Y41fh1xLY6L3yoV6pX1Qm1r+8ZKZWG5tFxaKxbn5+Zn37/5XrHQnKMutGeqD/vHB9df697+iMku8XMntP/rPbb/N/+7/aOvHhP/m187Kn423jgmfjImfqPH+AuTv+u6fHcSf6lL+0cPxB8/8HfJvus9xn/0t+2lHk8FAM5BbWt7daFcLm0onLaQ69czX35JGqhwTGEkyu35qJcin1MXBtwxAX33/KIfdCYAAAAAAAAAAAAAAEA3tR+kt/zr44/hBt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7PAgAA//+iDcmp") chdir(&(0x7f0000000040)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000004c0)="a3860d95bede4e4015d179e2fbadc6df45ea94310b00899ef83c040bcfca6620450a65613099baf3ef979b0dbe4dbab9d6e765b917e9ffb58052077b452c2214941bbcceddeca1c974ea346ed973bdbe61deb68cc82b97ce20098dabd4b4ddabed21290fbb381e773584ee557b30c2ddf287e1c543f43e657f4b7d02f485539b2892ccdfcbf925aef6eb971d537ad325cd99508392d5ea0a9de04452c7fb66d133b09fbd86553dd4036a35bea78bb063f4027e113da9f17a85de192d6392227468271e02f0a23605416f02d257573e87628b8a3fa303753252af988b2df117ef75fc98bf7f3b495fc3e8d0ecd06ec443e51bf13dca3dc1ecaccd15113dec9b520fe7888139300949c02cb287a6237e6898bbad07c8b8e98673f3467dd317f8dfd685b8e434f1bb93b1e1371d774764868673f7d2e9a30157ea523be58ab61c12ead8925df95e99f868ba2724866a51dfb61575d07511f8e2b1500aa726e26c6ada4cd2c205659a718fedd660d5fb88b78a68c84a5f276177cd8a6c911b85b4dd4ac65be9f849b2c4ce65fb558b1a881f9ace0238bfe1e4980afb83f7da97f19d3287a75dff18f19e4613dc6cd085fbf1327a241d9b47e8b2fd39242752c9aa7c71e5b79d7fe15d0ab700e9cc2d96a4b4e6fe044108dee3f8fb73dc2f175cbd042341ea61bd220528a43716e42ecd3e0f23d5dfd676b1a0d9ee8fea08a99014d059a79551245202ba3bc0a281587eafffe03ec406bff6d056c65cf4a019e63179111cb3c8b42b2b3c0560942c04c90848ff4e8b00d64966fd5b54e49554280d610bc0163e4e0f078f43629d86ceb96364f4ed2187bbae8711998a01195d8653f466c4ab34aec3510db42b330555edc1b2546f7ddec28e0392ad94f9a62a3c1bcec1f0caf9e3191b500f69972bdfd63e8ac5af7f73d2f8ff3216d6e04182ae2e1c3b569ddf2560aa59823f6a5d6a9756537ce813708997e711a8d3beb021ad31e9135b8adf56babf1d37eb8e9f5715a69c0353aafa91be47dc563403dd518032cd46b3ddcf3b2e8cd9e3929130a9ea818a9d74c57d37a82ca209e88adde0959e71c0c292662bb486a444244d929459f408d3d7b9d2fa16cd889854ee06137bf31827ff41b4a8f6fb11c5c92e4cf7576d93059b5c57cb2a5e7deb9eecc11e1bb97e44980d0b3c20a92ae62c40b403196cf37dfdfde17b10fbb35d5973da736a0c734c7d6e5bb8c5f8473d4c12a73cdceeebaf14cb73ec984ac401fba8061d4dcc98370d53b1d07e22b574e4b170ee8fc2a242b9c2b39ce57005a24b4f22e1fbe82863570d79d26bf167ed3efb67acd38de532b12612f11d425caa8de7903fd702319f4fab18d5230876ff7f3494aca964bb51dba5e906b7318da8a37caa240cf2f1625f3ca3444482154152898ef8daa0cc9c49eb9cb01fc797d567896bc89b88b41145d2c496294673b5e5555a63dc87d1ebe4df2eae146684dd684ca05b3ed566ee8a7439b45721848981211b9cb830da162c4049928beef785a2f845a8b55b91d5f0fd1a7ad05202b402821b8e5c2adc54246e84bcddfa", 0x457}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$inet(r9, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs$namespace(r10, &(0x7f00000001c0)='ns/user\x00') 644.712911ms ago: executing program 3 (id=11595): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x18204, 0x0, 0x4, 0x9, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x810, r1, 0xb1e69000) ptrace(0x10, r2) ptrace$getregset(0x4212, r2, 0x1, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/llc/socket\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0x9}) inotify_init1(0x40800) 572.703502ms ago: executing program 3 (id=11596): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 378.706665ms ago: executing program 6 (id=11597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3ff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, 0x0, &(0x7f0000000080)}, 0x20) 373.821274ms ago: executing program 3 (id=11598): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x3500, 0x5dd8, 0x0, 0x9, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x1100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000600) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x4, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000001400048005000300070200000500030001000000000000a00008801c00078008008500020000002a00060000000000080005"], 0xe0}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r7, 0x0, 0x1000000005}, 0x18) pwritev(r10, &(0x7f0000000280), 0x31, 0x804, 0x8001) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 276.785246ms ago: executing program 6 (id=11599): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 184.331297ms ago: executing program 5 (id=11600): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x204, 0x2581) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xc615, 0x101, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000000400)="07cfe4da6a75b087972472272d9b8e18108e07ab02627bc624650cbb4850df205bb911ee0df04ae5ef8926ca73c946bc723012d35f4d91531634ae50d5c9c13a4c4cdbc48403bf6effe10b8494e9b82094d8732df9fb3920181ee1f6f0b3cdc9f5b0a9213e02792f94a4c45cb32ba188db47424caa77b479ac4ad723d4e427fb07a2ebe1c78f871c77d749c9d9b59817ae1afbc4749bc70cb1221a66c5018064", 0xa0, r0}, 0x68) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) tee(r6, 0xffffffffffffffff, 0x7ffffffc, 0x7) 96.645739ms ago: executing program 2 (id=11601): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x18204, 0x0, 0x4, 0x9, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xd) sync() 81.368279ms ago: executing program 6 (id=11602): sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 64.682629ms ago: executing program 3 (id=11603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000e1d000/0xe000)=nil, 0xe000) socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 0s ago: executing program 2 (id=11604): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40021, 0x800000000004}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x22020400) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) poll(&(0x7f0000000000), 0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000280)='svcrdma_decode_short_err\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) 0s ago: executing program 6 (id=11605): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) alarm(0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) memfd_create(&(0x7f0000000040)='\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) creat(0x0, 0x81) ioctl$KDSIGACCEPT(r1, 0x5607, 0x38) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) execve(0x0, 0x0, &(0x7f00000003c0)) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') pipe2$9p(&(0x7f0000000140), 0x0) kernel console output (not intermixed with test programs): 367] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.781505][ T367] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.841637][ T367] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.918696][ T367] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.935801][ T367] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.948117][ T367] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.966262][ T385] netlink: 'syz.5.10173': attribute type 21 has an invalid length. [ 841.975425][ T367] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.065758][ T394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10177'. [ 843.201459][ T416] netlink: 'syz.3.10186': attribute type 21 has an invalid length. [ 843.369408][ T435] netlink: 'syz.5.10193': attribute type 1 has an invalid length. [ 843.392494][ T435] 8021q: adding VLAN 0 to HW filter on device bond7 [ 843.404668][ T435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10193'. [ 843.435132][ T435] bond7 (unregistering): Released all slaves [ 844.052258][ T466] netlink: 'syz.2.10203': attribute type 21 has an invalid length. [ 844.307962][ T478] loop6: detected capacity change from 0 to 2048 [ 844.315360][ T478] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 844.359265][ T481] loop6: detected capacity change from 0 to 1024 [ 844.368172][ T481] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 844.378043][ T481] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 844.391216][ T481] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 844.417070][ T481] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.10208: unexpected bad inode w/o EXT4_IGET_BAD [ 844.447087][ T481] EXT4-fs (loop6): Remounting filesystem read-only [ 844.453807][ T481] EXT4-fs (loop6): no journal found [ 844.459109][ T481] EXT4-fs (loop6): can't get journal size [ 844.465651][ T481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 844.572620][ T504] netlink: 'syz.2.10215': attribute type 21 has an invalid length. [ 845.197503][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.421639][ T545] netlink: 'syz.5.10230': attribute type 21 has an invalid length. [ 845.703213][ T561] loop6: detected capacity change from 0 to 2048 [ 845.752228][ T561] Alternate GPT is invalid, using primary GPT. [ 845.758652][ T561] loop6: p2 p3 p7 [ 845.797103][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 845.797121][ T29] audit: type=1326 audit(1748964778.945:36953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 845.827232][ T29] audit: type=1326 audit(1748964778.945:36954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 845.850822][ T29] audit: type=1326 audit(1748964778.945:36955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 845.875658][ T29] audit: type=1326 audit(1748964778.975:36956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 845.899250][ T29] audit: type=1326 audit(1748964778.975:36957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 845.922798][ T29] audit: type=1326 audit(1748964779.005:36958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 845.946264][ T29] audit: type=1326 audit(1748964779.005:36959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 845.969894][ T29] audit: type=1326 audit(1748964779.005:36960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 845.993324][ T29] audit: type=1326 audit(1748964779.005:36961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 846.017048][ T29] audit: type=1326 audit(1748964779.005:36962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=572 comm="syz.6.10245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 846.176697][ T585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10248'. [ 846.489844][ T610] loop6: detected capacity change from 0 to 2048 [ 846.496970][ T610] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 846.525866][ T612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10259'. [ 846.638807][ T618] netlink: 'syz.6.10262': attribute type 1 has an invalid length. [ 846.714713][ T623] vhci_hcd: invalid port number 16 [ 846.719930][ T623] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 846.843710][ T637] loop6: detected capacity change from 0 to 2048 [ 846.851127][ T637] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 846.885639][ T639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10270'. [ 847.094552][ T647] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.142887][ T647] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.190478][ T650] netlink: 'syz.5.10274': attribute type 1 has an invalid length. [ 847.200113][ T647] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.240388][ T647] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.296694][ T647] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.311069][ T647] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.324640][ T647] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.337501][ T647] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 847.395234][ T669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10282'. [ 847.588015][ T687] netlink: 'syz.3.10288': attribute type 1 has an invalid length. [ 847.764961][ T703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10294'. [ 847.878528][ T711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10298'. [ 847.908136][ T717] netlink: 'syz.6.10300': attribute type 1 has an invalid length. [ 848.124230][ T737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10308'. [ 848.133852][ T737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10308'. [ 848.304467][ T741] 8021q: adding VLAN 0 to HW filter on device bond9 [ 848.319352][ T741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10310'. [ 848.331063][ T741] bond9 (unregistering): Released all slaves [ 849.188028][ T766] netlink: 'syz.2.10317': attribute type 1 has an invalid length. [ 849.262663][ T767] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 849.395473][ T772] loop6: detected capacity change from 0 to 1024 [ 849.439956][ T772] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 849.449871][ T772] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 849.477337][ T772] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 849.496400][ T781] binfmt_misc: register: failed to install interpreter file ./file0 [ 849.504827][ T772] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.10320: unexpected bad inode w/o EXT4_IGET_BAD [ 849.528500][ T772] EXT4-fs (loop6): Remounting filesystem read-only [ 849.535107][ T772] EXT4-fs (loop6): no journal found [ 849.540455][ T772] EXT4-fs (loop6): can't get journal size [ 849.552916][ T772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 850.186083][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.737716][ T817] netlink: 'syz.6.10331': attribute type 1 has an invalid length. [ 850.893661][ T820] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 850.932610][ T826] binfmt_misc: register: failed to install interpreter file ./file0 [ 850.966032][ T828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10335'. [ 850.977462][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 850.977480][ T29] audit: type=1326 audit(1748964784.125:37212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.079860][ T29] audit: type=1326 audit(1748964784.135:37213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.103448][ T29] audit: type=1326 audit(1748964784.135:37214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.127261][ T29] audit: type=1326 audit(1748964784.165:37215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.150861][ T29] audit: type=1326 audit(1748964784.165:37216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.174538][ T29] audit: type=1326 audit(1748964784.175:37217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.198080][ T29] audit: type=1326 audit(1748964784.175:37218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.203151][ T845] loop6: detected capacity change from 0 to 128 [ 851.221630][ T29] audit: type=1326 audit(1748964784.175:37219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.244265][ T845] bio_check_eod: 9 callbacks suppressed [ 851.244287][ T845] syz.6.10342: attempt to access beyond end of device [ 851.244287][ T845] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 851.251312][ T29] audit: type=1326 audit(1748964784.175:37220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.270735][ T845] syz.6.10342: attempt to access beyond end of device [ 851.270735][ T845] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 851.293859][ T29] audit: type=1326 audit(1748964784.175:37221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=829 comm="syz.6.10337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 851.307376][ T845] buffer_io_error: 8 callbacks suppressed [ 851.307396][ T845] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 851.346878][ T845] syz.6.10342: attempt to access beyond end of device [ 851.346878][ T845] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 851.360545][ T845] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 851.369792][ T845] syz.6.10342: attempt to access beyond end of device [ 851.369792][ T845] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 851.383353][ T845] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 851.392028][ T845] syz.6.10342: attempt to access beyond end of device [ 851.392028][ T845] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 851.405623][ T845] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 851.414334][ T845] syz.6.10342: attempt to access beyond end of device [ 851.414334][ T845] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 851.427931][ T845] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 851.436784][ T845] syz.6.10342: attempt to access beyond end of device [ 851.436784][ T845] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 851.450501][ T845] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 851.516081][ T845] syz.6.10342: attempt to access beyond end of device [ 851.516081][ T845] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 851.529764][ T845] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 851.673303][ T848] netlink: 'syz.6.10342': attribute type 21 has an invalid length. [ 851.681906][ T845] syz.6.10342: attempt to access beyond end of device [ 851.681906][ T845] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 851.695535][ T845] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 851.708796][ T850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10343'. [ 851.786171][ T845] syz.6.10342: attempt to access beyond end of device [ 851.786171][ T845] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 851.799774][ T845] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 851.820448][ T845] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 852.377575][ T859] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 852.449643][ T867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10350'. [ 852.566019][ T872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10351'. [ 852.800403][ T881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10355'. [ 853.064635][ T891] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 853.684656][ T910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10365'. [ 854.201988][ T921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10368'. [ 854.393056][ T935] netlink: 'syz.6.10374': attribute type 1 has an invalid length. [ 854.426880][ T935] 8021q: adding VLAN 0 to HW filter on device bond9 [ 854.441526][ T935] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10374'. [ 854.455745][ T935] bond9 (unregistering): Released all slaves [ 854.683903][ T952] loop6: detected capacity change from 0 to 128 [ 854.722980][ T952] netlink: 'syz.6.10381': attribute type 21 has an invalid length. [ 854.776798][ T955] loop6: detected capacity change from 0 to 2048 [ 854.821744][ T955] Alternate GPT is invalid, using primary GPT. [ 854.828153][ T955] loop6: p2 p3 p7 [ 855.036117][ T961] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 857.519912][ T1038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10415'. [ 857.586322][ T1038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10415'. [ 857.680020][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 857.680035][ T29] audit: type=1326 audit(1748964790.835:37589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 857.862894][ T29] audit: type=1326 audit(1748964790.865:37590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 857.886727][ T29] audit: type=1326 audit(1748964790.865:37591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 857.910922][ T29] audit: type=1326 audit(1748964790.865:37592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 857.934512][ T29] audit: type=1326 audit(1748964790.865:37593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 857.958100][ T29] audit: type=1326 audit(1748964790.865:37594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 857.981807][ T29] audit: type=1326 audit(1748964790.865:37595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 858.005383][ T29] audit: type=1326 audit(1748964790.865:37596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 858.029075][ T29] audit: type=1326 audit(1748964790.865:37597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 858.052710][ T29] audit: type=1326 audit(1748964790.865:37598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.0.10416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 858.134016][ T1053] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.202018][ T1053] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.253489][ T1053] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.303605][ T1053] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.375814][ T1053] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.419665][ T1053] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.517617][ T1053] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.535400][ T1053] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.672069][ T1077] netlink: 'syz.6.10427': attribute type 1 has an invalid length. [ 858.719007][ T1077] 8021q: adding VLAN 0 to HW filter on device bond9 [ 858.957130][ T1089] loop6: detected capacity change from 0 to 1024 [ 858.973117][ T1089] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 858.982966][ T1089] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 859.215599][ T1089] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 859.254562][ T1089] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.10433: unexpected bad inode w/o EXT4_IGET_BAD [ 859.300032][ T1089] EXT4-fs (loop6): Remounting filesystem read-only [ 859.306707][ T1089] EXT4-fs (loop6): no journal found [ 859.311957][ T1089] EXT4-fs (loop6): can't get journal size [ 859.321056][ T1089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 859.658577][ T1115] netlink: 'syz.5.10443': attribute type 1 has an invalid length. [ 859.750281][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.770243][ T1115] 8021q: adding VLAN 0 to HW filter on device bond7 [ 860.011092][ T1126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10447'. [ 860.095555][ T1121] vhci_hcd: invalid port number 16 [ 860.100836][ T1121] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 860.914115][ T1154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10457'. [ 861.874111][ T1161] netlink: 'syz.5.10462': attribute type 1 has an invalid length. [ 862.005980][ T1161] 8021q: adding VLAN 0 to HW filter on device bond8 [ 862.039006][ T1174] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10458'. [ 862.058301][ T1168] netlink: 'syz.2.10463': attribute type 21 has an invalid length. [ 862.488584][ T1196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10471'. [ 862.946017][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 862.946036][ T29] audit: type=1326 audit(1748964796.095:37851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.5.10474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 862.975935][ T29] audit: type=1326 audit(1748964796.095:37852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.5.10474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 863.002888][ T1204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10477'. [ 863.053950][ T29] audit: type=1326 audit(1748964796.205:37853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1206 comm="syz.2.10479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 863.077771][ T29] audit: type=1326 audit(1748964796.205:37854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1206 comm="syz.2.10479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 863.102193][ T29] audit: type=1326 audit(1748964796.215:37855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1206 comm="syz.2.10479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 863.121120][ T1209] netlink: 'syz.5.10478': attribute type 1 has an invalid length. [ 863.134076][ T29] audit: type=1326 audit(1748964796.285:37856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1206 comm="syz.2.10479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 863.221973][ T1209] 8021q: adding VLAN 0 to HW filter on device bond9 [ 863.251761][ T29] audit: type=1326 audit(1748964796.385:37857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1206 comm="syz.2.10479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 863.353988][ T29] audit: type=1326 audit(1748964796.425:37858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1206 comm="syz.2.10479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 863.377702][ T29] audit: type=1326 audit(1748964796.425:37859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1206 comm="syz.2.10479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 863.401346][ T29] audit: type=1326 audit(1748964796.425:37860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1206 comm="syz.2.10479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 863.437104][ T1216] netlink: 'syz.0.10480': attribute type 21 has an invalid length. [ 863.477429][ T1233] loop6: detected capacity change from 0 to 1024 [ 863.492875][ T1233] EXT4-fs: Ignoring removed nobh option [ 863.498604][ T1233] EXT4-fs: Ignoring removed bh option [ 863.517802][ T1222] netlink: 'syz.3.10481': attribute type 21 has an invalid length. [ 863.545150][ T1233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.574379][ T1240] netlink: 'syz.2.10487': attribute type 21 has an invalid length. [ 864.027440][ T1275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10499'. [ 864.118206][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.398745][ T1316] loop6: detected capacity change from 0 to 1024 [ 864.406123][ T1316] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 864.416061][ T1316] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 864.425864][ T1316] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 864.539589][ T1321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10509'. [ 864.571788][ T1316] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.10513: unexpected bad inode w/o EXT4_IGET_BAD [ 864.607380][ T1316] EXT4-fs (loop6): Remounting filesystem read-only [ 864.614072][ T1316] EXT4-fs (loop6): no journal found [ 864.619328][ T1316] EXT4-fs (loop6): can't get journal size [ 864.664599][ T1316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 865.346539][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.430533][ T1344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10523'. [ 865.679947][ T1363] netlink: 'syz.3.10530': attribute type 1 has an invalid length. [ 865.694374][ T1363] 8021q: adding VLAN 0 to HW filter on device bond8 [ 865.753470][ T1369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10528'. [ 866.853078][ T1391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10537'. [ 868.542855][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 868.542875][ T29] audit: type=1326 audit(1748964801.695:38209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 868.686046][ T29] audit: type=1326 audit(1748964801.725:38210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 868.709818][ T29] audit: type=1326 audit(1748964801.725:38211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 868.733472][ T29] audit: type=1326 audit(1748964801.725:38212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 868.757252][ T29] audit: type=1326 audit(1748964801.725:38213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 868.780825][ T29] audit: type=1326 audit(1748964801.735:38214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 868.804537][ T29] audit: type=1326 audit(1748964801.735:38215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 868.828140][ T29] audit: type=1326 audit(1748964801.735:38216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 868.851758][ T29] audit: type=1326 audit(1748964801.735:38217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 868.875514][ T29] audit: type=1326 audit(1748964801.735:38218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1410 comm="syz.0.10546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 869.367642][ T1427] netlink: 'syz.0.10550': attribute type 21 has an invalid length. [ 869.790408][ T1453] vhci_hcd: invalid port number 16 [ 869.795602][ T1453] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 869.906660][ T1461] netlink: 'syz.5.10564': attribute type 21 has an invalid length. [ 869.922061][ T1446] vhci_hcd: invalid port number 16 [ 869.927251][ T1446] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 870.124022][ T1473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10568'. [ 870.555914][ T1495] netlink: 'syz.6.10577': attribute type 21 has an invalid length. [ 870.750453][ T1505] binfmt_misc: register: failed to install interpreter file ./file0 [ 870.908069][ T1531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1531 comm=syz.0.10591 [ 870.966143][ T1533] netlink: 'syz.2.10589': attribute type 21 has an invalid length. [ 871.908106][ T1583] binfmt_misc: register: failed to install interpreter file ./file0 [ 872.066446][ T1587] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 872.745772][ T1636] loop6: detected capacity change from 0 to 2048 [ 872.802005][ T1636] Alternate GPT is invalid, using primary GPT. [ 872.808651][ T1636] loop6: p2 p3 p7 [ 872.888125][ T1642] lo speed is unknown, defaulting to 1000 [ 872.894736][ T1642] lo speed is unknown, defaulting to 1000 [ 872.937840][ T1642] lo speed is unknown, defaulting to 1000 [ 873.229151][ T1657] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 873.793237][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 873.793255][ T29] audit: type=1326 audit(1748964806.945:38668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.6.10637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 873.833262][ T29] audit: type=1326 audit(1748964806.945:38669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1667 comm="syz.6.10637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 873.874857][ T1672] lo speed is unknown, defaulting to 1000 [ 873.881617][ T1672] lo speed is unknown, defaulting to 1000 [ 873.894424][ T29] audit: type=1326 audit(1748964807.045:38670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1678 comm="syz.0.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 873.918206][ T29] audit: type=1326 audit(1748964807.045:38671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1678 comm="syz.0.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 873.934698][ T1672] lo speed is unknown, defaulting to 1000 [ 873.949299][ T29] audit: type=1326 audit(1748964807.095:38672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1678 comm="syz.0.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 873.972957][ T29] audit: type=1326 audit(1748964807.095:38673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1678 comm="syz.0.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 873.996611][ T29] audit: type=1326 audit(1748964807.095:38674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1678 comm="syz.0.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 874.020259][ T29] audit: type=1326 audit(1748964807.095:38675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1678 comm="syz.0.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 874.043900][ T29] audit: type=1326 audit(1748964807.095:38676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1678 comm="syz.0.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 874.064500][ T1683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10636'. [ 874.068406][ T29] audit: type=1326 audit(1748964807.105:38677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1678 comm="syz.0.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 874.104398][ T1685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10643'. [ 874.133362][ T1683] bond9: entered promiscuous mode [ 874.138479][ T1683] bond9: entered allmulticast mode [ 874.144556][ T1683] 8021q: adding VLAN 0 to HW filter on device bond9 [ 874.183739][ T1694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10645'. [ 874.365662][ T1700] loop6: detected capacity change from 0 to 512 [ 874.373654][ T1700] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 874.383496][ T1700] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 874.396149][ T1700] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz.6.10647: Invalid inode table block 0 in block_group 0 [ 874.409612][ T1700] EXT4-fs (loop6): get root inode failed [ 874.415303][ T1700] EXT4-fs (loop6): mount failed [ 874.863641][ T1722] lo speed is unknown, defaulting to 1000 [ 874.879714][ T1722] lo speed is unknown, defaulting to 1000 [ 875.061622][ T1722] lo speed is unknown, defaulting to 1000 [ 875.209790][ T1732] lo speed is unknown, defaulting to 1000 [ 875.216320][ T1732] lo speed is unknown, defaulting to 1000 [ 875.292760][ T1732] lo speed is unknown, defaulting to 1000 [ 875.772974][ T1744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10655'. [ 875.875880][ T1744] bond15: entered promiscuous mode [ 875.881135][ T1744] bond15: entered allmulticast mode [ 875.918718][ T1744] 8021q: adding VLAN 0 to HW filter on device bond15 [ 876.017367][ T1748] lo speed is unknown, defaulting to 1000 [ 876.024980][ T1748] lo speed is unknown, defaulting to 1000 [ 876.034259][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10664'. [ 876.153066][ T1761] bond10: entered promiscuous mode [ 876.158458][ T1761] bond10: entered allmulticast mode [ 876.174377][ T1761] 8021q: adding VLAN 0 to HW filter on device bond10 [ 876.182408][ T1748] lo speed is unknown, defaulting to 1000 [ 876.228155][ T1776] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.260457][ T1780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10676'. [ 876.305112][ T1776] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.450612][ T1776] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.563513][ T1793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10678'. [ 876.593614][ T1776] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.752702][ T1776] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.843253][ T1776] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.923342][ T1776] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.000034][ T1776] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.638512][ T1873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10704'. [ 877.846395][ T1875] lo speed is unknown, defaulting to 1000 [ 877.876499][ T1875] lo speed is unknown, defaulting to 1000 [ 878.004181][ T1875] lo speed is unknown, defaulting to 1000 [ 878.155533][ T1888] program syz.6.10716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 878.377050][ T1909] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10724'. [ 878.800707][ T1917] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 879.640701][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 879.640719][ T29] audit: type=1326 audit(1748964812.795:38818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 879.641537][ T1925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10731'. [ 879.647887][ T29] audit: type=1326 audit(1748964812.795:38819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 879.725069][ T29] audit: type=1326 audit(1748964812.865:38820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 879.748816][ T29] audit: type=1326 audit(1748964812.865:38821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 879.772566][ T29] audit: type=1326 audit(1748964812.865:38822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 879.796408][ T29] audit: type=1326 audit(1748964812.865:38823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 879.820158][ T29] audit: type=1326 audit(1748964812.865:38824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 879.844048][ T29] audit: type=1326 audit(1748964812.865:38825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 879.867831][ T29] audit: type=1326 audit(1748964812.865:38826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 879.891471][ T29] audit: type=1326 audit(1748964812.865:38827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1927 comm="syz.6.10733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 880.070853][ T1929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10732'. [ 880.447755][ T1940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10737'. [ 880.493737][ T1938] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 880.657549][ T1947] binfmt_misc: register: failed to install interpreter file ./file0 [ 880.878272][ T1934] netlink: 'syz.3.10734': attribute type 21 has an invalid length. [ 881.168260][ T1963] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.438664][ T1968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10747'. [ 881.932167][ T1963] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 881.950233][ T1966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10746'. [ 881.959398][ T1966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10746'. [ 881.971918][ T1973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10749'. [ 882.030329][ T1963] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.107708][ T1963] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.120503][ T1977] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 882.155755][ T1963] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.179647][ T1963] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.205042][ T1963] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.226937][ T1963] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 882.235382][ T1987] loop6: detected capacity change from 0 to 1024 [ 882.295381][ T1987] EXT4-fs: Ignoring removed nobh option [ 882.301267][ T1987] EXT4-fs: Ignoring removed bh option [ 882.330350][ T1987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 882.379375][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10760'. [ 882.621032][ T2031] SELinux: security_context_str_to_sid () failed with errno=-22 [ 882.728664][ T2035] random: crng reseeded on system resumption [ 882.893255][ T2043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10774'. [ 882.969861][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.560882][ T2075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10785'. [ 883.706962][ T2077] netlink: 'syz.5.10786': attribute type 21 has an invalid length. [ 883.974694][ T2093] netlink: 'syz.3.10791': attribute type 10 has an invalid length. [ 883.982809][ T2093] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10791'. [ 884.063378][ T2105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10796'. [ 884.159755][ T2111] lo speed is unknown, defaulting to 1000 [ 884.165853][ T2111] lo speed is unknown, defaulting to 1000 [ 884.224481][ T2112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10793'. [ 884.428507][ T2113] bond10: entered promiscuous mode [ 884.433769][ T2113] bond10: entered allmulticast mode [ 884.535711][ T2113] 8021q: adding VLAN 0 to HW filter on device bond10 [ 884.574227][ T2118] wireguard1: entered promiscuous mode [ 884.579814][ T2118] wireguard1: entered allmulticast mode [ 884.616355][ T2111] lo speed is unknown, defaulting to 1000 [ 884.759084][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 884.759101][ T29] audit: type=1400 audit(1748964817.905:39347): avc: denied { mount } for pid=2122 comm="syz.5.10800" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 884.889578][ T2135] binfmt_misc: register: failed to install interpreter file ./file0 [ 885.042257][ T2145] loop6: detected capacity change from 0 to 128 [ 885.122932][ T29] audit: type=1326 audit(1748964818.275:39348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2146 comm="syz.2.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 885.160742][ T2145] bio_check_eod: 28 callbacks suppressed [ 885.160762][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.160762][ T2145] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 885.180110][ T29] audit: type=1326 audit(1748964818.275:39349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2146 comm="syz.2.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 885.203657][ T29] audit: type=1326 audit(1748964818.275:39350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2146 comm="syz.2.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 885.227392][ T29] audit: type=1326 audit(1748964818.275:39351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2146 comm="syz.2.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 885.229131][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.229131][ T2145] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 885.251013][ T29] audit: type=1326 audit(1748964818.275:39352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2146 comm="syz.2.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 885.251054][ T29] audit: type=1326 audit(1748964818.275:39353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2146 comm="syz.2.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 885.264571][ T2145] buffer_io_error: 26 callbacks suppressed [ 885.264586][ T2145] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 885.264840][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.264840][ T2145] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 885.288073][ T29] audit: type=1326 audit(1748964818.275:39354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2146 comm="syz.2.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 885.311659][ T2145] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 885.317430][ T29] audit: type=1326 audit(1748964818.275:39355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2146 comm="syz.2.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 885.395288][ T29] audit: type=1326 audit(1748964818.275:39356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2146 comm="syz.2.10810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 885.395745][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.395745][ T2145] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 885.432590][ T2145] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 885.441923][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.441923][ T2145] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 885.455670][ T2145] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 885.455941][ T2149] netlink: 'syz.6.10809': attribute type 21 has an invalid length. [ 885.474807][ T2150] lo speed is unknown, defaulting to 1000 [ 885.481688][ T2150] lo speed is unknown, defaulting to 1000 [ 885.493259][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.493259][ T2145] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 885.506855][ T2145] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 885.516295][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.516295][ T2145] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 885.530134][ T2145] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 885.539607][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.539607][ T2145] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 885.553216][ T2145] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 885.561055][ T2150] lo speed is unknown, defaulting to 1000 [ 885.562055][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.562055][ T2145] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 885.581125][ T2145] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 885.590233][ T2145] syz.6.10809: attempt to access beyond end of device [ 885.590233][ T2145] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 885.603798][ T2145] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 885.618065][ T2145] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 886.347912][ T2199] FAULT_INJECTION: forcing a failure. [ 886.347912][ T2199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.361207][ T2199] CPU: 0 UID: 0 PID: 2199 Comm: syz.5.10830 Tainted: G W 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 886.361247][ T2199] Tainted: [W]=WARN [ 886.361254][ T2199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 886.361267][ T2199] Call Trace: [ 886.361275][ T2199] [ 886.361324][ T2199] __dump_stack+0x1d/0x30 [ 886.361352][ T2199] dump_stack_lvl+0xe8/0x140 [ 886.361379][ T2199] dump_stack+0x15/0x1b [ 886.361401][ T2199] should_fail_ex+0x265/0x280 [ 886.361427][ T2199] should_fail+0xb/0x20 [ 886.361523][ T2199] should_fail_usercopy+0x1a/0x20 [ 886.361615][ T2199] _copy_to_user+0x20/0xa0 [ 886.361705][ T2199] simple_read_from_buffer+0xb5/0x130 [ 886.361783][ T2199] proc_fail_nth_read+0x100/0x140 [ 886.361811][ T2199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 886.361841][ T2199] vfs_read+0x1a0/0x6f0 [ 886.361882][ T2199] ? __sys_setsockopt+0x18e/0x200 [ 886.361913][ T2199] ? __rcu_read_unlock+0x4f/0x70 [ 886.361998][ T2199] ? __fget_files+0x184/0x1c0 [ 886.362027][ T2199] ksys_read+0xda/0x1a0 [ 886.362051][ T2199] __x64_sys_read+0x40/0x50 [ 886.362100][ T2199] x64_sys_call+0x2d77/0x2fb0 [ 886.362143][ T2199] do_syscall_64+0xd2/0x200 [ 886.362179][ T2199] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 886.362210][ T2199] ? clear_bhb_loop+0x40/0x90 [ 886.362259][ T2199] ? clear_bhb_loop+0x40/0x90 [ 886.362282][ T2199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.362305][ T2199] RIP: 0033:0x7f3165bcd37c [ 886.362324][ T2199] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 886.362352][ T2199] RSP: 002b:00007f3164237030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 886.362419][ T2199] RAX: ffffffffffffffda RBX: 00007f3165df5fa0 RCX: 00007f3165bcd37c [ 886.362436][ T2199] RDX: 000000000000000f RSI: 00007f31642370a0 RDI: 0000000000000004 [ 886.362453][ T2199] RBP: 00007f3164237090 R08: 0000000000000000 R09: 0000000000000000 [ 886.362467][ T2199] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 886.362485][ T2199] R13: 0000000000000000 R14: 00007f3165df5fa0 R15: 00007ffd969ac1e8 [ 886.362515][ T2199] [ 886.878014][ T2217] macsec0: entered promiscuous mode [ 886.883392][ T2217] bridge0: entered promiscuous mode [ 887.355186][ T2217] bridge0: port 1(macsec0) entered blocking state [ 887.361729][ T2217] bridge0: port 1(macsec0) entered disabled state [ 887.388935][ T2217] macsec0: entered allmulticast mode [ 887.394342][ T2217] bridge0: entered allmulticast mode [ 887.435290][ T2217] macsec0: left allmulticast mode [ 887.440481][ T2217] bridge0: left allmulticast mode [ 887.481491][ T2217] bridge0: left promiscuous mode [ 887.675226][ T2229] binfmt_misc: register: failed to install interpreter file ./file0 [ 888.413134][ T2250] netlink: 'syz.0.10849': attribute type 10 has an invalid length. [ 888.421341][ T2250] __nla_validate_parse: 4 callbacks suppressed [ 888.421353][ T2250] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10849'. [ 888.750623][ T2254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10843'. [ 889.020004][ T2271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10854'. [ 889.029224][ T2271] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10854'. [ 889.569257][ T2279] netlink: 'syz.0.10857': attribute type 10 has an invalid length. [ 889.577264][ T2279] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10857'. [ 889.834737][ T2291] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 889.856805][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 889.856821][ T29] audit: type=1400 audit(1748964822.995:39578): avc: denied { relabelto } for pid=2290 comm="syz.5.10861" name="cgroup.procs" dev="cgroup" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 889.890345][ T29] audit: type=1400 audit(1748964822.995:39579): avc: denied { associate } for pid=2290 comm="syz.5.10861" name="cgroup.procs" dev="cgroup" ino=445 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0" [ 889.923772][ T29] audit: type=1326 audit(1748964823.075:39580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.0.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 890.003101][ T29] audit: type=1326 audit(1748964823.075:39581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.0.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 890.026913][ T29] audit: type=1326 audit(1748964823.155:39582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.0.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 890.050565][ T29] audit: type=1326 audit(1748964823.155:39583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.0.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 890.074301][ T29] audit: type=1326 audit(1748964823.155:39584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.0.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 890.097945][ T29] audit: type=1326 audit(1748964823.155:39585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.0.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 890.121577][ T29] audit: type=1326 audit(1748964823.155:39586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.0.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 890.145216][ T29] audit: type=1326 audit(1748964823.155:39587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.0.10860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 890.440821][ T2305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10865'. [ 890.569101][ T2309] cgroup: Need name or subsystem set [ 890.579077][ T2310] netlink: 200 bytes leftover after parsing attributes in process `syz.3.10867'. [ 890.852213][ T2334] netlink: 'syz.0.10878': attribute type 10 has an invalid length. [ 890.860245][ T2334] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10878'. [ 891.000171][ T2340] netlink: 'syz.6.10880': attribute type 1 has an invalid length. [ 891.014871][ T2340] bond0: (slave bond_slave_0): Releasing backup interface [ 891.024011][ T2340] bond10: (slave bond_slave_0): Enslaving as a backup interface with a down link [ 891.085377][ T2347] loop6: detected capacity change from 0 to 512 [ 891.100969][ T2347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.113814][ T2347] ext4 filesystem being mounted at /1064/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 891.132378][ T2347] EXT4-fs error (device loop6): ext4_get_first_dir_block:3525: inode #12: comm syz.6.10881: Attempting to read directory block (0) that is past i_size (3) [ 891.162505][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.247483][ T2366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10888'. [ 891.298382][ T2368] netlink: 'syz.5.10889': attribute type 10 has an invalid length. [ 891.306482][ T2368] netlink: 168 bytes leftover after parsing attributes in process `syz.5.10889'. [ 891.647802][ T2394] netlink: 'syz.5.10898': attribute type 21 has an invalid length. [ 891.982425][ T2408] FAULT_INJECTION: forcing a failure. [ 891.982425][ T2408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.995640][ T2408] CPU: 1 UID: 0 PID: 2408 Comm: syz.5.10905 Tainted: G W 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 891.995683][ T2408] Tainted: [W]=WARN [ 891.995691][ T2408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 891.995716][ T2408] Call Trace: [ 891.995722][ T2408] [ 891.995763][ T2408] __dump_stack+0x1d/0x30 [ 891.995783][ T2408] dump_stack_lvl+0xe8/0x140 [ 891.995800][ T2408] dump_stack+0x15/0x1b [ 891.995829][ T2408] should_fail_ex+0x265/0x280 [ 891.995848][ T2408] should_fail+0xb/0x20 [ 891.995864][ T2408] should_fail_usercopy+0x1a/0x20 [ 891.995897][ T2408] _copy_from_user+0x1c/0xb0 [ 891.995920][ T2408] sk_setsockopt+0x1f7/0x2140 [ 891.995944][ T2408] ? selinux_socket_setsockopt+0x1ad/0x1e0 [ 891.995971][ T2408] sock_setsockopt+0x40/0x50 [ 891.996030][ T2408] __sys_setsockopt+0x13a/0x200 [ 891.996057][ T2408] __x64_sys_setsockopt+0x64/0x80 [ 891.996082][ T2408] x64_sys_call+0x2bd5/0x2fb0 [ 891.996107][ T2408] do_syscall_64+0xd2/0x200 [ 891.996148][ T2408] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 891.996251][ T2408] ? clear_bhb_loop+0x40/0x90 [ 891.996270][ T2408] ? clear_bhb_loop+0x40/0x90 [ 891.996289][ T2408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.996308][ T2408] RIP: 0033:0x7f3165bce969 [ 891.996322][ T2408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.996388][ T2408] RSP: 002b:00007f3164237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 891.996404][ T2408] RAX: ffffffffffffffda RBX: 00007f3165df5fa0 RCX: 00007f3165bce969 [ 891.996415][ T2408] RDX: 0000000000000050 RSI: 0000000000000001 RDI: 0000000000000004 [ 891.996426][ T2408] RBP: 00007f3164237090 R08: 0000000000000048 R09: 0000000000000000 [ 891.996437][ T2408] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 891.996448][ T2408] R13: 0000000000000000 R14: 00007f3165df5fa0 R15: 00007ffd969ac1e8 [ 891.996498][ T2408] [ 892.397452][ T2418] netlink: 'syz.5.10907': attribute type 1 has an invalid length. [ 892.446884][ T2418] 8021q: adding VLAN 0 to HW filter on device bond11 [ 892.477091][ T2428] bond11 (unregistering): Released all slaves [ 892.640797][ T2426] vhci_hcd: invalid port number 16 [ 892.645962][ T2426] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 892.667452][ T2441] netlink: 'syz.0.10917': attribute type 10 has an invalid length. [ 892.844937][ T2448] lo speed is unknown, defaulting to 1000 [ 892.857833][ T2448] lo speed is unknown, defaulting to 1000 [ 892.948833][ T2448] lo speed is unknown, defaulting to 1000 [ 893.286078][ T2462] loop6: detected capacity change from 0 to 128 [ 893.308755][ T2462] bio_check_eod: 9 callbacks suppressed [ 893.308775][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.308775][ T2462] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 893.328315][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.328315][ T2462] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 893.341928][ T2462] buffer_io_error: 8 callbacks suppressed [ 893.341945][ T2462] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 893.356559][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.356559][ T2462] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 893.370218][ T2462] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 893.392516][ T2468] netlink: 'syz.6.10924': attribute type 21 has an invalid length. [ 893.418391][ T2469] lo speed is unknown, defaulting to 1000 [ 893.433781][ T2471] __nla_validate_parse: 5 callbacks suppressed [ 893.433800][ T2471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10920'. [ 893.445836][ T2469] lo speed is unknown, defaulting to 1000 [ 893.458301][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.458301][ T2462] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 893.471875][ T2462] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 893.489204][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.489204][ T2462] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 893.502824][ T2462] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 893.579913][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.579913][ T2462] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 893.593486][ T2462] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 893.611112][ T2469] lo speed is unknown, defaulting to 1000 [ 893.621099][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.621099][ T2462] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 893.634691][ T2462] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 893.683361][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.683361][ T2462] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 893.696954][ T2462] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 893.747866][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.747866][ T2462] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 893.761640][ T2462] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 893.878459][ T2462] syz.6.10924: attempt to access beyond end of device [ 893.878459][ T2462] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 893.892402][ T2462] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 893.903636][ T2462] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 894.661747][ T2508] wireguard1: entered promiscuous mode [ 894.667285][ T2508] wireguard1: entered allmulticast mode [ 894.894627][ T2523] netlink: 'syz.5.10939': attribute type 21 has an invalid length. [ 895.265198][ T2543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10942'. [ 895.580857][ T2548] loop6: detected capacity change from 0 to 128 [ 895.714489][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 895.714508][ T29] audit: type=1326 audit(1748964828.865:39896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 895.780911][ T29] audit: type=1326 audit(1748964828.905:39897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 895.804573][ T29] audit: type=1326 audit(1748964828.905:39898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 895.828206][ T29] audit: type=1326 audit(1748964828.905:39899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 895.840944][ T2555] netlink: 'syz.6.10948': attribute type 21 has an invalid length. [ 895.851972][ T29] audit: type=1326 audit(1748964828.905:39900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 895.883512][ T29] audit: type=1326 audit(1748964828.905:39901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 895.907113][ T29] audit: type=1326 audit(1748964828.905:39902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 895.919089][ T2552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=2552 comm=syz.5.10946 [ 895.930696][ T29] audit: type=1326 audit(1748964828.905:39903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 895.967101][ T29] audit: type=1326 audit(1748964828.905:39904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 895.990720][ T29] audit: type=1326 audit(1748964828.905:39905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2547 comm="syz.6.10948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 896.033049][ T2546] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10946'. [ 896.133385][ T2566] macsec0: entered promiscuous mode [ 896.138799][ T2566] bridge0: entered promiscuous mode [ 896.159687][ T2566] bridge0: port 1(macsec0) entered blocking state [ 896.166273][ T2566] bridge0: port 1(macsec0) entered disabled state [ 896.189183][ T2566] macsec0: entered allmulticast mode [ 896.194546][ T2566] bridge0: entered allmulticast mode [ 896.212147][ T2566] macsec0: left allmulticast mode [ 896.217256][ T2566] bridge0: left allmulticast mode [ 896.223076][ T2566] bridge0: left promiscuous mode [ 896.358336][ T2580] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 896.374097][ T2580] loop6: detected capacity change from 0 to 512 [ 896.393891][ T2580] EXT4-fs (loop6): 1 orphan inode deleted [ 896.408802][ T2580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.448797][T11550] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 1 [ 896.478463][ T2580] ext4 filesystem being mounted at /1078/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.599359][ T2592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10961'. [ 896.608562][ T2592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10961'. [ 896.617697][ T2592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10961'. [ 896.643458][ T2592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10961'. [ 896.652632][ T2592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10961'. [ 896.661830][ T2592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10961'. [ 896.805816][ T2592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10961'. [ 897.194449][ T2610] netlink: 'syz.2.10966': attribute type 10 has an invalid length. [ 897.214153][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.257486][ T2614] loop6: detected capacity change from 0 to 1024 [ 897.264932][ T2614] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 897.274848][ T2614] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 897.284905][ T2614] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 897.295924][ T2614] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.10967: unexpected bad inode w/o EXT4_IGET_BAD [ 897.312184][ T2614] EXT4-fs (loop6): Remounting filesystem read-only [ 897.319152][ T2614] EXT4-fs (loop6): no journal found [ 897.324466][ T2614] EXT4-fs (loop6): can't get journal size [ 897.331572][ T2614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 897.508472][ T2644] netlink: 'syz.5.10978': attribute type 10 has an invalid length. [ 897.547624][ T2647] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 897.622852][ T2652] FAULT_INJECTION: forcing a failure. [ 897.622852][ T2652] name failslab, interval 1, probability 0, space 0, times 0 [ 897.635552][ T2652] CPU: 1 UID: 0 PID: 2652 Comm: syz.5.10981 Tainted: G W 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 897.635652][ T2652] Tainted: [W]=WARN [ 897.635668][ T2652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 897.635705][ T2652] Call Trace: [ 897.635711][ T2652] [ 897.635719][ T2652] __dump_stack+0x1d/0x30 [ 897.635738][ T2652] dump_stack_lvl+0xe8/0x140 [ 897.635757][ T2652] dump_stack+0x15/0x1b [ 897.635794][ T2652] should_fail_ex+0x265/0x280 [ 897.635813][ T2652] ? fsnotify_alloc_group+0x5a/0x170 [ 897.635843][ T2652] should_failslab+0x8c/0xb0 [ 897.635866][ T2652] __kmalloc_cache_noprof+0x4c/0x320 [ 897.635965][ T2652] fsnotify_alloc_group+0x5a/0x170 [ 897.635995][ T2652] do_inotify_init+0x59/0x270 [ 897.636016][ T2652] __x64_sys_inotify_init1+0x1e/0x30 [ 897.636111][ T2652] x64_sys_call+0x2ce8/0x2fb0 [ 897.636132][ T2652] do_syscall_64+0xd2/0x200 [ 897.636160][ T2652] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 897.636234][ T2652] ? clear_bhb_loop+0x40/0x90 [ 897.636283][ T2652] ? clear_bhb_loop+0x40/0x90 [ 897.636304][ T2652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.636375][ T2652] RIP: 0033:0x7f3165bce969 [ 897.636390][ T2652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.636465][ T2652] RSP: 002b:00007f3164237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 897.636482][ T2652] RAX: ffffffffffffffda RBX: 00007f3165df5fa0 RCX: 00007f3165bce969 [ 897.636493][ T2652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 897.636504][ T2652] RBP: 00007f3164237090 R08: 0000000000000000 R09: 0000000000000000 [ 897.636515][ T2652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.636538][ T2652] R13: 0000000000000000 R14: 00007f3165df5fa0 R15: 00007ffd969ac1e8 [ 897.636565][ T2652] [ 898.085015][ T2659] lo speed is unknown, defaulting to 1000 [ 898.091462][ T2659] lo speed is unknown, defaulting to 1000 [ 898.098536][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.133219][ T2659] lo speed is unknown, defaulting to 1000 [ 898.646828][ T2724] loop6: detected capacity change from 0 to 512 [ 898.675875][ T2724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 898.695211][ T2724] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.11013: bad orphan inode 11 [ 898.709505][ T2724] ext4_test_bit(bit=10, block=4) = 1 [ 898.714862][ T2724] is_bad_inode(inode)=0 [ 898.719262][ T2724] NEXT_ORPHAN(inode)=2080374784 [ 898.724158][ T2724] max_ino=32 [ 898.727387][ T2724] i_nlink=0 [ 898.742934][ T2724] EXT4-fs (loop6): 1 truncate cleaned up [ 898.749199][ T2724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.779608][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.986512][ T2764] macsec0: entered promiscuous mode [ 898.991774][ T2764] bridge0: entered promiscuous mode [ 898.997535][ T2764] bridge0: port 1(macsec0) entered blocking state [ 899.004072][ T2764] bridge0: port 1(macsec0) entered disabled state [ 899.010798][ T2764] macsec0: entered allmulticast mode [ 899.016170][ T2764] bridge0: entered allmulticast mode [ 899.023520][ T2745] vhci_hcd: invalid port number 16 [ 899.028650][ T2745] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 899.035971][ T2764] macsec0: left allmulticast mode [ 899.041077][ T2764] bridge0: left allmulticast mode [ 899.046849][ T2764] bridge0: left promiscuous mode [ 899.325385][ T2788] netlink: 'syz.2.11040': attribute type 10 has an invalid length. [ 899.333366][ T2788] __nla_validate_parse: 6 callbacks suppressed [ 899.333399][ T2788] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11040'. [ 899.541072][ T2805] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11046'. [ 899.551185][ T2802] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.11046'. [ 899.571960][ T2807] wireguard0: entered promiscuous mode [ 899.577506][ T2807] wireguard0: entered allmulticast mode [ 899.717502][ T2823] can: request_module (can-proto-0) failed. [ 899.843950][ T2839] SELinux: Context system_u:object_r:systemd_logind_sessions_t:s0 is not valid (left unmapped). [ 899.874398][ T2845] wireguard0: entered promiscuous mode [ 899.880073][ T2845] wireguard0: entered allmulticast mode [ 899.934279][ T2858] cgroup: Need name or subsystem set [ 900.186543][ T2895] cgroup: Need name or subsystem set [ 900.289378][ T2902] netlink: 'syz.3.11086': attribute type 21 has an invalid length. [ 900.771386][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 900.771405][ T29] audit: type=1326 audit(1748964833.925:40365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.801525][ T29] audit: type=1326 audit(1748964833.925:40366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.825495][ T29] audit: type=1326 audit(1748964833.955:40367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.849153][ T29] audit: type=1326 audit(1748964833.955:40368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.872917][ T29] audit: type=1326 audit(1748964833.955:40369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.872947][ T29] audit: type=1326 audit(1748964833.955:40370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.872975][ T29] audit: type=1326 audit(1748964833.955:40371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.873085][ T29] audit: type=1326 audit(1748964833.955:40372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.873112][ T29] audit: type=1326 audit(1748964833.955:40373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.991107][ T29] audit: type=1326 audit(1748964833.955:40374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2925 comm="syz.0.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 900.995463][ T2934] loop6: detected capacity change from 0 to 128 [ 901.036332][ T2934] bio_check_eod: 28 callbacks suppressed [ 901.036352][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.036352][ T2934] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 901.055635][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.055635][ T2934] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 901.069235][ T2934] buffer_io_error: 26 callbacks suppressed [ 901.069275][ T2934] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 901.083773][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.083773][ T2934] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 901.097316][ T2934] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 901.105882][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.105882][ T2934] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 901.119512][ T2934] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 901.128725][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.128725][ T2934] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 901.142260][ T2934] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 901.157575][ T2941] netlink: 'syz.6.11099': attribute type 21 has an invalid length. [ 901.165606][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.165606][ T2934] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 901.179330][ T2934] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 901.207788][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.207788][ T2934] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 901.221367][ T2934] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 901.232622][ T2942] netlink: 'syz.2.11101': attribute type 21 has an invalid length. [ 901.249972][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.249972][ T2934] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 901.263557][ T2934] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 901.272536][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.272536][ T2934] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 901.286194][ T2934] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 901.296716][ T2934] syz.6.11099: attempt to access beyond end of device [ 901.296716][ T2934] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 901.310301][ T2934] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 901.333381][ T2934] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 901.545051][ T2985] cgroup: Need name or subsystem set [ 902.027052][ T3024] netlink: 165 bytes leftover after parsing attributes in process `syz.5.11130'. [ 902.166075][ T3028] cgroup: Need name or subsystem set [ 902.491912][ T3044] loop6: detected capacity change from 0 to 1024 [ 902.500746][ T3044] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 902.510587][ T3044] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 902.525203][ T3044] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 902.537141][ T3044] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.11138: unexpected bad inode w/o EXT4_IGET_BAD [ 902.571128][ T3044] EXT4-fs (loop6): Remounting filesystem read-only [ 902.577714][ T3044] EXT4-fs (loop6): no journal found [ 902.583026][ T3044] EXT4-fs (loop6): can't get journal size [ 902.589908][ T3044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 902.855117][ T3072] macsec0: entered promiscuous mode [ 902.860422][ T3072] bridge0: entered promiscuous mode [ 902.867110][ T3072] bridge0: port 1(macsec0) entered blocking state [ 902.873735][ T3072] bridge0: port 1(macsec0) entered disabled state [ 902.880984][ T3072] macsec0: entered allmulticast mode [ 902.886348][ T3072] bridge0: entered allmulticast mode [ 902.895093][ T3073] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11143'. [ 902.908533][ T3072] macsec0: left allmulticast mode [ 902.913743][ T3072] bridge0: left allmulticast mode [ 902.920734][ T3072] bridge0: left promiscuous mode [ 904.042498][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.154593][ T3098] wireguard1: entered promiscuous mode [ 904.160146][ T3098] wireguard1: entered allmulticast mode [ 904.233906][ T3106] loop6: detected capacity change from 0 to 2048 [ 904.301861][ T3106] Alternate GPT is invalid, using primary GPT. [ 904.308171][ T3106] loop6: p2 p3 p7 [ 905.779145][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 905.779165][ T29] audit: type=1326 audit(1748964838.925:40735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd69f54d5ca code=0x7ffc0000 [ 905.820895][ T29] audit: type=1326 audit(1748964838.965:40736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f54e969 code=0x7ffc0000 [ 905.844597][ T29] audit: type=1326 audit(1748964838.975:40737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f54e969 code=0x7ffc0000 [ 905.868846][ T29] audit: type=1326 audit(1748964838.975:40738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd69f54d1d7 code=0x7ffc0000 [ 905.892475][ T29] audit: type=1326 audit(1748964838.975:40739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd69f55010a code=0x7ffc0000 [ 905.917910][ T29] audit: type=1326 audit(1748964838.975:40740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f54e969 code=0x7ffc0000 [ 905.941555][ T29] audit: type=1326 audit(1748964838.975:40741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f54e969 code=0x7ffc0000 [ 905.965368][ T29] audit: type=1326 audit(1748964838.975:40742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd69f54e969 code=0x7ffc0000 [ 905.988976][ T29] audit: type=1326 audit(1748964838.975:40743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f54e969 code=0x7ffc0000 [ 906.012688][ T29] audit: type=1326 audit(1748964838.975:40744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3126 comm="syz.3.11162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69f54e969 code=0x7ffc0000 [ 906.061622][ T3140] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 906.151582][ T3145] netlink: 182 bytes leftover after parsing attributes in process `syz.6.11170'. [ 906.222032][ T3145] lo speed is unknown, defaulting to 1000 [ 906.227854][ T3155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3155 comm=syz.2.11174 [ 906.241254][ T3145] lo speed is unknown, defaulting to 1000 [ 906.384300][ T3145] lo speed is unknown, defaulting to 1000 [ 906.387141][ T3155] vlan0: entered allmulticast mode [ 906.395292][ T3155] bond9: entered allmulticast mode [ 906.409889][ T3164] netlink: 'syz.0.11177': attribute type 10 has an invalid length. [ 906.417853][ T3164] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11177'. [ 906.422184][ T3165] netlink: 'syz.5.11171': attribute type 21 has an invalid length. [ 906.646835][ T3185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3185 comm=syz.6.11184 [ 906.692339][ T3185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11184'. [ 906.718262][ T3192] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 907.012385][ T3205] netlink: 'syz.3.11190': attribute type 21 has an invalid length. [ 907.036273][ T3208] loop6: detected capacity change from 0 to 512 [ 907.408246][ T3224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11197'. [ 907.631261][ T3241] netlink: 'syz.5.11203': attribute type 21 has an invalid length. [ 907.821376][ T3260] cgroup: Need name or subsystem set [ 907.934799][ T3274] FAULT_INJECTION: forcing a failure. [ 907.934799][ T3274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.948000][ T3274] CPU: 1 UID: 0 PID: 3274 Comm: syz.5.11218 Tainted: G W 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 907.948044][ T3274] Tainted: [W]=WARN [ 907.948054][ T3274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.948068][ T3274] Call Trace: [ 907.948075][ T3274] [ 907.948083][ T3274] __dump_stack+0x1d/0x30 [ 907.948196][ T3274] dump_stack_lvl+0xe8/0x140 [ 907.948267][ T3274] dump_stack+0x15/0x1b [ 907.948288][ T3274] should_fail_ex+0x265/0x280 [ 907.948310][ T3274] should_fail+0xb/0x20 [ 907.948405][ T3274] should_fail_usercopy+0x1a/0x20 [ 907.948431][ T3274] _copy_from_user+0x1c/0xb0 [ 907.948465][ T3274] ___sys_sendmsg+0xc1/0x1d0 [ 907.948513][ T3274] __x64_sys_sendmsg+0xd4/0x160 [ 907.948632][ T3274] x64_sys_call+0x2999/0x2fb0 [ 907.948656][ T3274] do_syscall_64+0xd2/0x200 [ 907.948687][ T3274] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 907.948715][ T3274] ? clear_bhb_loop+0x40/0x90 [ 907.948756][ T3274] ? clear_bhb_loop+0x40/0x90 [ 907.948785][ T3274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.948807][ T3274] RIP: 0033:0x7f3165bce969 [ 907.948823][ T3274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.948848][ T3274] RSP: 002b:00007f3164237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.948907][ T3274] RAX: ffffffffffffffda RBX: 00007f3165df5fa0 RCX: 00007f3165bce969 [ 907.948921][ T3274] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000003 [ 907.948934][ T3274] RBP: 00007f3164237090 R08: 0000000000000000 R09: 0000000000000000 [ 907.948946][ T3274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.948963][ T3274] R13: 0000000000000000 R14: 00007f3165df5fa0 R15: 00007ffd969ac1e8 [ 907.948990][ T3274] [ 908.263849][ T3285] macsec0: entered promiscuous mode [ 908.269206][ T3285] bridge0: entered promiscuous mode [ 908.275802][ T3285] bridge0: port 1(macsec0) entered blocking state [ 908.282373][ T3285] bridge0: port 1(macsec0) entered disabled state [ 908.290633][ T3285] macsec0: entered allmulticast mode [ 908.295997][ T3285] bridge0: entered allmulticast mode [ 908.339856][ T3285] macsec0: left allmulticast mode [ 908.345006][ T3285] bridge0: left allmulticast mode [ 908.351447][ T3285] bridge0: left promiscuous mode [ 908.387486][ T3289] loop6: detected capacity change from 0 to 512 [ 908.483569][ T3292] loop6: detected capacity change from 0 to 128 [ 908.525442][ T3292] bio_check_eod: 9 callbacks suppressed [ 908.525457][ T3292] syz.6.11223: attempt to access beyond end of device [ 908.525457][ T3292] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 908.601681][ T3292] syz.6.11223: attempt to access beyond end of device [ 908.601681][ T3292] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 908.615299][ T3292] buffer_io_error: 8 callbacks suppressed [ 908.615312][ T3292] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 908.758256][ T3295] netlink: 'syz.6.11223': attribute type 21 has an invalid length. [ 908.816936][ T3292] syz.6.11223: attempt to access beyond end of device [ 908.816936][ T3292] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 908.830797][ T3292] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 908.848352][ T3300] cgroup: Need name or subsystem set [ 908.889337][ T3292] syz.6.11223: attempt to access beyond end of device [ 908.889337][ T3292] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 908.903073][ T3292] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 908.938608][ T3292] syz.6.11223: attempt to access beyond end of device [ 908.938608][ T3292] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 908.952296][ T3292] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 908.961008][ T3292] syz.6.11223: attempt to access beyond end of device [ 908.961008][ T3292] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 908.974675][ T3292] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 908.983431][ T3292] syz.6.11223: attempt to access beyond end of device [ 908.983431][ T3292] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 908.997037][ T3292] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 909.005989][ T3292] syz.6.11223: attempt to access beyond end of device [ 909.005989][ T3292] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 909.019778][ T3292] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 909.041159][ T3292] syz.6.11223: attempt to access beyond end of device [ 909.041159][ T3292] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 909.054747][ T3292] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 909.063483][ T3292] syz.6.11223: attempt to access beyond end of device [ 909.063483][ T3292] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 909.076997][ T3292] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 909.085687][ T3292] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 909.102808][ T3315] netlink: 'syz.0.11230': attribute type 10 has an invalid length. [ 909.110801][ T3315] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11230'. [ 909.140849][ T3319] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.162142][ T3323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11233'. [ 909.216570][ T3319] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.279442][ T3319] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.328418][ T3319] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.354999][ T3343] loop6: detected capacity change from 0 to 2048 [ 909.398651][ T3319] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.416705][ T3343] Alternate GPT is invalid, using primary GPT. [ 909.421370][ T3319] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.423181][ T3343] loop6: p2 p3 p7 [ 909.435314][ T3319] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.451649][ T3319] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.507256][ T3353] wireguard0: entered promiscuous mode [ 909.512957][ T3353] wireguard0: entered allmulticast mode [ 910.480054][ T3399] Falling back ldisc for ttyS3. [ 910.758896][ T3409] vhci_hcd: invalid port number 16 [ 910.764163][ T3409] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 910.898743][ T29] kauditd_printk_skb: 2504 callbacks suppressed [ 910.898763][ T29] audit: type=1326 audit(1748964844.045:43249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 910.928830][ T29] audit: type=1326 audit(1748964844.045:43250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 910.952660][ T29] audit: type=1326 audit(1748964844.045:43251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 910.976326][ T29] audit: type=1326 audit(1748964844.055:43252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 911.000132][ T29] audit: type=1326 audit(1748964844.055:43253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 911.023848][ T29] audit: type=1326 audit(1748964844.055:43254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 911.047466][ T29] audit: type=1326 audit(1748964844.055:43255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 911.071147][ T29] audit: type=1326 audit(1748964844.055:43256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 911.094836][ T29] audit: type=1326 audit(1748964844.055:43257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 911.118636][ T29] audit: type=1326 audit(1748964844.055:43258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3420 comm="syz.6.11265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecfd30e969 code=0x7ffc0000 [ 911.852570][ T3469] vhci_hcd: invalid port number 16 [ 911.857883][ T3469] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 912.389371][ T3490] wireguard0: entered promiscuous mode [ 912.395020][ T3490] wireguard0: entered allmulticast mode [ 912.794827][ T3519] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11294'. [ 913.337539][ T3528] wireguard0: entered promiscuous mode [ 913.343309][ T3528] wireguard0: entered allmulticast mode [ 913.495216][ T3535] cgroup: Need name or subsystem set [ 913.537622][ T3539] macsec0: entered promiscuous mode [ 913.542925][ T3539] bridge0: entered promiscuous mode [ 913.548964][ T3539] bridge0: port 1(macsec0) entered blocking state [ 913.555677][ T3539] bridge0: port 1(macsec0) entered disabled state [ 913.563823][ T3539] macsec0: entered allmulticast mode [ 913.569192][ T3539] bridge0: entered allmulticast mode [ 913.572108][ T3546] cgroup: Need name or subsystem set [ 913.580177][ T3539] macsec0: left allmulticast mode [ 913.585325][ T3539] bridge0: left allmulticast mode [ 913.600586][ T3539] bridge0: left promiscuous mode [ 913.698637][ T3561] wireguard1: entered promiscuous mode [ 913.704478][ T3561] wireguard1: entered allmulticast mode [ 913.779791][ T3569] loop6: detected capacity change from 0 to 128 [ 913.800123][ T3569] bio_check_eod: 9 callbacks suppressed [ 913.800143][ T3569] syz.6.11320: attempt to access beyond end of device [ 913.800143][ T3569] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 913.819371][ T3569] syz.6.11320: attempt to access beyond end of device [ 913.819371][ T3569] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 913.832929][ T3569] buffer_io_error: 8 callbacks suppressed [ 913.832952][ T3569] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 913.847882][ T3569] syz.6.11320: attempt to access beyond end of device [ 913.847882][ T3569] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 913.861514][ T3569] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 913.874740][ T3569] syz.6.11320: attempt to access beyond end of device [ 913.874740][ T3569] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 913.888307][ T3569] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 913.898129][ T3569] syz.6.11320: attempt to access beyond end of device [ 913.898129][ T3569] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 913.911713][ T3569] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 913.920441][ T3569] syz.6.11320: attempt to access beyond end of device [ 913.920441][ T3569] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 913.922078][ T3570] netlink: 'syz.6.11320': attribute type 21 has an invalid length. [ 913.934046][ T3569] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 913.950771][ T3569] syz.6.11320: attempt to access beyond end of device [ 913.950771][ T3569] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 913.964446][ T3569] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 913.973531][ T3569] syz.6.11320: attempt to access beyond end of device [ 913.973531][ T3569] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 913.987137][ T3569] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 913.998102][ T3572] 9pnet_fd: Insufficient options for proto=fd [ 914.005587][ T3569] syz.6.11320: attempt to access beyond end of device [ 914.005587][ T3569] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 914.019182][ T3569] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 914.040454][ T3569] syz.6.11320: attempt to access beyond end of device [ 914.040454][ T3569] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 914.054065][ T3569] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 914.064353][ T3569] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 914.385638][ T3599] wireguard0: entered promiscuous mode [ 914.391300][ T3599] wireguard0: entered allmulticast mode [ 914.517398][ T3607] 9pnet_fd: Insufficient options for proto=fd [ 914.591140][ T3615] wireguard0: entered promiscuous mode [ 914.596689][ T3615] wireguard0: entered allmulticast mode [ 914.998157][ T3643] 9pnet_fd: Insufficient options for proto=fd [ 915.868010][ T3676] netlink: 'syz.2.11361': attribute type 10 has an invalid length. [ 915.876056][ T3676] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11361'. [ 915.888805][ T3674] 9pnet_fd: Insufficient options for proto=fd [ 916.095044][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 916.095062][ T29] audit: type=1326 audit(1748964849.245:43825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3686 comm="syz.0.11364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d8546e969 code=0x0 [ 917.111663][ T29] audit: type=1326 audit(1748964850.265:43826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.0.11365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 917.135431][ T29] audit: type=1326 audit(1748964850.265:43827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.0.11365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 917.185432][ T29] audit: type=1326 audit(1748964850.315:43828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.0.11365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 917.209308][ T29] audit: type=1326 audit(1748964850.315:43829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.0.11365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 917.232930][ T29] audit: type=1326 audit(1748964850.315:43830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.0.11365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 917.256636][ T29] audit: type=1326 audit(1748964850.315:43831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.0.11365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 917.280314][ T29] audit: type=1326 audit(1748964850.315:43832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.0.11365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8546e969 code=0x7ffc0000 [ 917.362618][ T29] audit: type=1326 audit(1748964850.515:43833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.2.11367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 917.451158][ T29] audit: type=1326 audit(1748964850.515:43834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3699 comm="syz.2.11367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3b11e969 code=0x7ffc0000 [ 917.595521][ T3715] 9pnet_fd: Insufficient options for proto=fd [ 917.914886][ T3742] netlink: 'syz.2.11385': attribute type 10 has an invalid length. [ 917.922924][ T3742] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11385'. [ 918.645029][ T3787] netlink: 'syz.5.11402': attribute type 21 has an invalid length. [ 918.883252][ T3806] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 919.281868][ T3824] netlink: 'syz.5.11417': attribute type 21 has an invalid length. [ 919.498684][ T3833] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 919.502827][ T3838] cgroup: Need name or subsystem set [ 919.724669][ T3852] netlink: 'syz.0.11428': attribute type 21 has an invalid length. [ 919.902679][ T3867] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 919.906205][ T3869] wireguard1: entered promiscuous mode [ 919.919608][ T3869] wireguard1: entered allmulticast mode [ 920.590807][ T3893] loop6: detected capacity change from 0 to 128 [ 920.612531][ T3893] bio_check_eod: 9 callbacks suppressed [ 920.612551][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.612551][ T3893] loop6: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 920.632596][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.632596][ T3893] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 920.646301][ T3893] buffer_io_error: 8 callbacks suppressed [ 920.646315][ T3893] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 920.661354][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.661354][ T3893] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 920.674933][ T3893] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 920.681650][ T3894] netlink: 'syz.6.11445': attribute type 21 has an invalid length. [ 920.684350][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.684350][ T3893] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 920.705081][ T3893] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 920.714665][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.714665][ T3893] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 920.728282][ T3893] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 920.737334][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.737334][ T3893] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 920.750975][ T3893] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 920.760178][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.760178][ T3893] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 920.773747][ T3893] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 920.783059][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.783059][ T3893] loop6: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 920.796668][ T3893] Buffer I/O error on dev loop6, logical block 132, lost async page write [ 920.805705][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.805705][ T3893] loop6: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 920.819280][ T3893] Buffer I/O error on dev loop6, logical block 133, lost async page write [ 920.828888][ T3893] syz.6.11445: attempt to access beyond end of device [ 920.828888][ T3893] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 920.842571][ T3893] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 920.851375][ T3893] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 920.943552][ T3904] loop6: detected capacity change from 0 to 1024 [ 920.950706][ T3904] EXT4-fs: inline encryption not supported [ 920.956588][ T3904] EXT4-fs: Ignoring removed i_version option [ 920.964346][ T3904] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 920.988630][ T3904] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.11449: lblock 2 mapped to illegal pblock 2 (length 1) [ 920.999097][ T3912] cgroup: Need name or subsystem set [ 921.003295][ T3904] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.11449: lblock 0 mapped to illegal pblock 48 (length 1) [ 921.026732][ T3904] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.11449: Failed to acquire dquot type 0 [ 921.038715][ T3904] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 921.048547][ T3904] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.11449: mark_inode_dirty error [ 921.060394][ T3904] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 921.070930][ T3904] EXT4-fs (loop6): 1 orphan inode deleted [ 921.077176][ T3904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.089306][ T2493] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 921.091714][ T3900] vhci_hcd: invalid port number 16 [ 921.108743][ T3900] vhci_hcd: default hub control req: 0000 v0008 i0010 l0 [ 921.116043][ T29] kauditd_printk_skb: 1138 callbacks suppressed [ 921.116059][ T29] audit: type=1326 audit(1748964854.255:44971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3917 comm="syz.0.11455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d8546e969 code=0x0 [ 921.118734][ T2493] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 921.144066][ T29] audit: type=1400 audit(1748964854.295:44972): avc: denied { setattr } for pid=3903 comm="syz.6.11449" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 921.145613][ T2493] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 921.187649][ T3904] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz.6.11449: Invalid inode table block 1 in block_group 0 [ 921.203630][ T3916] 9pnet_fd: Insufficient options for proto=fd [ 921.219119][ T3904] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 921.230938][ T3904] EXT4-fs error (device loop6): ext4_setattr:5828: inode #2: comm syz.6.11449: mark_inode_dirty error [ 921.244607][ T3920] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 16: comm syz.6.11449: lblock 0 mapped to illegal pblock 16 (length 1) [ 921.264204][ T3904] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 16: comm syz.6.11449: lblock 0 mapped to illegal pblock 16 (length 1) [ 921.281801][ T3904] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 16: comm syz.6.11449: lblock 0 mapped to illegal pblock 16 (length 1) [ 921.310461][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.319898][T11547] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 921.334384][T11547] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 921.342996][T11547] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 921.372771][ T3924] loop6: detected capacity change from 0 to 1024 [ 921.379813][ T3924] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 921.389615][ T3924] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 921.399464][ T3924] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 921.410339][ T3924] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.11457: unexpected bad inode w/o EXT4_IGET_BAD [ 921.423887][ T3924] EXT4-fs (loop6): Remounting filesystem read-only [ 921.430636][ T3924] EXT4-fs (loop6): no journal found [ 921.435866][ T3924] EXT4-fs (loop6): can't get journal size [ 921.442421][ T3924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 921.671460][ T29] audit: type=1326 audit(1748964854.825:44973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.5.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 921.695427][ T29] audit: type=1326 audit(1748964854.825:44974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.5.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 921.719305][ T29] audit: type=1326 audit(1748964854.825:44975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.5.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 921.743071][ T29] audit: type=1326 audit(1748964854.825:44976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.5.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 921.766809][ T29] audit: type=1326 audit(1748964854.825:44977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.5.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 921.790689][ T29] audit: type=1326 audit(1748964854.825:44978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.5.11461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 921.834497][ T3945] cgroup: Need name or subsystem set [ 922.107615][ T3956] cgroup: Need name or subsystem set [ 922.176325][ T3960] macsec0: entered promiscuous mode [ 922.181733][ T3960] bridge0: entered promiscuous mode [ 922.188175][ T3960] bridge0: port 1(macsec0) entered blocking state [ 922.194756][ T3960] bridge0: port 1(macsec0) entered disabled state [ 922.219689][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.221817][ T3960] macsec0: entered allmulticast mode [ 922.234029][ T3960] bridge0: entered allmulticast mode [ 922.245704][ T3968] cgroup: Need name or subsystem set [ 922.251851][ T3960] macsec0: left allmulticast mode [ 922.256961][ T3960] bridge0: left allmulticast mode [ 922.268965][ T3960] bridge0: left promiscuous mode [ 922.295696][ T3970] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 922.384399][ T3974] 9pnet_fd: Insufficient options for proto=fd [ 922.686913][ T4010] netlink: 'syz.6.11493': attribute type 10 has an invalid length. [ 922.695035][ T4010] netlink: 168 bytes leftover after parsing attributes in process `syz.6.11493'. [ 922.710764][ T4010] loop6: detected capacity change from 0 to 164 [ 922.717536][ T4010] iso9660: Unknown parameter '' [ 922.751076][ T4016] loop6: detected capacity change from 0 to 1024 [ 922.757920][ T4016] EXT4-fs: Ignoring removed nomblk_io_submit option [ 922.783130][ T4016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.623944][ T4046] netlink: 'syz.3.11507': attribute type 10 has an invalid length. [ 923.631968][ T4046] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11507'. [ 923.718524][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.962177][ T4060] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.040599][ T4065] loop6: detected capacity change from 0 to 1024 [ 924.048571][ T4065] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 924.058500][ T4065] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 924.073568][ T4060] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.087531][ T4065] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 924.099963][ T4065] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.11514: unexpected bad inode w/o EXT4_IGET_BAD [ 924.113874][ T4065] EXT4-fs (loop6): Remounting filesystem read-only [ 924.120631][ T4065] EXT4-fs (loop6): no journal found [ 924.126024][ T4065] EXT4-fs (loop6): can't get journal size [ 924.137637][ T4060] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.152702][ T4065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 924.202484][ T4060] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.279364][ T4060] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.302121][ T4060] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.320194][ T4060] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.339717][ T4060] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.876554][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.892531][ T4074] 9pnet_fd: Insufficient options for proto=fd [ 925.254081][ T4102] loop6: detected capacity change from 0 to 512 [ 925.271318][ T4102] EXT4-fs (loop6): 1 orphan inode deleted [ 925.277636][ T4102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.290255][ T2493] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 925.291810][ T4102] ext4 filesystem being mounted at /1153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 925.973251][ T4143] cgroup: Need name or subsystem set [ 926.044706][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.119075][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 926.119143][ T29] audit: type=1326 audit(1748964859.265:45616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.5.11549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.149800][ T29] audit: type=1326 audit(1748964859.305:45617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.5.11549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.173814][ T29] audit: type=1326 audit(1748964859.305:45618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.5.11549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.198761][ T29] audit: type=1326 audit(1748964859.345:45619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.5.11549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.220980][ T4149] netlink: 'syz.5.11549': attribute type 21 has an invalid length. [ 926.222570][ T29] audit: type=1326 audit(1748964859.345:45620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.5.11549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.254217][ T29] audit: type=1326 audit(1748964859.345:45621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4148 comm="syz.5.11549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.280203][ T4155] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 926.393566][ T4161] loop6: detected capacity change from 0 to 1024 [ 926.417284][ T4161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.461143][ T4161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.466396][ T29] audit: type=1326 audit(1748964859.615:45622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.11553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.518871][ T29] audit: type=1326 audit(1748964859.655:45623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.11553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.542652][ T29] audit: type=1326 audit(1748964859.655:45624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.11553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.566340][ T29] audit: type=1326 audit(1748964859.655:45625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.5.11553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3165bce969 code=0x7ffc0000 [ 926.632209][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.745780][ T4194] cgroup: Need name or subsystem set [ 926.890546][ T4206] cgroup: Need name or subsystem set [ 926.919736][ T4206] loop6: detected capacity change from 0 to 2048 [ 926.942909][ T4206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.989626][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.006648][ T4216] 9pnet_fd: Insufficient options for proto=fd [ 927.143552][ T4227] netlink: 'syz.0.11578': attribute type 21 has an invalid length. [ 927.242773][ T4235] wireguard0: entered promiscuous mode [ 927.248315][ T4235] wireguard0: entered allmulticast mode [ 927.452082][ T4254] loop6: detected capacity change from 0 to 1024 [ 927.459214][ T4254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 927.471033][ T4254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.472800][ T4252] 9pnet_fd: Insufficient options for proto=fd [ 927.518452][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.563217][ T4262] loop6: detected capacity change from 0 to 1024 [ 927.572759][ T4262] EXT4-fs: inline encryption not supported [ 927.578761][ T4262] EXT4-fs: Ignoring removed i_version option [ 927.585293][ T4262] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 927.597497][ T4262] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.11594: lblock 2 mapped to illegal pblock 2 (length 1) [ 927.612710][ T4262] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.11594: lblock 0 mapped to illegal pblock 48 (length 1) [ 927.627414][ T4262] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.11594: Failed to acquire dquot type 0 [ 927.639608][ T4262] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 927.649607][ T4262] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.11594: mark_inode_dirty error [ 927.661540][ T4262] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 927.672026][ T4262] EXT4-fs (loop6): 1 orphan inode deleted [ 927.678376][ T4262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.690704][T30331] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 927.705238][T30331] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 927.718628][ T4262] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz.6.11594: Invalid inode table block 1 in block_group 0 [ 927.732035][ T4262] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 927.742069][ T4262] EXT4-fs error (device loop6): ext4_setattr:5828: inode #2: comm syz.6.11594: mark_inode_dirty error [ 927.753708][ T4262] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 16: comm syz.6.11594: lblock 0 mapped to illegal pblock 16 (length 1) [ 927.773002][ T4262] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 16: comm syz.6.11594: lblock 0 mapped to illegal pblock 16 (length 1) [ 927.788162][ T4262] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #2: block 16: comm syz.6.11594: lblock 0 mapped to illegal pblock 16 (length 1) [ 927.817066][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.826330][T30331] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 927.841176][T30331] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 927.892456][ T4276] loop6: detected capacity change from 0 to 1024 [ 927.899616][ T4276] EXT4-fs: inline encryption not supported [ 927.905601][ T4276] EXT4-fs: Ignoring removed i_version option [ 927.913548][ T4276] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 927.926712][ T4276] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.11599: lblock 2 mapped to illegal pblock 2 (length 1) [ 927.942074][ T4276] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.11599: lblock 0 mapped to illegal pblock 48 (length 1) [ 927.949650][ T4277] netlink: 'syz.3.11598': attribute type 21 has an invalid length. [ 927.956904][ T4276] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.11599: Failed to acquire dquot type 0 [ 927.976064][ T4276] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 927.986066][ T4276] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.11599: mark_inode_dirty error [ 928.017863][ T4276] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 928.030030][ T4276] EXT4-fs (loop6): 1 orphan inode deleted [ 928.045936][ T4276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 928.069285][T30331] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 928.093760][T30331] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 928.116894][T16032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.133341][T16032] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 928.148109][T16032] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 928.158047][T16032] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 928.223273][ T4287] macsec0: entered promiscuous mode [ 928.228551][ T4287] bridge0: entered promiscuous mode [ 928.234824][ T4287] bridge0: port 1(macsec0) entered blocking state [ 928.241380][ T4287] bridge0: port 1(macsec0) entered disabled state [ 928.241509][ T4291] ================================================================== [ 928.255935][ T4291] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 928.262937][ T4291] [ 928.264034][ T4289] 9pnet_fd: Insufficient options for proto=fd [ 928.265264][ T4291] write to 0xffffffff86882360 of 8 bytes by task 4287 on cpu 0: [ 928.278998][ T4291] data_alloc+0x271/0x2b0 [ 928.283364][ T4291] prb_reserve+0x808/0xaf0 [ 928.287816][ T4291] vprintk_store+0x56d/0x860 [ 928.292417][ T4291] vprintk_emit+0x178/0x650 [ 928.296931][ T4291] vprintk_default+0x26/0x30 [ 928.301533][ T4291] vprintk+0x1d/0x30 [ 928.305443][ T4291] _printk+0x79/0xa0 [ 928.309360][ T4291] br_set_state+0x28c/0x390 [ 928.313884][ T4291] new_nbp+0x235/0x300 [ 928.318004][ T4291] br_add_if+0x1e7/0xa60 [ 928.322278][ T4291] br_add_slave+0x2c/0x40 [ 928.326629][ T4291] do_set_master+0x38d/0x460 [ 928.331236][ T4291] rtnl_newlink_create+0x426/0x620 [ 928.336379][ T4291] rtnl_newlink+0xf29/0x12d0 [ 928.340975][ T4291] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 928.345920][ T4291] netlink_rcv_skb+0x123/0x220 [ 928.350703][ T4291] rtnetlink_rcv+0x1c/0x30 [ 928.355124][ T4291] netlink_unicast+0x5a1/0x670 [ 928.359906][ T4291] netlink_sendmsg+0x58b/0x6b0 [ 928.364691][ T4291] __sock_sendmsg+0x142/0x180 [ 928.369404][ T4291] ____sys_sendmsg+0x31e/0x4e0 [ 928.374187][ T4291] ___sys_sendmsg+0x17b/0x1d0 [ 928.378882][ T4291] __x64_sys_sendmsg+0xd4/0x160 [ 928.383755][ T4291] x64_sys_call+0x2999/0x2fb0 [ 928.388444][ T4291] do_syscall_64+0xd2/0x200 [ 928.392970][ T4291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.398878][ T4291] [ 928.401205][ T4291] read to 0xffffffff86882360 of 16 bytes by task 4291 on cpu 1: [ 928.408844][ T4291] _prb_read_valid+0x1bc/0x920 [ 928.413638][ T4291] prb_read_valid+0x3c/0x60 [ 928.418162][ T4291] console_unlock+0x164/0x330 [ 928.422847][ T4291] con_install+0x269/0x2a0 [ 928.427278][ T4291] tty_init_dev+0x7c/0x330 [ 928.431699][ T4291] tty_open+0x6cc/0xaf0 [ 928.435881][ T4291] chrdev_open+0x2e8/0x3a0 [ 928.440312][ T4291] do_dentry_open+0x646/0xa20 [ 928.445008][ T4291] vfs_open+0x37/0x1e0 [ 928.449096][ T4291] path_openat+0x1c5e/0x2170 [ 928.453690][ T4291] do_filp_open+0x109/0x230 [ 928.458201][ T4291] do_sys_openat2+0xa6/0x110 [ 928.462813][ T4291] __x64_sys_openat+0xf2/0x120 [ 928.467597][ T4291] x64_sys_call+0x1af/0x2fb0 [ 928.472199][ T4291] do_syscall_64+0xd2/0x200 [ 928.476721][ T4291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.482621][ T4291] [ 928.484943][ T4291] Reported by Kernel Concurrency Sanitizer on: [ 928.491099][ T4291] CPU: 1 UID: 0 PID: 4291 Comm: syz.6.11605 Tainted: G W 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 928.504846][ T4291] Tainted: [W]=WARN [ 928.508690][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 928.518765][ T4291] ================================================================== [ 928.533859][ T4287] macsec0: entered allmulticast mode [ 928.539372][ T4287] bridge0: entered allmulticast mode [ 928.545412][ T4287] macsec0: left allmulticast mode [ 928.550548][ T4287] bridge0: left allmulticast mode [ 928.556457][ T4287] bridge0: left promiscuous mode