last executing test programs: 3m57.584119886s ago: executing program 2 (id=804): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0xf}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3m57.517186698s ago: executing program 2 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000019b40)=r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m57.48023658s ago: executing program 2 (id=806): unshare(0x62040200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x146, &(0x7f0000003080)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x110, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1c, '\x00', @remote, [{0x2, 0x1f, "d3aff83c41c4e9067f6e1a14ced0999c06ffba3b1976ef6fd6a30900aecc43afde4ca1a9c79ddb132b2f95bd25af3db454c5ff38bc95fb4537d6910ae897e5048b8574af5247673565fb812a97c2726972cfa0738c33be7c8f0499b15b8a66f99e6edf8f53aa4c86bd82ebac2ada65bae03bbf9bcad864fc93dfb284195ecbdc44fc962f41e7fbe6f3984d5ea4f5ead288631b264ca88f5003eeda72141c76422a3ad86d4f5aaf293819ff186036d4d660478b1389e5a8d9453684c0c04b5a087bcd0a3a93500c8d0d32117bd34cd9b61de25801cdff0ed850bb7e9dca61cff9534416b09eea8529aa573feee5310cf19f79f64ec055"}]}}}}}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffe8700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff004cb7de3fab541a1ebb4f13b17d6ad5000000000000000000000000000000000000004000"/144]}, 0x108) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='decodes m'], 0xf) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0xa, 0x2, 0x4, 0xfa, 0xe]}, &(0x7f0000000080)=0x78) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) rt_tgsigqueueinfo(0x0, 0x0, 0xc, &(0x7f00000001c0)={0x11, 0x4, 0x80}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) write$cgroup_pid(r2, &(0x7f0000000280), 0x12) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 3m57.200827002s ago: executing program 2 (id=807): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x146, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="39e8dcfa461ac09e8a722e34d7e484893ffa560200133b1b00003f210000001770faf0", 0x23}], 0x1) r2 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000240)={[{@journal_dev={'journal_dev', 0x3d, 0x63}}, {@nolazytime}]}, 0x1, 0x472, &(0x7f0000000d80)="$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") 3m56.738237442s ago: executing program 2 (id=813): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)="af1dfe3adc55559f62fa02e60cec06843d84b48e6543e4ea0dd7abca5f6428dbf07f2b456581e7bbe9430599452faa1069cbe4ce4138ef65631d6aeb7cc45d80a98a53ca1c9b52fd4315b708e5aa2b8640fbd880f9f2f1e8045073a55b4856247cdb1f8d46fb297b0c81f8878dc0b86f319e195c96d0ffec2c181b2ac5d567dfc6b0d3b372d847688e089fde00443fb2159ddf3b20cf08b65b335f10295f4eb59bb90ecfc395fff83ca03cd436b006bd1c79cc4c22b0915ef69907a4a8", 0xbd}, {&(0x7f00000004c0)="0a75fb52a0e2635dc6ed29408d382be89c4e2e4b18fb7524c9a670cf2a652b1a733e786232caacbb4a7c4e359d004ac60294eb43254ab4a5dcd51cd69d7807aa27a9c583f662b7405f7e8eca4d8d653350b143cd3250289a81204cca4508860ddc762bae5c2e4192cbeb4b806dee509ca9285d9546b890e038eca091", 0x7c}, {&(0x7f0000000600)="18de697dc47172fa8e573dfc5d9c0019002c1f8a632f65cd7087b2e18c55ad52b843567ff7cf9f8c5f3adbfe607b8519c2b020b1358c99fb0556d27109add627dbfa252f362e44eb8e68e1c15777e98793dc5b226c8016ddb427725ae879861bd3da6e2d820a972ca8ee3949de191b7c54db8053c4f4301dffdf24c7a89a34", 0x7f}], 0x4, 0x0, 0x0, 0x20000810}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 3m56.334976169s ago: executing program 2 (id=820): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r8, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000004c0)) 3m56.334663799s ago: executing program 32 (id=820): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r8, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000004c0)) 4.100700675s ago: executing program 0 (id=4525): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x1, 0x8, 0x7, 0x9ce6}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x4}]}}]}, 0x38}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x4}]}, {0xffffffffffffff1f}, {0xc}, {0xfffffffffffffcdc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a01010000000000eb00000a0000070900020000007a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 4.001703619s ago: executing program 0 (id=4527): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 3.111532887s ago: executing program 0 (id=4541): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x1, 0x8, 0x7, 0x9ce6}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x4}]}}]}, 0x38}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x4}]}, {0xffffffffffffff1f}, {0xc}, {0xfffffffffffffcdc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a01010000000000eb00000a0000070900020000007a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2.880843767s ago: executing program 1 (id=4546): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) 2.779099141s ago: executing program 1 (id=4547): syz_usbip_server_init(0x6) 1.918310208s ago: executing program 1 (id=4551): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x24, 0x0, 0x6a513da061e1002b, 0x0, 0x100000, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080)={[{@user_xattr}, {@grpquota}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') pread64(r5, 0x0, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$isdn(0x22, 0x3, 0x1) 1.853444351s ago: executing program 0 (id=4552): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r8, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000004c0)) 1.371718111s ago: executing program 1 (id=4557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 1.359702942s ago: executing program 4 (id=4558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000000000000", @ANYRESDEC=r1, @ANYRES16=r3], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_emit_ethernet(0xcc, &(0x7f0000000980)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x2, 0x8, 0xbe, 0x68, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, {[@lsrr={0x83, 0xf, 0x27, [@broadcast, @broadcast, @loopback]}]}}, "4100c172acc9158ff14d1a26ed91e8e6bebb47e9ddb204ccc1fde3c537cb5ee0e6404df7fade535b0a774d61eaccc0af0d00000000000000fe9ce21d791d05295dff7f0000a7bbc8cf743dcadd55f408bb1b43426ed3a458a95a4b145a0f34dc173dc1de49047808b2a6121453e31e3aac6f5f39864428e70a817187a88116e19c77bce702f602ab6ee9dde6a5cc17b7b70d47ccb4186d4f4d16"}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 1.313926114s ago: executing program 1 (id=4560): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={0x0, 0x40000000001, 0x7}) munlockall() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r7, @ANYRES32=r4, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r1]) r9 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 1.254094646s ago: executing program 4 (id=4561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) fchmodat(0xffffffffffffffff, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x120) 1.194730129s ago: executing program 4 (id=4562): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x1, 0x8, 0x7, 0x9ce6}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x4}]}}]}, 0x38}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x4}]}, {0xffffffffffffff1f}, {0xc}, {0xfffffffffffffcdc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a01010000000000eb00000a0000070900020000007a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.193650099s ago: executing program 1 (id=4563): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x4}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x5}, {0xfff3, 0x5}, {0xffe0, 0x4}}}, 0x24}}, 0x80000) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x48000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x400c044}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r4, &(0x7f0000002640)="88a96c6b465315c81f0d51131cf90d056c26f9fbb61532bc6dbee9e4688070d97f50f7d9a557f67083867c1dd810c17b510db0c6f5b5fbe4847f46eb3ef68724a9aeabe2a2372a360060ac10cb674c18f7992a2b19da94b50e639c7f7e1d5efaeb182e3a51eb1a3a57cc3919180d74d1551626185e1546e26810157fdb825f5ff6ab936e5607499c2191d4e52345cf159b3016c58835f2f8d8249c1e0c2f228a0a30e649810eaefcc14410c32302750616f99b31345d04", 0xb7) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect(0x6, 0x303, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x1, 0x0, 0x7, 0x20, 0x4}, 0x13d, &(0x7f0000000340)={0x5, 0xf, 0x13d, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0xfb, 0x1, 0x8, 0x0, 0x2, [0x0]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "fb37fc3366ec19ff18f6673ff3859227"}, @ptm_cap={0x3}, @generic={0xf6, 0x10, 0x0, "9609166c5f86eb8885afbe838725031f7b7e7a121c37c8e8ea5ec18eb71ab31fe5c85662e4608967e02e39e1ac059819c6e79ccb0274ab7473558343967810ff53b251aa59ead886a9e708423bb4c740dd53d05b614e4b169a3c924c7881d600463aa77a87c3a1e4f1911cadeb1930a3a7fd4f95f7addea1bc91c874a0585853a380f64686514b64b49d3eca3c4f7d18a773246554c32e794eaa0d4ee559d2cdd84efc64563755e17caaf597bee5307ff4e472c9aa8ed5e6f45fc067f3919f326e4f7ea67780dd26c5b2710cc47f3a466ab6c94997e95550f9330343d04daa4911b4935c6f6908dccd32aae3aa9aa4eb3d51bf"}, @ssp_cap={0x18, 0x10, 0xa, 0x63, 0x3, 0x5, 0xf000, 0x1000, [0x30, 0x0, 0xc0]}]}, 0x7, [{0xfd, &(0x7f0000000480)=@string={0xfd, 0x3, "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"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xc4a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x600d}}, {0x2b, &(0x7f0000000980)=@string={0x2b, 0x3, "ab7168f83c70bc6fdcc799bf83669a936f5fd7846a34d74dfa337b64b0cab996700443da3e68f14d7c"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x436}}]}) r6 = socket(0x2a, 0x3, 0x0) syz_io_uring_setup(0x7993, &(0x7f00000001c0)={0x0, 0x1ffd, 0x800, 0x2, 0xc9}, &(0x7f0000000000), &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500"], 0x70}}, 0x0) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) 797.019556ms ago: executing program 3 (id=4564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x40, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x56, 0x2, @broadcast}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44842}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) vmsplice(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x13) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110325bd7000fbdbdf25010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="88104a5016a1f8e3a640a5808200000100e36934368b"], 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x24000010) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_kthread_work_queue_work\x00', r3, 0x0, 0x889}, 0x18) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x64}}, 0x0) (async) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) (async) recvmmsg(r6, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/48, 0x30}, 0x7}], 0x1, 0x10162, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x4}, 0x18) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002abd70000002000000000000", @ANYRES32=r11, @ANYBLOB="0801000000000000140003006e657464657673696d3000000000000008001b"], 0x50}}, 0x800) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r10, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x40000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendfile(r7, r5, 0x0, 0x3ffff) 796.466296ms ago: executing program 3 (id=4565): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (fail_nth: 1) 795.263946ms ago: executing program 5 (id=4566): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4402000012000100000000991e7efa4d674b34cbc1cca80000000000ac141400000000000000000000000000000000000000000014000d00200100000000000006000000c2a6678edd9d3d6b02209b234814d4da07541f73ea9a14187b218777c00ca8222aa581e9"], 0x44}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x482}, 0x1c) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'geneve0\x00'}}, 0x1e) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$sock(r4, &(0x7f0000000980)={&(0x7f0000000300)=@nl=@unspec, 0x80, 0x0}, 0x8004) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r7}, 0x18) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x0, @empty, 'netpci0\x00'}}, 0x1e) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000040003000000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f0400128009000100626f6e64000000000c0002800500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r9 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x0, 0x4}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd6, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0xd, 0x1, 0x4, 0x2}}, {0x4}}]}]}, 0x68}}, 0xc0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r10}, 0x11) rseq(&(0x7f00000002c0), 0x20, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000200)={0x8c99, 0x13, 0x7, 0x57, 0x7, 0x150}) 618.580554ms ago: executing program 0 (id=4567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x6}, {0x6, 0x0, 0x3, 0x365}]}) write$ppp(r2, &(0x7f0000000400)="6b27e58a4a", 0x5) 597.576565ms ago: executing program 5 (id=4568): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r3, 0x1000000, 0x0) preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/161, 0xa1}], 0x1, 0x3d1, 0x1ff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2, 0x1, 0x7, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0}, 0x40) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000340)='GPL\x00', 0xfffffff7, 0x96, &(0x7f0000000380)=""/150, 0x41100, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x10, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r0], &(0x7f0000000680)=[{0x4, 0x2, 0x9, 0xc}, {0x0, 0x2, 0xf, 0x4}, {0x0, 0x3, 0x10, 0x8}], 0x10, 0x10001}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback=r0, r2, 0x2, 0x0, r3, @void, @value=r5, @void, @void, r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r8, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 553.311056ms ago: executing program 3 (id=4569): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 552.796806ms ago: executing program 5 (id=4570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 544.504417ms ago: executing program 0 (id=4571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/105, 0x69}], 0x1, 0x21, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x4}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) close(r4) r5 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xaa, &(0x7f00000006c0)=""/170, 0x40f00, 0xeb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) recvmsg(r1, &(0x7f0000000980)={&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000002f80)=""/255, 0xff}, 0x40000003) 543.535747ms ago: executing program 5 (id=4572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000000000000", @ANYRESDEC=r1, @ANYBLOB, @ANYRES16=r3], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_emit_ethernet(0xcc, &(0x7f0000000980)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x2, 0x8, 0xbe, 0x68, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, {[@lsrr={0x83, 0xf, 0x27, [@broadcast, @broadcast, @loopback]}]}}, "4100c172acc9158ff14d1a26ed91e8e6bebb47e9ddb204ccc1fde3c537cb5ee0e6404df7fade535b0a774d61eaccc0af0d00000000000000fe9ce21d791d05295dff7f0000a7bbc8cf743dcadd55f408bb1b43426ed3a458a95a4b145a0f34dc173dc1de49047808b2a6121453e31e3aac6f5f39864428e70a817187a88116e19c77bce702f602ab6ee9dde6a5cc17b7b70d47ccb4186d4f4d16"}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 542.837017ms ago: executing program 3 (id=4573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) fchmodat(0xffffffffffffffff, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x120) 498.093309ms ago: executing program 3 (id=4574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000300), 0x3, 0x8100) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000001cc0)=""/21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xa808, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 478.504369ms ago: executing program 5 (id=4575): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030008001800000004000000000000000000000095000000000000003daa0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x748ff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f0000001480)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='host1x_channel_submit_complete\x00', r5}, 0x18) creat(&(0x7f0000000280)='./file2\x00', 0x1) r6 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000014c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) ftruncate(r7, 0xb35) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'virt_wifi0\x00'}}, 0x1e) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xd38c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r11 = dup(r10) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x101a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x1, 0x4, [0xbec, 0xa93, 0x974, 0xcc1]}) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004903003c000000000004907800000000e000000101440c08b3ac1514bb0000000600000000000000001890780400000000c42907ce8922582c000000"], 0x0) 343.261415ms ago: executing program 4 (id=4576): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x20c000, 0x82) 233.08228ms ago: executing program 4 (id=4577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x3}, 0x18) madvise(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r3, 0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000062000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x12, 0x132, &(0x7f00000003c0)}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000ac0)={0xfb, "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"}) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) write(r6, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket$can_raw(0x1d, 0x3, 0x1) 192.901092ms ago: executing program 5 (id=4578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r1, 0x40000000001, 0x7}) munlockall() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d01000080000000003d", @ANYRESHEX=r8, @ANYRES32=r5, @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC, @ANYRESHEX=r2]) r10 = socket$nl_generic(0x10, 0x3, 0x10) sigaltstack(&(0x7f0000000000)={0x0, 0x80000001, 0x54797c198fc260f8}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x2400, 0x4) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="595326bd7000fddbdf256b00000010001d800c00008005000900ba000000"], 0x24}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f00000004c0)) 117.617765ms ago: executing program 3 (id=4579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000fd2000/0x2000)=nil, 0x2000, 0x3000009, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYRESHEX=r3], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) socket$nl_rdma(0x10, 0x3, 0x14) syz_usbip_server_init(0x6) 0s ago: executing program 4 (id=4580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x3}, 0x18) madvise(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r3, 0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000062000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x12, 0x132, &(0x7f00000003c0)}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000ac0)={0xfb, "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"}) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) write(r6, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket$can_raw(0x1d, 0x3, 0x1) kernel console output (not intermixed with test programs): f749 code=0x7ffc0000 [ 273.180127][T30639] EXT4-fs: test_dummy_encryption option not supported [ 273.184631][ T29] audit: type=1326 audit(1764882941.507:44756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30624 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 273.214769][ T29] audit: type=1326 audit(1764882941.507:44757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30624 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 273.238361][ T29] audit: type=1326 audit(1764882941.507:44758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30624 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 273.261926][ T29] audit: type=1326 audit(1764882941.507:44759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30624 comm="syz.4.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 273.305681][T30649] siw: device registration error -23 [ 273.320305][T30131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.497136][T30674] netlink: 'syz.0.3617': attribute type 16 has an invalid length. [ 273.504464][T30131] veth0_vlan: entered promiscuous mode [ 273.505147][T30674] __nla_validate_parse: 3 callbacks suppressed [ 273.505158][T30674] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3617'. [ 273.515104][T30131] veth1_vlan: entered promiscuous mode [ 273.543208][T30131] veth0_macvtap: entered promiscuous mode [ 273.553536][T30131] veth1_macvtap: entered promiscuous mode [ 273.564902][T30131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.585891][T30131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.607843][T30205] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.635543][T30686] 9pnet: Could not find request transport:  [ 273.636083][T30205] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.651541][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.688622][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.712953][T30685] 9pnet: Could not find request transport:  [ 273.745804][T30701] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 273.753320][T30686] netlink: 'syz.4.3609': attribute type 29 has an invalid length. [ 273.778326][T30705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 273.783185][T30686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3609'. [ 273.798071][T30685] netlink: 'syz.1.3618': attribute type 29 has an invalid length. [ 273.870655][T30717] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3625'. [ 274.039804][T30731] set_capacity_and_notify: 4 callbacks suppressed [ 274.039815][T30731] loop4: detected capacity change from 0 to 1024 [ 274.058674][T30733] loop5: detected capacity change from 0 to 2048 [ 274.094450][T30743] netlink: 'syz.4.3629': attribute type 4 has an invalid length. [ 274.120538][T30743] netlink: 'syz.4.3629': attribute type 4 has an invalid length. [ 274.129921][T30733] loop5: p2 < > p3 < p5 > p4 [ 274.134670][T30733] loop5: partition table partially beyond EOD, truncated [ 274.151677][T30733] loop5: p2 start 4278190080 is beyond EOD, truncated [ 274.169332][T30733] loop5: p4 size 8192 extends beyond EOD, truncated [ 274.186745][T30733] loop5: p5 size 8192 extends beyond EOD, truncated [ 274.541753][T30758] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3630'. [ 274.635504][T30767] loop3: detected capacity change from 0 to 512 [ 274.708636][T30767] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.728215][T30778] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 274.834013][T30754] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.3630: lblock 23 mapped to illegal pblock 18 (length 1) [ 274.879981][T30783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3633'. [ 274.986128][T30783] team0 (unregistering): Port device team_slave_0 removed [ 275.003160][T30783] team0 (unregistering): Port device team_slave_1 removed [ 275.052510][T30792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3637'. [ 275.116511][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'. [ 275.140931][T30848] netlink: 'syz.4.3642': attribute type 16 has an invalid length. [ 275.148840][T30848] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3642'. [ 275.171656][T30851] netlink: 'syz.4.3643': attribute type 16 has an invalid length. [ 275.179552][T30851] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3643'. [ 275.593292][T30860] 9pnet: Could not find request transport:  [ 275.609942][T30860] netlink: 'syz.1.3634': attribute type 29 has an invalid length. [ 275.637284][T30864] loop3: detected capacity change from 0 to 1024 [ 275.701045][T30876] loop3: detected capacity change from 0 to 1024 [ 275.709038][T30876] EXT4-fs: test_dummy_encryption option not supported [ 275.810908][T30884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.819951][T30884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.936631][T30894] lo speed is unknown, defaulting to 1000 [ 275.982294][T30916] loop3: detected capacity change from 0 to 512 [ 275.996254][T30916] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 276.007810][T30916] EXT4-fs (loop3): 1 truncate cleaned up [ 276.313294][T30938] loop4: detected capacity change from 0 to 2048 [ 276.352370][T30580] loop4: p2 < > p3 < p5 > p4 [ 276.357099][T30580] loop4: partition table partially beyond EOD, truncated [ 276.365842][T30580] loop4: p2 start 4278190080 is beyond EOD, truncated [ 276.373748][T30580] loop4: p4 size 8192 extends beyond EOD, truncated [ 276.381226][T30580] loop4: p5 size 8192 extends beyond EOD, truncated [ 276.398948][T30938] loop4: p2 < > p3 < p5 > p4 [ 276.403765][T30938] loop4: partition table partially beyond EOD, truncated [ 276.412211][T30938] loop4: p2 start 4278190080 is beyond EOD, truncated [ 276.432249][T30938] loop4: p4 size 8192 extends beyond EOD, truncated [ 276.442478][T30938] loop4: p5 size 8192 extends beyond EOD, truncated [ 276.456469][T30938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.470592][T30938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.519294][T30962] loop1: detected capacity change from 0 to 1024 [ 276.608941][T30974] loop0: detected capacity change from 0 to 2048 [ 276.666499][T30980] loop1: detected capacity change from 0 to 2048 [ 276.709344][T30994] syz!: rxe_newlink: already configured on team_slave_0 [ 276.723165][T29915] loop1: p2 < > p3 < p5 > p4 [ 276.727873][T29915] loop1: partition table partially beyond EOD, truncated [ 276.741406][T29915] loop1: p2 start 4278190080 is beyond EOD, truncated [ 276.754660][T31002] syz!: rxe_newlink: already configured on team_slave_0 [ 276.762333][T29915] loop1: p4 size 8192 extends beyond EOD, truncated [ 276.772411][T29915] loop1: p5 size 8192 extends beyond EOD, truncated [ 276.780016][T31005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.789177][T31005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.807444][T30980] loop1: p2 < > p3 < p5 > p4 [ 276.812181][T30980] loop1: partition table partially beyond EOD, truncated [ 276.821402][T30980] loop1: p2 start 4278190080 is beyond EOD, truncated [ 276.829748][T30980] loop1: p4 size 8192 extends beyond EOD, truncated [ 276.838928][T30980] loop1: p5 size 8192 extends beyond EOD, truncated [ 277.440398][T31041] netlink: 'syz.0.3672': attribute type 16 has an invalid length. [ 277.509605][T31057] netlink: 'syz.5.3676': attribute type 16 has an invalid length. [ 277.531450][T31061] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 277.597944][T31067] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.754340][T31106] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 277.762645][T31097] loop1: p2 < > p3 < p5 > p4 [ 277.767340][T31097] loop1: partition table partially beyond EOD, truncated [ 277.774808][T31097] loop1: p2 start 4278190080 is beyond EOD, truncated [ 277.786542][T31097] loop1: p4 size 8192 extends beyond EOD, truncated [ 277.794162][T31097] loop1: p5 size 8192 extends beyond EOD, truncated [ 277.803456][T31113] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 277.849962][T31122] netlink: 'syz.3.3690': attribute type 16 has an invalid length. [ 278.073686][ T29] kauditd_printk_skb: 670 callbacks suppressed [ 278.073701][ T29] audit: type=1326 audit(1764882946.557:45430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3f7af749 code=0x7ffc0000 [ 278.103601][ T29] audit: type=1326 audit(1764882946.557:45431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3f7af749 code=0x7ffc0000 [ 278.127286][ T29] audit: type=1326 audit(1764882946.557:45432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3f7af749 code=0x7ffc0000 [ 278.150857][ T29] audit: type=1326 audit(1764882946.557:45433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3f7af749 code=0x7ffc0000 [ 278.174420][ T29] audit: type=1326 audit(1764882946.557:45434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efd3f7af783 code=0x7ffc0000 [ 278.197892][ T29] audit: type=1326 audit(1764882946.557:45435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efd3f7af807 code=0x7ffc0000 [ 278.221437][ T29] audit: type=1326 audit(1764882946.557:45436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7efd3f766bdd code=0x7ffc0000 [ 278.245178][ T29] audit: type=1326 audit(1764882946.557:45437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7efd3f7e3e89 code=0x7ffc0000 [ 278.268847][ T29] audit: type=1326 audit(1764882946.557:45438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7efd3f766c47 code=0x7ffc0000 [ 278.292399][ T29] audit: type=1326 audit(1764882946.557:45439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31052 comm="syz.0.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3f7af749 code=0x7ffc0000 [ 278.326079][T31128] 9pnet: Could not find request transport:  [ 278.367951][T31128] netlink: 'syz.0.3675': attribute type 29 has an invalid length. [ 278.406230][T30131] EXT4-fs unmount: 49 callbacks suppressed [ 278.406246][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.487482][T31138] 9pnet: Could not find request transport:  [ 278.509302][T31138] netlink: 'syz.3.3693': attribute type 29 has an invalid length. [ 278.564225][T31153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.615352][T31173] lo speed is unknown, defaulting to 1000 [ 278.629840][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.670355][T31183] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.694195][T31185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.707230][T31175] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 278.716066][T31183] EXT4-fs (loop1): 1 truncate cleaned up [ 278.730149][T31183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.765186][T31190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.782551][T31190] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.794328][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.832510][T31190] __nla_validate_parse: 13 callbacks suppressed [ 278.832594][T31190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3703'. [ 278.847934][T31190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3703'. [ 279.337450][T31238] siw: device registration error -23 [ 279.367583][T31241] set_capacity_and_notify: 6 callbacks suppressed [ 279.367595][T31241] loop4: detected capacity change from 0 to 1024 [ 279.381073][T31241] EXT4-fs: Ignoring removed oldalloc option [ 279.389252][T31241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.422751][T31241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.445325][T31245] loop5: detected capacity change from 0 to 2048 [ 279.473511][T30580] loop5: p2 < > p3 < p5 > p4 [ 279.478289][T30580] loop5: partition table partially beyond EOD, truncated [ 279.488728][T30580] loop5: p2 start 4278190080 is beyond EOD, truncated [ 279.498298][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.514232][T30580] loop5: p4 size 8192 extends beyond EOD, truncated [ 279.539894][T30580] loop5: p5 size 8192 extends beyond EOD, truncated [ 279.549413][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.558468][T31245] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) [ 279.652832][T31273] loop4: detected capacity change from 0 to 1024 [ 279.659700][T31276] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 279.676738][T31273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.721194][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.744951][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.756701][T31287] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3716'. [ 279.790158][T31289] loop4: detected capacity change from 0 to 2048 [ 279.824667][T31289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.837859][T31297] 9pnet: Could not find request transport:  [ 279.864903][T31297] netlink: 'syz.1.3710': attribute type 29 has an invalid length. [ 279.909515][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.950714][T31331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3721'. [ 280.004682][T31337] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 280.011126][T31343] loop1: detected capacity change from 0 to 1024 [ 280.037779][T31343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.068309][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.079080][T31352] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3730'. [ 280.131522][T31362] siw: device registration error -23 [ 280.185394][T31364] 9pnet: Could not find request transport:  [ 280.202079][T31364] netlink: 'syz.1.3731': attribute type 29 has an invalid length. [ 280.274567][T31398] loop5: detected capacity change from 0 to 1024 [ 280.289346][T31398] EXT4-fs: test_dummy_encryption option not supported [ 280.304551][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 280.347559][T31408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3736'. [ 280.445889][T31422] loop3: detected capacity change from 0 to 1024 [ 280.470123][T31422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.485079][T31420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3739'. [ 280.514148][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.557323][T31443] loop0: detected capacity change from 0 to 1024 [ 280.576473][T31443] EXT4-fs: Ignoring removed oldalloc option [ 280.596175][T31443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.597638][T31439] 9pnet: Could not find request transport:  [ 280.620047][T31442] loop4: detected capacity change from 0 to 2048 [ 280.643484][T31443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.651136][T31439] netlink: 'syz.3.3747': attribute type 29 has an invalid length. [ 280.692503][T31442] loop4: p2 < > p3 < p5 > p4 [ 280.697278][T31442] loop4: partition table partially beyond EOD, truncated [ 280.705515][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.715644][T31442] loop4: p2 start 4278190080 is beyond EOD, truncated [ 280.747318][T31442] loop4: p4 size 8192 extends beyond EOD, truncated [ 280.757737][T31442] loop4: p5 size 8192 extends beyond EOD, truncated [ 280.778906][T31459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3751'. [ 280.827067][ T3006] loop4: p2 < > p3 < p5 > p4 [ 280.831793][ T3006] loop4: partition table partially beyond EOD, truncated [ 280.839107][T31477] loop0: detected capacity change from 0 to 1024 [ 280.841201][ T3006] loop4: p2 start 4278190080 is beyond EOD, truncated [ 280.854161][T31470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3752'. [ 280.866282][T31481] netlink: 'syz.1.3754': attribute type 4 has an invalid length. [ 280.868963][T31477] EXT4-fs: test_dummy_encryption option not supported [ 280.884595][ T3006] loop4: p4 size 8192 extends beyond EOD, truncated [ 280.899906][T31481] netlink: 'syz.1.3754': attribute type 4 has an invalid length. [ 280.908077][ T3006] loop4: p5 size 8192 extends beyond EOD, truncated [ 281.225038][T31511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.272613][T31511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.565956][T31532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.599670][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.696150][T31542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.830428][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.894763][T31568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.909525][T31568] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.914317][T31564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.955881][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.976275][T31564] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.062581][T31590] 9pnet: Could not find request transport:  [ 282.078324][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.087567][T31590] netlink: 'syz.4.3770': attribute type 29 has an invalid length. [ 282.095729][T30580] loop1: p2 < > p3 < p5 > p4 [ 282.095741][T30580] loop1: partition table partially beyond EOD, truncated [ 282.095817][T30580] loop1: p2 start 4278190080 is beyond EOD, truncated [ 282.096354][T30580] loop1: p4 size 8192 extends beyond EOD, truncated [ 282.128990][T30580] loop1: p5 size 8192 extends beyond EOD, truncated [ 282.148222][T31584] loop1: p2 < > p3 < p5 > p4 [ 282.152940][T31584] loop1: partition table partially beyond EOD, truncated [ 282.166477][T31584] loop1: p2 start 4278190080 is beyond EOD, truncated [ 282.176119][T31595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.192994][T31584] loop1: p4 size 8192 extends beyond EOD, truncated [ 282.200277][T31584] loop1: p5 size 8192 extends beyond EOD, truncated [ 282.242945][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.294632][T31643] EXT4-fs: Ignoring removed oldalloc option [ 282.354246][T31643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.385302][T31643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.420553][T31652] syz!: rxe_newlink: already configured on team_slave_0 [ 282.518736][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.764661][T31686] 9pnet: Could not find request transport:  [ 282.799391][T31686] netlink: 'syz.3.3774': attribute type 29 has an invalid length. [ 282.865030][T31693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.895876][T31705] EXT4-fs: test_dummy_encryption option not supported [ 282.930994][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.014887][T31735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.022372][T31735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.023863][T31738] netlink: 'syz.3.3790': attribute type 16 has an invalid length. [ 283.050251][T31735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.057761][T31735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.111414][T31740] lo speed is unknown, defaulting to 1000 [ 283.160580][T31737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 283.211719][T31737] EXT4-fs (loop4): 1 truncate cleaned up [ 283.217981][T31737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.246535][T31751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.348061][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.389076][T31789] netlink: 'syz.1.3798': attribute type 16 has an invalid length. [ 283.403666][T31793] EXT4-fs: test_dummy_encryption option not supported [ 283.482015][T31804] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 283.532604][T31797] loop3: p2 < > p3 < p5 > p4 [ 283.537329][T31797] loop3: partition table partially beyond EOD, truncated [ 283.590514][T31797] loop3: p2 start 4278190080 is beyond EOD, truncated [ 283.608679][T31797] loop3: p4 size 8192 extends beyond EOD, truncated [ 283.618559][ T29] kauditd_printk_skb: 1026 callbacks suppressed [ 283.618573][ T29] audit: type=1326 audit(1764882952.097:46466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.648866][T31797] loop3: p5 size 8192 extends beyond EOD, truncated [ 283.719109][ T29] audit: type=1326 audit(1764882952.097:46467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.742842][ T29] audit: type=1326 audit(1764882952.137:46468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.766485][ T29] audit: type=1326 audit(1764882952.137:46470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.790035][ T29] audit: type=1326 audit(1764882952.137:46469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.813689][ T29] audit: type=1326 audit(1764882952.137:46471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.837390][ T29] audit: type=1326 audit(1764882952.137:46472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.861137][ T29] audit: type=1326 audit(1764882952.137:46473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.884692][ T29] audit: type=1326 audit(1764882952.137:46474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.908247][ T29] audit: type=1326 audit(1764882952.137:46475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31819 comm="syz.1.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 283.943363][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.990354][T31828] __nla_validate_parse: 9 callbacks suppressed [ 283.990372][T31828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3805'. [ 284.005850][T31831] 9pnet: Could not find request transport:  [ 284.024801][T31820] netlink: 'syz.1.3804': attribute type 29 has an invalid length. [ 284.225313][T31860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.313136][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.346804][T31878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.393191][T31893] netlink: 'syz.0.3818': attribute type 16 has an invalid length. [ 284.401035][T31893] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3818'. [ 284.470956][T31902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3820'. [ 284.490186][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.651526][T31923] set_capacity_and_notify: 15 callbacks suppressed [ 284.651572][T31923] loop3: detected capacity change from 0 to 2048 [ 284.722370][T30580] loop3: p2 < > p3 < p5 > p4 [ 284.727116][T30580] loop3: partition table partially beyond EOD, truncated [ 284.741850][T30580] loop3: p2 start 4278190080 is beyond EOD, truncated [ 284.749034][T31931] loop1: detected capacity change from 0 to 1024 [ 284.752368][T30580] loop3: p4 size 8192 extends beyond EOD, truncated [ 284.755794][T31931] EXT4-fs: Ignoring removed oldalloc option [ 284.776592][T30580] loop3: p5 size 8192 extends beyond EOD, truncated [ 284.838631][T31923] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 284.842358][T31931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.888810][T31931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.006822][T31956] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3830'. [ 285.047141][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.075934][T31959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3831'. [ 285.123581][T31971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.132479][T31971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.178580][T31974] 9pnet: Could not find request transport:  [ 285.199833][T31981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3835'. [ 285.211207][T31974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3823'. [ 285.285696][T31988] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3837'. [ 285.308104][T31988] loop5: detected capacity change from 0 to 512 [ 285.334357][T31988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.353724][T32016] loop4: detected capacity change from 0 to 1024 [ 285.354241][T31988] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.388482][T32016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.420670][T31988] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.3837: lblock 23 mapped to illegal pblock 18 (length 1) [ 285.437041][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.459656][T32027] loop0: detected capacity change from 0 to 512 [ 285.493130][T32027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.515868][T32038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3843'. [ 285.518633][T32045] validate_nla: 2 callbacks suppressed [ 285.518648][T32045] netlink: 'syz.4.3842': attribute type 16 has an invalid length. [ 285.538276][T32045] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3842'. [ 285.539140][T32027] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.562571][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.591412][T32023] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.3841: lblock 23 mapped to illegal pblock 18 (length 1) [ 285.627149][T32059] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 285.670261][T32058] lo speed is unknown, defaulting to 1000 [ 285.676909][T32063] loop4: detected capacity change from 0 to 2048 [ 285.683883][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.708481][T32070] loop5: detected capacity change from 0 to 512 [ 285.732406][T30580] loop4: p2 < > p3 < p5 > p4 [ 285.737130][T30580] loop4: partition table partially beyond EOD, truncated [ 285.770042][T32070] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 285.783294][T32070] EXT4-fs (loop5): 1 truncate cleaned up [ 285.809065][T32070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.835165][T30580] loop4: p2 start 4278190080 is beyond EOD, truncated [ 285.873075][T32106] loop3: detected capacity change from 0 to 1024 [ 285.873691][T30580] loop4: p4 size 8192 extends beyond EOD, truncated [ 285.920600][T32074] netlink: 'syz.0.3849': attribute type 29 has an invalid length. [ 285.930910][T32113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.939687][T32113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.947103][T30580] loop4: p5 size 8192 extends beyond EOD, truncated [ 285.955596][T32106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.000718][T32063] loop4: p2 < > p3 < p5 > p4 [ 286.005538][T32063] loop4: partition table partially beyond EOD, truncated [ 286.013300][T32063] loop4: p2 start 4278190080 is beyond EOD, truncated [ 286.020758][T32063] loop4: p4 size 8192 extends beyond EOD, truncated [ 286.028572][T32063] loop4: p5 size 8192 extends beyond EOD, truncated [ 286.069097][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.197030][T32155] siw: device registration error -23 [ 286.247921][T32149] loop0: detected capacity change from 0 to 2048 [ 286.271338][T32164] netlink: 'syz.3.3863': attribute type 4 has an invalid length. [ 286.323266][T32149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.338588][ T10] lo speed is unknown, defaulting to 1000 [ 286.344487][ T10] syz2: Port: 1 Link DOWN [ 286.349497][T32164] netlink: 'syz.3.3863': attribute type 4 has an invalid length. [ 286.368809][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.370347][T25589] lo speed is unknown, defaulting to 1000 [ 286.384057][T25589] syz2: Port: 1 Link ACTIVE [ 286.470213][T32181] loop0: detected capacity change from 0 to 1024 [ 286.493838][T32181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.502511][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.584528][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.692977][T32191] loop5: p2 < > p3 < p5 > p4 [ 286.697725][T32191] loop5: partition table partially beyond EOD, truncated [ 286.735462][T32191] loop5: p2 start 4278190080 is beyond EOD, truncated [ 286.802630][T32191] loop5: p4 size 8192 extends beyond EOD, truncated [ 286.828267][T32191] loop5: p5 size 8192 extends beyond EOD, truncated [ 286.999305][ T3006] loop5: p2 < > p3 < p5 > p4 [ 287.004177][ T3006] loop5: partition table partially beyond EOD, truncated [ 287.011502][ T3006] loop5: p2 start 4278190080 is beyond EOD, truncated [ 287.017657][T32206] siw: device registration error -23 [ 287.024784][ T3006] loop5: p4 size 8192 extends beyond EOD, truncated [ 287.041724][ T3006] loop5: p5 size 8192 extends beyond EOD, truncated [ 287.280364][T32247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.284305][T32239] lo speed is unknown, defaulting to 1000 [ 287.312874][T32247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.314408][T32251] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.372959][T32251] EXT4-fs (loop0): 1 truncate cleaned up [ 287.379157][T32251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.448093][T29915] udevd[29915]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 287.464037][T30580] udevd[30580]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 287.639768][T32310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.649577][T32310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.862408][T30580] loop1: p2 < > p3 < p5 > p4 [ 287.867150][T30580] loop1: partition table partially beyond EOD, truncated [ 287.874814][T30580] loop1: p2 start 4278190080 is beyond EOD, truncated [ 287.882697][T30580] loop1: p4 size 8192 extends beyond EOD, truncated [ 287.890268][T30580] loop1: p5 size 8192 extends beyond EOD, truncated [ 287.901155][T32334] loop1: p2 < > p3 < p5 > p4 [ 287.905994][T32334] loop1: partition table partially beyond EOD, truncated [ 287.913871][T32334] loop1: p2 start 4278190080 is beyond EOD, truncated [ 287.938941][T32334] loop1: p4 size 8192 extends beyond EOD, truncated [ 287.962538][T32334] loop1: p5 size 8192 extends beyond EOD, truncated [ 287.987279][T32346] netlink: 'syz.3.3892': attribute type 29 has an invalid length. [ 288.066658][T32355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.088215][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.131875][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.165304][T32365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.335217][T32393] netlink: 'syz.5.3901': attribute type 16 has an invalid length. [ 288.379579][T32404] siw: device registration error -23 [ 288.538342][T32418] lo speed is unknown, defaulting to 1000 [ 288.560807][T32432] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.584817][T32432] EXT4-fs (loop3): 1 truncate cleaned up [ 288.635008][T32442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.662946][T32442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.786550][T32489] EXT4-fs: test_dummy_encryption option not supported [ 288.797059][T32498] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 288.887922][T32515] siw: device registration error -23 [ 289.033072][ T29] kauditd_printk_skb: 601 callbacks suppressed [ 289.033088][ T29] audit: type=1326 audit(1764882957.517:47077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.033115][ T29] audit: type=1326 audit(1764882957.517:47078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.034365][ T29] audit: type=1326 audit(1764882957.517:47079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.034555][ T29] audit: type=1326 audit(1764882957.517:47080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.034658][ T29] audit: type=1326 audit(1764882957.517:47081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.034909][ T29] audit: type=1326 audit(1764882957.517:47082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.034989][ T29] audit: type=1326 audit(1764882957.517:47083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.035573][ T29] audit: type=1326 audit(1764882957.517:47084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.035661][ T29] audit: type=1326 audit(1764882957.517:47085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.035811][ T29] audit: type=1326 audit(1764882957.517:47086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32524 comm="syz.5.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 289.439839][T32551] syz!: rxe_newlink: already configured on team_slave_0 [ 289.493304][T32558] siw: device registration error -23 [ 289.620990][T32582] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.641568][T32575] lo speed is unknown, defaulting to 1000 [ 289.674880][T32581] 9pnet: Could not find request transport:  [ 289.685234][T32582] EXT4-fs (loop4): 1 truncate cleaned up [ 289.783212][T32581] netlink: 'syz.5.3922': attribute type 29 has an invalid length. [ 289.822840][T32581] __nla_validate_parse: 7 callbacks suppressed [ 289.822866][T32581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3922'. [ 289.906488][T32613] lo speed is unknown, defaulting to 1000 [ 289.957970][T32618] set_capacity_and_notify: 12 callbacks suppressed [ 289.957984][T32618] loop1: detected capacity change from 0 to 512 [ 290.012753][T32618] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 290.045237][T32629] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3940'. [ 290.080970][T32618] EXT4-fs (loop1): 1 truncate cleaned up [ 290.096432][T32639] syz!: rxe_newlink: already configured on team_slave_0 [ 290.168100][T32662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3937'. [ 290.177096][T32662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3937'. [ 290.186068][T32662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3937'. [ 290.203789][T32665] siw: device registration error -23 [ 290.235385][T32659] loop0: detected capacity change from 0 to 2048 [ 290.315755][T32662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3937'. [ 290.371798][T32672] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3944'. [ 290.438093][T32672] loop5: detected capacity change from 0 to 512 [ 290.495995][T32672] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.549455][T32672] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.3944: lblock 23 mapped to illegal pblock 18 (length 1) [ 290.662210][T32705] loop4: detected capacity change from 0 to 1024 [ 290.669014][T32705] EXT4-fs: test_dummy_encryption option not supported [ 290.771479][T32716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3951'. [ 290.925175][T32729] netlink: 'syz.0.3953': attribute type 16 has an invalid length. [ 290.933055][T32729] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3953'. [ 290.948051][T32726] 9pnet: Could not find request transport:  [ 290.991649][T32726] netlink: 'syz.5.3952': attribute type 29 has an invalid length. [ 291.032840][T32739] netlink: 'syz.1.3955': attribute type 16 has an invalid length. [ 291.040307][T32742] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 291.040711][T32739] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3955'. [ 291.127269][T32746] loop3: detected capacity change from 0 to 512 [ 291.173868][T32746] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.191903][ T306] siw: device registration error -23 [ 291.215301][ T307] loop4: detected capacity change from 0 to 512 [ 291.241273][T32746] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.3958: lblock 23 mapped to illegal pblock 18 (length 1) [ 291.310463][ T319] loop5: detected capacity change from 0 to 1024 [ 291.322498][ T319] EXT4-fs: test_dummy_encryption option not supported [ 291.347053][ T307] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.453837][ T334] loop1: detected capacity change from 0 to 2048 [ 291.532415][ T334] loop1: p2 < > p3 < p5 > p4 [ 291.537135][ T334] loop1: partition table partially beyond EOD, truncated [ 291.618504][ T334] loop1: p2 start 4278190080 is beyond EOD, truncated [ 291.690394][ T334] loop1: p4 size 8192 extends beyond EOD, truncated [ 291.769853][ T334] loop1: p5 size 8192 extends beyond EOD, truncated [ 292.158536][ T402] loop5: detected capacity change from 0 to 1024 [ 292.173576][ T398] loop0: detected capacity change from 0 to 2048 [ 292.187452][ T402] EXT4-fs: Ignoring removed oldalloc option [ 292.193971][ T402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.202178][ T406] netlink: 'syz.3.3982': attribute type 16 has an invalid length. [ 292.406154][ T421] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.473709][ T416] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.3983: lblock 23 mapped to illegal pblock 18 (length 1) [ 292.531085][ T446] 9pnet: Could not find request transport:  [ 292.549853][ T451] 9pnet: Could not find request transport:  [ 292.578103][ T446] netlink: 'syz.1.3985': attribute type 29 has an invalid length. [ 292.663477][ T451] netlink: 'syz.4.3976': attribute type 29 has an invalid length. [ 292.688036][ T470] siw: device registration error -23 [ 292.754875][ T482] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 292.797060][ T485] EXT4-fs: Ignoring removed oldalloc option [ 292.810489][ T3006] udevd[3006]: worker [30580] terminated by signal 33 (Unknown signal 33) [ 292.813235][ T485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.819471][ T3006] udevd[3006]: worker [30580] failed while handling '/devices/virtual/block/loop1' [ 292.882715][T18291] loop3: p2 < > p3 < p5 > p4 [ 292.887445][T18291] loop3: partition table partially beyond EOD, truncated [ 292.914508][T18291] loop3: p2 start 4278190080 is beyond EOD, truncated [ 292.927416][T18291] loop3: p4 size 8192 extends beyond EOD, truncated [ 292.934947][T18291] loop3: p5 size 8192 extends beyond EOD, truncated [ 292.963140][ T488] loop3: p2 < > p3 < p5 > p4 [ 292.967846][ T488] loop3: partition table partially beyond EOD, truncated [ 292.976803][ T514] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.989531][ T488] loop3: p2 start 4278190080 is beyond EOD, truncated [ 293.001026][ T488] loop3: p4 size 8192 extends beyond EOD, truncated [ 293.008224][ T488] loop3: p5 size 8192 extends beyond EOD, truncated [ 293.097246][ T539] siw: device registration error -23 [ 293.168353][ T550] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 293.222141][ T555] netlink: 'syz.1.4008': attribute type 4 has an invalid length. [ 293.245712][ T555] netlink: 'syz.1.4008': attribute type 4 has an invalid length. [ 293.332051][ T561] lo speed is unknown, defaulting to 1000 [ 293.379371][ T569] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 293.392380][ T569] EXT4-fs (loop4): 1 truncate cleaned up [ 293.701706][ T601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.734579][ T601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.033658][ T643] netlink: 'syz.0.4019': attribute type 16 has an invalid length. [ 294.146167][ T647] netlink: 'syz.1.4021': attribute type 4 has an invalid length. [ 294.164033][ T639] EXT4-fs: Ignoring removed oldalloc option [ 294.192184][ T639] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.325097][ T664] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 294.656027][T10944] lo speed is unknown, defaulting to 1000 [ 294.661813][T10944] syz2: Port: 1 Link DOWN [ 294.694748][ T3494] lo speed is unknown, defaulting to 1000 [ 294.700514][ T3494] syz2: Port: 1 Link ACTIVE [ 294.848776][ T678] __nla_validate_parse: 13 callbacks suppressed [ 294.848792][ T678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4027'. [ 294.887110][ T689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4028'. [ 295.067518][ T701] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4030'. [ 295.188410][ T29] kauditd_printk_skb: 693 callbacks suppressed [ 295.188428][ T29] audit: type=1326 audit(1764882963.667:47780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 295.199251][ T705] set_capacity_and_notify: 6 callbacks suppressed [ 295.199293][ T705] loop1: detected capacity change from 0 to 2048 [ 295.232506][ T29] audit: type=1326 audit(1764882963.667:47781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 295.255955][ T29] audit: type=1326 audit(1764882963.667:47782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 295.279454][ T29] audit: type=1326 audit(1764882963.667:47783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 295.302851][ T29] audit: type=1326 audit(1764882963.677:47784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 295.326257][ T29] audit: type=1326 audit(1764882963.707:47785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 295.349700][ T29] audit: type=1326 audit(1764882963.707:47786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 295.350843][ T712] loop0: detected capacity change from 0 to 1024 [ 295.382164][ T712] EXT4-fs: Ignoring removed oldalloc option [ 295.388979][ T712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.401017][ T29] audit: type=1326 audit(1764882963.827:47787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 295.424628][ T29] audit: type=1326 audit(1764882963.827:47788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc82537f783 code=0x7ffc0000 [ 295.448045][ T29] audit: type=1326 audit(1764882963.827:47789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=708 comm="syz.4.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc82537f807 code=0x7ffc0000 [ 295.546909][ T714] 9pnet: Could not find request transport:  [ 295.594369][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.603794][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.634727][ T747] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4037'. [ 295.671291][ T751] siw: device registration error -23 [ 295.704381][ T733] loop1: detected capacity change from 0 to 512 [ 295.761239][ T733] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.789569][ T733] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.4037: lblock 23 mapped to illegal pblock 18 (length 1) [ 296.087559][ T799] loop1: detected capacity change from 0 to 2048 [ 296.446269][ T811] 9pnet: Could not find request transport:  [ 296.469653][ T811] validate_nla: 7 callbacks suppressed [ 296.469692][ T811] netlink: 'syz.0.4051': attribute type 29 has an invalid length. [ 296.620583][ T842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 296.680479][ T849] loop3: detected capacity change from 0 to 2048 [ 296.733401][ T849] loop3: p2 < > p3 < p5 > p4 [ 296.738125][ T849] loop3: partition table partially beyond EOD, truncated [ 296.752591][ T849] loop3: p2 start 4278190080 is beyond EOD, truncated [ 296.760473][ T849] loop3: p4 size 8192 extends beyond EOD, truncated [ 296.772369][ T870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.780867][ T859] loop0: detected capacity change from 0 to 2048 [ 296.790236][ T858] loop5: detected capacity change from 0 to 2048 [ 296.793196][ T870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.797512][ T849] loop3: p5 size 8192 extends beyond EOD, truncated [ 296.853838][T18740] loop5: p2 < > p3 < p5 > p4 [ 296.858552][T18740] loop5: partition table partially beyond EOD, truncated [ 296.882216][T18740] loop5: p2 start 4278190080 is beyond EOD, truncated [ 296.899119][ T849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.910995][ T902] loop1: detected capacity change from 0 to 512 [ 296.922514][T18740] loop5: p4 size 8192 extends beyond EOD, truncated [ 296.931112][ T849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.941587][T18740] loop5: p5 size 8192 extends beyond EOD, truncated [ 296.969708][ T858] loop5: p2 < > p3 < p5 > p4 [ 296.974483][ T858] loop5: partition table partially beyond EOD, truncated [ 296.982825][ T858] loop5: p2 start 4278190080 is beyond EOD, truncated [ 296.990482][ T858] loop5: p4 size 8192 extends beyond EOD, truncated [ 296.998357][ T858] loop5: p5 size 8192 extends beyond EOD, truncated [ 297.006299][ T902] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.024002][ T858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.038741][ T858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.073823][ T902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4068'. [ 297.082884][ T902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4068'. [ 297.324056][ T927] 9pnet: Could not find request transport:  [ 297.343104][ T927] netlink: 'syz.0.4069': attribute type 29 has an invalid length. [ 297.442885][ T946] netlink: 'syz.0.4074': attribute type 4 has an invalid length. [ 297.456701][ T946] netlink: 'syz.0.4074': attribute type 4 has an invalid length. [ 297.541762][ T949] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 297.573029][ T953] loop4: detected capacity change from 0 to 512 [ 297.588659][ T953] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.610412][ T953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4076'. [ 297.619416][ T953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4076'. [ 298.095317][ T967] loop1: detected capacity change from 0 to 2048 [ 298.135831][ T975] siw: device registration error -23 [ 298.193015][ T978] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 298.241984][ T989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.250960][ T989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.332726][ T999] lo speed is unknown, defaulting to 1000 [ 298.377990][ T1014] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 298.391392][ T1014] EXT4-fs (loop0): 1 truncate cleaned up [ 298.486206][ T1034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.495823][ T1034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.970760][ T1055] 9pnet: Could not find request transport:  [ 298.988488][ T1055] netlink: 'syz.1.4089': attribute type 29 has an invalid length. [ 299.016559][ T1061] siw: device registration error -23 [ 299.041122][ T1064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4091'. [ 299.059817][ T1064] team0 (unregistering): Port device team_slave_0 removed [ 299.075105][ T1064] team0 (unregistering): Port device team_slave_1 removed [ 299.117415][ T1102] netlink: 'syz.4.4093': attribute type 4 has an invalid length. [ 299.128767][ T1102] netlink: 'syz.4.4093': attribute type 4 has an invalid length. [ 299.178496][ T1105] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 299.259060][ T1116] netlink: 'syz.1.4097': attribute type 4 has an invalid length. [ 299.280750][ T1116] netlink: 'syz.1.4097': attribute type 4 has an invalid length. [ 299.878489][ T1138] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 300.075165][ T1169] __nla_validate_parse: 1 callbacks suppressed [ 300.075179][ T1169] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4103'. [ 300.199320][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 300.199337][ T29] audit: type=1326 audit(1764882968.677:48294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 300.229642][ T1153] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.243195][ T29] audit: type=1326 audit(1764882968.717:48295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 300.266687][ T29] audit: type=1326 audit(1764882968.717:48296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 300.290288][ T29] audit: type=1326 audit(1764882968.717:48297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0fe311667 code=0x7ffc0000 [ 300.299988][ T1202] set_capacity_and_notify: 5 callbacks suppressed [ 300.300005][ T1202] loop3: detected capacity change from 0 to 1024 [ 300.313706][ T29] audit: type=1326 audit(1764882968.717:48298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe0fe3115dc code=0x7ffc0000 [ 300.349844][ T29] audit: type=1326 audit(1764882968.717:48299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe0fe311514 code=0x7ffc0000 [ 300.373251][ T29] audit: type=1326 audit(1764882968.717:48300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe0fe311514 code=0x7ffc0000 [ 300.379205][ T1169] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.4103: lblock 23 mapped to illegal pblock 18 (length 1) [ 300.396767][ T29] audit: type=1326 audit(1764882968.717:48301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0fe30e3aa code=0x7ffc0000 [ 300.416873][ T1209] loop0: detected capacity change from 0 to 1024 [ 300.434192][ T29] audit: type=1326 audit(1764882968.717:48302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 300.465937][ T29] audit: type=1326 audit(1764882968.757:48303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1191 comm="syz.1.4110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0fe30f749 code=0x7ffc0000 [ 300.526322][ T1205] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 16: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 300.740604][ T1263] siw: device registration error -23 [ 300.753280][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.768438][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.800741][ T1285] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4121'. [ 300.854167][ T1296] loop4: detected capacity change from 0 to 1024 [ 300.901643][ T1269] loop0: detected capacity change from 0 to 512 [ 300.930261][ T1304] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4125'. [ 300.953473][ T1269] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.968906][ T1304] loop1: detected capacity change from 0 to 512 [ 300.983037][ T1269] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.4121: lblock 23 mapped to illegal pblock 18 (length 1) [ 301.018391][ T1304] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.059994][ T1338] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 301.067419][ T1304] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.4125: lblock 23 mapped to illegal pblock 18 (length 1) [ 301.083511][ T1345] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4128'. [ 301.128691][ T1331] loop3: detected capacity change from 0 to 512 [ 301.151892][ T1357] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4130'. [ 301.197658][ T1363] loop0: detected capacity change from 0 to 1024 [ 301.202614][ T1331] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.240622][ T1331] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.4128: lblock 23 mapped to illegal pblock 18 (length 1) [ 301.276778][ T1363] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 16: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 301.401496][ T1413] loop0: detected capacity change from 0 to 2048 [ 301.422302][ T1415] loop1: detected capacity change from 0 to 1024 [ 301.441275][ T1419] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 301.469227][ T1422] loop4: detected capacity change from 0 to 1024 [ 301.476175][ T1422] EXT4-fs: test_dummy_encryption option not supported [ 301.563231][ T1448] EXT4-fs: Ignoring removed oldalloc option [ 301.575500][ T1448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.622492][ T1459] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4149'. [ 301.663673][ T1465] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4148'. [ 301.768549][ T1475] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.828032][ T1453] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.4148: lblock 23 mapped to illegal pblock 18 (length 1) [ 301.873210][ T1493] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.923483][ T1493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4152'. [ 301.932558][ T1493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4152'. [ 302.143808][ T1552] EXT4-fs: Ignoring removed oldalloc option [ 302.160428][ T1552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.258442][ T1568] EXT4-fs: test_dummy_encryption option not supported [ 302.321147][ T1572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4168'. [ 302.582901][ T886] loop0: p2 < > p3 < p5 > p4 [ 302.587635][ T886] loop0: partition table partially beyond EOD, truncated [ 302.595654][ T886] loop0: p2 start 4278190080 is beyond EOD, truncated [ 302.603287][ T886] loop0: p4 size 8192 extends beyond EOD, truncated [ 302.610741][ T886] loop0: p5 size 8192 extends beyond EOD, truncated [ 302.620075][ T1605] loop0: p2 < > p3 < p5 > p4 [ 302.624897][ T1605] loop0: partition table partially beyond EOD, truncated [ 302.633902][ T1605] loop0: p2 start 4278190080 is beyond EOD, truncated [ 302.641458][ T1605] loop0: p4 size 8192 extends beyond EOD, truncated [ 302.650267][ T1605] loop0: p5 size 8192 extends beyond EOD, truncated [ 302.678544][ T1605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.689434][ T1626] netlink: 'syz.4.4179': attribute type 16 has an invalid length. [ 302.702441][ T1605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.769992][ T1642] siw: device registration error -23 [ 302.857935][ T1659] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 302.891675][ T1661] EXT4-fs: Ignoring removed oldalloc option [ 302.898007][ T1661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.973857][ T1678] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.036806][ T1692] EXT4-fs: Ignoring removed oldalloc option [ 303.048289][ T1692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.054467][ T1684] 9pnet: Could not find request transport:  [ 303.074444][ T1684] netlink: 'syz.5.4193': attribute type 29 has an invalid length. [ 303.250266][ T1723] 9pnet: Could not find request transport:  [ 303.271536][ T1723] netlink: 'syz.3.4201': attribute type 29 has an invalid length. [ 303.621806][ T1748] 9pnet: Could not find request transport:  [ 303.660079][ T1752] EXT4-fs: Ignoring removed oldalloc option [ 303.666612][ T1752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.777155][ T1768] netlink: 'syz.1.4211': attribute type 4 has an invalid length. [ 303.788652][ T1768] netlink: 'syz.1.4211': attribute type 4 has an invalid length. [ 304.158998][ T1802] 9pnet: Could not find request transport:  [ 304.365052][ T1811] 9pnet: Could not find request transport:  [ 304.408851][ T1811] netlink: 'syz.5.4209': attribute type 29 has an invalid length. [ 304.557791][ T1841] EXT4-fs: Ignoring removed oldalloc option [ 304.564175][ T1841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.647055][ T1852] 9pnet: Could not find request transport:  [ 304.669050][ T1860] netlink: 'syz.1.4231': attribute type 4 has an invalid length. [ 304.690294][ T1860] netlink: 'syz.1.4231': attribute type 4 has an invalid length. [ 305.047188][ T1892] siw: device registration error -23 [ 305.227840][ T1899] EXT4-fs: Ignoring removed oldalloc option [ 305.235342][ T29] kauditd_printk_skb: 964 callbacks suppressed [ 305.235363][ T29] audit: type=1326 audit(1764882973.717:49268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 305.292259][ T1899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.311478][ T29] audit: type=1326 audit(1764882973.747:49269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f64ad06f783 code=0x7ffc0000 [ 305.334963][ T29] audit: type=1326 audit(1764882973.747:49270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f64ad06f807 code=0x7ffc0000 [ 305.358418][ T29] audit: type=1326 audit(1764882973.747:49271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f64ad026bdd code=0x7ffc0000 [ 305.381845][ T29] audit: type=1326 audit(1764882973.747:49272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f64ad0a3e89 code=0x7ffc0000 [ 305.405406][ T29] audit: type=1326 audit(1764882973.747:49274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f64ad026357 code=0x7ffc0000 [ 305.428955][ T29] audit: type=1326 audit(1764882973.747:49273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f64ad026c47 code=0x7ffc0000 [ 305.452420][ T29] audit: type=1326 audit(1764882973.747:49275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f64ad0263b6 code=0x7ffc0000 [ 305.475934][ T29] audit: type=1326 audit(1764882973.747:49277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64ad06f34b code=0x7ffc0000 [ 305.477448][ T1907] set_capacity_and_notify: 17 callbacks suppressed [ 305.477475][ T1907] loop4: detected capacity change from 0 to 1024 [ 305.499422][ T29] audit: type=1326 audit(1764882973.747:49278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1859 comm="syz.3.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 305.554237][ T1907] EXT4-fs: Ignoring removed oldalloc option [ 305.560324][ T1907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.580893][ T1901] 9pnet: Could not find request transport:  [ 305.626807][ T1922] loop0: detected capacity change from 0 to 1024 [ 305.641950][ T1901] netlink: 'syz.3.4230': attribute type 29 has an invalid length. [ 305.655467][ T1901] __nla_validate_parse: 9 callbacks suppressed [ 305.655511][ T1901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4230'. [ 305.669294][ T1922] EXT4-fs: Ignoring removed oldalloc option [ 305.682401][ T1922] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.724097][ T1935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.752593][ T1935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.826010][ T1959] loop3: detected capacity change from 0 to 1024 [ 305.834868][ T1959] EXT4-fs: Ignoring removed oldalloc option [ 305.840990][ T1959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.993580][ T1988] loop3: detected capacity change from 0 to 1024 [ 306.000561][ T1988] EXT4-fs: Ignoring removed oldalloc option [ 306.019935][ T1988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.062780][ T2002] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4251'. [ 306.123483][ T1995] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4254'. [ 306.136402][ T1986] loop0: detected capacity change from 0 to 512 [ 306.153666][ T2005] loop4: detected capacity change from 0 to 512 [ 306.193675][ T2005] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.209115][ T1986] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.257902][ T1995] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 18: comm syz.4.4254: lblock 23 mapped to illegal pblock 18 (length 1) [ 306.277632][ T2032] loop5: detected capacity change from 0 to 1024 [ 306.285118][ T1986] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.4251: lblock 23 mapped to illegal pblock 18 (length 1) [ 306.300702][ T2032] EXT4-fs: Ignoring removed oldalloc option [ 306.324724][ T2032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.425537][ T2059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4258'. [ 306.479698][ T2062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4261'. [ 306.496763][ T2067] loop5: detected capacity change from 0 to 1024 [ 306.520379][ T2077] loop4: detected capacity change from 0 to 512 [ 306.523603][ T2067] EXT4-fs: Ignoring removed oldalloc option [ 306.546324][ T2074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4263'. [ 306.555393][ T2067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.564426][ T2077] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.646937][ T2077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4265'. [ 306.655973][ T2077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4265'. [ 306.672740][ T2096] 9pnet: Could not find request transport:  [ 306.814079][ T2110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.830084][ T2102] loop0: detected capacity change from 0 to 2048 [ 306.843129][ T2110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.869910][ T2102] loop0: p2 < > p3 < p5 > p4 [ 306.874641][ T2102] loop0: partition table partially beyond EOD, truncated [ 306.887391][ T2102] loop0: p2 start 4278190080 is beyond EOD, truncated [ 306.895146][ T2102] loop0: p4 size 8192 extends beyond EOD, truncated [ 306.904853][ T2102] loop0: p5 size 8192 extends beyond EOD, truncated [ 306.933845][ T2102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.954451][ T2102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.990968][ T2149] EXT4-fs: test_dummy_encryption option not supported [ 307.027212][ T2153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4277'. [ 307.060477][ T2164] netlink: 'syz.5.4278': attribute type 4 has an invalid length. [ 307.295224][ T2168] EXT4-fs: Ignoring removed mblk_io_submit option [ 307.308907][ T2168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.362541][ T2168] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 307.394517][ T2168] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.4279: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 307.413701][ T2168] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4279: couldn't read orphan inode 11 (err -117) [ 307.430967][ T2168] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.4279: Invalid block bitmap block 0 in block_group 0 [ 307.445016][ T2168] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.4279: Failed to acquire dquot type 0 [ 307.756356][ T2184] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4280'. [ 307.975014][ T2212] validate_nla: 1 callbacks suppressed [ 307.975029][ T2212] netlink: 'syz.5.4291': attribute type 16 has an invalid length. [ 308.015016][ T2218] netlink: 'syz.1.4292': attribute type 4 has an invalid length. [ 308.025409][ T2217] siw: device registration error -23 [ 308.044400][ T2218] netlink: 'syz.1.4292': attribute type 4 has an invalid length. [ 308.053013][ T2221] EXT4-fs: Ignoring removed oldalloc option [ 308.067778][ T2221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.408648][ T2256] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.650313][ T2256] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 18: comm syz.4.4301: lblock 23 mapped to illegal pblock 18 (length 1) [ 308.711687][ T2283] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.745617][ T2272] EXT4-fs mount: 136 callbacks suppressed [ 308.745636][ T2272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.775628][ T2272] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.899012][ T2272] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.4302: lblock 23 mapped to illegal pblock 18 (length 1) [ 308.923387][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.946463][ T2283] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.035581][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.067076][ T2283] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.126874][ T2283] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.209261][T30205] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.227381][T30205] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.239996][T30205] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.256387][T30205] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.287729][ T2333] EXT4-fs: test_dummy_encryption option not supported [ 309.701437][ T2366] netlink: 'syz.1.4315': attribute type 4 has an invalid length. [ 309.718160][ T2366] netlink: 'syz.1.4315': attribute type 4 has an invalid length. [ 309.975285][ T2392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.010348][ T2392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.074641][ T2389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.096345][ T2392] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.130971][ T2392] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 310.193689][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.264388][ T2392] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.276750][ T2414] EXT4-fs: test_dummy_encryption option not supported [ 310.326724][ T2392] EXT4-fs: Ignoring removed orlov option [ 310.336121][ T2392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.349432][ T2392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.385773][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 310.385930][ T29] audit: type=1326 audit(1764882978.867:49623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 310.418475][ T29] audit: type=1326 audit(1764882978.887:49624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 310.442106][ T29] audit: type=1326 audit(1764882978.887:49625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e4d53f783 code=0x7ffc0000 [ 310.465593][ T29] audit: type=1326 audit(1764882978.887:49626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8e4d53f807 code=0x7ffc0000 [ 310.489048][ T29] audit: type=1326 audit(1764882978.887:49627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8e4d4f6bdd code=0x7ffc0000 [ 310.512483][ T29] audit: type=1326 audit(1764882978.887:49628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8e4d573e89 code=0x7ffc0000 [ 310.536014][ T29] audit: type=1326 audit(1764882978.887:49629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8e4d4f6c47 code=0x7ffc0000 [ 310.559423][ T29] audit: type=1326 audit(1764882978.887:49630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 310.583009][ T29] audit: type=1326 audit(1764882978.887:49631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4d53f749 code=0x7ffc0000 [ 310.606586][ T29] audit: type=1326 audit(1764882978.897:49632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2372 comm="syz.5.4317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8e4d4f6357 code=0x7ffc0000 [ 310.634978][ T2433] 9pnet: Could not find request transport:  [ 310.689766][ T2433] netlink: 'syz.5.4317': attribute type 29 has an invalid length. [ 310.701983][ T2433] __nla_validate_parse: 6 callbacks suppressed [ 310.702016][ T2433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4317'. [ 310.710526][ T2443] netlink: 'syz.0.4336': attribute type 21 has an invalid length. [ 310.725210][ T2443] netlink: 'syz.0.4336': attribute type 4 has an invalid length. [ 310.751673][ T2441] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4326'. [ 310.774577][ T2441] set_capacity_and_notify: 12 callbacks suppressed [ 310.774591][ T2441] loop1: detected capacity change from 0 to 512 [ 310.798074][ T2456] FAULT_INJECTION: forcing a failure. [ 310.798074][ T2456] name failslab, interval 1, probability 0, space 0, times 0 [ 310.810991][ T2456] CPU: 1 UID: 0 PID: 2456 Comm: syz.4.4327 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 310.811097][ T2456] Tainted: [W]=WARN [ 310.811104][ T2456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.811122][ T2456] Call Trace: [ 310.811133][ T2456] [ 310.811140][ T2456] __dump_stack+0x1d/0x30 [ 310.811158][ T2456] dump_stack_lvl+0xe8/0x140 [ 310.811237][ T2456] dump_stack+0x15/0x1b [ 310.811248][ T2456] should_fail_ex+0x265/0x280 [ 310.811299][ T2456] ? io_drain_req+0x67/0x350 [ 310.811314][ T2456] should_failslab+0x8c/0xb0 [ 310.811334][ T2456] __kmalloc_cache_noprof+0x4c/0x4c0 [ 310.811378][ T2456] io_drain_req+0x67/0x350 [ 310.811391][ T2456] ? io_queue_sqe_fallback+0x12a/0x140 [ 310.811455][ T2456] io_queue_sqe_fallback+0x132/0x140 [ 310.811484][ T2456] io_submit_sqes+0xd8d/0x11b0 [ 310.811504][ T2456] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 310.811520][ T2456] ? 0xffffffff81000000 [ 310.811584][ T2456] ? __rcu_read_unlock+0x4f/0x70 [ 310.811597][ T2456] ? proc_fail_nth_write+0x13b/0x160 [ 310.811611][ T2456] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 310.811695][ T2456] ? vfs_write+0x7e8/0x960 [ 310.811711][ T2456] ? __rcu_read_unlock+0x4f/0x70 [ 310.811723][ T2456] ? __fget_files+0x184/0x1c0 [ 310.811741][ T2456] ? mutex_unlock+0x4f/0x90 [ 310.811754][ T2456] ? fput+0x8f/0xc0 [ 310.811818][ T2456] __x64_sys_io_uring_enter+0x78/0x90 [ 310.811867][ T2456] x64_sys_call+0x27e4/0x3000 [ 310.811881][ T2456] do_syscall_64+0xd8/0x2a0 [ 310.811944][ T2456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.811958][ T2456] RIP: 0033:0x7fc82537f749 [ 310.811968][ T2456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.811984][ T2456] RSP: 002b:00007fc823ddf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 310.812031][ T2456] RAX: ffffffffffffffda RBX: 00007fc8255d5fa0 RCX: 00007fc82537f749 [ 310.812043][ T2456] RDX: 0000000000006933 RSI: 00000000000008ae RDI: 0000000000000000 [ 310.812056][ T2456] RBP: 00007fc823ddf090 R08: 0000000000000000 R09: 000000000000effd [ 310.812069][ T2456] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 310.812082][ T2456] R13: 00007fc8255d6038 R14: 00007fc8255d5fa0 R15: 00007ffc2268cf38 [ 310.812100][ T2456] [ 311.052812][ T2441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.065536][ T3006] udevd[3006]: worker [29915] terminated by signal 33 (Unknown signal 33) [ 311.074248][ T3006] udevd[3006]: worker [29915] failed while handling '/devices/virtual/block/loop1' [ 311.083755][ T2441] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.104491][ T2472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4328'. [ 311.118620][ T2441] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.4326: lblock 23 mapped to illegal pblock 18 (length 1) [ 311.220676][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.247431][ T2482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4333'. [ 311.263361][ T2487] loop4: detected capacity change from 0 to 1024 [ 311.270490][ T2487] EXT4-fs: Ignoring removed oldalloc option [ 311.284721][ T2482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4333'. [ 311.293923][ T2487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.322728][ T2488] 9pnet: Could not find request transport:  [ 311.330423][ T2487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.354786][ T2498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=2498 comm=syz.5.4333 [ 311.390648][ T2503] syzkaller0: entered promiscuous mode [ 311.396228][ T2503] syzkaller0: entered allmulticast mode [ 311.431345][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.506647][ T2518] loop1: detected capacity change from 0 to 1024 [ 311.550400][ T2518] EXT4-fs: Ignoring removed oldalloc option [ 311.566026][ T2518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.586342][ T2518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.626933][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.664134][ T2503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2503 comm=syz.3.4335 [ 311.699772][ T2539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4343'. [ 311.725998][ T2547] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4344'. [ 311.735740][ T2547] hsr_slave_0: left promiscuous mode [ 311.741483][ T2547] hsr_slave_1: left promiscuous mode [ 311.787139][ T2553] netlink: 'syz.1.4344': attribute type 15 has an invalid length. [ 311.991643][ T2569] siw: device registration error -23 [ 311.991812][ T2563] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4346'. [ 312.064066][ T2581] loop3: detected capacity change from 0 to 512 [ 312.098363][ T2581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.111561][ T2581] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.179900][ T2591] 9pnet: Could not find request transport:  [ 312.191596][ T2573] 9pnet: Could not find request transport:  [ 312.213815][ T2598] netlink: 'syz.0.4352': attribute type 16 has an invalid length. [ 312.221659][ T2598] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4352'. [ 312.298635][ T2591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4341'. [ 312.311943][ T2563] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.4346: lblock 23 mapped to illegal pblock 18 (length 1) [ 312.364874][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.540016][ T2635] loop3: detected capacity change from 0 to 512 [ 312.557936][ T2635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.591437][ T2635] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.594198][ T2674] FAULT_INJECTION: forcing a failure. [ 312.594198][ T2674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.611739][ T2635] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.4360: lblock 23 mapped to illegal pblock 18 (length 1) [ 312.614972][ T2674] CPU: 1 UID: 0 PID: 2674 Comm: syz.1.4365 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 312.615008][ T2674] Tainted: [W]=WARN [ 312.615015][ T2674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.615030][ T2674] Call Trace: [ 312.615039][ T2674] [ 312.615048][ T2674] __dump_stack+0x1d/0x30 [ 312.615109][ T2674] dump_stack_lvl+0xe8/0x140 [ 312.615132][ T2674] dump_stack+0x15/0x1b [ 312.615152][ T2674] should_fail_ex+0x265/0x280 [ 312.615186][ T2674] should_fail+0xb/0x20 [ 312.615243][ T2674] should_fail_usercopy+0x1a/0x20 [ 312.615264][ T2674] strncpy_from_user+0x27/0x260 [ 312.615293][ T2674] strncpy_from_user_nofault+0x68/0xf0 [ 312.615379][ T2674] bpf_probe_read_compat_str+0xb4/0x130 [ 312.615405][ T2674] bpf_prog_95f2e3557e98b35e+0x3e/0x44 [ 312.615424][ T2674] bpf_trace_run2+0x107/0x1d0 [ 312.615483][ T2674] ? bpf_prog_test_run_raw_tp+0x3be/0x400 [ 312.615513][ T2674] ? bpf_prog_test_run_raw_tp+0x3be/0x400 [ 312.615545][ T2674] __traceiter_kfree+0x2e/0x50 [ 312.615576][ T2674] ? bpf_prog_test_run_raw_tp+0x3be/0x400 [ 312.615602][ T2674] kfree+0x353/0x3c0 [ 312.615634][ T2674] bpf_prog_test_run_raw_tp+0x3be/0x400 [ 312.615664][ T2674] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 312.615700][ T2674] bpf_prog_test_run+0x22a/0x390 [ 312.615724][ T2674] __sys_bpf+0x4c0/0x7c0 [ 312.615749][ T2674] __x64_sys_bpf+0x41/0x50 [ 312.615843][ T2674] x64_sys_call+0x28e1/0x3000 [ 312.615905][ T2674] do_syscall_64+0xd8/0x2a0 [ 312.615937][ T2674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.615960][ T2674] RIP: 0033:0x7fe0fe30f749 [ 312.615976][ T2674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.615996][ T2674] RSP: 002b:00007fe0fcd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.616060][ T2674] RAX: ffffffffffffffda RBX: 00007fe0fe565fa0 RCX: 00007fe0fe30f749 [ 312.616074][ T2674] RDX: 000000000000000c RSI: 00002000000007c0 RDI: 000000000000000a [ 312.616087][ T2674] RBP: 00007fe0fcd77090 R08: 0000000000000000 R09: 0000000000000000 [ 312.616101][ T2674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.616115][ T2674] R13: 00007fe0fe566038 R14: 00007fe0fe565fa0 R15: 00007ffffdf1b5b8 [ 312.616134][ T2674] [ 312.895320][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.996272][ T2700] loop0: detected capacity change from 0 to 1024 [ 313.023435][ T2700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.035772][ T2702] loop4: detected capacity change from 0 to 2048 [ 313.053696][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.092578][ T2702] loop4: p2 < > p3 < p5 > p4 [ 313.097279][ T2702] loop4: partition table partially beyond EOD, truncated [ 313.107264][ T2702] loop4: p2 start 4278190080 is beyond EOD, truncated [ 313.125382][ T2702] loop4: p4 size 8192 extends beyond EOD, truncated [ 313.133357][ T2702] loop4: p5 size 8192 extends beyond EOD, truncated [ 313.148395][ T2702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.159641][ T2702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.189787][ T2732] sch_fq: defrate 4294967295 ignored. [ 313.218812][ T2735] loop1: detected capacity change from 0 to 512 [ 313.226998][ T2738] siw: device registration error -23 [ 313.244786][ T2735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.257630][ T2735] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.437633][ T2756] 9pnet: Could not find request transport: f [ 314.058916][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.079592][ T2829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.088253][ T2829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.339603][ T2855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5126 sclass=netlink_route_socket pid=2855 comm=syz.0.4406 [ 314.393372][ T2861] loop0: detected capacity change from 0 to 2048 [ 314.404825][ T2861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.417921][ T2861] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.435347][ T2867] validate_nla: 3 callbacks suppressed [ 314.435363][ T2867] netlink: 'syz.5.4409': attribute type 15 has an invalid length. [ 314.448860][ T2867] netlink: 'syz.5.4409': attribute type 7 has an invalid length. [ 314.501864][ T2871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4408: bg 0: block 345: padding at end of block bitmap is not set [ 314.518973][ T2871] EXT4-fs (loop0): Remounting filesystem read-only [ 314.525920][T30205] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 314.556667][ T2877] siw: device registration error -23 [ 314.636248][ T2879] 9pnet: Could not find request transport:  [ 314.672816][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.685088][ T2893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.696866][ T2893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.749794][ T2906] tipc: Started in network mode [ 314.754791][ T2906] tipc: Node identity 1e73349a7d54, cluster identity 4711 [ 314.762090][ T2906] tipc: Enabled bearer , priority 0 [ 314.771155][ T2906] tipc: Disabling bearer [ 314.819772][ T2902] loop0: detected capacity change from 0 to 8192 [ 314.843732][ T2901] delete_channel: no stack [ 314.862296][ T886] loop0: p1 p2 p3 p4 [ 314.866719][ T886] loop0: p1 size 3523149824 extends beyond EOD, truncated [ 314.874892][ T886] loop0: p2 start 4293394688 is beyond EOD, truncated [ 314.881805][ T886] loop0: p3 start 150994944 is beyond EOD, truncated [ 314.888567][ T886] loop0: p4 size 50331648 extends beyond EOD, truncated [ 314.898923][ T2902] loop0: p1 p2 p3 p4 [ 314.905344][ T2902] loop0: p1 size 3523149824 extends beyond EOD, truncated [ 314.906500][ T2919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.920698][ T2902] loop0: p2 start 4293394688 is beyond EOD, truncated [ 314.924666][ T2919] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.931479][ T2902] loop0: p3 start 150994944 is beyond EOD, truncated [ 314.948699][ T2902] loop0: p4 size 50331648 extends beyond EOD, truncated [ 315.028661][ T2902] usb usb8: usbfs: process 2902 (syz.0.4417) did not claim interface 0 before use [ 315.043458][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.122894][ T2946] siw: device registration error -23 [ 315.156188][ T2953] EXT4-fs: Ignoring removed oldalloc option [ 315.162403][ T2953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 315.187556][ T2953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.231944][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.257791][ T2976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.268302][ T2976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.374891][ T3002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.402686][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.525420][ T3032] EXT4-fs: test_dummy_encryption option not supported [ 315.534650][ T3035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.599562][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.633752][ T3053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.642731][ T3053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.903435][ T3072] __nla_validate_parse: 12 callbacks suppressed [ 315.903448][ T3072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4446'. [ 316.024721][ T29] kauditd_printk_skb: 793 callbacks suppressed [ 316.024735][ T29] audit: type=1400 audit(1764882984.507:50426): avc: denied { read write } for pid=3088 comm="syz.0.4450" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 316.055270][ T29] audit: type=1400 audit(1764882984.507:50427): avc: denied { open } for pid=3088 comm="syz.0.4450" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 316.058214][ T3094] ucma_write: process 653 (syz.0.4450) changed security contexts after opening file descriptor, this is not allowed. [ 316.080945][ T29] audit: type=1400 audit(1764882984.537:50428): avc: denied { getopt } for pid=3088 comm="syz.0.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.149648][ T3113] lo speed is unknown, defaulting to 1000 [ 316.205130][ T3127] FAULT_INJECTION: forcing a failure. [ 316.205130][ T3127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.218234][ T3127] CPU: 0 UID: 0 PID: 3127 Comm: syz.0.4455 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 316.218334][ T3127] Tainted: [W]=WARN [ 316.218341][ T3127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.218354][ T3127] Call Trace: [ 316.218361][ T3127] [ 316.218370][ T3127] __dump_stack+0x1d/0x30 [ 316.218395][ T3127] dump_stack_lvl+0xe8/0x140 [ 316.218414][ T3127] dump_stack+0x15/0x1b [ 316.218434][ T3127] should_fail_ex+0x265/0x280 [ 316.218571][ T3127] should_fail+0xb/0x20 [ 316.218597][ T3127] should_fail_usercopy+0x1a/0x20 [ 316.218672][ T3127] _copy_to_user+0x20/0xa0 [ 316.218768][ T3127] simple_read_from_buffer+0xb5/0x130 [ 316.218847][ T3127] proc_fail_nth_read+0x10e/0x150 [ 316.218871][ T3127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.218904][ T3127] vfs_read+0x1a8/0x770 [ 316.218933][ T3127] ? __rcu_read_unlock+0x4f/0x70 [ 316.218956][ T3127] ? __fget_files+0x184/0x1c0 [ 316.218974][ T3127] ? mutex_lock+0x58/0x90 [ 316.219041][ T3127] ksys_read+0xda/0x1a0 [ 316.219067][ T3127] __x64_sys_read+0x40/0x50 [ 316.219093][ T3127] x64_sys_call+0x2889/0x3000 [ 316.219118][ T3127] do_syscall_64+0xd8/0x2a0 [ 316.219202][ T3127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.219225][ T3127] RIP: 0033:0x7efd3f7ae15c [ 316.219265][ T3127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 316.219283][ T3127] RSP: 002b:00007efd3e217030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.219313][ T3127] RAX: ffffffffffffffda RBX: 00007efd3fa05fa0 RCX: 00007efd3f7ae15c [ 316.219332][ T3127] RDX: 000000000000000f RSI: 00007efd3e2170a0 RDI: 0000000000000009 [ 316.219343][ T3127] RBP: 00007efd3e217090 R08: 0000000000000000 R09: 0000000000000000 [ 316.219355][ T3127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.219366][ T3127] R13: 00007efd3fa06038 R14: 00007efd3fa05fa0 R15: 00007fff32419dd8 [ 316.219386][ T3127] [ 316.420645][ T3123] set_capacity_and_notify: 5 callbacks suppressed [ 316.420659][ T3123] loop4: detected capacity change from 0 to 512 [ 316.459777][ T3123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.477929][ T3123] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.489992][ T3157] loop5: detected capacity change from 0 to 2048 [ 316.504917][ T3123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4454'. [ 316.513983][ T3123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4454'. [ 316.538246][ T3157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.575478][ T3157] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.586857][ T3169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4458'. [ 316.596425][ T3172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4459'. [ 316.730688][ T3193] loop1: detected capacity change from 0 to 512 [ 316.737896][ T3193] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 316.760077][ T3182] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4456: bg 0: block 345: padding at end of block bitmap is not set [ 316.775705][ T3193] EXT4-fs (loop1): 1 truncate cleaned up [ 316.781737][ T3193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.823274][ T3182] EXT4-fs (loop5): Remounting filesystem read-only [ 316.829994][ T52] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 316.835835][ T29] audit: type=1400 audit(1764882985.317:50429): avc: denied { setattr } for pid=3192 comm="syz.1.4463" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.895538][ T3198] loop0: detected capacity change from 0 to 128 [ 316.951821][ T3202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4463'. [ 317.009099][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.041422][ T3201] bio_check_eod: 100 callbacks suppressed [ 317.041438][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.041438][ T3201] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 317.062329][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.070931][ T3209] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 317.071824][ T29] audit: type=1400 audit(1764882985.547:50430): avc: denied { append } for pid=3208 comm="+}[@" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 317.080166][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.080166][ T3201] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 317.118898][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.118898][ T3201] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 317.142187][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.142187][ T3201] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 317.168957][ T29] audit: type=1326 audit(1764882985.637:50431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 317.192544][ T29] audit: type=1326 audit(1764882985.637:50432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 317.216046][ T29] audit: type=1326 audit(1764882985.637:50433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 317.239703][ T29] audit: type=1326 audit(1764882985.637:50434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 317.263288][ T29] audit: type=1326 audit(1764882985.637:50435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3212 comm="syz.4.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 317.287531][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.287531][ T3201] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 317.301167][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.301167][ T3201] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 317.313088][ T3215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.324400][ T3215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.333066][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.333066][ T3201] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 317.355576][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.355576][ T3201] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 317.369581][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.369581][ T3201] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 317.381862][ T3213] 9pnet: Could not find request transport:  [ 317.419169][ T3201] syz.0.4464: attempt to access beyond end of device [ 317.419169][ T3201] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 317.419676][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.484597][ T3232] lo speed is unknown, defaulting to 1000 [ 317.505792][ T3235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4471'. [ 317.517085][ T3247] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 317.525870][ T3247] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 317.638744][ T3268] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4473'. [ 317.660612][ T3268] loop0: detected capacity change from 0 to 512 [ 317.687666][ T3282] 9pnet_fd: Insufficient options for proto=fd [ 317.703210][ T3268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.716609][ T3297] loop4: detected capacity change from 0 to 512 [ 317.723066][ T3268] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.756997][ T3268] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.4473: lblock 23 mapped to illegal pblock 18 (length 1) [ 317.773931][ T3297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.787000][ T3297] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.820715][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.052769][ T3311] 9pnet: Could not find request transport:  [ 318.070931][ T3311] netlink: 'syz.1.4468': attribute type 29 has an invalid length. [ 318.556651][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.581606][ T3324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.594578][ T3324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.618967][ T3479] IPVS: starting estimator thread 0... [ 323.636311][ T3339] loop5: detected capacity change from 0 to 1024 [ 323.645865][ T3339] EXT4-fs: Ignoring removed oldalloc option [ 323.651906][ T3339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.684981][ T3339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.701171][ T3348] loop3: detected capacity change from 0 to 1024 [ 323.712738][ T3336] IPVS: using max 2448 ests per chain, 122400 per kthread [ 323.723742][ T3348] EXT4-fs: test_dummy_encryption option not supported [ 323.785580][ T3367] loop4: detected capacity change from 0 to 512 [ 323.800673][T30131] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.811998][ T3367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.827520][ T3367] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.851645][ T3367] __nla_validate_parse: 3 callbacks suppressed [ 323.851662][ T3367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4487'. [ 323.866872][ T3367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4487'. [ 323.873405][ T3378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.902526][ T3378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.062367][ T3390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4489'. [ 324.097870][ T3396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4490'. [ 324.166951][ T3408] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4493'. [ 324.184456][ T3408] loop3: detected capacity change from 0 to 512 [ 324.203812][ T3408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.216447][ T3408] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.229579][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 324.229594][ T29] audit: type=1326 audit(1764882992.707:50918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 324.232757][ T3408] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.4493: lblock 23 mapped to illegal pblock 18 (length 1) [ 324.236244][ T29] audit: type=1326 audit(1764882992.707:50919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64ad06df90 code=0x7ffc0000 [ 324.297091][ T29] audit: type=1326 audit(1764882992.707:50920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64ad06df90 code=0x7ffc0000 [ 324.320584][ T29] audit: type=1326 audit(1764882992.707:50921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 324.344078][ T29] audit: type=1326 audit(1764882992.707:50922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 324.367498][ T29] audit: type=1326 audit(1764882992.707:50923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 324.391040][ T29] audit: type=1326 audit(1764882992.707:50924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 324.414568][ T29] audit: type=1326 audit(1764882992.707:50925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 324.438121][ T29] audit: type=1326 audit(1764882992.707:50926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 324.461661][ T29] audit: type=1326 audit(1764882992.707:50927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3406 comm="syz.3.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ad06f749 code=0x7ffc0000 [ 324.485643][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.501157][ T3424] netlink: 'syz.5.4495': attribute type 4 has an invalid length. [ 324.521561][ T3424] netlink: 'syz.5.4495': attribute type 4 has an invalid length. [ 324.601238][ T3435] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4496'. [ 324.631534][T27199] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.639687][ T3435] loop3: detected capacity change from 0 to 512 [ 324.661406][ T3453] netlink: 'syz.4.4497': attribute type 4 has an invalid length. [ 324.672870][ T3435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.690280][ T3435] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.719299][ T3456] netlink: 'syz.4.4497': attribute type 4 has an invalid length. [ 324.729258][ T3435] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.4496: lblock 23 mapped to illegal pblock 18 (length 1) [ 325.025274][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.675912][ T3488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4504'. [ 325.688376][ T3488] loop4: detected capacity change from 0 to 512 [ 325.713539][ T3488] EXT4-fs (loop4): too many log groups per flexible block group [ 325.721776][ T3488] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 325.728869][ T3488] EXT4-fs (loop4): mount failed [ 325.985473][ T3526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3526 comm=syz.3.4512 [ 326.748080][ T3546] 9pnet: Could not find request transport:  [ 326.823776][ T3546] netlink: 'syz.3.4514': attribute type 29 has an invalid length. [ 326.839086][ T3554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4517'. [ 326.852375][ T3546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4514'. [ 326.865205][ T3562] loop1: detected capacity change from 0 to 512 [ 326.878755][ T3006] udevd[3006]: worker [3344] terminated by signal 33 (Unknown signal 33) [ 326.888008][ T3006] udevd[3006]: worker [3344] failed while handling '/devices/virtual/block/loop1' [ 326.906588][ T3562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.926002][ T3562] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.951425][ T3571] loop0: detected capacity change from 0 to 512 [ 326.963595][ T3562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4519'. [ 326.987208][ T3571] EXT4-fs (loop0): Invalid log block size: 4294967295 [ 327.032953][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.076658][ T3585] loop0: detected capacity change from 0 to 512 [ 327.094418][ T3585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.115814][ T3585] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.194031][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.242819][ T3604] siw: device registration error -23 [ 327.306704][ T3624] loop4: detected capacity change from 0 to 512 [ 327.314151][ T3624] EXT4-fs (loop4): fragment/cluster size (4096) != block size (2048) [ 327.387690][ T3636] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 327.604997][ T3651] 9pnet: Could not find request transport:  [ 327.623920][ T3651] netlink: 'syz.3.4522': attribute type 29 has an invalid length. [ 327.713244][ T3650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.722542][ T3650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.905038][ T3663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.917913][ T3663] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.933410][ T3663] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 18: comm syz.3.4539: lblock 23 mapped to illegal pblock 18 (length 1) [ 327.941896][ T3677] 9pnet: Could not find request transport:  [ 327.989972][ T3677] netlink: 'syz.1.4532': attribute type 29 has an invalid length. [ 328.013436][T23358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.110572][ T3006] udevd[3006]: worker [3330] terminated by signal 33 (Unknown signal 33) [ 328.119993][ T3006] udevd[3006]: worker [3330] failed while handling '/devices/virtual/block/loop0' [ 328.130979][ T3687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.150635][ T3687] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.169871][ T3693] siw: device registration error -23 [ 328.233710][ T3700] xt_TCPMSS: Only works on TCP SYN packets [ 328.438314][ T3715] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 328.444914][ T3715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 328.453053][ T3715] vhci_hcd vhci_hcd.0: Device attached [ 328.460313][ T3716] vhci_hcd: connection closed [ 328.460490][ T5348] vhci_hcd: stop threads [ 328.469646][ T5348] vhci_hcd: release socket [ 328.474103][ T5348] vhci_hcd: disconnect device [ 328.992442][ T3726] lo speed is unknown, defaulting to 1000 [ 329.233633][ T29] kauditd_printk_skb: 1202 callbacks suppressed [ 329.233651][ T29] audit: type=1326 audit(1764882997.707:52130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.314074][ T29] audit: type=1326 audit(1764882997.717:52131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.337828][ T29] audit: type=1326 audit(1764882997.747:52132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.356697][ T3751] netlink: 'syz.4.4548': attribute type 29 has an invalid length. [ 329.361687][ T29] audit: type=1326 audit(1764882997.747:52133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.391718][ T3751] __nla_validate_parse: 13 callbacks suppressed [ 329.391733][ T3751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4548'. [ 329.393002][ T29] audit: type=1326 audit(1764882997.767:52134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.431626][ T29] audit: type=1326 audit(1764882997.767:52135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.433554][ T3748] 9pnet: Could not find request transport:  [ 329.455335][ T29] audit: type=1326 audit(1764882997.767:52136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.455370][ T29] audit: type=1326 audit(1764882997.767:52137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.455398][ T29] audit: type=1326 audit(1764882997.767:52138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.455426][ T29] audit: type=1326 audit(1764882997.767:52139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc82537f749 code=0x7ffc0000 [ 329.544244][T24639] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.592888][ T3754] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4551'. [ 329.664846][ T3767] set_capacity_and_notify: 2 callbacks suppressed [ 329.664864][ T3767] loop1: detected capacity change from 0 to 512 [ 329.703406][ T3767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.732111][ T3767] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.764877][ T3754] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.4551: lblock 23 mapped to illegal pblock 18 (length 1) [ 329.823704][T27879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.914056][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 329.951007][ T3799] 9pnet: Could not find request transport:  [ 329.975778][ T3799] netlink: 'syz.1.4560': attribute type 29 has an invalid length. [ 329.994575][ T3808] loop4: detected capacity change from 0 to 512 [ 330.027170][ T3808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.040101][ T3808] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.059206][ T3808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4562'. [ 330.068243][ T3808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4562'. [ 330.205849][ T3818] 9pnet: Could not find request transport:  [ 330.238045][ T3818] netlink: 'syz.0.4552': attribute type 29 has an invalid length. [ 330.251789][ T3818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4552'. [ 330.361757][ T3822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'. [ 330.385299][ T3828] FAULT_INJECTION: forcing a failure. [ 330.385299][ T3828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.398408][ T3828] CPU: 0 UID: 0 PID: 3828 Comm: syz.3.4565 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 330.398441][ T3828] Tainted: [W]=WARN [ 330.398449][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.398462][ T3828] Call Trace: [ 330.398468][ T3828] [ 330.398473][ T3828] __dump_stack+0x1d/0x30 [ 330.398548][ T3828] dump_stack_lvl+0xe8/0x140 [ 330.398561][ T3828] dump_stack+0x15/0x1b [ 330.398580][ T3828] should_fail_ex+0x265/0x280 [ 330.398630][ T3828] should_fail+0xb/0x20 [ 330.398657][ T3828] should_fail_usercopy+0x1a/0x20 [ 330.398677][ T3828] _copy_from_user+0x1c/0xb0 [ 330.398735][ T3828] ___sys_sendmsg+0xc1/0x1d0 [ 330.398835][ T3828] __x64_sys_sendmsg+0xd4/0x160 [ 330.398937][ T3828] x64_sys_call+0x17ba/0x3000 [ 330.399009][ T3828] do_syscall_64+0xd8/0x2a0 [ 330.399028][ T3828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.399053][ T3828] RIP: 0033:0x7f64ad06f749 [ 330.399089][ T3828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.399108][ T3828] RSP: 002b:00007f64abacf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.399120][ T3828] RAX: ffffffffffffffda RBX: 00007f64ad2c5fa0 RCX: 00007f64ad06f749 [ 330.399128][ T3828] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 330.399136][ T3828] RBP: 00007f64abacf090 R08: 0000000000000000 R09: 0000000000000000 [ 330.399143][ T3828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.399221][ T3828] R13: 00007f64ad2c6038 R14: 00007f64ad2c5fa0 R15: 00007ffcb9803728 [ 330.399232][ T3828] [ 330.656448][ T3848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.667363][ T3848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.688444][ T3851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4572'. [ 330.942679][ T3880] loop4: detected capacity change from 0 to 2048 [ 330.966205][ T3880] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.049192][ T3887] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4577: bg 0: block 345: padding at end of block bitmap is not set [ 331.064387][ T3887] EXT4-fs (loop4): Remounting filesystem read-only [ 331.071136][ T91] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 331.090122][ T3889] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 331.096743][ T3889] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 331.105028][ T3889] vhci_hcd vhci_hcd.0: Device attached [ 331.111407][ T3891] vhci_hcd: connection closed [ 331.111582][ T31] vhci_hcd: stop threads [ 331.120689][ T31] vhci_hcd: release socket [ 331.125145][ T31] vhci_hcd: disconnect device [ 331.211706][ T3900] loop4: detected capacity change from 0 to 2048 [ 331.223734][ T3900] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.297497][ T3905] ================================================================== [ 331.305651][ T3905] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 331.313062][ T3905] [ 331.315471][ T3905] read-write to 0xffff888106e126b8 of 8 bytes by task 3900 on cpu 1: [ 331.323538][ T3905] __xa_set_mark+0xd2/0x1a0 [ 331.328056][ T3905] __folio_mark_dirty+0x384/0x4a0 [ 331.333097][ T3905] mark_buffer_dirty+0x11e/0x210 [ 331.338055][ T3905] folio_zero_new_buffers+0x28c/0x2e0 [ 331.343432][ T3905] block_write_end+0x200/0x210 [ 331.348198][ T3905] ext4_da_write_end+0x1d3/0x800 [ 331.353150][ T3905] generic_perform_write+0x312/0x490 [ 331.358449][ T3905] ext4_buffered_write_iter+0x1ee/0x3c0 [ 331.364019][ T3905] ext4_file_write_iter+0x387/0xf60 [ 331.369264][ T3905] vfs_write+0x52a/0x960 [ 331.373535][ T3905] ksys_write+0xda/0x1a0 [ 331.377786][ T3905] __x64_sys_write+0x40/0x50 [ 331.382398][ T3905] x64_sys_call+0x2847/0x3000 [ 331.387091][ T3905] do_syscall_64+0xd8/0x2a0 [ 331.391607][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.397509][ T3905] [ 331.399832][ T3905] read to 0xffff888106e126b8 of 8 bytes by task 3905 on cpu 0: [ 331.407351][ T3905] xas_find_marked+0x218/0x620 [ 331.412102][ T3905] find_get_entry+0x5d/0x380 [ 331.416675][ T3905] filemap_get_folios_tag+0x13b/0x210 [ 331.422029][ T3905] mpage_prepare_extent_to_map+0x308/0xc20 [ 331.427862][ T3905] ext4_do_writepages+0x9f6/0x27e0 [ 331.432958][ T3905] ext4_writepages+0x179/0x300 [ 331.437709][ T3905] do_writepages+0x1c6/0x310 [ 331.442296][ T3905] filemap_flush_range+0xf1/0x130 [ 331.447329][ T3905] generic_fadvise+0x312/0x430 [ 331.452075][ T3905] __x64_sys_fadvise64+0xcb/0x110 [ 331.457097][ T3905] x64_sys_call+0x29f4/0x3000 [ 331.461757][ T3905] do_syscall_64+0xd8/0x2a0 [ 331.466251][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.472125][ T3905] [ 331.474433][ T3905] value changed: 0x01ffffffffffffff -> 0x0fffffffffffffff [ 331.481527][ T3905] [ 331.483836][ T3905] Reported by Kernel Concurrency Sanitizer on: [ 331.489994][ T3905] CPU: 0 UID: 0 PID: 3905 Comm: syz.4.4580 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 331.501261][ T3905] Tainted: [W]=WARN [ 331.505043][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.515086][ T3905] ================================================================== [ 331.534333][ T3905] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4580: bg 0: block 345: padding at end of block bitmap is not set [ 331.551716][ T3905] EXT4-fs (loop4): Remounting filesystem read-only [ 331.558330][ T52] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 331.648168][ T3907] 9pnet: Could not find request transport:  [ 331.687259][ T3907] netlink: 'syz.5.4578': attribute type 29 has an invalid length. [ 331.701112][ T3907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4578'.