last executing test programs: 5.124217546s ago: executing program 2 (id=874): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_evm(r5, &(0x7f0000000300), &(0x7f0000000340)=@md5={0x1, "357e0321bf0fd477aa37262f76904dd2"}, 0x11, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x200}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmmsg(r6, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xb, 0x0, 0x0, 0x46, 0x0, 0x1, 0x400, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x5204, 0x6, 0x2, 0x0, 0x3, 0xaf, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x0, 0x8, r5, 0x8) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4.267690665s ago: executing program 2 (id=881): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x0, &(0x7f0000000080), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x3]}, 0x8, 0x80800) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ftruncate(0xffffffffffffffff, 0x2007ffc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x200200, 0x0) open_by_handle_at(r7, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 3.653877325s ago: executing program 0 (id=892): socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b003031"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 3.637771046s ago: executing program 0 (id=893): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0x101, 0x1) getdents64(r4, 0x0, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001000000000000000000008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000000000000b70085000000b7000000005ebc000000b8000000000038000000000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x13, &(0x7f0000000700)=""/19, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, r4, 0x8, &(0x7f0000000740)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x8, &(0x7f0000000780)=[r3, r3, r3, r4, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x3, 0x5, 0xc}, {0x2, 0x4, 0x4, 0x2}, {0x0, 0x4, 0xf, 0xe}, {0x4, 0x2, 0x1, 0x7}, {0x1, 0x4}, {0x5, 0x2, 0xb, 0xb}, {0x3, 0x2, 0xe, 0x4}, {0x3, 0x2, 0x10, 0x3}], 0x10, 0x7}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400002010000104000000000000000000000000cd44b1a9c698760869639d43f4c5f6d905c12f8980278dd32f3bb7105e158aeffe8347ce8ab20a43b540e188e9c72ce2a52675072cbb0dd4a6250e9a5e13c05cc21ade18f4b959b7f78230ccef2b4e842165507e3a335e8f329fdec1e67fcdf7798a84fa65b7de3fe7ded4a31f759e68e0a34096b9a0ec3e630e533ebe8e8ddd0c38911df89b269f221294eb7cf7e88f65b3ed4b94fada2cffcd8c229b23f22ba3b3bfd7f3770b9c201dbd4f79cbe9796ba10fc23287f5a85b92f299f1bcb7638350928067497aacb4b0b8ed779edfc919f651f4", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@remote, @dev}, &(0x7f0000000380)=0xc) 3.374697828s ago: executing program 0 (id=897): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x0, &(0x7f0000000080), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x190, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x190}}, 0x4800) signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x3]}, 0x8, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) ftruncate(0xffffffffffffffff, 0x2007ffc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x200200, 0x0) open_by_handle_at(r9, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 3.178605223s ago: executing program 2 (id=902): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440d4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000600)="1f6472e1e66c219d35e6bab8fd8a2c042e618bd11e9e6eecd8c6afef0e80d1b713fd3b6262e7230c15d87790f3d8e9f90394ceb3c370c48151b6745f4b2a52161c76a9abdf89d74ff1fe38505882bc4ce08e6cde3740f3b1136bde6ec75179782c3f6edc48f8c3e298f32690b6c9f33e9962f472213d4ab2612495655978df289f15d9fe26b478578e08c54c00762161a6dfe4c297e6803156ea37393b33fff87562a2b56e04d7cee2f71611e9c08a4bef", 0xb1}, {&(0x7f0000000a80)="4475c37b3b74d364df5a66dd98d602e7e31b83de22399e1665e05a199aeb944ff707ead62d4ba78e42bfef8fd50991a263d5f7ed6dcffcd8bc300e21e3d9e9409b559162935fe41884f80bab7cd9e22c760a8ec40b2a50953da8acca1610dd2c6659c0a1cd1947e94917f757992528b360d443b144f712906096bf5380ade8110ce59cfd625154b18a5b8e573e1fb03de443ff591a4b29ab23878691fa31d350590173e4d0b0afd25eaf5f3431dba2872c59fb7a0029ff90c1a521791db1da1c351d7e78386b25e8d385b72d240597c49f519e82e4976ce0010a52548aa10a2fac764514", 0xe4}, {&(0x7f0000000340)="2b3f34f6dd85d7cde64ef732d743e0f512d2b45706222e1683b6", 0x1a}, {&(0x7f00000002c0)="9183e1f557eb7302fc081681efee1eb6565a274dbd8d8513b18f30026a42a62a59f618399f700f9dfc82d2983f61f16b3803a2a8402d10ca6e07fb1c38d8acc206647c", 0x43}, {&(0x7f0000000b80)="ad9b1e93da1ca92a82e5d63596082055a6c1be46bc4629174fee2e4422dc1758ff23610ea91bb79f431f3e2e4b62637bdbd7de5511b4ae67a52d7904c00b03e448fd2da01dddb1a56e59b65475c9bc04ee707f5d7ed99b4df575a4ee59d1735f39a6f56d12b9bc7b9ea9ca8b69ac5d8bb48e96bdadc1259a45d341af180e10925d357759133d04592a9351affc19c0bc7ebac1f2b95a3564d2ef3858f7b80a53206fcb334deab984c63712095c72adfb80d66bf1b5052741a84643224ebd634c2c8345910b5f7b7a238436b71397be", 0xcf}, {&(0x7f0000000380)="65f07a37be39a17fdaebc081", 0xc}, {&(0x7f0000000c80)="25298b8d56b6e39a35321e4219afc1d1b67de0446a7ec09348566f3cdddb4025852d11bc6a2010a68fb91c76659ce91a9c2499781e926ca5be5aa99a766387323f98c12ea061adf57227cd5b87bc71719a0ff65da122a276716ae5bd8d21530bb0e170f7758aa65512fd76dd7c3b11062cd616e0b932420701b99a6cfac1c8b06a4a618af4e42a1200a0f483967a20294fb6d29979137d1c6cc31274b2c355e24db4be700e96694c89ca534079a5d0e6dde35f6b1f22", 0xb6}, {&(0x7f0000000d40)="e5a56086744f14bdda71309d9d34beed3b62031b4091e41ba09f84a6eb2d6897e7c1dcbb220d30b2b20d79e15f22bca86f424e9d6385c54a3520ad417df9f25cf05c9fe71d75784d12fcb51a885dbc861647cbc18b18f140c633ba3acdfcf76b414c4a814da59e568d4b", 0x6a}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000e00)="6ee6c0289c84f4570286f5873da2398ef84f95a6f3f7df61969439e056918c59aee79d4934ced49bf7ba83662d41c12a79782b7e267bb871dff85830c21408b2a7f328cab1703abb79dcd5fb45fa6bdb689ab3c404bfaf9f672d78e81792d813a29014b70f7efff04bdc6f01812a948871133be48ee185d163c92836f1fa1f176c9f18ffd76084c73260e68987e9a02352e031cd8fc6b8f2bace824678", 0x9d}], 0xa, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0x20, 0x0, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050426bd7000fedbcb250100000008000100", @ANYRES32=r8, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x53}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x94) 2.739670719s ago: executing program 2 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000015a, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bin', @ANYRESOCT, @ANYBLOB='f']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x76) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}}, 0x24}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0), 0x64, 0x50a, &(0x7f0000000940)="$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") 2.519302407s ago: executing program 1 (id=917): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) signalfd(r3, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000000c0), &(0x7f0000000240)={0x0, 0xfb, 0x8a, 0x6, 0x5, "6d7d3e7a38abf50d34d91f97a4b50b00", "a3b7c5a225475c6d47a84b853bf942093d00621a4117bb673e782c4a33370ac0e9f92a0173da7bc06f7197e95e1acc7f808cc3d12f5aac9f7d01f10908a2bc24e853b02de1522ee05f379b4641f798a372a398b4f99fbcd2f824f04a2965280b77dae0c506ac1956e41ed5aaf1a1681dbce86b2826"}, 0x8a, 0x1) write$binfmt_script(r5, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) listen(r2, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) 2.057320054s ago: executing program 0 (id=925): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0x101, 0x1) getdents64(r4, 0x0, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001000000000000000000008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000000000000b70085000000b7000000005ebc000000b8000000000038000000000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x13, &(0x7f0000000700)=""/19, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, r4, 0x8, &(0x7f0000000740)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x8, &(0x7f0000000780)=[r3, r3, r3, r4, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x3, 0x5, 0xc}, {0x2, 0x4, 0x4, 0x2}, {0x0, 0x4, 0xf, 0xe}, {0x4, 0x2, 0x1, 0x7}, {0x1, 0x4}, {0x5, 0x2, 0xb, 0xb}, {0x3, 0x2, 0xe, 0x4}, {0x3, 0x2, 0x10, 0x3}], 0x10, 0x7}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400002010000104000000000000000000000000cd44b1a9c698760869639d43f4c5f6d905c12f8980278dd32f3bb7105e158aeffe8347ce8ab20a43b540e188e9c72ce2a52675072cbb0dd4a6250e9a5e13c05cc21ade18f4b959b7f78230ccef2b4e842165507e3a335e8f329fdec1e67fcdf7798a84fa65b7de3fe7ded4a31f759e68e0a34096b9a0ec3e630e533ebe8e8ddd0c38911df89b269f221294eb7cf7e88f65b3ed4b94fada2cffcd8c229b23f22ba3b3bfd7f3770b9c201dbd4f79cbe9796ba10fc23287f5a85b92f299f1bcb7638350928067497aacb4b0b8ed779edfc919f651f4", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@remote, @dev}, &(0x7f0000000380)=0xc) 1.919128955s ago: executing program 1 (id=927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x306}, 0x1c, {0x2, 0x4e20, @multicast2}, 'veth0\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') 1.892080437s ago: executing program 1 (id=930): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x1e5, 0x0, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000340)="2b3f34f6dd85d7cd", 0x8}, {&(0x7f00000002c0)}, {&(0x7f0000000b80)="ad9b1e93da1ca92a82e5d63596082055a6c1be46bc4629174fee2e4422dc1758ff23610ea91bb79f431f3e2e4b62637bdbd7de5511b4ae67a52d7904c00b03e448fd2da01dddb1a56e59b65475c9bc04ee707f5d7ed99b4df575a4ee59d1735f39a6f56d12b9bc7b9ea9ca8b69ac5d8bb48e96bdadc1259a45d341af180e10925d357759133d04592a9351affc19c0bc7ebac1f2b95a3564d2ef3858f7b80a53206fcb334deab984c63712095c72adfb80d6", 0xb2}, {&(0x7f0000000380)}, {&(0x7f0000000c80)="25298b8d56b6e39a35321e4219afc1d1b67de0446a7ec09348566f3cdddb4025852d11bc6a2010a68fb91c76659ce91a9c2499781e926ca5be5aa99a766387323f98c12ea061adf57227cd5b87bc71719a0ff65da122a276716ae5bd8d21530bb0e170f7758aa65512fd76dd7c3b11062cd616e0b932420701b99a6cfac1c8b06a4a618af4e42a1200a0f483967a20294fb6d29979137d1c6cc31274b2c355e24db4be700e96694c89ca534079a5d0e6dd", 0xb1}, {&(0x7f0000000d40)="e5a56086744f14bdda71309d9d34beed3b62031b4091e41ba09f84a6eb2d6897e7c1dcbb220d30b2b20d79e15f22bca86f424e9d6385c54a3520ad417df9f25cf05c9fe71d75784d12fcb51a885dbc861647cbc18b18f140c633ba3acdfcf76b414c4a814da59e568d4bc79261b198d6284b810f91334648b4449473ab0d5338129b11cd510fec16a53b1a670d", 0x8d}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000e00)="6ee6c0289c84f4570286f5873da2398ef84f95a6f3f7df61969439e056918c59aee79d4934ced49bf7ba83662d41c12a79782b7e267bb871dff85830c21408b2a7f328cab1703abb79dcd5fb45fa6bdb689ab3c404bfaf9f672d78e81792d813a29014b70f7efff04bdc6f01812a948871133be48ee185d163c92836f1fa1f176c9f18ffd76084c73260e68987e9a02352e031cd8fc6b8f2bace824678", 0x9d}], 0x8, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0x20, 0x0, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050426bd7000fedbcb250100000008000100", @ANYRES32=r8, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x53}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x94) 1.85958138s ago: executing program 3 (id=931): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setitimer(0x1, 0x0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 1.85877406s ago: executing program 4 (id=932): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) 1.821645473s ago: executing program 4 (id=933): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) utimes(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 1.783903496s ago: executing program 2 (id=934): syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.73123336s ago: executing program 2 (id=935): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x0, &(0x7f0000000080), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x190, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x190}}, 0x4800) signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x3]}, 0x8, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) ftruncate(0xffffffffffffffff, 0x2007ffc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x200200, 0x0) open_by_handle_at(r9, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 1.61248002s ago: executing program 0 (id=936): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffde8, 0x0}}, 0x1f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r9, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r9, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r10, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0x4e}], 0x1, 0xffff, 0x5dd073cf) 1.527544577s ago: executing program 1 (id=937): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b003031"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 1.4836227s ago: executing program 1 (id=938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) setitimer(0x1, 0x0, 0x0) 1.001126679s ago: executing program 3 (id=939): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x3, 0xe}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 985.526251ms ago: executing program 3 (id=940): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002"], 0x254}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setitimer(0x1, 0x0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 929.507125ms ago: executing program 4 (id=941): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x306}, 0x1c, {0x2, 0x4e20, @multicast2}, 'veth0\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') 787.983167ms ago: executing program 4 (id=942): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffde8, 0x0}}, 0x1f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) 704.162493ms ago: executing program 0 (id=943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000b6ee3a3617e222061175718e0db1b11eece19d1e2e6ece2360831c0a320d169731103359bf88c1bf1873de62ab97f9b5211e1350d7cdcd7f836d8d4a989a0a896332adef2e44a83f035a4d353d45259d", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f00000006c0)={0x4c, r8, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r8, 0x400, 0x70bd25, 0x4, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4008000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x451f3b17, 0xe, 0x1, 0x800, 0x4, 0x8, 0x7, {0x0, @in={{0x2, 0x4e20, @remote}}, 0x7ff, 0x5, 0x5, 0x0, 0x77}}, &(0x7f0000000380)=0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r5, 0x0, 0x8}, 0x18) timer_delete(0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000340), 0x11000) 702.567613ms ago: executing program 3 (id=944): keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0xba, 0x32}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'sha3-384-ce\x00'}}, &(0x7f00000000c0)="541c025f93ca63dd56e0aa6ee06f223a9abd5975d42b3ec239c1b30b6863528fdeb646bfaddd5bbd256b76cc644b3386b66df416f824cddac4e4aa2f61380bc9259282ef2c2d23d879a6118f21d2dcf692179d05212974c06b92134ad813db4f420a1e91cb39081a02cb372fd2fa6ec1bccc90e2da30aa5de13b1151839ee00885a407a04fa9413eb79ce6677cc52e910205153133093dffd1ea2f8bd7099e47289bec9ce5e3aa161fc0c98a76d181d4c8c3684178f280a4392c", &(0x7f0000000180)=""/50) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="2557271abc8ad0617aa52470008d064b3f6286e2cb2786af4e3bc8bce584d7bf5f47ca0dda75dbc7727222420fdeded28df59f4460b524ae124931a43531a181dc11ec85564ecbee139ab7b8b5237e9db1e007428804abe66ea7fe25409b7819d7a12b3ba529886114848c028ae0c237c13b36769d424f543ca42dfd5ffd72b5fbc5d71856d0027e968d74d0255d213e576e167c9d803de4e139199767f75e8d9ee3019d6b15", 0xa6, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x8) r1 = request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='oaep', 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RRENAMEAT(r2, &(0x7f0000000400)={0x7, 0x4b, 0x1}, 0x7) r3 = add_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="dba5467388272434c00d68d6d8fc630c0a618dee27a67b316c96220358ce980a9ad1862ad5a2c0c1ea78ea8cc2e02806a3a5734fc6cc081ec916019d0ed1dc49daf74409a287db2990fdd3e554e2bcdea6fa7022a741d651fa3577945e0ea8b1dd3ffd4e350fd75448a779611b4c9b9cc50a73aaa719e484037dc13463bd4987fea8de831b8e482f75e78cb3cb938a496e158189d37bca802c34592f9649f96bcbb1cfcb01ad79a9b03af6f5121020fb53591a03c7f1f072df53b2d4d28ce805ae95a337f2df18aaaff0962312ed751b93c0abf865c1bd9b", 0xd8, 0xfffffffffffffffb) io_setup(0x5, &(0x7f00000005c0)=0x0) io_getevents(r4, 0x8000000000000000, 0x2, &(0x7f0000000600)=[{}, {}], &(0x7f0000000640)) io_destroy(r4) r5 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r5, &(0x7f0000001a00)=[{{&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000007c0)=""/195, 0xc3}, {&(0x7f00000008c0)=""/245, 0xf5}], 0x3, &(0x7f0000000a00)=""/4096, 0x1000}, 0xb3d}], 0x1, 0x40010020, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'wg2\x00', 0x0}) r8 = getpgid(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000001a80)=0x2) bind$inet(r6, &(0x7f0000001ac0)={0x2, 0x4e20, @multicast2}, 0x10) mq_unlink(&(0x7f0000001b00)=':-\xdf]\x00') sendmsg$nl_xfrm(r6, &(0x7f0000001cc0)={&(0x7f0000001b40), 0xc, &(0x7f0000001c80)={&(0x7f0000001b80)=@newpolicy={0xcc, 0x13, 0x4, 0x70bd2c, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0x7, 0x2, 0x80, 0x20, 0x2c, r7}, {0x1, 0xce, 0x10000, 0x2, 0x2, 0x3, 0x96b, 0x4}, {0xf64, 0x5, 0x0, 0x8}, 0x5, 0x6e6bbe, 0x1, 0x1, 0x0, 0x2}, [@offload={0xc, 0x1c, {r7, 0x1}}, @extra_flags={0x8, 0x18, 0xb9e1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001ec0)={'team0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)="e2def11f3d657c5436fd63aa1601290055d450af99794ebfec20a9d93d40d033de17936e127268425c8a75d4a50b7dea008989fc1a06dcbdaac50b4b9dbc79a71686b6a904a85310a32a2106bb224690e75decf5fa66a85d30cfd1fcccda171d104a09c543579f38e4bdc72ffb22a9297866fac37b800306643bbc0cf873724cb5c0a260b49c3eef58e463104cb663d75cf4fad72d63cbf77161fba0a93e541440e46c606cbd9f38f56f70331deb5553e49444df6171dd468f7cb7de347af1fd3fb1fae55efc0391cf64463383c0c0b33fea52ec4b99fb2b57420598906e959316831b6df45f404eeef43c87", 0xec}, {&(0x7f0000001e00)="ab05a2c0b2f223b7c9a8fd3b2126494166bccf0e19050a5cac2d44e78b271e638805944a3767cbfd110e566d91d3c6583e58d71d33e3a36833b14b990262e417b0c075f51a1f238396cfebb5810e6b2041197f2940fe80eb440d803f0b92e0ec79593875e616818b", 0x68}], 0x2, &(0x7f0000001f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffb070}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @multicast1}}}], 0xb8}}, {{&(0x7f0000001fc0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000002100)=[{&(0x7f0000002000)="8cf7ac0f8e4781efd247288dfb175f20aa397bdeeb5e0d0b4e7bd51a38250bbf", 0x20}, {&(0x7f0000002040)="228f224aa65fa9b66ded4adac9622b7a431c4382d859bad9284ab4c2f7d85ce6c82e050bd998fb42d92c6c3a6930857a1a72299091e6e730b959389f30c2ce8c81b57570eacfc67255f0cee053521a569240606a82dc9eb5f656ccb7dbe3b676e2b9abb06abc6837694450dc435710bc545a4dc5e02ced13ac436dec9e42bd22a693ce4f6be7cdce584b57b34b92d5c107307ff5070c20312927d2e537", 0x9d}], 0x2, &(0x7f0000002140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x2, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x80, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40810}, 0x0) io_setup(0x5, &(0x7f0000002380)=0x0) io_getevents(r11, 0x4fd4, 0x6, &(0x7f00000023c0)=[{}, {}, {}, {}, {}, {}], 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002480), 0x44040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f00000024c0)={0x8000, 0x0, 0x1, 'queue1\x00', 0x3}) r13 = add_key$keyring(&(0x7f0000002580), &(0x7f00000025c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r13, 0x1) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r6) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000002740)={&(0x7f0000002600), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, r14, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x67}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x488d0) 638.727108ms ago: executing program 1 (id=945): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f0000000300)=@ret_unlink={{0x4, 0x6, 0x0, 0x3141456f10587752, 0x7}, {0x1}}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) r1 = inotify_init1(0x0) dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 549.814516ms ago: executing program 3 (id=946): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r4, 0x101, 0x1) getdents64(r4, 0x0, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001000000000000000000008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000000000000b70085000000b7000000005ebc000000b8000000000038000000000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x13, &(0x7f0000000700)=""/19, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, r4, 0x8, &(0x7f0000000740)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x8, &(0x7f0000000780)=[r3, r3, r3, r4, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x3, 0x5, 0xc}, {0x2, 0x4, 0x4, 0x2}, {0x0, 0x4, 0xf, 0xe}, {0x4, 0x2, 0x1, 0x7}, {0x1, 0x4}, {0x5, 0x2, 0xb, 0xb}, {0x3, 0x2, 0xe, 0x4}, {0x3, 0x2, 0x10, 0x3}], 0x10, 0x7}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400002010000104000000000000000000000000cd44b1a9c698760869639d43f4c5f6d905c12f8980278dd32f3bb7105e158aeffe8347ce8ab20a43b540e188e9c72ce2a52675072cbb0dd4a6250e9a5e13c05cc21ade18f4b959b7f78230ccef2b4e842165507e3a335e8f329fdec1e67fcdf7798a84fa65b7de3fe7ded4a31f759e68e0a34096b9a0ec3e630e533ebe8e8ddd0c38911df89b269f221294eb7cf7e88f65b3ed4b94fada2cffcd8c229b23f22ba3b3bfd7f3770b9c201dbd4f79cbe9796ba10fc23287f5a85b92f299f1bcb7638350928067497aacb4b0b8ed779edfc919f651f4", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@remote, @dev}, &(0x7f0000000380)=0xc) 417.842527ms ago: executing program 3 (id=947): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffde8, 0x0}}, 0x1f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r9, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r9, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r10, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0x4e}], 0x1, 0xffff, 0x5dd073cf) 18.148148ms ago: executing program 4 (id=948): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="330520000a00160000000000dffebf30f8784f997bea54fefe8717599e7dae766eaa89002095d0876200", 0x2a, 0x0, &(0x7f0000000300)={0x11, 0x5, r2, 0x1, 0x77, 0x6, @random='\x00\r\x005\x00'}, 0x14) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000006c6c25000000525eb7e3d7fedc81143494000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008020000b70300"/81, @ANYRES64=r0, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb795, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setresgid(0xee00, 0xee01, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x43403d05, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 0s ago: executing program 4 (id=949): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002580)={0x2c, r7, 0x4, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8814) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000010000000003000000180001"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): loop3): ext4_free_branches:1023: inode #13: comm syz.3.364: invalid indirect mapped block 1819239214 (level 1) [ 65.446181][ T4753] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.367: Invalid inode bitmap blk 4 in block_group 0 [ 65.464124][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'. [ 65.476206][ T4748] EXT4-fs (loop3): 1 truncate cleaned up [ 65.479736][ T4753] EXT4-fs mount: 116 callbacks suppressed [ 65.479751][ T4753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.482288][ T4748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.537980][ T4748] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 65.545784][ T4748] netlink: 40 bytes leftover after parsing attributes in process `syz.3.364'. [ 65.563649][ T51] tipc: Resetting bearer [ 65.569750][ T4753] tipc: Enabling of bearer rejected, already enabled [ 65.592608][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.688600][ T4795] SELinux: ebitmap: truncated map [ 65.696491][ T4795] SELinux: failed to load policy [ 65.758454][ T4805] loop4: detected capacity change from 0 to 512 [ 65.767896][ T4805] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.789891][ T4805] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 65.804097][ T4807] loop2: detected capacity change from 0 to 512 [ 65.804226][ T4809] loop0: detected capacity change from 0 to 512 [ 65.812138][ T4805] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.824607][ T4805] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.844792][ T4805] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 65.852659][ T4805] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.388: bg 0: block 40: padding at end of block bitmap is not set [ 65.857755][ T4809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.868557][ T4805] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 65.880698][ T4809] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.892517][ T4807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.915975][ T4807] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.917023][ T4805] EXT4-fs (loop4): 1 truncate cleaned up [ 65.934549][ T4805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.948949][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.971604][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.981854][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.033782][ T4819] 9pnet: Could not find request transport: fd0x0000000000000004 [ 66.106839][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.353391][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 66.426785][ T4846] loop2: detected capacity change from 0 to 512 [ 66.448703][ T4846] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.401: Invalid inode bitmap blk 4 in block_group 0 [ 66.464440][ T4846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.520617][ T4852] loop3: detected capacity change from 0 to 512 [ 66.580844][ T4852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.661641][ T4846] tipc: Enabling of bearer rejected, already enabled [ 66.708677][ T4852] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.902112][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.994969][ T4869] SELinux: ebitmap: truncated map [ 67.002297][ T4869] SELinux: failed to load policy [ 67.026148][ T4874] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 67.034010][ T4874] netlink: 'syz.1.413': attribute type 4 has an invalid length. [ 67.041823][ T4874] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.413'. [ 67.053678][ T4874] netlink: 'syz.1.413': attribute type 1 has an invalid length. [ 67.061683][ T4874] netlink: 'syz.1.413': attribute type 4 has an invalid length. [ 67.069606][ T4874] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.413'. [ 67.109723][ T4876] 9pnet: Could not find request transport: fd0x0000000000000004 [ 67.154182][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.176906][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.187453][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.199067][ T4883] loop1: detected capacity change from 0 to 512 [ 67.252358][ T4888] 9pnet: Could not find request transport: fd0x0000000000000004 [ 67.253541][ T4883] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.266690][ T4883] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 67.278371][ T4883] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 67.295447][ T4883] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.417: attempt to clear invalid blocks 2 len 1 [ 67.331828][ T4883] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.417: invalid indirect mapped block 1819239214 (level 0) [ 67.360523][ T4883] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.417: invalid indirect mapped block 1819239214 (level 1) [ 67.394282][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 67.394296][ T29] audit: type=1400 audit(1754034929.061:2979): avc: denied { connect } for pid=4901 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.421012][ T29] audit: type=1400 audit(1754034929.061:2980): avc: denied { name_connect } for pid=4901 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 67.450975][ T4883] EXT4-fs (loop1): 1 truncate cleaned up [ 67.457575][ T4883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.475596][ T29] audit: type=1326 audit(1754034929.131:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 67.499039][ T29] audit: type=1326 audit(1754034929.131:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 67.504584][ T4905] SELinux: ebitmap: truncated map [ 67.522878][ T29] audit: type=1326 audit(1754034929.131:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 67.551257][ T29] audit: type=1326 audit(1754034929.131:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4901 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 67.580820][ T4905] SELinux: failed to load policy [ 67.590217][ T29] audit: type=1326 audit(1754034929.261:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a095beb69 code=0x7ffc0000 [ 67.615246][ T29] audit: type=1326 audit(1754034929.261:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a095beb69 code=0x7ffc0000 [ 67.640967][ T4883] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.656367][ T29] audit: type=1326 audit(1754034929.261:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2295a0eb69 code=0x7ffc0000 [ 67.680723][ T29] audit: type=1326 audit(1754034929.261:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.1.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2295a0eb69 code=0x7ffc0000 [ 67.766852][ T4883] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.775516][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 67.859631][ T4883] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.927246][ T4883] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.984794][ T359] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.997930][ T359] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.009786][ T359] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.021020][ T359] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.246366][ T4926] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 68.276839][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 68.477391][ T4935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.486844][ T4935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.498707][ T4935] loop4: detected capacity change from 0 to 512 [ 68.514654][ T4935] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.521124][ T4935] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 68.558182][ T4935] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 68.573472][ T4935] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.433: attempt to clear invalid blocks 2 len 1 [ 68.587792][ T4935] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.433: invalid indirect mapped block 1819239214 (level 0) [ 68.602866][ T4935] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.433: invalid indirect mapped block 1819239214 (level 1) [ 68.603156][ T4935] EXT4-fs (loop4): 1 truncate cleaned up [ 68.603571][ T4935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.620450][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.667452][ T4935] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.693106][ T4938] loop0: detected capacity change from 0 to 512 [ 68.721635][ T4938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.736893][ T4938] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.756932][ T4935] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.769176][ T4954] loop1: detected capacity change from 0 to 512 [ 68.790469][ T4954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.821489][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.839690][ T4957] loop2: detected capacity change from 0 to 512 [ 68.858990][ T4957] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.439: Invalid inode bitmap blk 4 in block_group 0 [ 68.873908][ T4952] team0: Port device geneve1 removed [ 68.888524][ T4961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.888952][ T4935] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.897660][ T4961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.912899][ T4957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.923956][ T4961] loop0: detected capacity change from 0 to 512 [ 68.954445][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.966931][ T359] tipc: Resetting bearer [ 68.971649][ T4961] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.980380][ T4961] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 68.992030][ T4952] tipc: Enabling of bearer rejected, already enabled [ 69.001280][ T4961] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 69.018341][ T4935] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.033223][ T4961] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.441: attempt to clear invalid blocks 2 len 1 [ 69.048456][ T4961] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.441: invalid indirect mapped block 1819239214 (level 0) [ 69.073793][ T4961] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.441: invalid indirect mapped block 1819239214 (level 1) [ 69.083068][ T4970] tipc: Resetting bearer [ 69.090996][ T4961] EXT4-fs (loop0): 1 truncate cleaned up [ 69.095380][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.113850][ T4961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.160247][ T4961] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.179261][ T4970] loop1: detected capacity change from 0 to 512 [ 69.192855][ T4973] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 69.205092][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.205600][ T4973] vhci_hcd: invalid port number 253 [ 69.219274][ T4973] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 69.221559][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.243192][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.260786][ T4976] tipc: Resetting bearer [ 69.277998][ T4970] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.443: Invalid inode bitmap blk 4 in block_group 0 [ 69.310272][ T4980] loop3: detected capacity change from 0 to 512 [ 69.321605][ T4976] team0: Port device geneve1 removed [ 69.329931][ T4970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.330090][ T4961] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.357322][ T4980] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.445: Invalid inode bitmap blk 4 in block_group 0 [ 69.371074][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.371722][ T4980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.396588][ T4970] tipc: Enabling of bearer rejected, already enabled [ 69.410360][ T4961] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.433462][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.453796][ T4976] tipc: Enabling of bearer rejected, already enabled [ 69.499141][ T4990] netlink: 'syz.1.448': attribute type 3 has an invalid length. [ 69.509165][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.520222][ T4961] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.551522][ T4996] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 69.567575][ T4998] tmpfs: Bad value for 'mpol' [ 69.583504][ T4996] SELinux: failed to load policy [ 69.594460][ T3437] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.631049][ T5000] tipc: Resetting bearer [ 69.680850][ T5004] loop2: detected capacity change from 0 to 512 [ 69.687589][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.709600][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 69.722772][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.732588][ T5004] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.454: Invalid inode bitmap blk 4 in block_group 0 [ 69.746257][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.756954][ T5004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.843315][ T5011] loop1: detected capacity change from 0 to 512 [ 69.906940][ T5000] tipc: Enabling of bearer rejected, already enabled [ 69.915844][ T5011] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.923443][ T5011] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.453: bg 0: block 248: padding at end of block bitmap is not set [ 69.938726][ T5011] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.453: Failed to acquire dquot type 1 [ 69.951138][ T5011] EXT4-fs (loop1): 1 truncate cleaned up [ 69.958492][ T5011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.134759][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.178044][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.393780][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.439882][ T5021] 9pnet_fd: Insufficient options for proto=fd [ 70.489217][ T5018] tipc: Resetting bearer [ 70.507235][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 70.552369][ T5031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 70.561246][ T5031] tipc: Enabled bearer , priority 10 [ 70.593367][ T5033] netlink: 'syz.0.464': attribute type 3 has an invalid length. [ 70.618175][ T5018] loop2: detected capacity change from 0 to 512 [ 70.646634][ T5018] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.459: Invalid inode bitmap blk 4 in block_group 0 [ 70.663487][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.663907][ T5038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 70.693957][ T5018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.722072][ T5040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.760784][ T5018] tipc: Enabling of bearer rejected, already enabled [ 70.767005][ T5040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.782692][ T5040] loop1: detected capacity change from 0 to 512 [ 70.795932][ T5042] loop0: detected capacity change from 0 to 512 [ 70.828134][ T5040] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.834656][ T5040] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 70.850378][ T5040] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 70.853313][ T5042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.866199][ T5040] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.467: attempt to clear invalid blocks 2 len 1 [ 70.882771][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.895240][ T5042] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.902017][ T5040] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.467: invalid indirect mapped block 1819239214 (level 0) [ 70.942500][ T5040] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.467: invalid indirect mapped block 1819239214 (level 1) [ 70.963566][ T5054] loop2: detected capacity change from 0 to 512 [ 70.984164][ T5056] 9pnet_fd: Insufficient options for proto=fd [ 71.006282][ T5040] EXT4-fs (loop1): 1 truncate cleaned up [ 71.012528][ T5040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.033667][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.055392][ T5054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.120747][ T5068] netlink: 'syz.0.477': attribute type 3 has an invalid length. [ 71.139595][ T5040] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.187212][ T5040] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.233525][ T5075] tipc: Resetting bearer [ 71.269556][ T5040] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.282041][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.291770][ T5075] loop0: detected capacity change from 0 to 512 [ 71.303178][ T5075] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.480: Invalid inode bitmap blk 4 in block_group 0 [ 71.320934][ T5075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.342734][ T5075] tipc: Enabling of bearer rejected, already enabled [ 71.353847][ T5040] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.367222][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.393253][ T5086] loop2: detected capacity change from 0 to 512 [ 71.395968][ T5088] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 71.409495][ T5088] netlink: 'syz.0.483': attribute type 4 has an invalid length. [ 71.417840][ T5088] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.483'. [ 71.428507][ T5086] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.429827][ T5088] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 71.437751][ T5086] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.482: bg 0: block 248: padding at end of block bitmap is not set [ 71.443604][ T5088] netlink: 'syz.0.483': attribute type 4 has an invalid length. [ 71.443624][ T5088] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.483'. [ 71.477928][ T5086] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.482: Failed to acquire dquot type 1 [ 71.491029][ T5086] EXT4-fs (loop2): 1 truncate cleaned up [ 71.497955][ T5086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.526587][ T5086] syz.2.482 (5086) used greatest stack depth: 9280 bytes left [ 71.536686][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.576818][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 71.688908][ T5102] loop2: detected capacity change from 0 to 512 [ 71.696955][ T5102] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.718630][ T5102] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.729157][ T5102] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.736878][ T5102] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.756191][ T5102] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 71.765235][ T5102] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.489: bg 0: block 40: padding at end of block bitmap is not set [ 71.780866][ T5102] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.790416][ T5102] EXT4-fs (loop2): 1 truncate cleaned up [ 71.796803][ T5102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.818840][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.950930][ T5118] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 71.958848][ T5118] netlink: 'syz.2.495': attribute type 4 has an invalid length. [ 71.966645][ T5118] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.495'. [ 71.976752][ T5118] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 71.984726][ T5118] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.495'. [ 72.007629][ T5120] loop4: detected capacity change from 0 to 512 [ 72.018184][ T5120] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.026083][ T5120] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.496: bg 0: block 248: padding at end of block bitmap is not set [ 72.047060][ T5120] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.496: Failed to acquire dquot type 1 [ 72.059101][ T5120] EXT4-fs (loop4): 1 truncate cleaned up [ 72.065580][ T5120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.087384][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.118959][ T5126] tipc: Resetting bearer [ 72.163450][ T5126] loop4: detected capacity change from 0 to 512 [ 72.184262][ T5126] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.498: Invalid inode bitmap blk 4 in block_group 0 [ 72.201394][ T5126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.221240][ T5126] tipc: Enabling of bearer rejected, already enabled [ 72.241270][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.375074][ T359] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.396719][ T359] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.416390][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 72.416406][ T29] audit: type=1326 audit(1754034934.071:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2295a0eb69 code=0x7ffc0000 [ 72.445954][ T29] audit: type=1326 audit(1754034934.071:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.1.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2295a0eb69 code=0x7ffc0000 [ 72.482433][ T5143] loop0: detected capacity change from 0 to 512 [ 72.488977][ T359] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.497312][ T359] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.511906][ T5143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.565716][ T5148] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 72.572312][ T5148] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.579954][ T5148] vhci_hcd vhci_hcd.0: Device attached [ 72.599603][ T5149] vhci_hcd: cannot find the pending unlink 6 [ 72.720849][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.772907][ T5158] loop0: detected capacity change from 0 to 512 [ 72.789394][ T5158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.806232][ T5158] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.825165][ T3374] usb 5-1: new low-speed USB device number 4 using vhci_hcd [ 72.839088][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.873358][ T5162] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.507'. [ 72.884079][ T5162] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.507'. [ 72.896354][ T29] audit: type=1326 audit(1754034934.571:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 72.928257][ T29] audit: type=1326 audit(1754034934.571:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 72.952570][ T29] audit: type=1326 audit(1754034934.571:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 72.977212][ T29] audit: type=1326 audit(1754034934.571:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 73.001197][ T29] audit: type=1326 audit(1754034934.571:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 73.025269][ T29] audit: type=1326 audit(1754034934.571:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 73.049791][ T29] audit: type=1326 audit(1754034934.571:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 73.073725][ T29] audit: type=1326 audit(1754034934.571:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5161 comm="syz.0.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 73.098475][ T5164] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 73.099552][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.105149][ T5164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.105284][ T5164] vhci_hcd vhci_hcd.0: Device attached [ 73.160689][ T5165] vhci_hcd: connection closed [ 73.161679][ T1712] vhci_hcd: stop threads [ 73.170747][ T1712] vhci_hcd: release socket [ 73.175165][ T1712] vhci_hcd: disconnect device [ 73.331084][ T5179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 73.383160][ T5181] loop3: detected capacity change from 0 to 512 [ 73.396355][ T5149] vhci_hcd: connection reset by peer [ 73.406633][ T5181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.421393][ T1712] vhci_hcd: stop threads [ 73.425700][ T1712] vhci_hcd: release socket [ 73.430721][ T1712] vhci_hcd: disconnect device [ 73.436410][ T5181] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.451329][ T5181] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.514: corrupted inode contents [ 73.464114][ T5181] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.514: mark_inode_dirty error [ 73.476163][ T5181] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.514: corrupted inode contents [ 73.489777][ T5181] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.514: mark_inode_dirty error [ 73.697918][ T5194] loop0: detected capacity change from 0 to 512 [ 73.716978][ T5194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.729862][ T5194] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.753681][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.771614][ T5198] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.518'. [ 73.782718][ T5198] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.518'. [ 73.812475][ T5200] loop0: detected capacity change from 0 to 512 [ 73.823438][ T5200] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.519: Invalid inode bitmap blk 4 in block_group 0 [ 73.836942][ T5200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.855055][ T5200] tipc: Enabling of bearer rejected, already enabled [ 73.873220][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.992034][ T5206] loop0: detected capacity change from 0 to 512 [ 74.007705][ T5206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.020858][ T5206] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.107066][ T5206] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.520: corrupted inode contents [ 74.121369][ T5206] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.520: mark_inode_dirty error [ 74.136974][ T5206] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.520: corrupted inode contents [ 74.181613][ T5206] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.520: mark_inode_dirty error [ 74.327259][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.565117][ T5220] tipc: Resetting bearer [ 74.620484][ T5222] loop4: detected capacity change from 0 to 512 [ 74.749221][ T5222] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.525: Invalid inode bitmap blk 4 in block_group 0 [ 74.764264][ T5232] loop1: detected capacity change from 0 to 512 [ 74.777598][ T5222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.778795][ T5232] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.804821][ T5231] loop2: detected capacity change from 0 to 512 [ 74.862813][ T5220] tipc: Enabling of bearer rejected, already enabled [ 74.887893][ T5231] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.914391][ T5232] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.923721][ T5232] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.931247][ T5232] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.964394][ T5243] tipc: Resetting bearer [ 74.978098][ T5232] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 74.985779][ T5232] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.528: bg 0: block 40: padding at end of block bitmap is not set [ 75.012542][ T5246] tipc: Resetting bearer [ 75.014603][ T5243] loop0: detected capacity change from 0 to 512 [ 75.023045][ T5249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.026509][ T5232] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 75.039463][ T5250] loop2: detected capacity change from 0 to 512 [ 75.046300][ T5249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.055896][ T5232] EXT4-fs (loop1): 1 truncate cleaned up [ 75.068565][ T5243] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.531: Invalid inode bitmap blk 4 in block_group 0 [ 75.110217][ T5250] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.533: Invalid inode bitmap blk 4 in block_group 0 [ 75.154657][ T5249] loop4: detected capacity change from 0 to 512 [ 75.175392][ T5249] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.181817][ T5249] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 75.191905][ T5249] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 75.208751][ T5246] tipc: Enabling of bearer rejected, already enabled [ 75.209910][ T5249] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.532: attempt to clear invalid blocks 2 len 1 [ 75.229936][ T5249] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.532: invalid indirect mapped block 1819239214 (level 0) [ 75.244610][ T5249] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.532: invalid indirect mapped block 1819239214 (level 1) [ 75.260806][ T5249] EXT4-fs (loop4): 1 truncate cleaned up [ 75.267377][ T5243] tipc: Enabling of bearer rejected, already enabled [ 75.316183][ T5249] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.377258][ T5249] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.417698][ T5249] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.441148][ T5270] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 75.448954][ T5270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.458765][ T5270] vhci_hcd vhci_hcd.0: Device attached [ 75.467105][ T5273] vhci_hcd: cannot find the pending unlink 6 [ 75.473663][ T5273] vhci_hcd: connection closed [ 75.474037][ T359] vhci_hcd: stop threads [ 75.485204][ T359] vhci_hcd: release socket [ 75.490860][ T359] vhci_hcd: disconnect device [ 75.537005][ T5249] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.594297][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.607016][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.618154][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.630601][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.784072][ T5282] loop3: detected capacity change from 0 to 512 [ 75.807179][ T5282] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.856326][ T5288] 9pnet_fd: Insufficient options for proto=fd [ 75.892307][ T5290] tipc: Resetting bearer [ 75.925985][ T5290] loop3: detected capacity change from 0 to 512 [ 75.940023][ T5290] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.547: Invalid inode bitmap blk 4 in block_group 0 [ 75.961520][ T5290] tipc: Enabling of bearer rejected, already enabled [ 76.052062][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.061913][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.077520][ T5301] loop3: detected capacity change from 0 to 512 [ 76.087649][ T5301] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.095923][ T5301] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 76.107661][ T5301] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 76.112374][ T5304] tipc: Resetting bearer [ 76.126984][ T5301] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.549: attempt to clear invalid blocks 2 len 1 [ 76.149543][ T5301] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.549: invalid indirect mapped block 1819239214 (level 0) [ 76.165266][ T5301] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.549: invalid indirect mapped block 1819239214 (level 1) [ 76.181047][ T5301] EXT4-fs (loop3): 1 truncate cleaned up [ 76.189731][ T5306] loop1: detected capacity change from 0 to 512 [ 76.203172][ T5306] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.552: Invalid inode bitmap blk 4 in block_group 0 [ 76.219307][ T5301] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.293422][ T5304] tipc: Enabling of bearer rejected, already enabled [ 76.314689][ T5301] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.333732][ T5314] tipc: Resetting bearer [ 76.362672][ T5314] loop4: detected capacity change from 0 to 512 [ 76.371232][ T5301] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.383119][ T5314] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.556: Invalid inode bitmap blk 4 in block_group 0 [ 76.410030][ T5314] tipc: Enabling of bearer rejected, already enabled [ 76.437605][ T5301] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.467967][ T5328] loop1: detected capacity change from 0 to 512 [ 76.477324][ T5323] tipc: Resetting bearer [ 76.479460][ T5328] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.506655][ T5328] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 76.514500][ T5323] loop0: detected capacity change from 0 to 512 [ 76.522058][ T5328] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.532079][ T5323] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.559: Invalid inode bitmap blk 4 in block_group 0 [ 76.532438][ T5328] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.564241][ T5328] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 76.576572][ T5224] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.583935][ T5328] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.560: bg 0: block 40: padding at end of block bitmap is not set [ 76.599031][ T5224] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.612002][ T1712] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.634587][ T1712] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.643286][ T5328] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 76.645772][ T5323] tipc: Enabling of bearer rejected, already enabled [ 76.665731][ T5336] __nla_validate_parse: 3 callbacks suppressed [ 76.665826][ T5336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 76.676997][ T5328] EXT4-fs (loop1): 1 truncate cleaned up [ 76.863824][ T5349] tmpfs: Bad value for 'mpol' [ 76.984473][ T5354] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 76.991160][ T5354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.999188][ T5354] vhci_hcd vhci_hcd.0: Device attached [ 77.007053][ T5355] vhci_hcd: cannot find the pending unlink 6 [ 77.077259][ T5357] loop2: detected capacity change from 0 to 512 [ 77.087337][ T5357] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.095122][ T5357] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.567: bg 0: block 248: padding at end of block bitmap is not set [ 77.110844][ T5357] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.567: Failed to acquire dquot type 1 [ 77.123070][ T5357] EXT4-fs (loop2): 1 truncate cleaned up [ 77.749137][ T5368] tipc: Resetting bearer [ 77.784640][ T5368] loop4: detected capacity change from 0 to 512 [ 77.816207][ T5355] vhci_hcd: connection closed [ 77.816414][ T1712] vhci_hcd: stop threads [ 77.825960][ T1712] vhci_hcd: release socket [ 77.831380][ T1712] vhci_hcd: disconnect device [ 77.836695][ T3534] usb 1-1: new low-speed USB device number 4 using vhci_hcd [ 77.846348][ T3534] usb 1-1: enqueue for inactive port 0 [ 77.852181][ T3534] usb 1-1: enqueue for inactive port 0 [ 77.859108][ T3534] usb 1-1: enqueue for inactive port 0 [ 77.874110][ T5376] loop3: detected capacity change from 0 to 512 [ 77.883339][ T3374] usb 5-1: enqueue for inactive port 0 [ 77.889486][ T5368] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.574: Invalid inode bitmap blk 4 in block_group 0 [ 77.905997][ T3374] usb 5-1: enqueue for inactive port 0 [ 77.913711][ T5376] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.926992][ T5368] tipc: Enabling of bearer rejected, already enabled [ 77.935200][ T3534] vhci_hcd: vhci_device speed not set [ 77.955865][ T5376] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.964394][ T5376] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.974359][ T5376] __quota_error: 343 callbacks suppressed [ 77.974377][ T5376] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 77.991445][ T3374] vhci_hcd: vhci_device speed not set [ 77.999244][ T5376] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.015866][ T5376] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 78.023792][ T5376] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.576: bg 0: block 40: padding at end of block bitmap is not set [ 78.041061][ T5376] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 78.060147][ T5376] EXT4-fs (loop3): 1 truncate cleaned up [ 78.197917][ T29] audit: type=1326 audit(1754034939.871:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a095beb69 code=0x7ffc0000 [ 78.242245][ T5386] loop2: detected capacity change from 0 to 512 [ 78.251600][ T5392] loop3: detected capacity change from 0 to 512 [ 78.256024][ T29] audit: type=1326 audit(1754034939.901:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f5a095beb69 code=0x7ffc0000 [ 78.284435][ T29] audit: type=1326 audit(1754034939.901:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5389 comm="syz.4.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a095beb69 code=0x7ffc0000 [ 78.355756][ T5386] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.378313][ T5392] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.529680][ T5413] tmpfs: Bad value for 'mpol' [ 78.541901][ T5410] tipc: Resetting bearer [ 78.547606][ T5415] loop3: detected capacity change from 0 to 512 [ 78.567010][ T5415] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.588: Invalid inode bitmap blk 4 in block_group 0 [ 78.590586][ T5416] loop0: detected capacity change from 0 to 512 [ 78.609308][ T5415] tipc: Enabling of bearer rejected, already enabled [ 78.684170][ T5416] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.587: Invalid inode bitmap blk 4 in block_group 0 [ 78.770047][ T5420] loop4: detected capacity change from 0 to 512 [ 78.792520][ T5420] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.799693][ T5420] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.589: bg 0: block 248: padding at end of block bitmap is not set [ 78.814878][ T5420] Quota error (device loop4): write_blk: dquota write failed [ 78.822515][ T5420] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 78.833064][ T5420] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.589: Failed to acquire dquot type 1 [ 78.847217][ T5420] EXT4-fs (loop4): 1 truncate cleaned up [ 78.914198][ T5410] tipc: Enabling of bearer rejected, already enabled [ 79.069835][ T29] audit: type=1326 audit(1754034940.741:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 79.097739][ T29] audit: type=1326 audit(1754034940.741:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 79.125722][ T29] audit: type=1326 audit(1754034940.741:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 79.151733][ T29] audit: type=1326 audit(1754034940.741:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5428 comm="syz.0.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 79.430779][ T5438] loop2: detected capacity change from 0 to 512 [ 80.099173][ T5449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.155159][ T5449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.203570][ T5459] tmpfs: Bad value for 'mpol' [ 80.215710][ T5457] validate_nla: 9 callbacks suppressed [ 80.215731][ T5457] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 80.228975][ T5457] netlink: 'syz.4.599': attribute type 4 has an invalid length. [ 80.228988][ T5457] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.599'. [ 80.241565][ T5457] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 80.241585][ T5457] netlink: 'syz.4.599': attribute type 4 has an invalid length. [ 80.241597][ T5457] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.599'. [ 80.250913][ T5449] loop0: detected capacity change from 0 to 512 [ 80.360176][ T5449] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.366733][ T5449] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 80.392523][ T5449] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 80.411486][ T5449] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.600: attempt to clear invalid blocks 2 len 1 [ 80.425002][ T5449] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.600: invalid indirect mapped block 1819239214 (level 0) [ 80.449271][ T5471] loop4: detected capacity change from 0 to 512 [ 80.469852][ T5473] loop1: detected capacity change from 0 to 512 [ 80.531169][ T5473] EXT4-fs (loop1): orphan cleanup on readonly fs [ 80.540062][ T5473] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.603: bg 0: block 248: padding at end of block bitmap is not set [ 80.558964][ T5473] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.603: Failed to acquire dquot type 1 [ 80.574955][ T5473] EXT4-fs (loop1): 1 truncate cleaned up [ 80.690776][ T5471] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.781419][ T5480] loop2: detected capacity change from 0 to 512 [ 80.803547][ T5449] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.600: invalid indirect mapped block 1819239214 (level 1) [ 80.854080][ T5480] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.953923][ T5449] EXT4-fs (loop0): 1 truncate cleaned up [ 81.177846][ T5449] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.219929][ T5488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.610'. [ 81.267773][ T5488] loop2: detected capacity change from 0 to 512 [ 81.297399][ T5449] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.333614][ T5488] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.610: Invalid inode bitmap blk 4 in block_group 0 [ 81.365090][ T5494] tipc: Resetting bearer [ 81.402062][ T5497] loop3: detected capacity change from 0 to 512 [ 81.414526][ T5449] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.432232][ T5497] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.613: Invalid inode bitmap blk 4 in block_group 0 [ 81.446442][ T5488] tipc: Enabling of bearer rejected, already enabled [ 81.499168][ T5449] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.517540][ T5494] tipc: Enabling of bearer rejected, already enabled [ 81.523878][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.537273][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.549832][ T5503] loop2: detected capacity change from 0 to 512 [ 81.571027][ T1712] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.599034][ T5503] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.606068][ T5503] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 81.614389][ T5224] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.626508][ T5508] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 81.634858][ T5508] netlink: 'syz.3.616': attribute type 4 has an invalid length. [ 81.643806][ T5508] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.616'. [ 81.661848][ T5224] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.673319][ T5508] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 81.681202][ T5508] netlink: 'syz.3.616': attribute type 4 has an invalid length. [ 81.689066][ T5508] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.616'. [ 81.695120][ T5224] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.708371][ T5503] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 81.724728][ T5503] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.614: attempt to clear invalid blocks 2 len 1 [ 81.745158][ T5503] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.614: invalid indirect mapped block 1819239214 (level 0) [ 81.766173][ T5514] 9pnet_fd: Insufficient options for proto=fd [ 81.771544][ T5503] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.614: invalid indirect mapped block 1819239214 (level 1) [ 81.791014][ T5503] EXT4-fs (loop2): 1 truncate cleaned up [ 81.821220][ T5518] loop4: detected capacity change from 0 to 512 [ 81.821427][ T5503] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.853639][ T5520] loop1: detected capacity change from 0 to 512 [ 81.865886][ T5518] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.917073][ T5503] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.971944][ T5531] loop3: detected capacity change from 0 to 512 [ 81.980281][ T5503] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.997380][ T5531] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.026924][ T5503] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.084853][ T5543] tipc: Resetting bearer [ 82.122658][ T5543] loop1: detected capacity change from 0 to 512 [ 82.124910][ T1712] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.150776][ T5543] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.626: Invalid inode bitmap blk 4 in block_group 0 [ 82.152262][ T1712] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.174429][ T1712] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.196181][ T1712] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.207941][ T5543] tipc: Enabling of bearer rejected, already enabled [ 82.217155][ T5550] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 82.226322][ T5550] netlink: 'syz.0.628': attribute type 4 has an invalid length. [ 82.234585][ T5550] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.628'. [ 82.250085][ T5550] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.628'. [ 82.280057][ T5552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.630'. [ 82.304507][ T5552] loop0: detected capacity change from 0 to 512 [ 82.318109][ T5552] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.630: Invalid inode bitmap blk 4 in block_group 0 [ 82.339517][ T5552] tipc: Enabling of bearer rejected, already enabled [ 82.430470][ T5564] loop1: detected capacity change from 0 to 512 [ 82.570886][ T5575] tipc: Resetting bearer [ 82.657917][ T5575] loop4: detected capacity change from 0 to 512 [ 82.667368][ T5575] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.636: Invalid inode bitmap blk 4 in block_group 0 [ 82.691393][ T5575] tipc: Enabling of bearer rejected, already enabled [ 82.733347][ T5584] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 82.740043][ T5584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.747625][ T5584] vhci_hcd vhci_hcd.0: Device attached [ 82.764956][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'. [ 82.797261][ T5591] tipc: Resetting bearer [ 82.855913][ T5591] loop4: detected capacity change from 0 to 512 [ 82.866281][ T5591] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.640: Invalid inode bitmap blk 4 in block_group 0 [ 82.921468][ T5591] tipc: Enabling of bearer rejected, already enabled [ 82.995351][ T10] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 83.014347][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 83.014363][ T29] audit: type=1400 audit(1754034944.681:4369): avc: denied { create } for pid=5599 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.032144][ T5602] tmpfs: Bad value for 'mpol' [ 83.047321][ T29] audit: type=1400 audit(1754034944.701:4370): avc: denied { mounton } for pid=5601 comm="syz.4.643" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 83.375594][ T5605] loop4: detected capacity change from 0 to 512 [ 84.001054][ T5586] vhci_hcd: connection reset by peer [ 84.007938][ T1712] vhci_hcd: stop threads [ 84.012341][ T1712] vhci_hcd: release socket [ 84.017317][ T1712] vhci_hcd: disconnect device [ 84.023165][ T5605] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.030267][ T5605] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.643: bg 0: block 248: padding at end of block bitmap is not set [ 84.048436][ T5605] Quota error (device loop4): write_blk: dquota write failed [ 84.056576][ T5605] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 84.067076][ T5605] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.643: Failed to acquire dquot type 1 [ 84.080920][ T5605] EXT4-fs (loop4): 1 truncate cleaned up [ 84.122023][ T5622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.124651][ T29] audit: type=1400 audit(1754034945.781:4371): avc: denied { mounton } for pid=5619 comm="syz.2.650" path="/132/file0" dev="tmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.141453][ T5622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.170996][ T5622] loop2: detected capacity change from 0 to 512 [ 84.198409][ T5622] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.206037][ T5622] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 84.258257][ T29] audit: type=1400 audit(1754034945.911:4372): avc: denied { ioctl } for pid=5624 comm="syz.0.653" path="socket:[14405]" dev="sockfs" ino=14405 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.265790][ T5627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 84.293934][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 84.296920][ T5622] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 84.306702][ T29] audit: type=1326 audit(1754034945.971:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 84.343940][ T29] audit: type=1326 audit(1754034946.001:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 84.367691][ T29] audit: type=1326 audit(1754034946.001:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 84.391792][ T29] audit: type=1326 audit(1754034946.001:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.0.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 84.416302][ T5622] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.651: attempt to clear invalid blocks 2 len 1 [ 84.429284][ T5627] loop3: detected capacity change from 0 to 512 [ 84.429909][ T5622] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.651: invalid indirect mapped block 1819239214 (level 0) [ 84.457204][ T5627] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.652: Invalid inode bitmap blk 4 in block_group 0 [ 84.470374][ T5622] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.651: invalid indirect mapped block 1819239214 (level 1) [ 84.486578][ T5622] EXT4-fs (loop2): 1 truncate cleaned up [ 84.508097][ T5622] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.537293][ T5637] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 84.543911][ T5637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.551577][ T5637] vhci_hcd vhci_hcd.0: Device attached [ 84.552763][ T5635] loop4: detected capacity change from 0 to 512 [ 84.570211][ T5627] tipc: Enabling of bearer rejected, already enabled [ 84.578353][ T5638] vhci_hcd: connection closed [ 84.578712][ T5224] vhci_hcd: stop threads [ 84.587750][ T5224] vhci_hcd: release socket [ 84.592194][ T5224] vhci_hcd: disconnect device [ 84.597609][ T5622] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.600492][ T5635] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.648256][ T5644] tipc: Resetting bearer [ 84.654173][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.665428][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.678472][ T5647] loop4: detected capacity change from 0 to 512 [ 84.688505][ T5622] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.700367][ T5644] loop1: detected capacity change from 0 to 512 [ 84.723584][ T5644] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.659: Invalid inode bitmap blk 4 in block_group 0 [ 84.745219][ T5647] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.751587][ T5647] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 84.769590][ T5622] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.781620][ T5647] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 84.797669][ T5644] tipc: Enabling of bearer rejected, already enabled [ 84.802741][ T5647] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.660: attempt to clear invalid blocks 2 len 1 [ 84.824300][ T5647] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.660: invalid indirect mapped block 1819239214 (level 0) [ 84.839602][ T5647] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.660: invalid indirect mapped block 1819239214 (level 1) [ 84.854197][ T5647] EXT4-fs (loop4): 1 truncate cleaned up [ 84.876471][ T5647] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.927283][ T5647] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.944231][ T5661] loop3: detected capacity change from 0 to 512 [ 84.957004][ T5661] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.976923][ T5647] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.026716][ T5647] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.119767][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.134506][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.145772][ T3437] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.154046][ T3437] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.156745][ T5668] loop0: detected capacity change from 0 to 512 [ 85.165978][ T3437] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.177390][ T3437] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.200463][ T5668] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.207010][ T5668] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 85.232682][ T5668] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 85.254202][ T5668] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.665: attempt to clear invalid blocks 2 len 1 [ 85.269137][ T5668] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.665: invalid indirect mapped block 1819239214 (level 0) [ 85.283702][ T5668] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.665: invalid indirect mapped block 1819239214 (level 1) [ 85.299515][ T5668] EXT4-fs (loop0): 1 truncate cleaned up [ 85.309327][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 85.329522][ T5668] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.390021][ T5668] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.440752][ T5668] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.479751][ T5668] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.542033][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.561853][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.595074][ T5691] loop1: detected capacity change from 0 to 512 [ 86.606899][ T5691] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.613361][ T5691] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 86.632390][ T5691] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 86.656755][ T5691] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.672: attempt to clear invalid blocks 2 len 1 [ 86.683705][ T1712] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.688631][ T5691] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.672: invalid indirect mapped block 1819239214 (level 0) [ 86.706732][ T1712] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.743241][ T5691] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.672: invalid indirect mapped block 1819239214 (level 1) [ 86.763033][ T5702] SELinux: ebitmap: truncated map [ 86.776393][ T1712] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.788393][ T5702] SELinux: failed to load policy [ 86.792094][ T1712] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.795229][ T5704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 86.810334][ T5691] EXT4-fs (loop1): 1 truncate cleaned up [ 86.850703][ T5691] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.877112][ T5710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.680'. [ 86.891528][ T5710] loop4: detected capacity change from 0 to 512 [ 86.907079][ T5710] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.680: Invalid inode bitmap blk 4 in block_group 0 [ 86.926873][ T5714] tipc: Resetting bearer [ 86.949730][ T5691] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.961710][ T5710] tipc: Enabling of bearer rejected, already enabled [ 86.964070][ T5714] loop3: detected capacity change from 0 to 512 [ 86.986648][ T5714] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.681: Invalid inode bitmap blk 4 in block_group 0 [ 87.005550][ T5714] tipc: Enabling of bearer rejected, already enabled [ 87.026859][ T5691] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.053391][ T5718] loop4: detected capacity change from 0 to 1024 [ 87.060492][ T5718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.127921][ T5724] 9pnet_fd: Insufficient options for proto=fd [ 87.136144][ T5691] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.153182][ T5725] loop3: detected capacity change from 0 to 512 [ 87.162160][ T5725] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 87.173080][ T5725] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 87.183212][ T5725] EXT4-fs (loop3): group descriptors corrupted! [ 87.231592][ T1712] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.248489][ T5224] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.274681][ T1712] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.286895][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 87.299250][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.312216][ T5733] loop4: detected capacity change from 0 to 512 [ 87.357993][ T5733] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.688: Invalid inode bitmap blk 4 in block_group 0 [ 87.372887][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.410618][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.419897][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.428528][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.456302][ T3437] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 87.521547][ T5748] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 87.770299][ T5761] tipc: Resetting bearer [ 87.811582][ T5761] loop2: detected capacity change from 0 to 512 [ 87.821506][ T5761] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.695: Invalid inode bitmap blk 4 in block_group 0 [ 87.887898][ T5764] loop1: detected capacity change from 0 to 512 [ 88.035246][ T10] usb 3-1: enqueue for inactive port 0 [ 88.041543][ T10] usb 3-1: enqueue for inactive port 0 [ 88.115381][ T10] vhci_hcd: vhci_device speed not set [ 88.179225][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 88.179238][ T29] audit: type=1326 audit(1754034949.851:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 88.179447][ T5743] tipc: Enabling of bearer rejected, already enabled [ 88.186735][ T29] audit: type=1326 audit(1754034949.861:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5735 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 88.297518][ T29] audit: type=1326 audit(1754034949.971:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 88.321688][ T29] audit: type=1326 audit(1754034949.971:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 88.326205][ T5774] FAULT_INJECTION: forcing a failure. [ 88.326205][ T5774] name failslab, interval 1, probability 0, space 0, times 0 [ 88.346184][ T29] audit: type=1326 audit(1754034950.001:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 88.359189][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz.3.699 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 88.359297][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.359310][ T5774] Call Trace: [ 88.359318][ T5774] [ 88.359327][ T5774] __dump_stack+0x1d/0x30 [ 88.359350][ T5774] dump_stack_lvl+0xe8/0x140 [ 88.359369][ T5774] dump_stack+0x15/0x1b [ 88.359386][ T5774] should_fail_ex+0x265/0x280 [ 88.359497][ T5774] should_failslab+0x8c/0xb0 [ 88.359520][ T5774] kmem_cache_alloc_noprof+0x50/0x310 [ 88.359547][ T5774] ? audit_log_start+0x365/0x6c0 [ 88.359624][ T5774] audit_log_start+0x365/0x6c0 [ 88.359655][ T5774] audit_seccomp+0x48/0x100 [ 88.359737][ T5774] ? __seccomp_filter+0x68c/0x10d0 [ 88.359759][ T5774] __seccomp_filter+0x69d/0x10d0 [ 88.359781][ T5774] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.359807][ T5774] ? vfs_write+0x75e/0x8e0 [ 88.359836][ T5774] ? __rcu_read_unlock+0x4f/0x70 [ 88.359898][ T5774] ? __fget_files+0x184/0x1c0 [ 88.359924][ T5774] __secure_computing+0x82/0x150 [ 88.359946][ T5774] syscall_trace_enter+0xcf/0x1e0 [ 88.359970][ T5774] do_syscall_64+0xac/0x200 [ 88.360063][ T5774] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.360084][ T5774] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 88.360105][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.360127][ T5774] RIP: 0033:0x7f6fceddeb69 [ 88.360150][ T5774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.360167][ T5774] RSP: 002b:00007f6fcd43f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 88.360240][ T5774] RAX: ffffffffffffffda RBX: 00007f6fcf005fa0 RCX: 00007f6fceddeb69 [ 88.360252][ T5774] RDX: 0000000000000008 RSI: 0000000000600002 RDI: 0000200000000000 [ 88.360265][ T5774] RBP: 00007f6fcd43f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.360278][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.360290][ T5774] R13: 0000000000000000 R14: 00007f6fcf005fa0 R15: 00007ffd6262a6f8 [ 88.360309][ T5774] [ 88.360351][ T5774] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 88.382861][ T29] audit: type=1326 audit(1754034950.001:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 88.395632][ T5774] audit: out of memory in audit_log_start [ 88.405982][ T29] audit: type=1326 audit(1754034950.001:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 88.422815][ T5776] tipc: Resetting bearer [ 88.426553][ T29] audit: type=1326 audit(1754034950.001:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.3.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 88.489357][ T5778] loop0: detected capacity change from 0 to 512 [ 88.587484][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.618691][ T5778] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.698: Invalid inode bitmap blk 4 in block_group 0 [ 88.649044][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.780345][ T5784] loop4: detected capacity change from 0 to 512 [ 88.797471][ T5780] loop2: detected capacity change from 0 to 512 [ 88.846692][ T5784] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.855800][ T5780] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.864298][ T5780] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 88.894377][ T5780] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 88.910279][ T5776] tipc: Enabling of bearer rejected, already enabled [ 88.911067][ T5780] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.700: attempt to clear invalid blocks 2 len 1 [ 88.939510][ T5780] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.700: invalid indirect mapped block 1819239214 (level 0) [ 88.956285][ T5780] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.700: invalid indirect mapped block 1819239214 (level 1) [ 88.971444][ T5780] EXT4-fs (loop2): 1 truncate cleaned up [ 88.979344][ T5799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.706'. [ 88.997704][ T5780] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.011288][ T5801] loop0: detected capacity change from 0 to 512 [ 89.038732][ T5780] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.088551][ T5780] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.148488][ T5780] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.198467][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 89.219496][ T5812] loop1: detected capacity change from 0 to 512 [ 89.247340][ T5812] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.708: Invalid inode bitmap blk 4 in block_group 0 [ 89.270177][ T5812] tipc: Enabling of bearer rejected, already enabled [ 89.327218][ T5821] tipc: Resetting bearer [ 89.383952][ T5821] loop0: detected capacity change from 0 to 512 [ 89.429283][ T5821] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.712: Invalid inode bitmap blk 4 in block_group 0 [ 89.454192][ T5821] tipc: Enabling of bearer rejected, already enabled [ 89.686340][ T5839] loop3: detected capacity change from 0 to 512 [ 89.717911][ T5839] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.731049][ T5839] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.718: corrupted inode contents [ 89.744679][ T5839] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.718: mark_inode_dirty error [ 89.758218][ T5839] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.718: corrupted inode contents [ 89.770845][ T5839] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.718: mark_inode_dirty error [ 90.373452][ T5854] loop4: detected capacity change from 0 to 512 [ 90.389769][ T5854] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.486209][ T5859] loop0: detected capacity change from 0 to 512 [ 90.497749][ T5859] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.580868][ T5867] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 90.587583][ T5867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.595392][ T5867] vhci_hcd vhci_hcd.0: Device attached [ 90.611326][ T5870] vhci_hcd: cannot find the pending unlink 6 [ 91.255130][ T5870] vhci_hcd: connection closed [ 91.256092][ T5224] vhci_hcd: stop threads [ 91.266350][ T5224] vhci_hcd: release socket [ 91.270986][ T5224] vhci_hcd: disconnect device [ 91.362889][ T5880] tipc: Resetting bearer [ 91.416758][ T9] vhci_hcd: vhci_device speed not set [ 91.428647][ T5880] loop1: detected capacity change from 0 to 512 [ 91.454888][ T5880] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.730: Invalid inode bitmap blk 4 in block_group 0 [ 91.491079][ T5880] tipc: Enabling of bearer rejected, already enabled [ 91.506230][ T5886] loop4: detected capacity change from 0 to 512 [ 91.521596][ T5886] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.576890][ T5890] loop4: detected capacity change from 0 to 512 [ 91.637128][ T5896] loop3: detected capacity change from 0 to 512 [ 91.657554][ T5890] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.692274][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'. [ 92.464162][ T359] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.478636][ T5915] 9pnet_fd: Insufficient options for proto=fd [ 92.502472][ T359] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.509603][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.739'. [ 92.511232][ T359] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.528695][ T359] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.554329][ T5917] loop4: detected capacity change from 0 to 512 [ 92.571722][ T5917] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.739: Invalid inode bitmap blk 4 in block_group 0 [ 92.616133][ T5924] tipc: Resetting bearer [ 92.650302][ T5932] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 92.656876][ T5932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.664471][ T5932] vhci_hcd vhci_hcd.0: Device attached [ 92.670076][ T5924] loop1: detected capacity change from 0 to 512 [ 92.670766][ T5917] tipc: Enabling of bearer rejected, already enabled [ 92.693159][ T5924] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.742: Invalid inode bitmap blk 4 in block_group 0 [ 92.709168][ T5933] vhci_hcd: cannot find the pending unlink 6 [ 92.724315][ T5924] tipc: Enabling of bearer rejected, already enabled [ 92.787400][ T5948] loop0: detected capacity change from 0 to 512 [ 92.809150][ T5948] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.829803][ T5948] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.751: corrupted inode contents [ 92.842330][ T5948] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.751: mark_inode_dirty error [ 92.859954][ T5948] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.751: corrupted inode contents [ 92.865282][ T5954] tipc: Resetting bearer [ 92.878073][ T5952] loop1: detected capacity change from 0 to 1024 [ 92.886486][ T5952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.915134][ T5948] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.751: mark_inode_dirty error [ 92.943335][ T5954] loop4: detected capacity change from 0 to 512 [ 92.945067][ T10] usb 7-1: new low-speed USB device number 5 using vhci_hcd [ 92.972573][ T5954] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.752: Invalid inode bitmap blk 4 in block_group 0 [ 93.016266][ T5954] tipc: Enabling of bearer rejected, already enabled [ 93.120870][ T5977] FAULT_INJECTION: forcing a failure. [ 93.120870][ T5977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.134326][ T5977] CPU: 1 UID: 0 PID: 5977 Comm: syz.4.759 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 93.134357][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.134416][ T5977] Call Trace: [ 93.134421][ T5977] [ 93.134428][ T5977] __dump_stack+0x1d/0x30 [ 93.134450][ T5977] dump_stack_lvl+0xe8/0x140 [ 93.134548][ T5977] dump_stack+0x15/0x1b [ 93.134564][ T5977] should_fail_ex+0x265/0x280 [ 93.134596][ T5977] should_fail+0xb/0x20 [ 93.134648][ T5977] should_fail_usercopy+0x1a/0x20 [ 93.134665][ T5977] _copy_from_user+0x1c/0xb0 [ 93.134690][ T5977] __sys_connect+0xd0/0x2b0 [ 93.134767][ T5977] __x64_sys_connect+0x3f/0x50 [ 93.134848][ T5977] x64_sys_call+0x2c08/0x2ff0 [ 93.134869][ T5977] do_syscall_64+0xd2/0x200 [ 93.134898][ T5977] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.134924][ T5977] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.134946][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.134965][ T5977] RIP: 0033:0x7f5a095beb69 [ 93.134982][ T5977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.135054][ T5977] RSP: 002b:00007f5a07c1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 93.135073][ T5977] RAX: ffffffffffffffda RBX: 00007f5a097e5fa0 RCX: 00007f5a095beb69 [ 93.135085][ T5977] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 93.135105][ T5977] RBP: 00007f5a07c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.135117][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.135129][ T5977] R13: 0000000000000000 R14: 00007f5a097e5fa0 R15: 00007fff962a6cc8 [ 93.135147][ T5977] [ 93.338152][ T5980] tipc: Resetting bearer [ 93.386143][ T5980] loop1: detected capacity change from 0 to 512 [ 93.398950][ T5980] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.760: Invalid inode bitmap blk 4 in block_group 0 [ 93.419925][ T5980] tipc: Enabling of bearer rejected, already enabled [ 93.481924][ T5933] vhci_hcd: connection reset by peer [ 93.488752][ T5989] loop4: detected capacity change from 0 to 512 [ 93.503300][ T31] vhci_hcd: stop threads [ 93.508709][ T31] vhci_hcd: release socket [ 93.513678][ T31] vhci_hcd: disconnect device [ 93.534045][ T5992] loop1: detected capacity change from 0 to 1024 [ 93.541722][ T5992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.553706][ T5989] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.597914][ T6002] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 93.621269][ T6005] tipc: Resetting bearer [ 93.700604][ T6010] loop1: detected capacity change from 0 to 512 [ 93.717685][ T6013] loop2: detected capacity change from 0 to 512 [ 93.737222][ T6010] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.768: Invalid inode bitmap blk 4 in block_group 0 [ 93.768430][ T6013] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.791234][ T6005] tipc: Enabling of bearer rejected, already enabled [ 93.879834][ T6024] loop2: detected capacity change from 0 to 512 [ 93.890513][ T6024] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 93.901463][ T6024] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 93.911746][ T6024] EXT4-fs (loop2): group descriptors corrupted! [ 93.922739][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 93.922754][ T29] audit: type=1326 audit(1754034955.591:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 93.955951][ T29] audit: type=1326 audit(1754034955.591:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 93.981689][ T29] audit: type=1326 audit(1754034955.591:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 94.007085][ T29] audit: type=1326 audit(1754034955.591:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 94.030652][ T29] audit: type=1326 audit(1754034955.591:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 94.054763][ T29] audit: type=1326 audit(1754034955.591:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 94.078561][ T29] audit: type=1326 audit(1754034955.591:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 94.102809][ T29] audit: type=1326 audit(1754034955.591:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 94.127272][ T29] audit: type=1326 audit(1754034955.591:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 94.151709][ T29] audit: type=1326 audit(1754034955.591:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6029 comm="syz.0.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cb114eb69 code=0x7ffc0000 [ 94.182307][ T6032] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 94.190247][ T6032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.198812][ T6032] vhci_hcd vhci_hcd.0: Device attached [ 94.215839][ T6034] vhci_hcd: connection closed [ 94.218995][ T1712] vhci_hcd: stop threads [ 94.229645][ T1712] vhci_hcd: release socket [ 94.237215][ T1712] vhci_hcd: disconnect device [ 94.339600][ T6050] loop4: detected capacity change from 0 to 512 [ 94.570656][ T6073] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 94.627406][ T6081] tipc: Resetting bearer [ 94.663442][ T6081] loop3: detected capacity change from 0 to 512 [ 94.684911][ T6081] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.794: Invalid inode bitmap blk 4 in block_group 0 [ 94.711680][ T6081] tipc: Enabling of bearer rejected, already enabled [ 94.725898][ T6087] loop2: detected capacity change from 0 to 512 [ 94.834921][ T6087] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.860329][ T6100] loop3: detected capacity change from 0 to 512 [ 94.889129][ T6100] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.958698][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.967666][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.998244][ T6113] loop0: detected capacity change from 0 to 512 [ 95.008709][ T6113] EXT4-fs (loop0): orphan cleanup on readonly fs [ 95.015253][ T6113] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 95.036364][ T6113] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 95.051591][ T6113] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.805: attempt to clear invalid blocks 2 len 1 [ 95.067642][ T6113] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.805: invalid indirect mapped block 1819239214 (level 0) [ 95.085251][ T6113] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.805: invalid indirect mapped block 1819239214 (level 1) [ 95.116627][ T6113] EXT4-fs (loop0): 1 truncate cleaned up [ 95.140576][ T6113] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.181563][ T6127] tipc: Resetting bearer [ 95.227288][ T6113] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.237249][ T6127] loop4: detected capacity change from 0 to 512 [ 95.252856][ T6127] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.810: Invalid inode bitmap blk 4 in block_group 0 [ 95.278320][ T6127] tipc: Enabling of bearer rejected, already enabled [ 95.337935][ T6113] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.390438][ T6113] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.478903][ T5224] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.497000][ T5224] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.554649][ T5224] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.573931][ T5224] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.333032][ T3300] EXT4-fs unmount: 161 callbacks suppressed [ 96.333064][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.623695][ T6170] validate_nla: 2 callbacks suppressed [ 96.623710][ T6170] netlink: 'syz.2.825': attribute type 3 has an invalid length. [ 96.637109][ T6170] netlink: 'syz.2.825': attribute type 3 has an invalid length. [ 96.648485][ T6170] loop2: detected capacity change from 0 to 512 [ 96.670033][ T6172] tipc: Resetting bearer [ 96.700708][ T6170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.714946][ T6172] loop0: detected capacity change from 0 to 512 [ 96.725861][ T6172] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.826: Invalid inode bitmap blk 4 in block_group 0 [ 96.763174][ T6172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.780703][ T6179] tmpfs: Bad value for 'mpol' [ 96.786916][ T6170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.817923][ T6170] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.847063][ T6172] tipc: Enabling of bearer rejected, already enabled [ 96.869372][ T6170] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 96.892480][ T6170] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 96.904907][ T6170] EXT4-fs (loop2): This should not happen!! Data will be lost [ 96.904907][ T6170] [ 96.914880][ T6170] EXT4-fs (loop2): Total free blocks count 0 [ 96.921235][ T6170] EXT4-fs (loop2): Free/Dirty block details [ 96.927319][ T6170] EXT4-fs (loop2): free_blocks=39626 [ 96.932656][ T6170] EXT4-fs (loop2): dirty_blocks=12 [ 96.937892][ T6170] EXT4-fs (loop2): Block reservation details [ 96.944133][ T6170] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 96.955842][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.998953][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.012251][ T6182] loop1: detected capacity change from 0 to 512 [ 97.023333][ T6182] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.030634][ T6182] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.828: bg 0: block 248: padding at end of block bitmap is not set [ 97.047565][ T6182] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.828: Failed to acquire dquot type 1 [ 97.063157][ T6182] EXT4-fs (loop1): 1 truncate cleaned up [ 97.070328][ T6182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.128673][ T6188] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 97.137114][ T6191] loop0: detected capacity change from 0 to 1024 [ 97.143780][ T6191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.162777][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 97.198561][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.208949][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.221746][ T6201] loop3: detected capacity change from 0 to 512 [ 97.243681][ T6201] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.250144][ T6201] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 97.263894][ T6201] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 97.273505][ T6191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.286353][ T6201] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.836: attempt to clear invalid blocks 2 len 1 [ 97.313955][ T6201] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.836: invalid indirect mapped block 1819239214 (level 0) [ 97.328251][ T6201] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.836: invalid indirect mapped block 1819239214 (level 1) [ 97.332331][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.417563][ T6201] EXT4-fs (loop3): 1 truncate cleaned up [ 97.500264][ T6201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.701080][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.889203][ T6219] tmpfs: Bad value for 'mpol' [ 97.969830][ T6223] loop0: detected capacity change from 0 to 512 [ 98.030142][ T6201] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.045104][ T10] usb 7-1: enqueue for inactive port 0 [ 98.055563][ T10] usb 7-1: enqueue for inactive port 0 [ 98.084268][ T6223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.130627][ T6223] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.145115][ T10] vhci_hcd: vhci_device speed not set [ 98.155249][ T6201] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.175512][ T6219] loop1: detected capacity change from 0 to 512 [ 98.189299][ T6219] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.189598][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 98.229036][ T6219] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.841: bg 0: block 248: padding at end of block bitmap is not set [ 98.247406][ T6201] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.260709][ T6219] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.841: Failed to acquire dquot type 1 [ 98.273203][ T6219] EXT4-fs (loop1): 1 truncate cleaned up [ 98.281048][ T6219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.296010][ T6245] tipc: Resetting bearer [ 98.330559][ T6201] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.357721][ T6245] loop4: detected capacity change from 0 to 512 [ 98.378088][ T6250] tipc: Resetting bearer [ 98.379364][ T6245] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.850: Invalid inode bitmap blk 4 in block_group 0 [ 98.397077][ T6245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.427370][ T6245] tipc: Enabling of bearer rejected, already enabled [ 98.429965][ T6250] loop2: detected capacity change from 0 to 512 [ 98.435564][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.462664][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.481233][ T6250] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.852: Invalid inode bitmap blk 4 in block_group 0 [ 98.493121][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.502020][ T6250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.515955][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.524177][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.533880][ T6250] tipc: Enabling of bearer rejected, already enabled [ 98.560485][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.570622][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.598258][ T6258] loop4: detected capacity change from 0 to 1024 [ 98.608071][ T6258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.642876][ T6258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.673818][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.828783][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.867812][ T6273] loop4: detected capacity change from 0 to 512 [ 98.902652][ T6273] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 98.913650][ T6273] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 98.923686][ T6273] EXT4-fs (loop4): group descriptors corrupted! [ 99.061358][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.390092][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 99.390106][ T29] audit: type=1326 audit(1754034961.041:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2295a0eb69 code=0x7ffc0000 [ 99.419660][ T29] audit: type=1326 audit(1754034961.041:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f2295a0eb69 code=0x7ffc0000 [ 99.442992][ T29] audit: type=1326 audit(1754034961.041:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6275 comm="syz.1.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2295a0eb69 code=0x7ffc0000 [ 99.484443][ T29] audit: type=1400 audit(1754034961.111:5450): avc: denied { create } for pid=6277 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.521345][ T6282] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 99.529739][ T29] audit: type=1400 audit(1754034961.161:5451): avc: denied { bind } for pid=6277 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.549628][ T29] audit: type=1400 audit(1754034961.171:5452): avc: denied { write } for pid=6277 comm="syz.0.863" path="socket:[16022]" dev="sockfs" ino=16022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.600754][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.861'. [ 99.636789][ T29] audit: type=1326 audit(1754034961.311:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 99.670164][ T6291] tipc: Resetting bearer [ 99.675009][ T29] audit: type=1326 audit(1754034961.311:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 99.683622][ T6296] loop1: detected capacity change from 0 to 512 [ 99.698934][ T29] audit: type=1326 audit(1754034961.311:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 99.728569][ T29] audit: type=1326 audit(1754034961.311:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6284 comm="syz.3.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 99.730626][ T6296] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 99.762702][ T6296] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 99.772782][ T6296] EXT4-fs (loop1): group descriptors corrupted! [ 99.790612][ T6300] loop2: detected capacity change from 0 to 512 [ 99.797147][ T6298] loop0: detected capacity change from 0 to 512 [ 99.832281][ T6298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.835761][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 99.848748][ T6298] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.887184][ T6300] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.867: Invalid inode bitmap blk 4 in block_group 0 [ 99.948286][ T6300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.002587][ T6307] loop3: detected capacity change from 0 to 128 [ 100.060668][ T6291] tipc: Enabling of bearer rejected, already enabled [ 100.080295][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.871'. [ 100.097862][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.143929][ T6311] loop2: detected capacity change from 0 to 512 [ 100.156579][ T6311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.297609][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.456598][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.563520][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 100.890200][ T6335] loop1: detected capacity change from 0 to 512 [ 100.910357][ T6335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.073515][ T6339] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 101.081355][ T6339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.091278][ T6339] vhci_hcd vhci_hcd.0: Device attached [ 101.190396][ T6352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.200178][ T6352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.206109][ T6349] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 101.212471][ T6352] loop2: detected capacity change from 0 to 512 [ 101.224825][ T6352] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.231415][ T6352] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 101.241395][ T6352] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 101.257540][ T6352] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.881: attempt to clear invalid blocks 2 len 1 [ 101.270469][ T6352] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.881: invalid indirect mapped block 1819239214 (level 0) [ 101.285911][ T6352] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.881: invalid indirect mapped block 1819239214 (level 1) [ 101.300571][ T6352] EXT4-fs (loop2): 1 truncate cleaned up [ 101.301604][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.306596][ T6352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.320774][ T6355] tipc: Resetting bearer [ 101.335082][ T3900] usb 7-1: new low-speed USB device number 6 using vhci_hcd [ 101.368141][ T6357] loop0: detected capacity change from 0 to 512 [ 101.380588][ T6352] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.395071][ T6357] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.882: Invalid inode bitmap blk 4 in block_group 0 [ 101.414532][ T6357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.440756][ T6362] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 101.451731][ T6352] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.463517][ T6362] tipc: Resetting bearer [ 101.473623][ T6362] tipc: Disabling bearer [ 101.486637][ T6355] tipc: Enabling of bearer rejected, already enabled [ 101.498477][ T6352] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.518602][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.549465][ T6368] loop0: detected capacity change from 0 to 512 [ 101.559379][ T6352] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.576753][ T6340] vhci_hcd: connection reset by peer [ 101.582307][ T51] vhci_hcd: stop threads [ 101.586686][ T51] vhci_hcd: release socket [ 101.591161][ T51] vhci_hcd: disconnect device [ 101.597475][ T6368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.615068][ T6368] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.629737][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.647156][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.658235][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.675527][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.694055][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.723718][ T6380] netlink: 'syz.0.889': attribute type 1 has an invalid length. [ 101.731505][ T6380] netlink: 'syz.0.889': attribute type 4 has an invalid length. [ 101.739206][ T6380] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.889'. [ 101.749681][ T6380] netlink: 'syz.0.889': attribute type 1 has an invalid length. [ 101.750076][ T6381] loop1: detected capacity change from 0 to 512 [ 101.757555][ T6380] netlink: 'syz.0.889': attribute type 4 has an invalid length. [ 101.757575][ T6380] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.889'. [ 101.787602][ T6381] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 101.798715][ T6381] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 101.808878][ T6381] EXT4-fs (loop1): group descriptors corrupted! [ 101.877176][ T6387] loop1: detected capacity change from 0 to 512 [ 101.892728][ T6387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.926215][ T6387] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.948667][ T6392] tmpfs: Bad value for 'mpol' [ 101.977494][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.090480][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.109499][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.117467][ T6404] loop1: detected capacity change from 0 to 512 [ 102.131888][ T6396] loop4: detected capacity change from 0 to 512 [ 102.140111][ T6396] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.147066][ T6396] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.895: bg 0: block 248: padding at end of block bitmap is not set [ 102.162451][ T6396] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.895: Failed to acquire dquot type 1 [ 102.174191][ T6396] EXT4-fs (loop4): 1 truncate cleaned up [ 102.175099][ T6402] loop0: detected capacity change from 0 to 512 [ 102.186982][ T6396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.207184][ T6404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.220730][ T6404] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.222421][ T6402] EXT4-fs (loop0): orphan cleanup on readonly fs [ 102.237577][ T6402] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 102.245994][ T6402] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 102.261068][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.271557][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.272662][ T6402] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.897: attempt to clear invalid blocks 2 len 1 [ 102.294160][ T6402] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.897: invalid indirect mapped block 1819239214 (level 0) [ 102.308392][ T6402] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.897: invalid indirect mapped block 1819239214 (level 1) [ 102.323293][ T6402] EXT4-fs (loop0): 1 truncate cleaned up [ 102.330829][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.375994][ T6417] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 102.383731][ T6417] netlink: 'syz.3.903': attribute type 4 has an invalid length. [ 102.391605][ T6417] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.903'. [ 102.403938][ T6402] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.404839][ T6417] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 102.421772][ T6417] netlink: 'syz.3.903': attribute type 4 has an invalid length. [ 102.429859][ T6417] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.903'. [ 102.450379][ T6414] tipc: Resetting bearer [ 102.469237][ T6424] loop2: detected capacity change from 0 to 512 [ 102.482353][ T6424] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.902: Invalid inode bitmap blk 4 in block_group 0 [ 102.503448][ T6424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.548972][ T6402] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.586772][ T6434] netlink: 'syz.3.910': attribute type 3 has an invalid length. [ 102.595600][ T6434] netlink: 'syz.3.910': attribute type 3 has an invalid length. [ 102.603892][ T6414] tipc: Enabling of bearer rejected, already enabled [ 102.621234][ T6402] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.655640][ T6436] loop3: detected capacity change from 0 to 512 [ 102.677364][ T6402] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.677375][ T6436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.677518][ T6436] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.724707][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.734557][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.754892][ T6443] tmpfs: Bad value for 'mpol' [ 102.780644][ T139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.795338][ T6445] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 102.880136][ T139] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.895147][ T139] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.903379][ T139] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.985808][ T6460] loop2: detected capacity change from 0 to 512 [ 102.994978][ T6460] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.002373][ T6460] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.912: bg 0: block 248: padding at end of block bitmap is not set [ 103.018988][ T6460] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.912: Failed to acquire dquot type 1 [ 103.032179][ T6460] EXT4-fs (loop2): 1 truncate cleaned up [ 103.039510][ T6460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.135747][ T6469] loop3: detected capacity change from 0 to 512 [ 103.156681][ T6469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.171096][ T6469] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.409534][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.411384][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.424490][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.454266][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 103.569795][ T6484] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 103.611813][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 103.637609][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'. [ 103.670219][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.728556][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.741524][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.758784][ T6488] loop1: detected capacity change from 0 to 512 [ 103.760252][ T6504] loop2: detected capacity change from 0 to 512 [ 103.779453][ T6504] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.786194][ T6504] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 103.795713][ T6488] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.930: Invalid inode bitmap blk 4 in block_group 0 [ 103.801778][ T6504] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 103.826644][ T6488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.838277][ T6504] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.935: attempt to clear invalid blocks 2 len 1 [ 103.854874][ T6504] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.935: invalid indirect mapped block 1819239214 (level 0) [ 103.871050][ T6504] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.935: invalid indirect mapped block 1819239214 (level 1) [ 103.887521][ T6504] EXT4-fs (loop2): 1 truncate cleaned up [ 103.893342][ T6488] tipc: Enabling of bearer rejected, failed to enable media [ 103.894089][ T6504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.925205][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.935701][ T6504] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.986998][ T6504] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.037641][ T6504] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.097648][ T6504] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.476615][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.940'. [ 104.489295][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 104.489311][ T29] audit: type=1326 audit(1754034966.161:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.523411][ T29] audit: type=1326 audit(1754034966.161:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.547243][ T29] audit: type=1326 audit(1754034966.201:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.570900][ T29] audit: type=1326 audit(1754034966.201:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.594401][ T29] audit: type=1326 audit(1754034966.201:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.617755][ T29] audit: type=1326 audit(1754034966.201:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.641117][ T29] audit: type=1326 audit(1754034966.201:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.664999][ T29] audit: type=1326 audit(1754034966.201:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.688675][ T29] audit: type=1326 audit(1754034966.201:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.712076][ T29] audit: type=1326 audit(1754034966.201:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fceddeb69 code=0x7ffc0000 [ 104.823417][ T6537] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 104.830731][ T6537] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.840603][ T6537] vhci_hcd vhci_hcd.0: Device attached [ 104.847024][ T6538] vhci_hcd: cannot find the pending unlink 6 [ 105.085102][ T9] usb 3-1: new low-speed USB device number 4 using vhci_hcd [ 105.465085][ T6552] ================================================================== [ 105.473256][ T6552] BUG: KCSAN: data-race in print_cpu / tick_nohz_stop_idle [ 105.480548][ T6552] [ 105.482872][ T6552] write to 0xffff888237d1b838 of 8 bytes by interrupt on cpu 1: [ 105.490507][ T6552] tick_nohz_stop_idle+0xbf/0x120 [ 105.495523][ T6552] tick_irq_enter+0xa1/0x150 [ 105.500453][ T6552] sysvec_apic_timer_interrupt+0x67/0x80 [ 105.506520][ T6552] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.512670][ T6552] pv_native_safe_halt+0x13/0x20 [ 105.517778][ T6552] default_idle+0x13/0x20 [ 105.519032][ T6553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.949'. [ 105.522163][ T6552] default_idle_call+0x3d/0x70 [ 105.535951][ T6552] do_idle+0xcb/0x240 [ 105.539926][ T6552] cpu_startup_entry+0x25/0x30 [ 105.544769][ T6552] start_secondary+0x95/0xa0 [ 105.549451][ T6552] common_startup_64+0x13e/0x147 [ 105.554406][ T6552] [ 105.556711][ T6552] read to 0xffff888237d1b838 of 8 bytes by task 6552 on cpu 0: [ 105.564777][ T6552] print_cpu+0x502/0x680 [ 105.569045][ T6552] timer_list_show+0x107/0x170 [ 105.574856][ T6552] seq_read_iter+0x627/0x940 [ 105.579802][ T6552] proc_reg_read_iter+0x10d/0x180 [ 105.585951][ T6552] copy_splice_read+0x3c4/0x5f0 [ 105.591323][ T6552] splice_direct_to_actor+0x26f/0x680 [ 105.598099][ T6552] do_splice_direct+0xda/0x150 [ 105.603119][ T6552] do_sendfile+0x380/0x650 [ 105.608339][ T6552] __x64_sys_sendfile64+0x105/0x150 [ 105.613651][ T6552] x64_sys_call+0x2bb0/0x2ff0 [ 105.619167][ T6552] do_syscall_64+0xd2/0x200 [ 105.624456][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.631642][ T6552] [ 105.633952][ T6552] value changed: 0x000000188cb583c9 -> 0x000000188cb6ebae [ 105.641284][ T6552] [ 105.643596][ T6552] Reported by Kernel Concurrency Sanitizer on: [ 105.649736][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.4.949 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 105.662220][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.674376][ T6552] ================================================================== [ 105.685955][ T6538] vhci_hcd: connection reset by peer [ 105.693815][ T139] vhci_hcd: stop threads [ 105.699193][ T139] vhci_hcd: release socket [ 105.703681][ T139] vhci_hcd: disconnect device [ 105.951721][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.964329][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.976127][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.987738][ T139] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.355150][ T3900] usb 7-1: enqueue for inactive port 0 [ 106.360712][ T3900] usb 7-1: enqueue for inactive port 0 [ 106.435109][ T3900] vhci_hcd: vhci_device speed not set [ 106.508845][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.115174][ T9] usb 3-1: enqueue for inactive port 0 [ 110.120709][ T9] usb 3-1: enqueue for inactive port 0 [ 110.195092][ T9] vhci_hcd: vhci_device speed not set