last executing test programs: 9.251723159s ago: executing program 0 (id=4522): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000700)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @generic={0x2, 0x9, 0x6, 0x9, 0xc000}, @call={0x85, 0x0, 0x0, 0xb6}, @call={0x85, 0x0, 0x0, 0x84}, @ldst={0x3, 0x2, 0x6, 0x6, 0x8, 0xfffffffffffffff0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x222e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000002c0)='syzkaller\x00', 0xfffffff8, 0x3e, &(0x7f0000000480)=""/62, 0x41000, 0x0, '\x00', 0x0, 0x5, r4, 0x8, &(0x7f00000007c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1b8c1, r1, 0x6, 0x0, &(0x7f0000000800)=[{0x1, 0x3}, {0x1, 0x5, 0x9, 0xa}, {0x2, 0x570efe64, 0x0, 0x4}, {0x1, 0x2, 0x1, 0x8}, {0x5, 0x5, 0xc, 0x9}, {0x4, 0x1, 0x4, 0x1}], 0x10, 0xffffffff}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x17c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "e0ec162845d3e1ef4d2202e6422cc36e65e73cf87ba4460208d87e0879025e3c24b92516482fada0335bfe061e32fa4309cc6780573d322f8bb73bb942f0da3b34ea3f522d8328976e8fd2e70917e25e155d1705879b7142bb613bc125a8"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0xd0, 0x8, "6d72ec3d4c9d51f98be7ac46612deb5cc9a9b1d77a0e499d58220130658dca22beb03a3c9092d1f1d768cc0eab6e234ac52717b54efa399bba3745dc70d8ffd0bc33131149622d22bef39541938d2d4345dc93bb8706fc004471c0e0eddb5ca8705b646cf1a43bf2e6ab4c670638bbbacbbdedb5f67fb2bf4821c6d7ea1f689bce26427710ec0f3e53a1ff2650f3d44457d4469c165845d861f079b55f031e25a2dffb8b85a6b2126130b91d5642eac529f943961f513e3b075234b652208ec099bc3407cad3d17231967d16"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x801) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180500001f0004000000000000000000850000007a00000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r8}, 0xffffffffffffff19) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r9, 0x40085507, &(0x7f0000000100)=0x1d) 8.500519517s ago: executing program 0 (id=4527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x0, 0xfff, r1}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x4ff, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0x3}, {0xffffffff, 0xfffffffc, 0x2000009, 0x100000000004}]}) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[@ANYBLOB='E'], 0x31) socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.811982044s ago: executing program 0 (id=4551): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 2.805967055s ago: executing program 4 (id=4554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 2.754795529s ago: executing program 2 (id=4555): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004b9000/0x4000)=nil, &(0x7f0000f33000/0x4000)=nil, &(0x7f000073a000/0x1000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000e9f000/0x1000)=nil, &(0x7f000083a000/0x1000)=nil, &(0x7f0000000200)="e7841d75a5fc520dbff5a5301a99c5db2c46f1fb2ead78e64449b36303e5ffb5120071cf0029401e5d5ba7e4f235ed6bc7792ffda862b4ef6c628efc13f8376aae4c22ce686ed223ec19dc0a8ecc576d3452b66881e5c2d7237bafea66cf4b08b0fa7ddd94541d6d3201d236744f690aeb937def67d6195f62b1009f17969c86a036d1d8c07d1cb1df407563201f5243ab", 0x91}, 0x68) r5 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x7ff4, 0x1000, 0x2, 0x3a2}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) listen(r6, 0x3) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) close_range(r5, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.688067494s ago: executing program 4 (id=4556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 2.681058274s ago: executing program 4 (id=4557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2080000000000000080221daeccfda5eb75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) 2.275910346s ago: executing program 1 (id=4559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004b9000/0x4000)=nil, &(0x7f0000f33000/0x4000)=nil, &(0x7f000073a000/0x1000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000e9f000/0x1000)=nil, &(0x7f000083a000/0x1000)=nil, &(0x7f0000000200)="e7841d75a5fc520dbff5a5301a99c5db2c46f1fb2ead78e64449b36303e5ffb5120071cf0029401e5d5ba7e4f235ed6bc7792ffda862b4ef6c628efc13f8376aae4c22ce686ed223ec19dc0a8ecc576d3452b66881e5c2d7237bafea66cf4b08b0fa7ddd94541d6d3201d236744f690aeb937def67d6195f62b1009f17969c86a036d1d8c07d1cb1df407563201f5243ab606d24c84b2846b009", 0x9a, r5}, 0x68) r6 = io_uring_setup(0x1d48, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) listen(r7, 0x3) close_range(r6, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.841385199s ago: executing program 0 (id=4561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 1.757176375s ago: executing program 2 (id=4562): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800000000000000000000000000249f45c58f686ed7e49dd3a472514aee11298290af8ea14a7885d08cad2b04bdad16822f4b68534ebacab916deccf43aa7b64a7c454608cb0c9f8447ef17a76af90e7354af173a6e843b6e184bbe55c4a0019e8ae65176e3fa0e12ab587a66e71e89046894243ae586bee5cdb53b653964de3899285b38ebd10d2f0eb06f1a0d4fcda93fbf8c14f90e77b884ae2de29557e82af1025314d1412264869ad6f9324c8aec6cd1fbea282ed5b68f4f635bc1ebff7b31506848c20e79814fcf0aa5e64bf3717d39672a56c353159fd8c67e3c"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='workqueue_queue_work\x00', r1}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r2, @ANYBLOB="d2f05f1db557e4aae7e4454f744d08a75c856724de78f518f096ecfa264c19535f710e304abbf72334b20cf9da343dec2fbd0c048654c2433954641ebe7805ca659cbc67aed18fa1f5bd0613b8d7724f42fc23c5a942ae"], 0x28}}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {r4, 0xffffffffffffffff}}, './file1\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000800)='./bus\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000ec0)={0x200000400, &(0x7f0000000c00)=0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000c80), {0x13}, &(0x7f0000000cc0)=""/231, 0xe7, &(0x7f0000000dc0)=""/165, &(0x7f0000000e80)=[0x0], 0x1}, 0x58) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x3, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x12, &(0x7f0000002800)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xb, 0x9, 0x8, 0xfffffffffffffed4, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000008c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x16, r6, 0x8, &(0x7f0000000900)={0x3, 0x5}, 0xfcf4, 0x10, &(0x7f0000000940)={0x2, 0x10, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r11, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$netlink(r7, &(0x7f0000001000)={&(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x100}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="031349bce71c00000000000000010020e7bfc47550be4c090e11b8f01c66c533980faa7702249785c45419c6aea3c82029dd2b59bf606cb446c727e20ad295d0f6faa7fb299e56039578b64cdb835e44774a9a1f744d7d3d8d0a88e6da3ffaf4f2e4112851a6ea108e49922d1f55042e04409e016b7d382bce128b797a58577b05d1e892b0344e4dfcf6cd292b8cc9560ceebfa9a3a6d4000000000000000000", @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRESOCT=r5, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32=r12], 0x60, 0x8001}, 0x5) getpid() getgroups(0x5, &(0x7f0000002640)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01]) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==") 1.683840331s ago: executing program 0 (id=4563): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}], 0x1, 0xc88c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000700)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @generic={0x2, 0x9, 0x6, 0x9, 0xc000}, @call={0x85, 0x0, 0x0, 0xb6}, @call={0x85, 0x0, 0x0, 0x84}, @ldst={0x3, 0x2, 0x6, 0x6, 0x8, 0xfffffffffffffff0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x222e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000002c0)='syzkaller\x00', 0xfffffff8, 0x3e, &(0x7f0000000480)=""/62, 0x41000, 0x0, '\x00', 0x0, 0x5, r4, 0x8, &(0x7f00000007c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1b8c1, r1, 0x6, 0x0, &(0x7f0000000800)=[{0x1, 0x3}, {0x1, 0x5, 0x9, 0xa}, {0x2, 0x570efe64, 0x0, 0x4}, {0x1, 0x2, 0x1, 0x8}, {0x5, 0x5, 0xc, 0x9}, {0x4, 0x1, 0x4, 0x1}], 0x10, 0xffffffff}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x17c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "e0ec162845d3e1ef4d2202e6422cc36e65e73cf87ba4460208d87e0879025e3c24b92516482fada0335bfe061e32fa4309cc6780573d322f8bb73bb942f0da3b34ea3f522d8328976e8fd2e70917e25e155d1705879b7142bb613bc125a8"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_USERDATA={0xd0, 0x8, "6d72ec3d4c9d51f98be7ac46612deb5cc9a9b1d77a0e499d58220130658dca22beb03a3c9092d1f1d768cc0eab6e234ac52717b54efa399bba3745dc70d8ffd0bc33131149622d22bef39541938d2d4345dc93bb8706fc004471c0e0eddb5ca8705b646cf1a43bf2e6ab4c670638bbbacbbdedb5f67fb2bf4821c6d7ea1f689bce26427710ec0f3e53a1ff2650f3d44457d4469c165845d861f079b55f031e25a2dffb8b85a6b2126130b91d5642eac529f943961f513e3b075234b652208ec099bc3407cad3d17231967d16"}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x801) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180500001f0004000000000000000000850000007a00000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="30bf050913591b25dcc5703988488ed314b4dabd9ab43f23a3214856239b904531829671b1765a27df18a197b93545811fb7af5424f160927c8376d44a42dffd230808da2836d807cabf1b1f6ccf65a6ccb9c22e0bc68430"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, 0x25, r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r8}, 0xffffffffffffff19) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085507, &(0x7f0000000100)=0x1d) 1.320071539s ago: executing program 4 (id=4564): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x60000000}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0xea, [@broadcast, @local, @remote, @broadcast]}]}}}], 0xb0}}], 0x1, 0x4000005) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000000500)=""/93, 0x1b, 0x5d, 0x0, 0x9}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r7, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) 1.30740935s ago: executing program 1 (id=4565): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x40002000, 0x0) 1.17727844s ago: executing program 1 (id=4566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 1.17616239s ago: executing program 4 (id=4567): r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, &(0x7f0000000180)) getpgid(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x4, 0x0) 1.143705572s ago: executing program 1 (id=4568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_link_settings={0x37, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000002200)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000021c0)={&(0x7f00000020c0)={0xd0, 0x14, 0x100, 0x70bd29, 0x25dfdbfc, {0x2b, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "80b9c19cb9a1e2ffc95a8d315c958960d50fa62fb939be22edd0f9e5105224d417df68c8a63efbecb7348f389e863165b1e5f4698e6903f2ba8f83dd295a474d2055dbfdb92c25121eb3943cb3d88e3870664b3acdc5c6afe008ff62f8eb7d335cb4627a1233b2466930068c2c9a271220cfa4fc44a5f8c592504e29753f5422ffb6b2ce5f3eeaa9a64963ce82c0c0b6d421a7e1f7476a58475ac91dd4879feda255ac8c4ba25175c40f2ab5930c82b104a1db6922"}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4051) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0x0) 1.142793012s ago: executing program 1 (id=4569): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800000000000000000000000000249f45c58f686ed7e49dd3a472514aee11298290af8ea14a7885d08cad2b04bdad16822f4b68534ebacab916deccf43aa7b64a7c454608cb0c9f8447ef17a76af90e7354af173a6e843b6e184bbe55c4a0019e8ae65176e3fa0e12ab587a66e71e89046894243ae586bee5cdb53b653964de3899285b38ebd10d2f0eb06f1a0d4fcda93fbf8c14f90e77b884ae2de29557e82af1025314d1412264869ad6f9324c8aec6cd1fbea282ed5b68f4f635bc1ebff7b31506848c20e79814fcf0aa5e64bf3717d39672a56c353159fd8c67e3c"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='workqueue_queue_work\x00', r1}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[], 0x28}}, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {r5, 0xffffffffffffffff}}, './file1\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) lstat(&(0x7f0000000800)='./bus\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000ec0)={0x200000400, &(0x7f0000000c00)=0xffffffffffffffff, &(0x7f0000000c40), &(0x7f0000000c80), {0x13}, &(0x7f0000000cc0)=""/231, 0xe7, &(0x7f0000000dc0)=""/165, &(0x7f0000000e80)=[0x0], 0x1}, 0x58) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x11, &(0x7f0000002800)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xb, 0x9, 0x8, 0xfffffffffffffed4, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000008c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x16, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x2, 0x10, 0x9, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r12, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r12, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r12, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r13 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$netlink(r8, &(0x7f0000001000)={&(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x100}], 0x1, &(0x7f0000001040)=ANY=[@ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRESOCT=r6, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32=r13], 0x60, 0x8001}, 0x5) r14 = getpid() statx(0xffffffffffffff9c, &(0x7f0000002500)='./file2\x00', 0x400, 0x7ff, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, &(0x7f0000002640)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000280)="92fe25012da55d707e193fceba1e484b05113151f5e98e5fcf15f3163552843e85d7e86b48cce5e98140ec0f15ecedf665cb8d32070719c8daf1ac62fd755c00ab8a23e636f1d42fc3002100795b8ae8d83269437b0668a06b0e752f46409c6639e3c76097616c951e35a957f730b60c33dc6993171b49c79c96a2be2c6f4129bc30e186821cc6a8de89bb759ad34f131c144a5b3ba62e327f0b2200ea3e8b8c432be6f3351f764591eec120edbcaf27844e7d8d3790d5e47395580c34db421618e65d8103a483", 0xc7}, {&(0x7f0000000380)="0f9c5da563730fbf811d6a381d1ec3da592fd625306903e27a405120fa9b584b9beeb2d9903e21c9454a4234c3b276e93d405e41b6921c2f28d8a1044e7543013b0e9927e5c9f6fe8c1a8ffb97fe40ed889c2a383ed4bd57ac478ec10e2ed6ef559ec81580a67020b1e4f407054e39d81208634b", 0x74}, {&(0x7f0000000080)="7203c0b65d00725c9de127425deaa17ac1b021bc5406183a9a88acc899a3b686293162ab4d37b579ebc483", 0x2b}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000400)="b633abcf8e25da0659562f7af5ccee877c1605bf210a8f5d20", 0x19}, {&(0x7f0000000480)}, {&(0x7f0000000540)="827d5e16e9381dedfea520696bb2613aae7f9ac284e2a54d392284dad20d3999e9767c12951923bf3978e69d9c4204e1fe0144cc887e48218378190ebab345e13958f3ff38df9888b9a779fe2989f25576de120c2f3e83baaf695ea36be7474932b2b0eaf5d33ba40c2ffdbbed7d1a261a7625f741300b79d4eadc285d7e7e1fcba965eb4889fb10c80a6a", 0x8b}, {&(0x7f00000004c0)="47afefbfcf4f64a804c8b5ac1abc", 0xe}], 0x9, &(0x7f0000002100)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00D\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x10000}}, {{&(0x7f0000002200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002280)="a2e933996863e1a88a55abfec1f8e16fb2b23d0ffcee336e2cca663e1fdd6493", 0x20}, {&(0x7f00000022c0)="00a14eb85b8790f9ed67c3051cc714d81d19f62373b47f3c2e835f5d70514bcaa8c4766e81e8a643c58f9b08ede54bad881c6988b2f0a4116f2333afad38e11887d8508cdfb6fe3738b59e2b0171e0c11054379f0e3aab508f", 0x59}, {&(0x7f0000002340)="cdc5dace27b8c91d80840e5b040848e2955f17a5a5afee4dc4c56a38b996d41c550e19264568328088b86b5cb3c1e9144463673bfa82bb91411505a2b331cf1c8bc1ba5b67691c554714f7b7399fc296d554ffcc3810e72e3f32a8bd57d035db0cd666412a3c54d38052583d6a49d63e1101da713c1d07a0fe42cc6ade39f6257cd08d2e9295909242de7695b500c2aea2647526e5e4dee594", 0x99}], 0x3, &(0x7f0000002680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000200"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x2}}], 0x2, 0x4000080) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") 1.011977582s ago: executing program 3 (id=4572): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) connect$vsock_stream(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="59bb22bd70000000200011000000"], 0x28}}, 0x0) 1.004514343s ago: executing program 3 (id=4573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) 989.352544ms ago: executing program 4 (id=4574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2080000000000000080221daeccfda5eb75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$search(0xa, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) 889.124352ms ago: executing program 3 (id=4575): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000009c0)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$unix(r2, &(0x7f0000000440)=@abs, 0x0) close(r1) recvmmsg$unix(r3, &(0x7f0000003e40)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000005c0)=""/38, 0x26}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000007c0)=""/233, 0xe9}], 0x5, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000cc0)=""/216, 0xd8}], 0x2, &(0x7f0000000e00)}}, {{&(0x7f0000001f40), 0x6e, 0x0, 0x0, &(0x7f00000034c0)}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f00000039c0)=[{0x0}, {&(0x7f0000003600)=""/195, 0xc3}, {&(0x7f0000003700)=""/53, 0x35}, {&(0x7f0000003740)=""/33, 0x21}, {&(0x7f0000003780)=""/193, 0xc1}, {&(0x7f0000003880)=""/196, 0xc4}, {&(0x7f0000003980)=""/40, 0x28}], 0x7, &(0x7f0000003a40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003b00)=""/204, 0xcc}, {&(0x7f0000003cc0)=""/54, 0x36}], 0x2, &(0x7f0000003d40)}}], 0x5, 0x40, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x101}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x801, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf250100000005000d00010000f10b0016002e0000000000000008000a0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4051}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 705.240006ms ago: executing program 0 (id=4576): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004b9000/0x4000)=nil, &(0x7f0000f33000/0x4000)=nil, &(0x7f000073a000/0x1000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000e9f000/0x1000)=nil, &(0x7f000083a000/0x1000)=nil, &(0x7f0000000200)="e7841d75a5fc520dbff5a5301a99c5db2c46f1fb2ead78e64449b36303e5ffb5120071cf0029401e5d5ba7e4f235ed6bc7792ffda862b4ef6c628efc13f8376aae4c22ce686ed223ec19dc0a8ecc576d3452b66881e5c2d7237bafea66cf4b08b0fa7ddd94541d6d3201d236744f690aeb937def67d6195f62b1009f17969c86a036d1d8c07d1cb1df407563201f5243ab606d24c84b", 0x96}, 0x68) r5 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x7ff4, 0x1000, 0x2, 0x3a2}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) listen(r6, 0x3) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) close_range(r5, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 618.228783ms ago: executing program 3 (id=4577): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000009c0)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$unix(r2, &(0x7f0000000440)=@abs, 0x0) close(r1) recvmmsg$unix(r3, &(0x7f0000003e40)=[{{&(0x7f00000004c0), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/99, 0x63}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000005c0)=""/38, 0x26}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000007c0)=""/233, 0xe9}], 0x5, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000cc0)=""/216, 0xd8}], 0x2, &(0x7f0000000e00)}}, {{&(0x7f0000001f40), 0x6e, 0x0, 0x0, &(0x7f00000034c0)}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f00000039c0)=[{0x0}, {&(0x7f0000003600)=""/195, 0xc3}, {&(0x7f0000003700)=""/53, 0x35}, {&(0x7f0000003740)=""/33, 0x21}, {&(0x7f0000003780)=""/193, 0xc1}, {&(0x7f0000003880)=""/196, 0xc4}, {&(0x7f0000003980)=""/40, 0x28}], 0x7, &(0x7f0000003a40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003b00)=""/204, 0xcc}, {&(0x7f0000003cc0)=""/54, 0x36}], 0x2, &(0x7f0000003d40)}}], 0x5, 0x40, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x101}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x801, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf250100000005000d00010000f10b0016002e0000000000000008000a0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4051}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 335.380915ms ago: executing program 2 (id=4578): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000140), 0x0, 0x40002000, 0x0) 335.087895ms ago: executing program 2 (id=4579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) 314.939446ms ago: executing program 2 (id=4580): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x60000000}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0xea, [@broadcast, @local, @remote, @broadcast]}]}}}], 0xb0}}], 0x1, 0x4000005) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000000500)=""/93, 0x1b, 0x5d, 0x0, 0x9}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r7, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) 269.3254ms ago: executing program 1 (id=4581): open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x188001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4, 0xfff, 0x89a}, 0x8) 199.261875ms ago: executing program 2 (id=4582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x16) keyctl$search(0xa, 0x0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) getitimer(0x0, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) 76.340664ms ago: executing program 3 (id=4583): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000011c0)="de", 0x1}], 0x1) 0s ago: executing program 3 (id=4584): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_link_settings={0x37, 0x0, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): suppressed [ 546.545778][T16916] loop2: detected capacity change from 0 to 512 [ 546.673341][T16916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.719632][T16922] netlink: 'syz.4.4039': attribute type 7 has an invalid length. [ 546.806871][T16924] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 546.815118][T16924] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 546.831263][T16916] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 546.878373][T16914] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4038: corrupted inode contents [ 546.928572][T16914] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.4038: mark_inode_dirty error [ 546.943482][T16914] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4038: corrupted inode contents [ 546.955659][T16914] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.4038: mark_inode_dirty error [ 546.985044][T16926] loop1: detected capacity change from 0 to 128 [ 547.090653][T16933] loop3: detected capacity change from 0 to 512 [ 547.115201][T16933] EXT4-fs: Ignoring removed nobh option [ 547.128406][T16936] loop4: detected capacity change from 0 to 512 [ 547.135036][T16933] EXT4-fs: old and new quota format mixing [ 547.217291][T16935] loop1: detected capacity change from 0 to 512 [ 547.226604][T16936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.250515][T16935] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.4044: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 547.260644][T16936] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 547.273425][T16935] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.4044: Bad quota inode: 3, type: 0 [ 547.290957][T16935] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 547.313840][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.328648][T16933] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 547.349720][T16935] EXT4-fs (loop1): mount failed [ 547.468461][T16957] loop2: detected capacity change from 0 to 1024 [ 547.488714][T16957] EXT4-fs: Ignoring removed bh option [ 547.551911][T16957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.585739][T16957] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 547.606004][T16967] loop1: detected capacity change from 0 to 512 [ 547.716141][T16957] EXT4-fs (loop2): Remounting filesystem read-only [ 547.739947][T16957] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 547.791637][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.829348][T16967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.841925][T16967] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 547.853329][T16967] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4052: corrupted inode contents [ 547.865398][T16967] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.4052: mark_inode_dirty error [ 547.877133][T16967] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4052: corrupted inode contents [ 547.889274][T16967] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4052: mark_inode_dirty error [ 547.915262][T12175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.936042][T16978] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 547.944310][T16978] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 547.959225][T16979] loop2: detected capacity change from 0 to 512 [ 547.984103][T16979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.996660][T16979] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 548.009266][T16979] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4054: corrupted inode contents [ 548.021272][T16979] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.4054: mark_inode_dirty error [ 548.032884][T16979] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4054: corrupted inode contents [ 548.044792][T16979] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.4054: mark_inode_dirty error [ 548.068740][T16982] loop4: detected capacity change from 0 to 128 [ 548.113089][T16978] __nla_validate_parse: 5 callbacks suppressed [ 548.113103][T16978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4055'. [ 548.162074][T16984] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 548.170335][T16984] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 548.265387][T16985] loop4: detected capacity change from 0 to 128 [ 548.317506][T16984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4056'. [ 548.391811][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.410361][T16989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4058'. [ 548.562628][T17001] syz.0.4063 uses obsolete (PF_INET,SOCK_PACKET) [ 549.055084][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.462630][T17017] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 549.470881][T17017] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 549.614013][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 549.614029][ T29] audit: type=1326 audit(1765956947.230:32969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 549.644226][ T29] audit: type=1326 audit(1765956947.270:32970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 549.667869][ T29] audit: type=1326 audit(1765956947.270:32971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 549.691479][ T29] audit: type=1326 audit(1765956947.270:32972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 549.726587][ T29] audit: type=1326 audit(1765956947.270:32973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 549.750207][ T29] audit: type=1326 audit(1765956947.270:32974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 549.750562][T17027] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 549.773925][ T29] audit: type=1326 audit(1765956947.270:32975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 549.782542][T17027] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 549.806123][ T29] audit: type=1326 audit(1765956947.270:32976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f95c21667 code=0x7ffc0000 [ 549.838858][ T29] audit: type=1326 audit(1765956947.270:32977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 549.862494][ T29] audit: type=1326 audit(1765956947.270:32978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.3.4070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 549.888886][T17027] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.4071: Allocating blocks 41-42 which overlap fs metadata [ 549.906959][T17027] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4071: Failed to acquire dquot type 1 [ 549.918679][T17027] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 549.933337][T17027] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.4071: corrupted inode contents [ 549.943209][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4068'. [ 549.945420][T17027] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.4071: mark_inode_dirty error [ 549.965745][T17027] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.4071: corrupted inode contents [ 549.978067][T17027] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.4071: mark_inode_dirty error [ 549.978446][T17035] 9p: Bad value for 'wfdno' [ 550.000654][T17027] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.4071: corrupted inode contents [ 550.014700][T17027] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 550.023905][T17035] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 550.028662][T17027] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.4071: corrupted inode contents [ 550.033970][T17035] EXT4-fs (loop1): group descriptors corrupted! [ 550.093877][T17027] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.4071: mark_inode_dirty error [ 550.130706][T17027] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 550.139875][T17027] EXT4-fs (loop3): 1 truncate cleaned up [ 550.146440][T17027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.163992][T17027] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.235267][T17043] netlink: 32 bytes leftover after parsing attributes in process `'. [ 550.269233][T17047] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 550.389689][T17056] netlink: 'syz.1.4082': attribute type 4 has an invalid length. [ 550.397593][T17056] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4082'. [ 550.417368][T17056] .`: renamed from bond0 (while UP) [ 550.442484][T17061] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 550.450703][T17061] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 550.846200][T17067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4086'. [ 550.917451][T17061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4084'. [ 551.024739][T17078] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 551.072216][T17075] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 551.098289][T17078] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.151759][T14417] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 551.233031][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 551.245267][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4090'. [ 551.554362][T17084] lo speed is unknown, defaulting to 1000 [ 551.690335][T17089] IPv6: Can't replace route, no match found [ 552.420997][T17107] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 552.429266][T17107] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 552.504940][T17110] set_capacity_and_notify: 8 callbacks suppressed [ 552.505008][T17110] loop1: detected capacity change from 0 to 512 [ 552.544575][T17110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.557383][T17110] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.571551][T17110] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4099: corrupted inode contents [ 552.583676][T17110] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.4099: mark_inode_dirty error [ 552.595510][T17110] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4099: corrupted inode contents [ 552.609325][T17110] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4099: mark_inode_dirty error [ 552.982336][T17107] loop3: detected capacity change from 0 to 128 [ 553.185928][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.197661][T17107] __nla_validate_parse: 3 callbacks suppressed [ 553.197674][T17107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4100'. [ 553.454096][T17122] bridge0: port 4(batadv1) entered blocking state [ 553.460813][T17122] bridge0: port 4(batadv1) entered disabled state [ 553.467616][T17122] batadv1: entered allmulticast mode [ 553.473699][T17122] batadv1: entered promiscuous mode [ 553.483429][T17122] loop3: detected capacity change from 0 to 128 [ 553.492496][T17122] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 553.640713][T17125] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 553.649078][T17125] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 553.737568][T17127] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 553.745838][T17127] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 553.872789][T17134] loop3: detected capacity change from 0 to 128 [ 553.982848][T17138] loop4: detected capacity change from 0 to 128 [ 554.010563][ T53] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 554.019806][ T53] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 554.039829][T17125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4106'. [ 554.336511][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4110'. [ 554.365685][T17142] bond_slave_0: entered promiscuous mode [ 554.371391][T17142] bond_slave_1: entered promiscuous mode [ 554.388622][T17142] macvlan2: entered promiscuous mode [ 554.393997][T17142] bond0: entered promiscuous mode [ 554.400508][T17142] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 554.444802][T17153] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 554.453111][T17153] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 554.509704][T17127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4107'. [ 554.568695][T17159] xt_TPROXY: Can be used only with -p tcp or -p udp [ 554.591384][T17160] loop2: detected capacity change from 0 to 512 [ 554.598669][T17160] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 554.682942][T17163] loop0: detected capacity change from 0 to 128 [ 554.722026][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4117'. [ 554.834817][T17167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4119'. [ 555.028426][T17174] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 555.036765][T17174] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 555.053682][T17153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4115'. [ 555.409020][T17180] loop2: detected capacity change from 0 to 512 [ 555.534478][T17184] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 555.542816][T17184] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 555.573452][T17180] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 555.637829][T17184] loop0: detected capacity change from 0 to 1024 [ 555.670365][T17184] EXT4-fs: inline encryption not supported [ 555.716410][T17184] EXT4-fs: Ignoring removed mblk_io_submit option [ 555.731255][T17174] loop1: detected capacity change from 0 to 128 [ 555.746265][T17184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.860913][T17174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4121'. [ 555.997527][T17192] lo speed is unknown, defaulting to 1000 [ 556.028458][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 556.028504][ T29] audit: type=1400 audit(1765956953.640:33551): avc: denied { read write } for pid=17191 comm="syz.1.4125" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 556.058335][ T29] audit: type=1400 audit(1765956953.640:33552): avc: denied { ioctl open } for pid=17191 comm="syz.1.4125" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 556.091107][T17193] random: crng reseeded on system resumption [ 556.208447][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4127'. [ 556.221543][ T29] audit: type=1400 audit(1765956953.750:33553): avc: denied { cpu } for pid=17191 comm="syz.1.4125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 556.354691][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.455743][T17209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4132'. [ 556.603955][T17221] netlink: 'syz.3.4136': attribute type 4 has an invalid length. [ 556.726163][T17218] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 556.834686][T17223] 8021q: adding VLAN 0 to HW filter on device .` [ 556.935730][T17223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.959576][T17221] .`: renamed from bond0 (while UP) [ 557.044539][T17229] EXT4-fs: Ignoring removed bh option [ 557.082820][T17229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.127569][T17229] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 557.142741][T17229] EXT4-fs (loop3): Remounting filesystem read-only [ 557.149316][T17229] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 557.155239][ T10] kernel write not supported for file /uhid (pid: 10 comm: kworker/0:1) [ 557.174394][ T29] audit: type=1400 audit(1765956954.770:33554): avc: denied { read write } for pid=17235 comm="syz.4.4141" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 557.197978][ T29] audit: type=1400 audit(1765956954.770:33555): avc: denied { open } for pid=17235 comm="syz.4.4141" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 557.230540][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.470850][ T29] audit: type=1326 audit(1765956955.080:33556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17249 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 557.494535][ T29] audit: type=1326 audit(1765956955.080:33557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17249 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 557.518229][ T29] audit: type=1326 audit(1765956955.080:33558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17249 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 557.541859][ T29] audit: type=1326 audit(1765956955.080:33559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17249 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 557.565494][ T29] audit: type=1326 audit(1765956955.080:33560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17249 comm="syz.4.4147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 557.603532][T17256] set_capacity_and_notify: 3 callbacks suppressed [ 557.603547][T17256] loop2: detected capacity change from 0 to 512 [ 557.620092][T17252] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 557.629890][T17256] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 557.648974][T17252] EXT4-fs (loop0): invalid journal inode [ 557.654973][T17252] EXT4-fs (loop0): can't get journal size [ 558.231278][T17252] EXT4-fs (loop0): 1 truncate cleaned up [ 558.241513][T17252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.328028][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.337843][T17266] __nla_validate_parse: 5 callbacks suppressed [ 558.337925][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4151'. [ 558.358538][T17267] netlink: 'syz.4.4152': attribute type 4 has an invalid length. [ 558.366374][T17267] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4152'. [ 558.399398][T17269] loop0: detected capacity change from 0 to 512 [ 558.413516][T17267] .`: renamed from bond0 (while UP) [ 558.428945][T17269] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 558.469616][T17269] EXT4-fs (loop0): invalid journal inode [ 558.497668][T17269] EXT4-fs (loop0): can't get journal size [ 558.524622][T17269] EXT4-fs (loop0): 1 truncate cleaned up [ 558.659574][T17269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.741976][T17269] FAULT_INJECTION: forcing a failure. [ 558.741976][T17269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.755173][T17269] CPU: 1 UID: 0 PID: 17269 Comm: syz.0.4153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 558.755194][T17269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.755206][T17269] Call Trace: [ 558.755214][T17269] [ 558.755222][T17269] __dump_stack+0x1d/0x30 [ 558.755276][T17269] dump_stack_lvl+0xe8/0x140 [ 558.755295][T17269] dump_stack+0x15/0x1b [ 558.755315][T17269] should_fail_ex+0x265/0x280 [ 558.755371][T17269] should_fail+0xb/0x20 [ 558.755390][T17269] should_fail_usercopy+0x1a/0x20 [ 558.755413][T17269] strncpy_from_user+0x27/0x260 [ 558.755538][T17269] getname_flags+0xae/0x3b0 [ 558.755620][T17269] user_path_at+0x28/0x130 [ 558.755649][T17269] do_fchmodat+0x9c/0x180 [ 558.755723][T17269] __x64_sys_chmod+0x38/0x50 [ 558.755748][T17269] x64_sys_call+0x2aaf/0x3000 [ 558.755776][T17269] do_syscall_64+0xd8/0x2c0 [ 558.755846][T17269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.755872][T17269] RIP: 0033:0x7f4696e7f749 [ 558.755888][T17269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.755908][T17269] RSP: 002b:00007f46958e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 558.755962][T17269] RAX: ffffffffffffffda RBX: 00007f46970d5fa0 RCX: 00007f4696e7f749 [ 558.755976][T17269] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000200000000100 [ 558.755987][T17269] RBP: 00007f46958e7090 R08: 0000000000000000 R09: 0000000000000000 [ 558.755998][T17269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.756009][T17269] R13: 00007f46970d6038 R14: 00007f46970d5fa0 R15: 00007ffdb3094be8 [ 558.756025][T17269] [ 558.946514][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.620269][T17292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4158'. [ 559.661693][T17297] loop2: detected capacity change from 0 to 512 [ 559.672061][T17297] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 559.751442][T17299] loop3: detected capacity change from 0 to 512 [ 559.767504][T17299] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 560.091126][T17313] loop4: detected capacity change from 0 to 512 [ 560.099738][T17311] FAULT_INJECTION: forcing a failure. [ 560.099738][T17311] name failslab, interval 1, probability 0, space 0, times 0 [ 560.112384][T17311] CPU: 1 UID: 0 PID: 17311 Comm: syz.0.4164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 560.112412][T17311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 560.112424][T17311] Call Trace: [ 560.112495][T17311] [ 560.112502][T17311] __dump_stack+0x1d/0x30 [ 560.112525][T17311] dump_stack_lvl+0xe8/0x140 [ 560.112667][T17311] dump_stack+0x15/0x1b [ 560.112689][T17311] should_fail_ex+0x265/0x280 [ 560.112768][T17311] should_failslab+0x8c/0xb0 [ 560.112788][T17311] __kmalloc_cache_noprof+0x65/0x4c0 [ 560.112811][T17311] ? alloc_mnt_ns+0x76/0x250 [ 560.112859][T17311] alloc_mnt_ns+0x76/0x250 [ 560.112946][T17311] copy_mnt_ns+0xda/0x6a0 [ 560.112966][T17311] ? kmem_cache_alloc_noprof+0x2c5/0x4b0 [ 560.112995][T17311] ? create_new_namespaces+0x3c/0x400 [ 560.113070][T17311] create_new_namespaces+0x83/0x400 [ 560.113097][T17311] unshare_nsproxy_namespaces+0xe8/0x120 [ 560.113151][T17311] ksys_unshare+0x3d0/0x6d0 [ 560.113181][T17311] __x64_sys_unshare+0x1f/0x30 [ 560.113205][T17311] x64_sys_call+0x2ae6/0x3000 [ 560.113293][T17311] do_syscall_64+0xd8/0x2c0 [ 560.113394][T17311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.113422][T17311] RIP: 0033:0x7f4696e7f749 [ 560.113436][T17311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.113454][T17311] RSP: 002b:00007f46958a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 560.113472][T17311] RAX: ffffffffffffffda RBX: 00007f46970d6180 RCX: 00007f4696e7f749 [ 560.113484][T17311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020480 [ 560.113523][T17311] RBP: 00007f46958a5090 R08: 0000000000000000 R09: 0000000000000000 [ 560.113540][T17311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.113555][T17311] R13: 00007f46970d6218 R14: 00007f46970d6180 R15: 00007ffdb3094be8 [ 560.113671][T17311] [ 560.975575][T17313] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 560.988973][T17313] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 561.022463][T17313] lo speed is unknown, defaulting to 1000 [ 561.333647][T17321] loop3: detected capacity change from 0 to 1024 [ 561.759558][T17327] loop2: detected capacity change from 0 to 512 [ 561.789872][T12175] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 561.804577][T17327] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 561.822407][T17327] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 561.855729][T17327] lo speed is unknown, defaulting to 1000 [ 562.096828][T17321] EXT4-fs: Ignoring removed bh option [ 563.137937][T17321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.221517][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 563.221536][ T29] audit: type=1400 audit(1765956960.830:33643): avc: denied { create } for pid=17322 comm="syz.0.4169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 563.357003][T17343] loop4: detected capacity change from 0 to 512 [ 563.508003][T12816] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 563.535921][T17343] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.553349][T17343] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 563.597559][T17321] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 563.626386][T17343] lo speed is unknown, defaulting to 1000 [ 563.809304][T17345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4172'. [ 563.863611][T17321] EXT4-fs (loop3): Remounting filesystem read-only [ 563.925014][T17321] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 564.124871][T17353] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 564.133112][T17353] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 564.152310][T17355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4177'. [ 564.173231][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.840952][T12175] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 564.893757][T17366] loop3: detected capacity change from 0 to 512 [ 564.977406][T17367] loop1: detected capacity change from 0 to 128 [ 564.993890][T17368] loop0: detected capacity change from 0 to 512 [ 565.091915][T17368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.115504][T17366] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 565.140569][T17368] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 565.161920][T17364] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4179: corrupted inode contents [ 565.185088][T17364] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.4179: mark_inode_dirty error [ 565.205679][T17353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4176'. [ 565.214905][T17364] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4179: corrupted inode contents [ 565.237068][T17364] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4179: mark_inode_dirty error [ 565.416045][T17376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4180'. [ 565.515529][T17379] loop4: detected capacity change from 0 to 512 [ 565.534637][T17379] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 565.683665][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.271723][ T29] audit: type=1400 audit(1765956963.890:33644): avc: denied { create } for pid=17384 comm="syz.1.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 566.295368][T17386] loop1: detected capacity change from 0 to 512 [ 566.301475][T17388] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 566.309818][T17388] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 566.331718][T17386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.344278][T17386] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 566.355817][T17386] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4185: corrupted inode contents [ 566.367940][T17386] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.4185: mark_inode_dirty error [ 566.379622][T17386] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4185: corrupted inode contents [ 566.392494][T17386] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4185: mark_inode_dirty error [ 566.507162][T17402] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 566.515499][T17402] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 566.562162][T17404] loop4: detected capacity change from 0 to 512 [ 566.676227][T17404] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 566.719973][T17407] loop3: detected capacity change from 0 to 128 [ 566.926016][T17388] loop2: detected capacity change from 0 to 128 [ 567.014682][T17402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4190'. [ 567.043324][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.148643][T17415] loop1: detected capacity change from 0 to 512 [ 567.159524][T17417] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 567.174996][T17388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4186'. [ 567.187315][T17415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.199957][T17415] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 567.212528][T17415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4192: corrupted inode contents [ 567.224815][T17415] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.4192: mark_inode_dirty error [ 567.236465][T17415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4192: corrupted inode contents [ 567.260082][T17415] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4192: mark_inode_dirty error [ 567.422078][T17427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.435884][T17430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.448643][T17430] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 567.450659][T17427] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 567.469757][T17426] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4195: corrupted inode contents [ 567.470046][T17436] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 567.491813][T17426] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.4195: mark_inode_dirty error [ 567.520726][T17426] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4195: corrupted inode contents [ 567.533098][T17426] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.4195: mark_inode_dirty error [ 567.550946][T17421] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4194: corrupted inode contents [ 567.577851][T17421] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.4194: mark_inode_dirty error [ 567.589637][T17421] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4194: corrupted inode contents [ 567.602844][T17421] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4194: mark_inode_dirty error [ 568.288519][T17439] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 568.296745][T17439] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 568.401541][T17440] set_capacity_and_notify: 4 callbacks suppressed [ 568.401560][T17440] loop0: detected capacity change from 0 to 128 [ 568.457631][T17439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4198'. [ 568.741517][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.163909][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.173545][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.196747][T17450] loop4: detected capacity change from 0 to 512 [ 569.237184][T17450] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 569.249554][ T29] audit: type=1400 audit(1765956966.850:33645): avc: denied { lock } for pid=17451 comm="syz.2.4203" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=49689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 569.277891][T17455] netlink: 'syz.3.4201': attribute type 4 has an invalid length. [ 569.285737][T17455] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4201'. [ 569.481292][T17470] loop1: detected capacity change from 0 to 512 [ 570.400938][T17472] loop3: detected capacity change from 0 to 512 [ 570.615726][T17472] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 570.662608][T17470] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 570.893121][T17469] loop0: detected capacity change from 0 to 512 [ 570.903025][T17466] loop2: detected capacity change from 0 to 512 [ 570.910378][T17469] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 570.920492][T17466] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 571.236060][T17491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4218'. [ 571.265669][T17485] loop3: detected capacity change from 0 to 512 [ 571.478730][T17485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.539816][T17505] loop2: detected capacity change from 0 to 512 [ 571.550620][T17485] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 571.626004][T17485] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4212: corrupted inode contents [ 571.747645][T17485] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.4212: mark_inode_dirty error [ 571.780719][T17510] loop1: detected capacity change from 0 to 512 [ 571.820694][T17510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.833539][T17510] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 571.903574][T17505] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 572.774894][T17485] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4212: corrupted inode contents [ 572.979349][T17485] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4212: mark_inode_dirty error [ 573.006401][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.050163][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.070744][T17518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4226'. [ 573.220399][ T29] audit: type=1326 audit(1765956970.830:33646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 573.245674][ T29] audit: type=1326 audit(1765956970.860:33647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 573.269445][ T29] audit: type=1326 audit(1765956970.860:33648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 573.292996][ T29] audit: type=1326 audit(1765956970.860:33649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 573.486821][T17532] loop0: detected capacity change from 0 to 1024 [ 573.504295][ T29] audit: type=1326 audit(1765956970.980:33650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 573.527916][ T29] audit: type=1326 audit(1765956970.980:33651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 573.551479][ T29] audit: type=1326 audit(1765956970.980:33652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 573.575163][ T29] audit: type=1326 audit(1765956970.980:33653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 573.598812][ T29] audit: type=1326 audit(1765956970.980:33654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.2.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 573.599046][T17535] loop2: detected capacity change from 0 to 512 [ 573.747805][T17539] loop3: detected capacity change from 0 to 512 [ 573.795905][T17539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.808550][T17539] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 573.839738][T17535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.852587][T17535] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 573.869327][T17535] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4230: corrupted inode contents [ 573.882051][T17535] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.4230: mark_inode_dirty error [ 574.019998][T17535] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4230: corrupted inode contents [ 574.058556][T17535] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.4230: mark_inode_dirty error [ 574.229297][T17532] EXT4-fs: Ignoring removed bh option [ 574.264854][T17532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.311826][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.426205][T17532] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 574.463625][T17532] EXT4-fs (loop0): Remounting filesystem read-only [ 574.485325][T17532] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 574.501945][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.593496][T17554] loop2: detected capacity change from 0 to 512 [ 574.622388][T17554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.635129][T17554] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 574.841196][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.985437][T17563] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 574.993751][T17563] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 575.124347][T17566] loop0: detected capacity change from 0 to 128 [ 575.147370][T17567] loop1: detected capacity change from 0 to 512 [ 575.183588][T17567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.209227][T17567] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 575.222984][T17563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4235'. [ 575.248465][T17565] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4236: corrupted inode contents [ 575.303342][T17565] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.4236: mark_inode_dirty error [ 575.305511][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.323806][T17565] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4236: corrupted inode contents [ 575.350780][T17565] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4236: mark_inode_dirty error [ 575.377256][T17574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4238'. [ 575.434943][T17579] netlink: 'syz.2.4240': attribute type 4 has an invalid length. [ 575.442786][T17579] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4240'. [ 575.462126][T17579] .`: renamed from bond0 (while UP) [ 575.513106][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 575.513147][ T29] audit: type=1326 audit(1765956973.130:33687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.542947][ T29] audit: type=1326 audit(1765956973.130:33688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.599265][ T29] audit: type=1326 audit(1765956973.190:33689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.622916][ T29] audit: type=1326 audit(1765956973.190:33690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.646616][ T29] audit: type=1326 audit(1765956973.190:33691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.670202][ T29] audit: type=1326 audit(1765956973.190:33692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.693874][ T29] audit: type=1326 audit(1765956973.190:33693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.717692][ T29] audit: type=1326 audit(1765956973.190:33694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.741531][ T29] audit: type=1326 audit(1765956973.190:33695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.765113][ T29] audit: type=1326 audit(1765956973.190:33696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 575.795434][T17587] loop2: detected capacity change from 0 to 512 [ 575.845798][T17594] loop3: detected capacity change from 0 to 512 [ 576.001952][T17587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.014751][T17587] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 576.026369][T17587] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4244: corrupted inode contents [ 576.039016][T17587] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.4244: mark_inode_dirty error [ 576.276097][T17587] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4244: corrupted inode contents [ 576.288331][T17587] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.4244: mark_inode_dirty error [ 576.303951][T17594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.316488][T17594] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 576.494769][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.506423][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.602855][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.618116][T17606] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 576.626397][T17606] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 576.688611][T17610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4250'. [ 576.799995][T17616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4249'. [ 576.806351][T17613] siw: device registration error -23 [ 576.809053][T17616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4249'. [ 576.828583][T17620] netlink: 'syz.0.4253': attribute type 4 has an invalid length. [ 576.836466][T17620] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4253'. [ 576.865550][T17621] loop1: detected capacity change from 0 to 128 [ 576.912726][T17620] .`: renamed from bond0 (while UP) [ 576.939234][T17623] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 576.952298][T12816] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 576.963312][T12816] CPU: 1 UID: 0 PID: 12816 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 576.963337][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.963372][T12816] Call Trace: [ 576.963379][T12816] [ 576.963460][T12816] __dump_stack+0x1d/0x30 [ 576.963490][T12816] dump_stack_lvl+0xe8/0x140 [ 576.963517][T12816] dump_stack+0x15/0x1b [ 576.963535][T12816] dump_header+0x81/0x240 [ 576.963555][T12816] oom_kill_process+0x295/0x350 [ 576.963650][T12816] out_of_memory+0x97b/0xb80 [ 576.963671][T12816] try_charge_memcg+0x610/0xa10 [ 576.963726][T12816] charge_memcg+0x51/0xc0 [ 576.963763][T12816] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 576.963871][T12816] __read_swap_cache_async+0x17b/0x2d0 [ 576.963910][T12816] swap_cluster_readahead+0x262/0x3c0 [ 576.964064][T12816] swapin_readahead+0xde/0x820 [ 576.964102][T12816] ? next_uptodate_folio+0x81c/0x890 [ 576.964211][T12816] ? percpu_counter_add_batch+0xb6/0x130 [ 576.964237][T12816] ? __rcu_read_unlock+0x4f/0x70 [ 576.964261][T12816] ? swap_cache_get_folio+0x277/0x280 [ 576.964351][T12816] do_swap_page+0x2b4/0x21e0 [ 576.964391][T12816] ? __pfx_default_wake_function+0x10/0x10 [ 576.964498][T12816] handle_mm_fault+0x9d8/0x2c60 [ 576.964534][T12816] do_user_addr_fault+0x630/0x1080 [ 576.964572][T12816] exc_page_fault+0x62/0xa0 [ 576.964639][T12816] asm_exc_page_fault+0x26/0x30 [ 576.964659][T12816] RIP: 0033:0x7f5baf6d5fd7 [ 576.964676][T12816] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24 [ 576.964702][T12816] RSP: 002b:00007ffd634040f0 EFLAGS: 00010206 [ 576.964721][T12816] RAX: 0000001b2d624000 RBX: 000000000000032a RCX: 000000000008ca00 [ 576.964734][T12816] RDX: 000000000d4ee879 RSI: 00007ffd63404180 RDI: 000000000000000b [ 576.964749][T12816] RBP: 00007ffd6340412c R08: 0000000032c452b1 R09: 7fffffffffffffff [ 576.964760][T12816] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 576.964770][T12816] R13: 00000000000927c0 R14: 000000000008cd3b R15: 00007ffd63404180 [ 576.964787][T12816] [ 576.964793][T12816] memory: usage 307200kB, limit 307200kB, failcnt 2598 [ 577.181085][T12816] memory+swap: usage 43996kB, limit 9007199254740988kB, failcnt 0 [ 577.188989][T12816] kmem: usage 30240kB, limit 9007199254740988kB, failcnt 0 [ 577.196303][T12816] Memory cgroup stats for /syz2: [ 577.196790][T12816] cache 0 [ 577.204827][T12816] rss 24576 [ 577.207940][T12816] shmem 0 [ 577.210915][T12816] mapped_file 0 [ 577.214389][T12816] dirty 0 [ 577.217326][T12816] writeback 0 [ 577.220638][T12816] workingset_refault_anon 1223 [ 577.225443][T12816] workingset_refault_file 260 [ 577.230124][T12816] swap 180224 [ 577.233518][T12816] swapcached 24576 [ 577.237228][T12816] pgpgin 812981 [ 577.240721][T12816] pgpgout 812968 [ 577.244266][T12816] pgfault 1177157 [ 577.247902][T12816] pgmajfault 309 [ 577.251472][T12816] inactive_anon 0 [ 577.255106][T12816] active_anon 36864 [ 577.255853][T17606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4248'. [ 577.258904][T12816] inactive_file 0 [ 577.258916][T12816] active_file 16384 [ 577.258926][T12816] unevictable 0 [ 577.278785][T12816] hierarchical_memory_limit 314572800 [ 577.284216][T12816] hierarchical_memsw_limit 9223372036854771712 [ 577.290468][T12816] total_cache 0 [ 577.293936][T12816] total_rss 24576 [ 577.297583][T12816] total_shmem 0 [ 577.301077][T12816] total_mapped_file 0 [ 577.305115][T12816] total_dirty 0 [ 577.308573][T12816] total_writeback 0 [ 577.312469][T12816] total_workingset_refault_anon 1223 [ 577.317883][T12816] total_workingset_refault_file 260 [ 577.323157][T12816] total_swap 180224 [ 577.327043][T12816] total_swapcached 24576 [ 577.331448][T12816] total_pgpgin 812981 [ 577.335445][T12816] total_pgpgout 812968 [ 577.339515][T12816] total_pgfault 1177157 [ 577.343749][T12816] total_pgmajfault 309 [ 577.347817][T12816] total_inactive_anon 0 [ 577.352016][T12816] total_active_anon 36864 [ 577.356344][T12816] total_inactive_file 0 [ 577.360529][T12816] total_active_file 16384 [ 577.364861][T12816] total_unevictable 0 [ 577.368923][T12816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4247,pid=17607,uid=0 [ 577.383839][T12816] Memory cgroup out of memory: Killed process 17607 (syz.2.4247) total-vm:96016kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 577.391022][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4256'. [ 577.475805][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4259'. [ 577.499548][T17641] netlink: 'gtp': attribute type 7 has an invalid length. [ 577.618389][T17655] loop0: detected capacity change from 0 to 512 [ 577.668584][T17655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.681298][T17655] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 577.731834][T17656] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 577.835565][T17662] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 577.864724][T17663] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 579.480912][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.569934][T17689] set_capacity_and_notify: 3 callbacks suppressed [ 579.569950][T17689] loop0: detected capacity change from 0 to 128 [ 579.592891][T17693] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 579.601268][T17693] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 579.618266][T17689] FAT-fs (loop0): bogus logical sector size 0 [ 579.624437][T17689] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 579.633674][T17689] FAT-fs (loop0): Can't find a valid FAT filesystem [ 579.671395][T17696] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 579.679646][T17696] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 579.831581][T17697] loop3: detected capacity change from 0 to 128 [ 579.872700][T17698] loop4: detected capacity change from 0 to 128 [ 580.116177][T17706] loop4: detected capacity change from 0 to 512 [ 580.138479][T17706] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 580.237770][T17709] loop2: detected capacity change from 0 to 1024 [ 580.259776][T17709] EXT4-fs: Ignoring removed bh option [ 580.283336][T17709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.338126][T17709] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 580.375228][T17709] EXT4-fs (loop2): Remounting filesystem read-only [ 580.422131][T17709] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 580.436135][T17721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17721 comm=syz.1.4286 [ 581.453109][T17724] loop3: detected capacity change from 0 to 512 [ 581.573494][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.744941][T17724] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 581.765532][T17718] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 581.792451][T17718] lo speed is unknown, defaulting to 1000 [ 581.806154][T17717] loop4: detected capacity change from 0 to 512 [ 581.859903][T17717] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 581.885275][T13266] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 582.003770][T17739] __nla_validate_parse: 7 callbacks suppressed [ 582.003786][T17739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4288'. [ 582.066814][T14417] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 582.077970][T14417] CPU: 0 UID: 0 PID: 14417 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 582.078002][T14417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.078015][T14417] Call Trace: [ 582.078022][T14417] [ 582.078029][T14417] __dump_stack+0x1d/0x30 [ 582.078057][T14417] dump_stack_lvl+0xe8/0x140 [ 582.078128][T14417] dump_stack+0x15/0x1b [ 582.078155][T14417] dump_header+0x81/0x240 [ 582.078274][T14417] oom_kill_process+0x295/0x350 [ 582.078305][T14417] out_of_memory+0x97b/0xb80 [ 582.078339][T14417] try_charge_memcg+0x610/0xa10 [ 582.078391][T14417] charge_memcg+0x51/0xc0 [ 582.078433][T14417] __mem_cgroup_charge+0x28/0xb0 [ 582.078498][T14417] filemap_add_folio+0x111/0x360 [ 582.078548][T14417] __filemap_get_folio_mpol+0x326/0x650 [ 582.078582][T14417] filemap_fault+0x44d/0xb70 [ 582.078652][T14417] __do_fault+0xbc/0x200 [ 582.078675][T14417] handle_mm_fault+0xfab/0x2c60 [ 582.078724][T14417] do_user_addr_fault+0x630/0x1080 [ 582.078786][T14417] exc_page_fault+0x62/0xa0 [ 582.078820][T14417] asm_exc_page_fault+0x26/0x30 [ 582.078911][T14417] RIP: 0033:0x7fdd91b55fd4 [ 582.078925][T14417] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 582.079016][T14417] RSP: 002b:00007ffc3d8fab40 EFLAGS: 00010202 [ 582.079032][T14417] RAX: 0000001b31a24000 RBX: 000000000000023a RCX: 000000000008e170 [ 582.079076][T14417] RDX: 000000000068e5a0 RSI: 00007ffc3d8fabd0 RDI: 0000000000000001 [ 582.079087][T14417] RBP: 00007ffc3d8fab7c R08: 0000000001902675 R09: 7fffffffffffffff [ 582.079100][T14417] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 582.079116][T14417] R13: 00000000000927c0 R14: 000000000008e172 R15: 00007ffc3d8fabd0 [ 582.079139][T14417] [ 582.079147][T14417] memory: usage 306976kB, limit 307200kB, failcnt 9174 [ 582.112305][T17732] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 582.114608][T14417] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 582.118742][T17732] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 582.123148][T14417] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 582.123179][T14417] Memory cgroup stats for /syz1: [ 582.355879][T14417] cache 0 [ 582.363902][T14417] rss 16384 [ 582.367019][T14417] shmem 0 [ 582.369943][T14417] mapped_file 0 [ 582.373449][T14417] dirty 0 [ 582.376425][T14417] writeback 0 [ 582.379788][T14417] workingset_refault_anon 94 [ 582.384477][T14417] workingset_refault_file 550 [ 582.389146][T14417] swap 163840 [ 582.392456][T14417] swapcached 24576 [ 582.396171][T14417] pgpgin 707797 [ 582.399623][T14417] pgpgout 707788 [ 582.403223][T14417] pgfault 1025267 [ 582.406857][T14417] pgmajfault 68 [ 582.410351][T14417] inactive_anon 0 [ 582.414040][T14417] active_anon 32768 [ 582.414517][T17747] loop0: detected capacity change from 0 to 128 [ 582.417838][T14417] inactive_file 0 [ 582.427723][T14417] active_file 4096 [ 582.431480][T14417] unevictable 0 [ 582.434954][T14417] hierarchical_memory_limit 314572800 [ 582.440322][T14417] hierarchical_memsw_limit 9223372036854771712 [ 582.446497][T14417] total_cache 0 [ 582.449962][T14417] total_rss 16384 [ 582.453617][T14417] total_shmem 0 [ 582.457148][T14417] total_mapped_file 0 [ 582.461148][T14417] total_dirty 0 [ 582.464646][T14417] total_writeback 0 [ 582.468523][T14417] total_workingset_refault_anon 94 [ 582.473648][T14417] total_workingset_refault_file 550 [ 582.478839][T14417] total_swap 163840 [ 582.482740][T14417] total_swapcached 24576 [ 582.486976][T14417] total_pgpgin 707797 [ 582.491092][T14417] total_pgpgout 707788 [ 582.495239][T14417] total_pgfault 1025267 [ 582.499471][T14417] total_pgmajfault 68 [ 582.503556][T14417] total_inactive_anon 0 [ 582.507716][T14417] total_active_anon 32768 [ 582.512058][T14417] total_inactive_file 0 [ 582.516214][T14417] total_active_file 4096 [ 582.520460][T14417] total_unevictable 0 [ 582.524435][T14417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4293,pid=17740,uid=0 [ 582.539140][T14417] Memory cgroup out of memory: Killed process 17740 (syz.1.4293) total-vm:95884kB, anon-rss:1264kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 582.566322][T17751] loop2: detected capacity change from 0 to 512 [ 582.665752][T17751] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 582.736622][T17732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4290'. [ 582.825908][T17761] loop4: detected capacity change from 0 to 512 [ 583.731044][T17772] EXT4-fs: Ignoring removed bh option [ 584.024351][T17772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.081958][T17761] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 584.506648][T17755] lo speed is unknown, defaulting to 1000 [ 584.589396][T17787] set_capacity_and_notify: 1 callbacks suppressed [ 584.595855][T17787] loop1: detected capacity change from 0 to 512 [ 584.687247][T17787] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 584.702276][T17776] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 584.736199][T17776] lo speed is unknown, defaulting to 1000 [ 584.811185][T17779] loop3: detected capacity change from 0 to 512 [ 584.844943][T12175] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 584.876668][T17779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.959190][T17772] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 585.032794][T17772] EXT4-fs (loop0): Remounting filesystem read-only [ 585.049737][T17779] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 585.071238][T17772] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 585.091698][T17779] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4302: corrupted inode contents [ 585.106746][T17798] loop2: detected capacity change from 0 to 512 [ 585.134365][T17798] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 585.164949][T17779] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.4302: mark_inode_dirty error [ 585.188133][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.210844][T17779] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4302: corrupted inode contents [ 585.243048][T17779] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4302: mark_inode_dirty error [ 585.325291][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.491472][T17808] loop0: detected capacity change from 0 to 512 [ 585.536596][T17808] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 585.745544][T14417] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 585.826673][T17813] loop3: detected capacity change from 0 to 512 [ 585.841799][T17816] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4311'. [ 585.851829][T17813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.864439][T17813] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 585.879704][T17813] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4308: corrupted inode contents [ 585.891798][T17813] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.4308: mark_inode_dirty error [ 585.903280][T17813] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.4308: corrupted inode contents [ 585.915307][T17813] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.4308: mark_inode_dirty error [ 586.446033][T17831] loop4: detected capacity change from 0 to 512 [ 586.469264][T17831] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 586.702282][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.050314][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 587.050331][ T29] audit: type=1326 audit(1765956984.660:33726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.1.4320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd91c7f749 code=0x0 [ 587.131210][T17849] bond0 (unregistering): Released all slaves [ 587.168460][T17852] loop0: detected capacity change from 0 to 512 [ 587.204046][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4321'. [ 587.241859][T17852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.342531][T17852] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.353970][T17847] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4318: corrupted inode contents [ 587.388384][T17836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4317'. [ 587.418573][T17847] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.4318: mark_inode_dirty error [ 587.432129][T17847] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4318: corrupted inode contents [ 587.435606][ T29] audit: type=1400 audit(1765956985.050:33727): avc: denied { create } for pid=17861 comm="syz.2.4322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 587.446570][T17847] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4318: mark_inode_dirty error [ 587.479407][T17862] lo speed is unknown, defaulting to 1000 [ 587.521878][T17862] bond_slave_1: entered allmulticast mode [ 587.521880][ T29] audit: type=1400 audit(1765956985.140:33728): avc: denied { ioctl } for pid=17861 comm="syz.2.4322" path="socket:[51323]" dev="sockfs" ino=51323 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 587.557946][ T29] audit: type=1400 audit(1765956985.180:33729): avc: denied { getopt } for pid=17861 comm="syz.2.4322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 587.648176][T17868] loop2: detected capacity change from 0 to 512 [ 587.673576][T17868] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 587.721697][T17870] loop3: detected capacity change from 0 to 512 [ 587.733375][T17870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.746003][T17870] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.770942][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.780253][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.910129][T17882] loop4: detected capacity change from 0 to 512 [ 587.941714][T17881] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 587.965695][T17882] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 588.192942][T17888] lo speed is unknown, defaulting to 1000 [ 588.515096][T17899] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 588.523349][T17899] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 588.762076][T17903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4333'. [ 588.880929][T17899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4332'. [ 589.501884][T17917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.514453][T17917] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.534977][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.545391][T17918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.564692][T17918] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.679891][T17915] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4336: corrupted inode contents [ 589.719663][T17915] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.4336: mark_inode_dirty error [ 589.750308][T17915] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4336: corrupted inode contents [ 589.799469][T17915] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.4336: mark_inode_dirty error [ 590.005638][T17928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4338'. [ 590.042015][T17937] set_capacity_and_notify: 4 callbacks suppressed [ 590.042037][T17937] loop0: detected capacity change from 0 to 512 [ 590.077653][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.117574][ T29] audit: type=1326 audit(1765956987.710:33730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17938 comm="syz.3.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 590.141337][ T29] audit: type=1326 audit(1765956987.710:33731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17938 comm="syz.3.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 590.165142][ T29] audit: type=1326 audit(1765956987.720:33732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17938 comm="syz.3.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f95c1df90 code=0x7ffc0000 [ 590.188824][ T29] audit: type=1326 audit(1765956987.720:33733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17938 comm="syz.3.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f95c1df90 code=0x7ffc0000 [ 590.212478][ T29] audit: type=1326 audit(1765956987.720:33734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17938 comm="syz.3.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 590.236189][ T29] audit: type=1326 audit(1765956987.720:33735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17938 comm="syz.3.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f95c1f749 code=0x7ffc0000 [ 590.285559][T17937] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 590.323515][T17943] loop2: detected capacity change from 0 to 512 [ 590.334529][T17943] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 590.493356][T17939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.502372][T17939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.652677][T17956] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 590.661046][T17956] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 590.771348][T17958] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.4346'. [ 590.906376][T17961] loop0: detected capacity change from 0 to 128 [ 590.957175][T17963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4350'. [ 591.729717][T17956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4348'. [ 591.932057][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 592.048572][T17993] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 592.061805][T17992] loop0: detected capacity change from 0 to 512 [ 592.126161][T17992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.155537][T17992] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 592.168313][T18000] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.4361'. [ 592.221757][T17992] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4359: corrupted inode contents [ 592.251537][T17992] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.4359: mark_inode_dirty error [ 592.313832][T17992] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4359: corrupted inode contents [ 592.346165][T17992] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4359: mark_inode_dirty error [ 592.470538][T18008] loop3: detected capacity change from 0 to 512 [ 592.477735][T18008] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 592.502626][T18009] loop2: detected capacity change from 0 to 512 [ 592.519810][T18009] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 592.570681][T18011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4365'. [ 592.669626][T18014] loop1: detected capacity change from 0 to 512 [ 592.676846][T18014] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 592.730255][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.958794][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 592.958809][ T29] audit: type=1326 audit(1765956990.570:33839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.030346][ T29] audit: type=1326 audit(1765956990.610:33840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.054146][ T29] audit: type=1326 audit(1765956990.610:33841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.077806][ T29] audit: type=1326 audit(1765956990.610:33842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.101430][ T29] audit: type=1326 audit(1765956990.610:33843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.125346][ T29] audit: type=1326 audit(1765956990.610:33844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.148999][ T29] audit: type=1326 audit(1765956990.610:33845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.172779][ T29] audit: type=1326 audit(1765956990.610:33846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.196498][ T29] audit: type=1326 audit(1765956990.610:33847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.220035][ T29] audit: type=1326 audit(1765956990.610:33848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18021 comm="syz.4.4369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 593.328163][T18027] loop4: detected capacity change from 0 to 512 [ 593.397385][T18027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.410010][T18027] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 594.140800][T12175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.625249][T18043] loop2: detected capacity change from 0 to 512 [ 594.633824][T18042] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.4374'. [ 594.762835][T18049] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 594.771085][T18049] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 594.841144][T18043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.904204][T18043] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.009325][T18058] loop4: detected capacity change from 0 to 128 [ 595.037897][T18057] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.050058][T18059] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 595.061244][T18038] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4373: corrupted inode contents [ 595.083912][T18038] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.4373: mark_inode_dirty error [ 595.095685][T18038] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4373: corrupted inode contents [ 595.112101][T18038] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.4373: mark_inode_dirty error [ 595.144614][T18057] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.156757][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.254344][T18064] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 595.262585][T18064] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 595.283892][T18066] set_capacity_and_notify: 1 callbacks suppressed [ 595.283920][T18066] loop3: detected capacity change from 0 to 512 [ 595.316579][T18049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4375'. [ 595.343676][T18057] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.360929][T18066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 595.408752][T18064] loop2: detected capacity change from 0 to 128 [ 595.432125][T18066] EXT4-fs (loop3): too many log groups per flexible block group [ 595.439924][T18066] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 595.451007][T18073] loop0: detected capacity change from 0 to 128 [ 595.466565][T18073] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 595.481655][T18066] EXT4-fs (loop3): mount failed [ 595.485091][T18073] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.497992][T18057] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.577646][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 595.615442][T12648] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.617420][T18064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4379'. [ 595.631997][ T38] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.717279][T18061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.768769][T18087] loop4: detected capacity change from 0 to 512 [ 595.791639][T18086] loop0: detected capacity change from 0 to 512 [ 595.873735][T18086] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 595.923335][T18087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.936082][T18087] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.962416][T18061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.050146][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.080598][T18093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4386'. [ 596.209320][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.230492][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.375690][T18100] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 596.578474][T12175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.597903][T18104] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 596.606151][T18104] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 597.107005][T18110] loop4: detected capacity change from 0 to 512 [ 597.126278][T18110] EXT4-fs: Ignoring removed nobh option [ 597.422287][T18110] EXT4-fs: old and new quota format mixing [ 597.491833][T18106] loop0: detected capacity change from 0 to 128 [ 597.632903][T18113] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.4392'. [ 597.729734][T18104] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4390'. [ 597.832889][T18122] FAULT_INJECTION: forcing a failure. [ 597.832889][T18122] name failslab, interval 1, probability 0, space 0, times 0 [ 597.845544][T18122] CPU: 0 UID: 0 PID: 18122 Comm: syz.2.4395 Not tainted syzkaller #0 PREEMPT(voluntary) [ 597.845570][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 597.845586][T18122] Call Trace: [ 597.845594][T18122] [ 597.845603][T18122] __dump_stack+0x1d/0x30 [ 597.845652][T18122] dump_stack_lvl+0xe8/0x140 [ 597.845680][T18122] dump_stack+0x15/0x1b [ 597.845705][T18122] should_fail_ex+0x265/0x280 [ 597.845733][T18122] should_failslab+0x8c/0xb0 [ 597.845754][T18122] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 597.845833][T18122] ? __alloc_skb+0x324/0x4d0 [ 597.845863][T18122] __alloc_skb+0x324/0x4d0 [ 597.845891][T18122] ? __alloc_skb+0x24d/0x4d0 [ 597.845922][T18122] audit_log_start+0x3a0/0x720 [ 597.845997][T18122] ? kstrtouint+0x76/0xc0 [ 597.846020][T18122] audit_seccomp+0x48/0x100 [ 597.846052][T18122] ? __seccomp_filter+0x832/0x1260 [ 597.846115][T18122] __seccomp_filter+0x843/0x1260 [ 597.846141][T18122] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 597.846192][T18122] ? vfs_write+0x7e8/0x960 [ 597.846210][T18122] ? __cond_resched+0x4e/0x90 [ 597.846235][T18122] __secure_computing+0x82/0x150 [ 597.846264][T18122] syscall_trace_enter+0xcf/0x1e0 [ 597.846287][T18122] do_syscall_64+0xb2/0x2c0 [ 597.846449][T18122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.846471][T18122] RIP: 0033:0x7f5baf7ff749 [ 597.846546][T18122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.846563][T18122] RSP: 002b:00007f5bae25f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 597.846624][T18122] RAX: ffffffffffffffda RBX: 00007f5bafa55fa0 RCX: 00007f5baf7ff749 [ 597.846664][T18122] RDX: 0000200000000040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 597.846680][T18122] RBP: 00007f5bae25f090 R08: 0000000000000000 R09: 0000000000000000 [ 597.846696][T18122] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 597.846710][T18122] R13: 00007f5bafa56038 R14: 00007f5bafa55fa0 R15: 00007ffd63403d68 [ 597.846754][T18122] [ 597.849728][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4394'. [ 598.065803][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 598.065818][ T29] audit: type=1326 audit(1765956995.680:33902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18120 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5baf7fe15c code=0x7ffc0000 [ 598.095434][ T29] audit: type=1326 audit(1765956995.680:33903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18120 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5baf7fe1ff code=0x7ffc0000 [ 598.119042][ T29] audit: type=1326 audit(1765956995.680:33904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18120 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5baf7fe3aa code=0x7ffc0000 [ 598.142437][ T29] audit: type=1326 audit(1765956995.680:33905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18120 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 598.165985][ T29] audit: type=1326 audit(1765956995.680:33906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18120 comm="syz.2.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 598.216786][T18123] bond0 (unregistering): Released all slaves [ 598.269379][ T29] audit: type=1326 audit(1765956995.810:33907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.4.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1d3b7df90 code=0x7ffc0000 [ 598.292998][ T29] audit: type=1326 audit(1765956995.810:33908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.4.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1d3b7f34b code=0x7ffc0000 [ 598.316509][ T29] audit: type=1326 audit(1765956995.810:33909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.4.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc1d3b7e3aa code=0x7ffc0000 [ 598.339993][ T29] audit: type=1326 audit(1765956995.810:33910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.4.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 598.363611][ T29] audit: type=1326 audit(1765956995.810:33911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18109 comm="syz.4.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1d3b7f749 code=0x7ffc0000 [ 598.401410][T18131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4398'. [ 598.420525][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4397'. [ 598.487704][T18134] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 598.496106][T18134] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 598.581581][T18140] loop1: detected capacity change from 0 to 512 [ 598.616529][T18140] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 598.713498][T18145] loop4: detected capacity change from 0 to 512 [ 598.753772][T18145] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 598.842840][T18147] loop0: detected capacity change from 0 to 128 [ 599.233993][T18134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4399'. [ 599.452397][T18159] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.4407'. [ 599.564389][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4408'. [ 599.747381][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4409'. [ 599.761096][T18167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4409'. [ 599.849304][T18179] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 600.018852][T18183] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 600.027110][T18183] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 600.435247][T18184] set_capacity_and_notify: 1 callbacks suppressed [ 600.435267][T18184] loop4: detected capacity change from 0 to 128 [ 600.481067][T18186] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 600.520558][T18188] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 600.528813][T18188] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 600.950495][T18188] loop2: detected capacity change from 0 to 128 [ 601.002659][T18202] loop0: detected capacity change from 0 to 128 [ 601.049519][T18202] FAT-fs (loop0): bogus logical sector size 0 [ 601.055664][T18202] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 601.064857][T18202] FAT-fs (loop0): Can't find a valid FAT filesystem [ 601.272489][T18195] loop3: detected capacity change from 0 to 128 [ 601.387546][T18216] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 601.531786][T18220] siw: device registration error -23 [ 601.551523][T18224] loop4: detected capacity change from 0 to 1024 [ 601.560794][T18224] EXT4-fs: Ignoring removed bh option [ 601.573155][T18224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.591642][T18202] FAULT_INJECTION: forcing a failure. [ 601.591642][T18202] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 601.605018][T18202] CPU: 1 UID: 0 PID: 18202 Comm: syz.0.4420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 601.605081][T18202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.605096][T18202] Call Trace: [ 601.605105][T18202] [ 601.605114][T18202] __dump_stack+0x1d/0x30 [ 601.605188][T18202] dump_stack_lvl+0xe8/0x140 [ 601.605252][T18202] dump_stack+0x15/0x1b [ 601.605286][T18202] should_fail_ex+0x265/0x280 [ 601.605308][T18202] should_fail_alloc_page+0xf2/0x100 [ 601.605335][T18202] __alloc_frozen_pages_noprof+0x109/0x360 [ 601.605391][T18202] alloc_pages_mpol+0xb3/0x260 [ 601.605421][T18202] folio_alloc_mpol_noprof+0x39/0x80 [ 601.605450][T18202] shmem_get_folio_gfp+0x3cf/0xd50 [ 601.605482][T18202] shmem_write_begin+0xfc/0x1f0 [ 601.605580][T18202] generic_perform_write+0x184/0x490 [ 601.605622][T18202] shmem_file_write_iter+0xc5/0xf0 [ 601.605656][T18202] iter_file_splice_write+0x66b/0xa20 [ 601.605766][T18202] ? __pfx_iter_file_splice_write+0x10/0x10 [ 601.605786][T18202] do_splice+0x972/0x10b0 [ 601.605812][T18202] ? __rcu_read_unlock+0x4f/0x70 [ 601.605832][T18202] ? __fget_files+0x184/0x1c0 [ 601.605868][T18202] __se_sys_splice+0x26c/0x3a0 [ 601.605898][T18202] __x64_sys_splice+0x78/0x90 [ 601.605923][T18202] x64_sys_call+0x2e82/0x3000 [ 601.605946][T18202] do_syscall_64+0xd8/0x2c0 [ 601.606108][T18202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.606131][T18202] RIP: 0033:0x7f4696e7f749 [ 601.606150][T18202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.606172][T18202] RSP: 002b:00007f46958e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 601.606195][T18202] RAX: ffffffffffffffda RBX: 00007f46970d5fa0 RCX: 00007f4696e7f749 [ 601.606212][T18202] RDX: 000000000000000c RSI: 0000000000000000 RDI: 000000000000000a [ 601.606299][T18202] RBP: 00007f46958e7090 R08: 00000000088000cc R09: 0000000000000000 [ 601.606311][T18202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.606324][T18202] R13: 00007f46970d6038 R14: 00007f46970d5fa0 R15: 00007ffdb3094be8 [ 601.606342][T18202] [ 601.855491][T18232] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 601.863732][T12175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.121337][T18247] loop1: detected capacity change from 0 to 512 [ 602.555979][T18247] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 602.570669][T18247] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 602.603382][T18247] lo speed is unknown, defaulting to 1000 [ 603.974279][T18259] loop2: detected capacity change from 0 to 512 [ 604.910951][T18259] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 605.520101][T14417] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 605.550522][T18259] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 605.918422][T18271] __nla_validate_parse: 9 callbacks suppressed [ 605.918504][T18271] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4441'. [ 605.940307][T18259] lo speed is unknown, defaulting to 1000 [ 606.963653][T18277] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 606.971902][T18277] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 607.305478][T12816] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 607.333663][T18286] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 607.342011][T18286] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 607.363406][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 607.363449][ T29] audit: type=1326 audit(1765957004.970:33923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 607.393251][ T29] audit: type=1326 audit(1765957004.970:33924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 607.416895][ T29] audit: type=1326 audit(1765957004.970:33925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5baf7fdf90 code=0x7ffc0000 [ 607.440537][ T29] audit: type=1326 audit(1765957004.970:33926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5baf7fdf90 code=0x7ffc0000 [ 607.464210][ T29] audit: type=1326 audit(1765957004.970:33927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 607.487803][ T29] audit: type=1326 audit(1765957004.970:33928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 607.511372][ T29] audit: type=1326 audit(1765957004.970:33929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 607.535144][ T29] audit: type=1326 audit(1765957004.970:33930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 607.558890][ T29] audit: type=1326 audit(1765957004.970:33931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 607.582493][ T29] audit: type=1326 audit(1765957004.970:33932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.2.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baf7ff749 code=0x7ffc0000 [ 607.611308][T18290] loop4: detected capacity change from 0 to 128 [ 607.617747][T18285] loop0: detected capacity change from 0 to 512 [ 607.618458][T18289] loop3: detected capacity change from 0 to 128 [ 607.663641][T18285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.696820][T18285] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 607.711892][T18285] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4446: corrupted inode contents [ 607.740137][T18269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4442'. [ 607.771593][T18285] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.4446: mark_inode_dirty error [ 607.790881][T18294] loop1: detected capacity change from 0 to 128 [ 607.801039][T18285] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4446: corrupted inode contents [ 607.818340][T18286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4447'. [ 607.829295][T18285] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4446: mark_inode_dirty error [ 607.880838][T18277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4443'. [ 607.933810][T18301] loop1: detected capacity change from 0 to 1024 [ 607.941123][T18301] EXT4-fs: Ignoring removed bh option [ 607.986853][T18301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.010959][T18305] loop3: detected capacity change from 0 to 512 [ 608.018448][T18305] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 608.073006][T18306] loop4: detected capacity change from 0 to 512 [ 608.080098][T18306] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 608.108601][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.260385][T18310] loop2: detected capacity change from 0 to 512 [ 608.282107][T18310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.294684][T18310] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 608.892033][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.968044][T18316] netlink: 'syz.0.4453': attribute type 4 has an invalid length. [ 608.975867][T18316] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4453'. [ 609.232487][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4454'. [ 609.406899][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4458'. [ 609.449145][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.733863][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4459'. [ 609.753479][T18338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4459'. [ 609.762587][T18338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4459'. [ 610.845940][T18342] loop2: detected capacity change from 0 to 512 [ 611.611017][T18352] __nla_validate_parse: 1 callbacks suppressed [ 611.611035][T18352] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4463'. [ 611.900852][T18352] 0ªX¹¦À: renamed from caif0 [ 612.065714][T18342] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 612.104710][T18341] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 612.119233][T18352] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 612.155497][T18341] lo speed is unknown, defaulting to 1000 [ 612.182560][T18357] lo speed is unknown, defaulting to 1000 [ 612.317891][T18363] loop4: detected capacity change from 0 to 512 [ 612.324771][T18368] random: crng reseeded on system resumption [ 612.376458][T18363] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 612.416019][T18370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4468'. [ 612.551877][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 612.551890][ T29] audit: type=1326 audit(1765957010.170:33971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18376 comm="syz.1.4471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd91c7f749 code=0x0 [ 612.621430][T18380] bond0 (unregistering): Released all slaves [ 612.706302][T12816] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 612.773394][T18386] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 612.832027][T18390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4476'. [ 612.972985][T18397] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 612.981230][T18397] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 613.037521][T18399] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 613.079002][T18402] loop0: detected capacity change from 0 to 512 [ 613.104467][T18402] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 613.185270][T18410] random: crng reseeded on system resumption [ 613.193066][T18408] siw: device registration error -23 [ 613.209905][T18397] loop2: detected capacity change from 0 to 128 [ 613.254631][T18412] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 613.299761][T18415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4487'. [ 613.375922][T18397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4479'. [ 613.707527][T18440] lo speed is unknown, defaulting to 1000 [ 613.739499][T18440] random: crng reseeded on system resumption [ 613.928448][T18446] loop2: detected capacity change from 0 to 512 [ 613.941511][T18446] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 614.154859][T18450] loop1: detected capacity change from 0 to 512 [ 614.181510][T18450] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 614.200277][T18450] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 614.245597][T18450] lo speed is unknown, defaulting to 1000 [ 614.864824][T18458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4499'. [ 614.940844][ T29] audit: type=1326 audit(1765957012.560:33972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18462 comm="syz.4.4501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1d3b7f749 code=0x0 [ 615.137345][T18473] loop3: detected capacity change from 0 to 512 [ 615.208279][T18473] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 8 [ 615.680387][T18485] loop0: detected capacity change from 0 to 512 [ 615.716267][T18485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.757778][T18490] siw: device registration error -23 [ 615.764990][T18485] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 615.791511][T18484] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4507: corrupted inode contents [ 615.983760][T18484] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.4507: mark_inode_dirty error [ 615.995470][T18484] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4507: corrupted inode contents [ 616.010758][T18484] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4507: mark_inode_dirty error [ 616.031717][T14417] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 616.044644][T18499] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 616.052867][T18499] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 616.159403][T18502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4512'. [ 616.234116][T18505] loop2: detected capacity change from 0 to 128 [ 616.333334][T18499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4511'. [ 616.356990][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.383242][T18508] loop1: detected capacity change from 0 to 512 [ 616.407634][T18512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4515'. [ 616.430472][T18508] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 616.491238][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4518'. [ 616.548942][ T29] audit: type=1326 audit(1765957014.160:33973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.0.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 616.559542][T18528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.574042][ T29] audit: type=1326 audit(1765957014.160:33974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.0.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4696e7df90 code=0x7ffc0000 [ 616.604814][ T29] audit: type=1326 audit(1765957014.160:33975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.0.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4696e7df90 code=0x7ffc0000 [ 616.628448][ T29] audit: type=1326 audit(1765957014.160:33976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.0.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 616.652073][ T29] audit: type=1326 audit(1765957014.160:33977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.0.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 616.674967][T18528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.675910][ T29] audit: type=1326 audit(1765957014.160:33978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.0.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 616.707142][ T29] audit: type=1326 audit(1765957014.160:33979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.0.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 616.730763][ T29] audit: type=1326 audit(1765957014.160:33980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18525 comm="syz.0.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 616.960917][T18537] loop4: detected capacity change from 0 to 512 [ 616.970989][T18537] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 8 [ 617.084674][T18539] loop1: detected capacity change from 0 to 1024 [ 617.093913][T18539] EXT4-fs: Ignoring removed bh option [ 617.125197][T18539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.153307][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.573295][T18548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4528'. [ 617.645704][T18550] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 617.660042][T18550] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 617.687191][T18550] lo speed is unknown, defaulting to 1000 [ 618.113948][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4529'. [ 618.189311][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4529'. [ 618.198352][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4529'. [ 618.555571][T18568] set_capacity_and_notify: 1 callbacks suppressed [ 618.555593][T18568] loop3: detected capacity change from 0 to 512 [ 618.629974][T18570] loop4: detected capacity change from 0 to 512 [ 618.708149][T18570] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 618.725455][T18570] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 618.763800][T18570] lo speed is unknown, defaulting to 1000 [ 619.030988][T18568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.043777][T18568] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 619.522196][T18571] loop1: detected capacity change from 0 to 512 [ 619.540953][T18571] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 619.761984][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.083092][T18582] FAULT_INJECTION: forcing a failure. [ 620.083092][T18582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.096238][T18582] CPU: 0 UID: 0 PID: 18582 Comm: syz.3.4535 Not tainted syzkaller #0 PREEMPT(voluntary) [ 620.096296][T18582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 620.096311][T18582] Call Trace: [ 620.096319][T18582] [ 620.096326][T18582] __dump_stack+0x1d/0x30 [ 620.096350][T18582] dump_stack_lvl+0xe8/0x140 [ 620.096420][T18582] dump_stack+0x15/0x1b [ 620.096438][T18582] should_fail_ex+0x265/0x280 [ 620.096466][T18582] should_fail+0xb/0x20 [ 620.096495][T18582] should_fail_usercopy+0x1a/0x20 [ 620.096615][T18582] _copy_from_user+0x1c/0xb0 [ 620.096651][T18582] __copy_msghdr+0x244/0x300 [ 620.096747][T18582] ___sys_sendmsg+0x109/0x1d0 [ 620.096786][T18582] __x64_sys_sendmsg+0xd4/0x160 [ 620.096859][T18582] x64_sys_call+0x17ba/0x3000 [ 620.096938][T18582] do_syscall_64+0xd8/0x2c0 [ 620.097056][T18582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.097091][T18582] RIP: 0033:0x7f3f95c1f749 [ 620.097109][T18582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.097133][T18582] RSP: 002b:00007f3f94687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.097284][T18582] RAX: ffffffffffffffda RBX: 00007f3f95e75fa0 RCX: 00007f3f95c1f749 [ 620.097300][T18582] RDX: 0000000030006041 RSI: 0000200000000000 RDI: 0000000000000004 [ 620.097316][T18582] RBP: 00007f3f94687090 R08: 0000000000000000 R09: 0000000000000000 [ 620.097328][T18582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.097339][T18582] R13: 00007f3f95e76038 R14: 00007f3f95e75fa0 R15: 00007ffd8993af48 [ 620.097357][T18582] [ 620.541264][T12175] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 620.591600][T18591] loop1: detected capacity change from 0 to 512 [ 620.600011][T18591] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 620.785851][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4539'. [ 621.060150][T18602] loop2: detected capacity change from 0 to 512 [ 621.072593][T18604] loop4: detected capacity change from 0 to 512 [ 621.080920][T18602] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 621.181887][T18604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.194479][T18604] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 621.205983][T18604] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4538: corrupted inode contents [ 621.218056][T18604] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.4538: mark_inode_dirty error [ 621.229545][T18604] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.4538: corrupted inode contents [ 621.243509][T18604] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.4538: mark_inode_dirty error [ 621.275484][T18608] random: crng reseeded on system resumption [ 622.236953][T18623] loop1: detected capacity change from 0 to 512 [ 622.244547][T18623] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 622.259185][T18624] loop3: detected capacity change from 0 to 512 [ 622.277577][T18624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.290183][T18624] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 622.731348][T12175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.753343][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.908783][T18633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4550'. [ 622.950962][T12648] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 622.990042][T18643] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 622.998281][T18643] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 623.207733][T18655] loop1: detected capacity change from 0 to 128 [ 623.270480][T18648] loop2: detected capacity change from 0 to 512 [ 623.283306][T18648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.296103][T18648] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 623.310675][T18648] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4555: corrupted inode contents [ 623.312887][T18643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4552'. [ 623.359981][T18648] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.4555: mark_inode_dirty error [ 623.424357][T18648] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.4555: corrupted inode contents [ 623.475206][T18648] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.4555: mark_inode_dirty error [ 623.563049][T18665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.575718][T18665] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 623.588158][T18665] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4559: corrupted inode contents [ 623.600453][T18665] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.4559: mark_inode_dirty error [ 623.612130][T18665] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.4559: corrupted inode contents [ 623.624099][T18665] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4559: mark_inode_dirty error [ 623.910341][T18672] set_capacity_and_notify: 1 callbacks suppressed [ 623.910361][T18672] loop3: detected capacity change from 0 to 512 [ 624.129361][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 624.129380][ T29] audit: type=1326 audit(1765957021.740:34023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 624.248096][ T29] audit: type=1326 audit(1765957021.780:34024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 624.271732][ T29] audit: type=1326 audit(1765957021.780:34025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4696e7df90 code=0x7ffc0000 [ 624.295830][ T29] audit: type=1326 audit(1765957021.780:34026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4696e7df90 code=0x7ffc0000 [ 624.319423][ T29] audit: type=1326 audit(1765957021.780:34027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 624.343089][ T29] audit: type=1326 audit(1765957021.780:34028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 624.366681][ T29] audit: type=1326 audit(1765957021.780:34029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 624.390287][ T29] audit: type=1326 audit(1765957021.780:34030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 624.413892][ T29] audit: type=1326 audit(1765957021.780:34031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 624.437523][ T29] audit: type=1326 audit(1765957021.780:34032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18675 comm="syz.0.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4696e7f749 code=0x7ffc0000 [ 624.473594][T12816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.474409][T18676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.483878][T14417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.503186][T18672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.512766][T18676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.515774][T18672] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.574269][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4564'. [ 624.664434][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.685734][T18700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4570'. [ 624.717901][T18704] loop2: detected capacity change from 0 to 512 [ 624.729932][T18704] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 8 [ 624.746439][T18706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4572'. [ 624.797862][T18709] random: crng reseeded on system resumption [ 624.822161][T18712] loop1: detected capacity change from 0 to 512 [ 624.831988][T18712] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 8 [ 625.023707][T18719] loop3: detected capacity change from 0 to 128 [ 625.122854][T18715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4575'. [ 625.203839][T18726] loop0: detected capacity change from 0 to 512 [ 625.233464][T18726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.260612][T18726] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 625.281694][T18722] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4576: corrupted inode contents [ 625.321213][T18722] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.4576: mark_inode_dirty error [ 625.359957][T18730] loop3: detected capacity change from 0 to 128 [ 625.369053][T18722] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.4576: corrupted inode contents [ 625.451647][T18722] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.4576: mark_inode_dirty error [ 625.498721][T18736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4580'. [ 625.601384][T18724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4577'. [ 626.180550][T18741] ================================================================== [ 626.188668][T18741] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 626.196002][T18741] [ 626.198337][T18741] write to 0xffff888104f57540 of 4 bytes by task 18740 on cpu 1: [ 626.206063][T18741] touch_atime+0x1e8/0x340 [ 626.210509][T18741] shmem_file_read_iter+0x477/0x540 [ 626.215732][T18741] copy_splice_read+0x442/0x660 [ 626.220596][T18741] splice_direct_to_actor+0x290/0x680 [ 626.225989][T18741] do_splice_direct+0xda/0x150 [ 626.230762][T18741] do_sendfile+0x380/0x650 [ 626.235197][T18741] __x64_sys_sendfile64+0x105/0x150 [ 626.240413][T18741] x64_sys_call+0x2db1/0x3000 [ 626.245114][T18741] do_syscall_64+0xd8/0x2c0 [ 626.249655][T18741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.255574][T18741] [ 626.257907][T18741] read to 0xffff888104f57540 of 4 bytes by task 18741 on cpu 0: [ 626.265563][T18741] atime_needs_update+0x25f/0x3e0 [ 626.270645][T18741] touch_atime+0x4a/0x340 [ 626.275002][T18741] shmem_file_read_iter+0x477/0x540 [ 626.280226][T18741] copy_splice_read+0x442/0x660 [ 626.285108][T18741] splice_direct_to_actor+0x290/0x680 [ 626.290493][T18741] do_splice_direct+0xda/0x150 [ 626.295281][T18741] do_sendfile+0x380/0x650 [ 626.299710][T18741] __x64_sys_sendfile64+0x105/0x150 [ 626.304925][T18741] x64_sys_call+0x2db1/0x3000 [ 626.309615][T18741] do_syscall_64+0xd8/0x2c0 [ 626.314157][T18741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.320066][T18741] [ 626.322389][T18741] value changed: 0x2f21a31b -> 0x2fba399b [ 626.328103][T18741] [ 626.330428][T18741] Reported by Kernel Concurrency Sanitizer on: [ 626.336586][T18741] CPU: 0 UID: 0 PID: 18741 Comm: syz.1.4581 Not tainted syzkaller #0 PREEMPT(voluntary) [ 626.346418][T18741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.356563][T18741] ================================================================== [ 626.394475][T12648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.