last executing test programs: 2.906249113s ago: executing program 2 (id=6840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000) 2.767610124s ago: executing program 2 (id=6843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = dup3(r2, r3, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 2.654683943s ago: executing program 2 (id=6848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a0000020000009604000000000000"], 0x10}}, 0x0) close(r2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r4, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r6 = semget$private(0x0, 0x4000000009, 0x0) semop(r6, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001dc0)={{r2}, "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"}) semop(r6, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r8}, 0x18) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) semtimedop(r6, &(0x7f0000000000)=[{0x4, 0x2}, {0x1, 0xfb7b, 0x1000}], 0x2, &(0x7f0000000040)) syz_open_procfs$pagemap(r5, &(0x7f0000000200)) semtimedop(r6, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x0, 0x9, 0x1000}, {0x4, 0xc}, {0x0, 0xffff, 0x800}, {0x3, 0xe, 0x1800}], 0x5, &(0x7f0000000040)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.583316751s ago: executing program 2 (id=6861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550d, 0x0) 1.581060711s ago: executing program 4 (id=6862): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x1000, 0x1, 0x3c3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x10, 0x2007, @fd_index=0x7, 0x4, &(0x7f0000001680)=[{0x0}, {0x0}], 0x2, 0x24}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) socketpair(0x1, 0x1, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff020000000000000000000000000001320000"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001cc0)='kfree\x00', r7, 0x0, 0x6eb}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.541164284s ago: executing program 2 (id=6864): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) 1.195473522s ago: executing program 4 (id=6870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)={0x20, r3, 0xb31, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 1.141599177s ago: executing program 0 (id=6871): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550d, 0x0) 1.141232387s ago: executing program 4 (id=6872): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000005c0)}, {&(0x7f0000000000)="eb63e18e8f418f3e20094ff29a9379a9465fcc81fbacdedb5f624203e95702015b9552c20805b664d5498981e745db786134a3fdb80994e4", 0x38}, {&(0x7f00000001c0)="52e588a6225a6fa0863a3b822b071fb0df22db0e2d4da4e1b588d1a3ec4d4ab6218d36313ce737ce707fba5e9694ef3cc66a1559ba8b8f513164624643fedf852dbcd743002a8226b3935c5f1d88c765dfaaccc9876be421f5cec5b31d", 0x5d}], 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24000080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.10156116s ago: executing program 0 (id=6874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(0xffffffffffffffff) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) 1.044231775s ago: executing program 0 (id=6876): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1000000}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) 1.006521468s ago: executing program 4 (id=6877): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558f"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550d, 0x0) 914.112515ms ago: executing program 4 (id=6878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000) 828.422022ms ago: executing program 4 (id=6881): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) io_setup(0x8, &(0x7f0000000600)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000100)=0x1000, 0x4) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) io_destroy(r0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r2, r1, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'syzkaller1\x00', 0x9}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='net_dev_start_xmit\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c) 640.778208ms ago: executing program 1 (id=6888): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x150, 0x150, 0x260, 0xf8010000, 0x3b8, 0x238, 0x238, 0x3b8, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'virt_wifi0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX]) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='bcache_journal_write\x00', r4}, 0x18) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) creat(&(0x7f0000000080)='./file0\x00', 0xa) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) umount2(&(0x7f0000000340)='./file0\x00', 0x8) umount2(&(0x7f00000002c0)='./file0\x00', 0xf) 554.336285ms ago: executing program 1 (id=6890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)={0x20, r2, 0xb31, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 503.815759ms ago: executing program 3 (id=6892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) mkdir(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRESHEX=0x0, @ANYRESHEX], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='fsi_master_write\x00', r3, 0x0, 0xb}, 0x18) socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 503.408609ms ago: executing program 1 (id=6893): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) 472.831421ms ago: executing program 3 (id=6894): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @broadcast, 'bond0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) 430.478685ms ago: executing program 1 (id=6895): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/19, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 430.301465ms ago: executing program 3 (id=6896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000) 429.948435ms ago: executing program 1 (id=6897): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000410000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) fcntl$setlease(r2, 0x400, 0x300000000000000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 372.73822ms ago: executing program 3 (id=6898): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000db71f7768500000021000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 370.36842ms ago: executing program 2 (id=6899): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="1800000062000b0000000000fedbdf2508000080fa321a7c"], 0x18}], 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000000020000000400000005", @ANYRES16=r0], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYBLOB="ada64409a0e0e46e73113a416644385393de2ff8cd881f307ec5159c387962d9083170b5148cc9104c09ee2fd35c1d68cb40847e5c81d9604f186f3403288aa412fe90cf3a668a2cd46893e5b90c8dfefe4d09ff704829c61e479229a03d16a9c504b2e03ab9848c4478b6fa17876575ee2f92557a304f92e665f305e226c5398a281a6aad1c2116e2242c38d0a9ea78445fff04cfb40d637879a4812d9752626dcc918003c6002d1772e0827871659194542fd24b6d7dedf7fa708af974397fbeb6cb257408ddaa4efef9d750"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r9}, &(0x7f0000001c00), &(0x7f0000001c40)=r10}, 0x20) unshare(0x64000600) eventfd2(0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100fe0f00000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4], 0xb4}}, 0x4050) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) 209.628933ms ago: executing program 3 (id=6900): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x150, 0x150, 0x260, 0xf8010000, 0x3b8, 0x238, 0x238, 0x3b8, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'virt_wifi0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX]) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='bcache_journal_write\x00', r4}, 0x18) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) creat(&(0x7f0000000080)='./file0\x00', 0xa) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) umount2(&(0x7f0000000340)='./file0\x00', 0x8) umount2(&(0x7f00000002c0)='./file0\x00', 0xf) 90.881933ms ago: executing program 3 (id=6901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000ff9000/0x4000)=nil], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xb, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a3c0)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x325, 0x81, 0x5, 0x7, 0x5, 0x6, 0x599ff518, 0x5, 0x6, 0x2, 0x8, 0x400, 0xff, 0x1, 0x1, 0xff, 0xbd, 0x7, 0xffff, 0x200, 0x0, 0x7fff, 0x5, 0x0, 0xd, 0x3, 0x3, 0x6, 0x80000001, 0x3477, 0x800, 0x0, 0x8, 0x3db, 0x0, 0x1, 0x7f, 0x56, 0x40, 0x4, 0x1000, 0x5, 0x5, 0xcc5, 0x400, 0x1, 0x64f3, 0x7999, 0x401, 0xe, 0x1, 0xfffffffb, 0x428a0562, 0xd7, 0xd, 0xb1, 0xa23, 0x2768, 0x200, 0x1, 0x7fffffff, 0x1, 0x81, 0x3, 0x5, 0x8, 0x9, 0x4, 0x3, 0x5, 0xffff0001, 0x9, 0x6, 0xe9a, 0x7, 0x9, 0x5, 0x3, 0x4, 0xff, 0x8000, 0x3c, 0x1ff, 0xffff, 0x6, 0xffff8001, 0x1, 0x6, 0x1, 0x48275caf, 0x7, 0x5, 0x100, 0x3ff, 0x9, 0x9, 0xffffffff, 0x4, 0x1a, 0x101, 0x8000, 0xff, 0xef6f, 0x1, 0x7, 0xccd, 0x7, 0xc6, 0x3, 0x3, 0x401, 0x7, 0x4, 0x612, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x3, 0x4956198f, 0x401, 0x3c, 0x7, 0x6, 0x8, 0x101, 0x1, 0x3, 0x6, 0x3320, 0x5, 0x4, 0x6, 0x2, 0xa, 0x2, 0xec6e, 0x1, 0x4, 0xff, 0x1876, 0x4, 0xfe, 0x8, 0x100, 0x5, 0x6, 0x2e80, 0x6, 0x4, 0x9, 0x0, 0xffffffab, 0x3, 0x1000, 0x3ff, 0x1, 0x3, 0x2e70, 0x8, 0xf3d6, 0xb3f, 0xfffffc00, 0x7, 0x0, 0xff, 0x0, 0x8000, 0x12d00, 0x9, 0xd, 0x8, 0x7f, 0x7, 0x2, 0x4, 0x4, 0xf26, 0x3, 0x1, 0xffffffff, 0x6, 0x1, 0x7, 0x3, 0x3, 0x5, 0x3, 0x60a, 0x1000, 0x100, 0x2, 0x1, 0x0, 0x470121f0, 0x93d0, 0x9, 0x3, 0xfffffff9, 0x3, 0x8, 0xf935, 0x7, 0x8, 0x8000, 0x40, 0x4, 0x4, 0x400004, 0x80, 0x8, 0x3, 0x2, 0x5, 0x1, 0x3b05, 0x6, 0x6, 0x3, 0xfffffffd, 0x7fffffff, 0x1, 0x0, 0x38, 0x4, 0x30a6, 0x7fffffff, 0x3, 0x80, 0x3, 0x1, 0x8, 0xfffffff9, 0x6, 0x480, 0x5, 0x0, 0x80000001, 0x1, 0x0, 0x1000, 0x2, 0x1, 0x5, 0x10, 0x4, 0x10, 0x2, 0x2, 0x38000, 0x2, 0x460, 0xffff5824]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x10000000, 0xc6d, 0x101, 0x6, {0x4, 0x0, 0x2, 0x6, 0x9, 0x10001}, {0x3, 0x0, 0x703, 0x2, 0x1}, 0x0, 0x2a6, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40014}, 0x2400c800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TIOCSISO7816(r7, 0xc0285443, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) utime(&(0x7f0000000100)='./file0\x00', 0x0) request_key(0x0, &(0x7f0000000400)={'syz', 0x1}, 0x0, 0xffffffffffffffff) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r8, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) 82.393024ms ago: executing program 0 (id=6902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0xc000) 19.367828ms ago: executing program 0 (id=6903): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$bt_hci(r4, &(0x7f00000001c0)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) 18.930879ms ago: executing program 0 (id=6904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) mkdir(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRESHEX=0x0, @ANYRESHEX], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='fsi_master_write\x00', r3, 0x0, 0xb}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 1 (id=6905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) kernel console output (not intermixed with test programs): for bg 0 marked uninitialized [ 459.609360][T29838] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 459.621541][T29838] EXT4-fs (loop1): 1 orphan inode deleted [ 459.632005][T29844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6065'. [ 459.642213][T29838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 459.645051][T29840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6065'. [ 459.666877][ T3531] hid_parser_main: 38 callbacks suppressed [ 459.666896][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 459.680421][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 459.690001][T29838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.695716][T29848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6070'. [ 459.708064][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 459.715862][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 459.723735][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 459.731561][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 459.739285][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 459.739309][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 459.739354][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 459.739374][ T3531] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 459.740269][ T3531] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 459.792874][T29849] fido_id[29849]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 459.813622][T29851] 9pnet_fd: Insufficient options for proto=fd [ 459.823826][T29851] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 459.831510][T29851] SELinux: failed to load policy [ 459.841536][T29851] netlink: 'syz.1.6071': attribute type 4 has an invalid length. [ 459.849491][T29851] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6071'. [ 459.862662][T29851] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 459.987596][T29864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6078'. [ 460.873707][T29874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.882498][T29874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.994452][T29876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=29876 comm=syz.1.6079 [ 461.313524][T29874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.322023][T29874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.172488][T29873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.181034][T29873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.189295][T29865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.197754][T29865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.224823][T29873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.233402][T29873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.345745][T29881] loop2: detected capacity change from 0 to 512 [ 462.362096][T29881] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 462.379574][T29881] EXT4-fs (loop2): orphan cleanup on readonly fs [ 462.387580][T29881] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.6081: Block bitmap for bg 0 marked uninitialized [ 462.401030][T29881] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 462.410011][T29881] EXT4-fs (loop2): 1 orphan inode deleted [ 462.416995][T29881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 462.438724][T29881] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.477375][T29857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.479953][ T3531] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 462.486292][T29857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.547857][T29897] fido_id[29897]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 462.554627][T29895] bond1: entered promiscuous mode [ 462.567032][T29895] bond1: entered allmulticast mode [ 462.572868][T29895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.585635][T29895] bond1 (unregistering): Released all slaves [ 462.730012][T29911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=29911 comm=syz.4.6093 [ 462.761179][T29913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6094'. [ 462.889333][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 462.889348][ T29] audit: type=1326 audit(1755037833.012:10733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.2.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 462.919483][ T29] audit: type=1326 audit(1755037833.012:10734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.2.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 462.943094][ T29] audit: type=1326 audit(1755037833.012:10735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.2.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 462.984929][T29924] lo speed is unknown, defaulting to 1000 [ 463.065471][T29924] vlan2: entered allmulticast mode [ 463.202052][ T9442] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 463.288620][T29929] fido_id[29929]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 463.329696][ T29] audit: type=1326 audit(1755037833.432:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.2.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 463.353812][ T29] audit: type=1326 audit(1755037833.452:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29921 comm="syz.2.6097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 463.413190][T29935] bond1: entered promiscuous mode [ 463.418353][T29935] bond1: entered allmulticast mode [ 463.423835][T29935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.434196][T29935] bond1 (unregistering): Released all slaves [ 463.524344][T29945] SELinux: failed to load policy [ 463.788197][T29968] __nla_validate_parse: 2 callbacks suppressed [ 463.788214][T29968] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6115'. [ 463.862993][T29972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6115'. [ 463.875482][T29973] siw: device registration error -23 [ 463.909420][T29973] loop1: detected capacity change from 0 to 1024 [ 463.926325][T29973] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 463.937345][T29973] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 463.948586][T29977] bond1: entered promiscuous mode [ 463.953669][T29977] bond1: entered allmulticast mode [ 463.955859][T29973] JBD2: no valid journal superblock found [ 463.961754][T29977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.964617][T29973] EXT4-fs (loop1): Could not load journal inode [ 463.980842][T29977] bond1 (unregistering): Released all slaves [ 464.017178][T29982] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 464.024932][T29982] SELinux: failed to load policy [ 464.031933][T29982] netlink: 'syz.1.6120': attribute type 4 has an invalid length. [ 464.033170][ T29] audit: type=1326 audit(1755037834.152:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29981 comm="syz.1.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 464.039805][T29982] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6120'. [ 464.063225][ T29] audit: type=1326 audit(1755037834.152:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29981 comm="syz.1.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 464.073291][T29982] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 464.096023][ T29] audit: type=1326 audit(1755037834.152:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29981 comm="syz.1.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 464.096051][ T29] audit: type=1326 audit(1755037834.152:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29981 comm="syz.1.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 464.096073][ T29] audit: type=1326 audit(1755037834.152:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29981 comm="syz.1.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 464.121397][T29983] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6119'. [ 464.195292][T29980] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6119'. [ 464.220330][T29988] lo speed is unknown, defaulting to 1000 [ 464.269422][T29992] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 464.278242][T29992] SELinux: failed to load policy [ 464.286135][T29992] netlink: 'syz.3.6123': attribute type 4 has an invalid length. [ 464.293969][T29992] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6123'. [ 464.305548][T29992] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 464.306808][T29997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6125'. [ 464.330942][T29997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6125'. [ 464.341086][T29997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6125'. [ 464.361459][T29997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6125'. [ 464.472483][T30008] SELinux: failed to load policy [ 464.548493][T30015] SELinux: failed to load policy [ 464.597166][T30021] siw: device registration error -23 [ 464.621366][T30021] loop3: detected capacity change from 0 to 1024 [ 464.635058][T30020] netlink: 'syz.2.6133': attribute type 4 has an invalid length. [ 464.655027][T30021] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 464.665965][T30021] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 464.675794][T30023] loop4: detected capacity change from 0 to 512 [ 464.711635][T30021] JBD2: no valid journal superblock found [ 464.717474][T30021] EXT4-fs (loop3): Could not load journal inode [ 464.725343][T30023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.760322][T30023] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.859209][T30037] loop2: detected capacity change from 0 to 2048 [ 464.871489][T29550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.958963][T30050] netlink: 'syz.3.6143': attribute type 10 has an invalid length. [ 464.965680][T30051] lo speed is unknown, defaulting to 1000 [ 464.988322][T30037] loop2: unable to read partition table [ 464.994803][T30050] bridge0: port 3(team0) entered blocking state [ 465.001073][T30050] bridge0: port 3(team0) entered disabled state [ 465.008648][T30037] loop2: partition table beyond EOD, truncated [ 465.014838][T30037] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 465.025496][T30053] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 465.035016][T30053] SELinux: failed to load policy [ 465.040276][T30050] team0: entered allmulticast mode [ 465.045621][T30050] team_slave_0: entered allmulticast mode [ 465.051363][T30050] team_slave_1: entered allmulticast mode [ 465.060318][T30053] netlink: 'syz.4.6147': attribute type 4 has an invalid length. [ 465.091441][T30050] team0: entered promiscuous mode [ 465.096545][T30050] team_slave_0: entered promiscuous mode [ 465.102269][T30050] team_slave_1: entered promiscuous mode [ 465.117585][T30050] bridge0: port 3(team0) entered blocking state [ 465.123936][T30050] bridge0: port 3(team0) entered forwarding state [ 465.133915][T30053] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 465.163379][ T2990] loop2: unable to read partition table [ 465.169064][ T2990] loop2: partition table beyond EOD, truncated [ 465.248022][T30065] bond1: entered promiscuous mode [ 465.253195][T30065] bond1: entered allmulticast mode [ 465.270000][T30065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.280240][T30065] bond1 (unregistering): Released all slaves [ 465.380936][T30076] siw: device registration error -23 [ 465.406223][T30076] loop2: detected capacity change from 0 to 1024 [ 465.438082][T30076] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 465.449217][T30076] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 465.490562][T30076] JBD2: no valid journal superblock found [ 465.496432][T30076] EXT4-fs (loop2): Could not load journal inode [ 465.504400][T30081] loop4: detected capacity change from 0 to 512 [ 465.565545][T30081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.580539][T30086] loop3: detected capacity change from 0 to 512 [ 465.601726][T30081] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.635441][T30086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.635542][T30086] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.697833][T29550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.735316][T30100] FAULT_INJECTION: forcing a failure. [ 465.735316][T30100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.748448][T30100] CPU: 1 UID: 0 PID: 30100 Comm: syz.4.6160 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 465.748537][T30100] Tainted: [W]=WARN [ 465.748543][T30100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.748630][T30100] Call Trace: [ 465.748637][T30100] [ 465.748644][T30100] __dump_stack+0x1d/0x30 [ 465.748662][T30100] dump_stack_lvl+0xe8/0x140 [ 465.748678][T30100] dump_stack+0x15/0x1b [ 465.748801][T30100] should_fail_ex+0x265/0x280 [ 465.748819][T30100] should_fail+0xb/0x20 [ 465.748833][T30100] should_fail_usercopy+0x1a/0x20 [ 465.748930][T30100] strncpy_from_user+0x25/0x230 [ 465.748991][T30100] ? __kmalloc_cache_noprof+0x189/0x320 [ 465.749016][T30100] __se_sys_memfd_create+0x1ff/0x590 [ 465.749034][T30100] __x64_sys_memfd_create+0x31/0x40 [ 465.749126][T30100] x64_sys_call+0x2abe/0x2ff0 [ 465.749144][T30100] do_syscall_64+0xd2/0x200 [ 465.749165][T30100] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 465.749185][T30100] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 465.749255][T30100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.749272][T30100] RIP: 0033:0x7faea329ebe9 [ 465.749285][T30100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.749299][T30100] RSP: 002b:00007faea1d06e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 465.749317][T30100] RAX: ffffffffffffffda RBX: 0000000000000504 RCX: 00007faea329ebe9 [ 465.749398][T30100] RDX: 00007faea1d06ef0 RSI: 0000000000000000 RDI: 00007faea33227e8 [ 465.749409][T30100] RBP: 0000200000002580 R08: 00007faea1d06bb7 R09: 00007faea1d06e40 [ 465.749420][T30100] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 465.749430][T30100] R13: 00007faea1d06ef0 R14: 00007faea1d06eb0 R15: 0000200000000580 [ 465.749445][T30100] [ 465.766622][T30098] 9pnet_fd: Insufficient options for proto=fd [ 465.820594][T30104] loop1: detected capacity change from 0 to 512 [ 465.838611][T30106] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 465.866720][T30104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.885066][T30106] SELinux: failed to load policy [ 465.892482][T30104] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.902181][T28876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.957261][T30098] netlink: 'syz.2.6161': attribute type 4 has an invalid length. [ 466.004967][T30098] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 466.009832][T28220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.077191][T30116] bond1: entered promiscuous mode [ 466.082264][T30116] bond1: entered allmulticast mode [ 466.087782][T30116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.096912][T30116] bond1 (unregistering): Released all slaves [ 466.111778][T30114] lo speed is unknown, defaulting to 1000 [ 466.236706][T30134] loop3: detected capacity change from 0 to 512 [ 466.256126][T30134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.268806][T30134] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.292241][T28876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.393548][T30149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.458568][T30157] bond1: entered promiscuous mode [ 466.463693][T30157] bond1: entered allmulticast mode [ 466.471648][T30157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.497095][T30157] bond1 (unregistering): Released all slaves [ 466.525071][T30149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.565888][T30170] lo speed is unknown, defaulting to 1000 [ 466.614858][T30149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.676416][T30183] FAULT_INJECTION: forcing a failure. [ 466.676416][T30183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.689509][T30183] CPU: 0 UID: 0 PID: 30183 Comm: syz.0.6190 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 466.689614][T30183] Tainted: [W]=WARN [ 466.689620][T30183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.689630][T30183] Call Trace: [ 466.689637][T30183] [ 466.689644][T30183] __dump_stack+0x1d/0x30 [ 466.689663][T30183] dump_stack_lvl+0xe8/0x140 [ 466.689679][T30183] dump_stack+0x15/0x1b [ 466.689693][T30183] should_fail_ex+0x265/0x280 [ 466.689773][T30183] should_fail+0xb/0x20 [ 466.689787][T30183] should_fail_usercopy+0x1a/0x20 [ 466.689806][T30183] strncpy_from_user+0x25/0x230 [ 466.689849][T30183] ? kmem_cache_alloc_noprof+0x186/0x310 [ 466.689875][T30183] ? getname_flags+0x80/0x3b0 [ 466.689940][T30183] getname_flags+0xae/0x3b0 [ 466.689968][T30183] do_sys_openat2+0x60/0x110 [ 466.689995][T30183] __x64_sys_openat+0xf2/0x120 [ 466.690068][T30183] x64_sys_call+0x2e9c/0x2ff0 [ 466.690090][T30183] do_syscall_64+0xd2/0x200 [ 466.690184][T30183] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 466.690264][T30183] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 466.690289][T30183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.690311][T30183] RIP: 0033:0x7f7b9cf2d550 [ 466.690343][T30183] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 466.690361][T30183] RSP: 002b:00007f7b9b996f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 466.690382][T30183] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7b9cf2d550 [ 466.690395][T30183] RDX: 0000000000000002 RSI: 00007f7b9b996fa0 RDI: 00000000ffffff9c [ 466.690409][T30183] RBP: 00007f7b9b996fa0 R08: 0000000000000000 R09: 0000000000000000 [ 466.690421][T30183] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 466.690454][T30183] R13: 00007f7b9d156038 R14: 00007f7b9d155fa0 R15: 00007ffc11dd7338 [ 466.690470][T30183] [ 466.898165][T30149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.966650][T30188] lo speed is unknown, defaulting to 1000 [ 466.978445][ T3445] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.007650][ T3445] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.021542][ T3445] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.039912][T12439] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.064762][T30206] bond1: entered promiscuous mode [ 467.069851][T30206] bond1: entered allmulticast mode [ 467.076447][T30206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.087904][T30206] bond1 (unregistering): Released all slaves [ 467.314431][T30236] vhci_hcd: invalid port number 96 [ 467.316164][T30239] FAULT_INJECTION: forcing a failure. [ 467.316164][T30239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.319563][T30236] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 467.339750][T30239] CPU: 1 UID: 0 PID: 30239 Comm: syz.2.6211 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 467.339780][T30239] Tainted: [W]=WARN [ 467.339786][T30239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.339796][T30239] Call Trace: [ 467.339802][T30239] [ 467.339887][T30239] __dump_stack+0x1d/0x30 [ 467.339905][T30239] dump_stack_lvl+0xe8/0x140 [ 467.339922][T30239] dump_stack+0x15/0x1b [ 467.339936][T30239] should_fail_ex+0x265/0x280 [ 467.339957][T30239] should_fail+0xb/0x20 [ 467.339971][T30239] should_fail_usercopy+0x1a/0x20 [ 467.339999][T30239] _copy_from_user+0x1c/0xb0 [ 467.340022][T30239] __sys_bind+0x106/0x2a0 [ 467.340050][T30239] __x64_sys_bind+0x3f/0x50 [ 467.340174][T30239] x64_sys_call+0x2b6e/0x2ff0 [ 467.340204][T30239] do_syscall_64+0xd2/0x200 [ 467.340226][T30239] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 467.340246][T30239] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 467.340267][T30239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.340302][T30239] RIP: 0033:0x7f138e2bebe9 [ 467.340316][T30239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.340330][T30239] RSP: 002b:00007f138cd27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 467.340347][T30239] RAX: ffffffffffffffda RBX: 00007f138e4e5fa0 RCX: 00007f138e2bebe9 [ 467.340359][T30239] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000004 [ 467.340393][T30239] RBP: 00007f138cd27090 R08: 0000000000000000 R09: 0000000000000000 [ 467.340412][T30239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.340423][T30239] R13: 00007f138e4e6038 R14: 00007f138e4e5fa0 R15: 00007fffd3d08158 [ 467.340438][T30239] [ 467.562426][T30247] bond1: entered promiscuous mode [ 467.567530][T30247] bond1: entered allmulticast mode [ 467.572835][T30247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.584412][T30247] bond1 (unregistering): Released all slaves [ 467.670914][T30262] lo speed is unknown, defaulting to 1000 [ 467.870527][T30273] SELinux: failed to load policy [ 467.901228][T30278] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 467.959616][T30284] loop1: detected capacity change from 0 to 512 [ 467.975982][T30284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.989599][T30284] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.016505][T28220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.028051][T30290] bond1: entered promiscuous mode [ 468.033177][T30290] bond1: entered allmulticast mode [ 468.038566][T30290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.052427][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 468.052443][ T29] audit: type=1326 audit(1755037838.172:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.1.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 468.052917][T30290] bond1 (unregistering): Released all slaves [ 468.065062][ T29] audit: type=1326 audit(1755037838.172:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.1.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 468.133342][ T29] audit: type=1326 audit(1755037838.212:11088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.1.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 468.157058][ T29] audit: type=1326 audit(1755037838.212:11089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.1.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 468.180937][ T29] audit: type=1326 audit(1755037838.212:11090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30292 comm="syz.1.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 468.216547][ T29] audit: type=1326 audit(1755037838.342:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.3.6233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x0 [ 468.308932][T30312] siw: device registration error -23 [ 468.321691][T30312] loop2: detected capacity change from 0 to 1024 [ 468.363519][T30313] FAULT_INJECTION: forcing a failure. [ 468.363519][T30313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.371064][T30312] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 468.376678][T30313] CPU: 1 UID: 0 PID: 30313 Comm: syz.3.6233 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 468.376713][T30313] Tainted: [W]=WARN [ 468.376720][T30313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.376781][T30313] Call Trace: [ 468.376858][T30313] [ 468.376866][T30313] __dump_stack+0x1d/0x30 [ 468.376887][T30313] dump_stack_lvl+0xe8/0x140 [ 468.376906][T30313] dump_stack+0x15/0x1b [ 468.376923][T30313] should_fail_ex+0x265/0x280 [ 468.376944][T30313] should_fail+0xb/0x20 [ 468.376973][T30313] should_fail_usercopy+0x1a/0x20 [ 468.376995][T30313] _copy_to_user+0x20/0xa0 [ 468.377021][T30313] simple_read_from_buffer+0xb5/0x130 [ 468.377043][T30313] proc_fail_nth_read+0x10e/0x150 [ 468.377103][T30313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.377127][T30313] vfs_read+0x1a8/0x770 [ 468.377147][T30313] ? __rcu_read_unlock+0x4f/0x70 [ 468.377177][T30313] ? __fget_files+0x184/0x1c0 [ 468.377202][T30313] ksys_read+0xda/0x1a0 [ 468.377223][T30313] __x64_sys_read+0x40/0x50 [ 468.377244][T30313] x64_sys_call+0x27bc/0x2ff0 [ 468.377265][T30313] do_syscall_64+0xd2/0x200 [ 468.377352][T30313] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 468.377376][T30313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 468.377435][T30313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.377456][T30313] RIP: 0033:0x7fad3a68d5fc [ 468.377472][T30313] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 468.377563][T30313] RSP: 002b:00007fad390d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.377583][T30313] RAX: ffffffffffffffda RBX: 00007fad3a8b6090 RCX: 00007fad3a68d5fc [ 468.377596][T30313] RDX: 000000000000000f RSI: 00007fad390d60a0 RDI: 0000000000000016 [ 468.377609][T30313] RBP: 00007fad390d6090 R08: 0000000000000000 R09: 0000000000000000 [ 468.377622][T30313] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 468.377690][T30313] R13: 00007fad3a8b6128 R14: 00007fad3a8b6090 R15: 00007fff3b823a28 [ 468.377709][T30313] [ 468.595529][T30312] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 468.620984][T30312] JBD2: no valid journal superblock found [ 468.626842][T30312] EXT4-fs (loop2): Could not load journal inode [ 468.656981][T30324] FAULT_INJECTION: forcing a failure. [ 468.656981][T30324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.670379][T30324] CPU: 1 UID: 0 PID: 30324 Comm: syz.0.6242 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 468.670417][T30324] Tainted: [W]=WARN [ 468.670424][T30324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.670437][T30324] Call Trace: [ 468.670444][T30324] [ 468.670474][T30324] __dump_stack+0x1d/0x30 [ 468.670495][T30324] dump_stack_lvl+0xe8/0x140 [ 468.670516][T30324] dump_stack+0x15/0x1b [ 468.670570][T30324] should_fail_ex+0x265/0x280 [ 468.670594][T30324] should_fail_alloc_page+0xf2/0x100 [ 468.670621][T30324] __alloc_frozen_pages_noprof+0xff/0x360 [ 468.670658][T30324] alloc_pages_mpol+0xb3/0x250 [ 468.670739][T30324] vma_alloc_folio_noprof+0x1aa/0x300 [ 468.670772][T30324] do_wp_page+0x5db/0x24e0 [ 468.670845][T30324] ? __rcu_read_lock+0x37/0x50 [ 468.670870][T30324] handle_mm_fault+0x77d/0x2c20 [ 468.670893][T30324] ? __rcu_read_unlock+0x4f/0x70 [ 468.670922][T30324] do_user_addr_fault+0x3fe/0x1090 [ 468.671034][T30324] exc_page_fault+0x62/0xa0 [ 468.671056][T30324] asm_exc_page_fault+0x26/0x30 [ 468.671075][T30324] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 468.671183][T30324] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 468.671200][T30324] RSP: 0018:ffffc900016eba10 EFLAGS: 00050206 [ 468.671218][T30324] RAX: ffff88810a5e8aa0 RBX: ffff88810ccc8000 RCX: 0000000000007140 [ 468.671291][T30324] RDX: 0000000000000000 RSI: ffff88810ccc8ec0 RDI: 0000200000001000 [ 468.671383][T30324] RBP: 0000200000000140 R08: 00000000000005b0 R09: 0000000000000000 [ 468.671395][T30324] R10: 000188810ccc8000 R11: 000188810cccffff R12: 0000200000008140 [ 468.671406][T30324] R13: ffffc900016ebdc0 R14: 0000000000008000 R15: 00007ffffffff000 [ 468.671497][T30324] _copy_to_iter+0x13e/0xe30 [ 468.671575][T30324] ? avc_has_perm_noaudit+0x1b1/0x200 [ 468.671637][T30324] ? avc_has_perm+0xf7/0x180 [ 468.671662][T30324] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 468.671718][T30324] __skb_datagram_iter+0x2f4/0x690 [ 468.671739][T30324] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 468.671759][T30324] skb_copy_datagram_iter+0x3d/0x110 [ 468.671860][T30324] virtio_transport_seqpacket_dequeue+0x341/0x5d0 [ 468.671894][T30324] __vsock_connectible_recvmsg+0x39c/0x740 [ 468.671983][T30324] ? selinux_socket_recvmsg+0x175/0x1b0 [ 468.672013][T30324] ? __pfx_autoremove_wake_function+0x10/0x10 [ 468.672044][T30324] vsock_connectible_recvmsg+0x80/0x90 [ 468.672084][T30324] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 468.672187][T30324] sock_recvmsg+0x139/0x170 [ 468.672213][T30324] __sys_recvfrom+0x122/0x1f0 [ 468.672260][T30324] __x64_sys_recvfrom+0x76/0x90 [ 468.672280][T30324] x64_sys_call+0x2f20/0x2ff0 [ 468.672306][T30324] do_syscall_64+0xd2/0x200 [ 468.672370][T30324] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 468.672394][T30324] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 468.672416][T30324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.672437][T30324] RIP: 0033:0x7f7b9cf2ebe9 [ 468.672519][T30324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.672569][T30324] RSP: 002b:00007f7b9b997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 468.672589][T30324] RAX: ffffffffffffffda RBX: 00007f7b9d155fa0 RCX: 00007f7b9cf2ebe9 [ 468.672602][T30324] RDX: 0000000000040000 RSI: 0000200000000140 RDI: 0000000000000008 [ 468.672615][T30324] RBP: 00007f7b9b997090 R08: 0000000000000000 R09: 0000000000000000 [ 468.672629][T30324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.672642][T30324] R13: 00007f7b9d156038 R14: 00007f7b9d155fa0 R15: 00007ffc11dd7338 [ 468.672659][T30324] [ 469.074444][T30323] siw: device registration error -23 [ 469.098481][T30333] lo speed is unknown, defaulting to 1000 [ 469.125620][T30323] loop1: detected capacity change from 0 to 1024 [ 469.141151][T30337] bond1: entered promiscuous mode [ 469.146311][T30337] bond1: entered allmulticast mode [ 469.151590][T30337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.161292][T30323] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 469.171689][T30337] bond1 (unregistering): Released all slaves [ 469.174375][T30323] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 469.193179][T30323] JBD2: no valid journal superblock found [ 469.199103][T30323] EXT4-fs (loop1): Could not load journal inode [ 469.259789][ T29] audit: type=1326 audit(1755037839.382:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30348 comm="syz.1.6249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 469.327562][ T29] audit: type=1326 audit(1755037839.412:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30348 comm="syz.1.6249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 469.351554][ T29] audit: type=1326 audit(1755037839.412:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30348 comm="syz.1.6249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 469.375227][ T29] audit: type=1326 audit(1755037839.412:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30348 comm="syz.1.6249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 469.583218][T30371] siw: device registration error -23 [ 469.611509][T30371] loop1: detected capacity change from 0 to 1024 [ 469.634959][T30373] siw: device registration error -23 [ 469.644011][T30371] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 469.655113][T30371] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 469.695930][T30373] loop3: detected capacity change from 0 to 1024 [ 469.706586][T30373] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 469.717617][T30373] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 469.732737][T30371] JBD2: no valid journal superblock found [ 469.738515][T30371] EXT4-fs (loop1): Could not load journal inode [ 469.793585][T30373] JBD2: no valid journal superblock found [ 469.799346][T30373] EXT4-fs (loop3): Could not load journal inode [ 469.908067][T30379] siw: device registration error -23 [ 469.936464][T30379] loop1: detected capacity change from 0 to 1024 [ 469.958632][T30379] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 469.969634][T30379] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 469.998470][T30379] JBD2: no valid journal superblock found [ 470.004266][T30379] EXT4-fs (loop1): Could not load journal inode [ 470.035913][T30384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=30384 comm=syz.3.6261 [ 470.072707][T30386] __nla_validate_parse: 79 callbacks suppressed [ 470.072723][T30386] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6257'. [ 470.141454][T30390] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6257'. [ 470.187603][T30394] loop1: detected capacity change from 0 to 2048 [ 470.194399][T30394] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 470.284315][T30395] lo speed is unknown, defaulting to 1000 [ 470.366413][T30395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6261'. [ 470.597124][T30403] loop4: detected capacity change from 0 to 512 [ 470.617531][T30403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.640335][T30403] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.644695][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6269'. [ 470.659721][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6269'. [ 470.668805][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6269'. [ 470.685519][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6269'. [ 470.694419][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6269'. [ 470.703481][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6269'. [ 470.726414][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6269'. [ 470.764849][T29550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.816744][T30417] siw: device registration error -23 [ 470.980332][T30413] loop2: detected capacity change from 0 to 1024 [ 471.001189][T30413] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 471.016136][T30413] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 471.033628][T30436] siw: device registration error -23 [ 471.070508][T30436] loop3: detected capacity change from 0 to 1024 [ 471.075956][T30413] JBD2: no valid journal superblock found [ 471.082914][T30413] EXT4-fs (loop2): Could not load journal inode [ 471.087803][T30436] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 471.096670][T30439] loop1: detected capacity change from 0 to 512 [ 471.100616][T30436] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 471.145474][T30439] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 471.169586][T30439] EXT4-fs (loop1): orphan cleanup on readonly fs [ 471.178180][T30439] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.6276: Block bitmap for bg 0 marked uninitialized [ 471.192812][T30439] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 471.202048][T30436] JBD2: no valid journal superblock found [ 471.202223][T30439] EXT4-fs (loop1): 1 orphan inode deleted [ 471.207989][T30436] EXT4-fs (loop3): Could not load journal inode [ 471.215175][T30439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 471.252611][T30439] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 471.269684][T30439] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 471.299937][T30439] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.399134][T30458] siw: device registration error -23 [ 471.421679][T30458] loop2: detected capacity change from 0 to 1024 [ 471.431133][T30454] SELinux: failed to load policy [ 471.458035][T30458] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 471.469009][T30458] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 471.478754][T30465] bond1: entered promiscuous mode [ 471.483904][T30465] bond1: entered allmulticast mode [ 471.485919][T30458] JBD2: no valid journal superblock found [ 471.494870][T30458] EXT4-fs (loop2): Could not load journal inode [ 471.509652][T30465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.520993][T30465] bond1 (unregistering): Released all slaves [ 471.638230][T30473] lo speed is unknown, defaulting to 1000 [ 471.671987][T30477] lo speed is unknown, defaulting to 1000 [ 471.725151][T30482] siw: device registration error -23 [ 471.772577][T30482] loop3: detected capacity change from 0 to 1024 [ 471.789805][T30482] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 471.800768][T30482] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 471.813644][T30482] JBD2: no valid journal superblock found [ 471.819485][T30482] EXT4-fs (loop3): Could not load journal inode [ 472.506784][T30500] lo speed is unknown, defaulting to 1000 [ 472.631586][T30503] loop2: detected capacity change from 0 to 8192 [ 473.020268][T30525] lo speed is unknown, defaulting to 1000 [ 473.134950][T30529] bond1: entered promiscuous mode [ 473.140050][T30529] bond1: entered allmulticast mode [ 473.160354][T30529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.192257][T30529] bond1 (unregistering): Released all slaves [ 473.276739][T30533] bond1: entered promiscuous mode [ 473.281830][T30533] bond1: entered allmulticast mode [ 473.293643][T30533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.306261][T30533] bond1 (unregistering): Released all slaves [ 473.339834][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 473.339850][ T29] audit: type=1326 audit(1755037843.462:11223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 473.371278][ T29] audit: type=1326 audit(1755037843.462:11224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 473.395422][ T29] audit: type=1326 audit(1755037843.462:11225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 473.419532][ T29] audit: type=1326 audit(1755037843.462:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.3.6307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 473.447865][T30542] 9pnet_fd: Insufficient options for proto=fd [ 473.461186][T30542] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 473.474612][T30542] SELinux: failed to load policy [ 473.514963][T30547] lo speed is unknown, defaulting to 1000 [ 473.567238][ T29] audit: type=1326 audit(1755037843.692:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 473.593810][T30542] netlink: 'syz.4.6310': attribute type 4 has an invalid length. [ 473.601614][T30542] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 473.625744][ T29] audit: type=1326 audit(1755037843.722:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 473.649368][ T29] audit: type=1326 audit(1755037843.722:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 473.672963][ T29] audit: type=1326 audit(1755037843.722:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 473.696664][ T29] audit: type=1326 audit(1755037843.722:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 473.720327][ T29] audit: type=1326 audit(1755037843.722:11232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.4.6310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 473.907434][T30590] siw: device registration error -23 [ 473.937624][T30592] lo speed is unknown, defaulting to 1000 [ 473.945975][T30556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.954778][T30556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.963390][T30556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.971853][T30556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.995991][T30590] loop4: detected capacity change from 0 to 1024 [ 474.051726][T30599] loop2: detected capacity change from 0 to 256 [ 474.087649][T30590] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 474.098757][T30590] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 474.137916][T30590] JBD2: no valid journal superblock found [ 474.143775][T30590] EXT4-fs (loop4): Could not load journal inode [ 474.180666][T30556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.189255][T30556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.909912][T30613] 9pnet_fd: Insufficient options for proto=fd [ 474.931759][T30613] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 474.956479][T30613] SELinux: failed to load policy [ 474.976677][T30613] netlink: 'syz.0.6323': attribute type 4 has an invalid length. [ 475.005088][T30613] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 475.464526][T30635] 9pnet_fd: Insufficient options for proto=fd [ 475.501660][T30639] bond1: entered promiscuous mode [ 475.504145][T30633] __nla_validate_parse: 48 callbacks suppressed [ 475.504161][T30633] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6331'. [ 475.506782][T30639] bond1: entered allmulticast mode [ 475.528972][T30639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.540565][T30639] bond1 (unregistering): Released all slaves [ 475.604519][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6335'. [ 475.613515][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6335'. [ 475.622586][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6335'. [ 475.661835][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6335'. [ 475.670826][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6335'. [ 475.684646][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6335'. [ 475.701789][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6336'. [ 475.722392][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6335'. [ 475.731625][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6335'. [ 475.763781][T30655] 9pnet_fd: Insufficient options for proto=fd [ 475.771660][T30655] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 475.779501][T30655] SELinux: failed to load policy [ 475.787710][T30655] netlink: 'syz.2.6338': attribute type 4 has an invalid length. [ 475.796631][T30655] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 475.828111][T30657] loop4: detected capacity change from 0 to 512 [ 475.846106][T30657] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 475.860466][T30657] EXT4-fs (loop4): orphan cleanup on readonly fs [ 475.868368][T30657] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.6339: Block bitmap for bg 0 marked uninitialized [ 475.881931][T30657] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 475.891766][T30657] EXT4-fs (loop4): 1 orphan inode deleted [ 475.898727][T30657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 475.917278][T30657] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 475.937832][T30657] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 475.949372][T30657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.218365][T30682] loop4: detected capacity change from 0 to 256 [ 476.838488][T30690] lo speed is unknown, defaulting to 1000 [ 478.157549][T30725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.166204][T30725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.175569][T30725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.184237][T30725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.344718][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 478.344738][ T29] audit: type=1326 audit(1755037848.472:11499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 478.393681][T30725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.402252][T30725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.530165][T30722] loop2: detected capacity change from 0 to 8192 [ 478.877429][ T29] audit: type=1326 audit(1755037848.512:11500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 478.901266][ T29] audit: type=1326 audit(1755037848.512:11501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 478.925033][ T29] audit: type=1326 audit(1755037848.512:11502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 478.948684][ T29] audit: type=1326 audit(1755037848.512:11503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 478.972290][ T29] audit: type=1326 audit(1755037848.512:11504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 478.995957][ T29] audit: type=1326 audit(1755037848.512:11505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 479.019629][ T29] audit: type=1326 audit(1755037848.512:11506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 479.043790][ T29] audit: type=1326 audit(1755037848.592:11507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 479.067543][ T29] audit: type=1326 audit(1755037848.592:11508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30729 comm="syz.0.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9cf2ebe9 code=0x7ffc0000 [ 480.032325][T30755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=30755 comm=syz.1.6374 [ 480.048121][T30756] 9pnet_fd: Insufficient options for proto=fd [ 480.062077][T30756] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 480.070991][T30756] SELinux: failed to load policy [ 480.089957][T30756] netlink: 'syz.4.6375': attribute type 4 has an invalid length. [ 480.098075][T30756] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 480.225782][T30764] loop4: detected capacity change from 0 to 8192 [ 480.306573][T30766] lo speed is unknown, defaulting to 1000 [ 480.385618][T30766] vlan2: entered allmulticast mode [ 481.008633][T30773] 9pnet_fd: Insufficient options for proto=fd [ 481.020499][T30773] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 481.037458][T30773] SELinux: failed to load policy [ 481.046561][T30771] SELinux: failed to load policy [ 481.053484][T30773] netlink: 'syz.1.6380': attribute type 4 has an invalid length. [ 481.061240][T30773] __nla_validate_parse: 21 callbacks suppressed [ 481.061254][T30773] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6380'. [ 481.102666][T30773] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 481.171193][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6382'. [ 481.238166][T30788] siw: device registration error -23 [ 481.284860][T30788] loop3: detected capacity change from 0 to 1024 [ 481.377352][T30788] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 481.388283][T30788] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 481.472199][T30788] JBD2: no valid journal superblock found [ 481.477985][T30788] EXT4-fs (loop3): Could not load journal inode [ 481.836649][T30794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.845216][T30794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.856628][T30794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.865071][T30794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.950400][T30800] lo speed is unknown, defaulting to 1000 [ 482.076167][T30794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.084766][T30794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.446663][T30807] loop2: detected capacity change from 0 to 512 [ 482.618983][T30807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.667237][T30807] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.817059][T30807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6392'. [ 482.826189][T30807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6392'. [ 482.958247][T29165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.473252][T30819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.481758][T30819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.491368][T30819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.499935][T30819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.709960][T30819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.718525][T30819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.192589][T30841] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 484.290775][T30841] SELinux: failed to load policy [ 484.431882][T30846] 9pnet_fd: Insufficient options for proto=fd [ 484.495011][T30846] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 484.555819][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 484.555834][ T29] audit: type=1326 audit(1755037854.682:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.604737][T30846] SELinux: failed to load policy [ 484.611041][T30848] netlink: 'syz.4.6400': attribute type 4 has an invalid length. [ 484.618915][T30848] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6400'. [ 484.641057][ T29] audit: type=1326 audit(1755037854.712:11598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.665365][ T29] audit: type=1326 audit(1755037854.712:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.689166][ T29] audit: type=1326 audit(1755037854.712:11600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.709143][T30848] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 484.712834][ T29] audit: type=1326 audit(1755037854.712:11601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.752474][ T29] audit: type=1326 audit(1755037854.712:11602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.776179][ T29] audit: type=1326 audit(1755037854.712:11603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.799860][ T29] audit: type=1326 audit(1755037854.712:11604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.824103][ T29] audit: type=1326 audit(1755037854.712:11605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.847757][ T29] audit: type=1326 audit(1755037854.712:11606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30845 comm="syz.4.6400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 484.921569][T30858] lo speed is unknown, defaulting to 1000 [ 485.134817][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6405'. [ 485.143747][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6405'. [ 485.152654][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6405'. [ 485.161555][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6405'. [ 485.182710][T30879] SELinux: failed to load policy [ 485.217428][T30877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6405'. [ 485.368576][T30895] 9pnet_fd: Insufficient options for proto=fd [ 485.379444][T30895] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 485.390427][T30895] SELinux: failed to load policy [ 485.398627][T30895] netlink: 'syz.4.6413': attribute type 4 has an invalid length. [ 485.406731][T30895] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 485.473869][T30900] bond1: entered promiscuous mode [ 485.475966][T30903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=30903 comm=syz.3.6416 [ 485.479102][T30900] bond1: entered allmulticast mode [ 485.498404][T30900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.700265][T30916] lo speed is unknown, defaulting to 1000 [ 485.763317][T30920] lo speed is unknown, defaulting to 1000 [ 486.132530][T30929] __nla_validate_parse: 29 callbacks suppressed [ 486.132546][T30929] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6423'. [ 486.208614][T30934] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6423'. [ 486.221367][T30934] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.260449][T30938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=30938 comm=syz.0.6427 [ 486.289275][T30941] 9pnet: Could not find request transport: fd0x0000000000000004 [ 486.385776][T30945] usb usb7: usbfs: process 30945 (syz.4.6429) did not claim interface 0 before use [ 486.405271][T30936] loop1: detected capacity change from 0 to 2048 [ 486.428833][T30936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.441370][T30936] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.455340][T30936] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.6426: failed to insert inode 13: doubly allocated? [ 486.496189][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 486.505191][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 486.514277][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 486.523147][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 486.542983][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 486.560208][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 486.569197][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 486.578236][T30959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6431'. [ 486.643620][T30965] loop3: detected capacity change from 0 to 512 [ 486.650522][T30965] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 486.660932][T30965] EXT4-fs (loop3): orphan cleanup on readonly fs [ 486.667497][T30965] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.6433: Block bitmap for bg 0 marked uninitialized [ 486.693556][T30965] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 486.705565][T30965] EXT4-fs (loop3): 1 orphan inode deleted [ 486.711759][T30965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 486.733411][T30967] loop4: detected capacity change from 0 to 256 [ 486.763761][T30965] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 486.774322][T30965] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 486.795107][T28876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.057517][T28220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.382580][T30985] lo speed is unknown, defaulting to 1000 [ 487.411762][T30990] 9pnet_fd: Insufficient options for proto=fd [ 487.447201][T30990] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 487.470938][T30990] SELinux: failed to load policy [ 487.489183][T30990] netlink: 'syz.2.6443': attribute type 4 has an invalid length. [ 487.499691][T30990] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 487.714233][T31008] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 487.759355][T31008] SELinux: failed to load policy [ 487.856667][T31018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=31018 comm=syz.4.6453 [ 487.975282][T31022] loop3: detected capacity change from 0 to 8192 [ 487.986772][T31029] siw: device registration error -23 [ 488.122122][T31036] 9pnet_fd: Insufficient options for proto=fd [ 488.361136][T31043] loop2: detected capacity change from 0 to 512 [ 488.399888][T31043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.451460][T31043] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.549838][T29165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.621515][T31059] bond1: entered promiscuous mode [ 488.626693][T31059] bond1: entered allmulticast mode [ 488.641722][T31059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.065541][T31098] 9pnet_fd: Insufficient options for proto=fd [ 489.096469][T31098] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 489.119102][T31098] SELinux: failed to load policy [ 489.130102][T31098] netlink: 'syz.3.6477': attribute type 4 has an invalid length. [ 489.138202][T31098] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 489.172648][T31095] loop4: detected capacity change from 0 to 8192 [ 489.450834][T31116] bond2: entered promiscuous mode [ 489.456059][T31116] bond2: entered allmulticast mode [ 489.503317][T31116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.612730][T31121] loop3: detected capacity change from 0 to 2364 [ 489.626292][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 489.626305][ T29] audit: type=1326 audit(1755037859.752:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 489.690358][ T29] audit: type=1326 audit(1755037859.752:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 489.713978][ T29] audit: type=1326 audit(1755037859.782:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 489.737648][ T29] audit: type=1326 audit(1755037859.782:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 489.761304][ T29] audit: type=1326 audit(1755037859.782:11781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31124 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 489.942268][T31134] bond3: entered promiscuous mode [ 489.947436][T31134] bond3: entered allmulticast mode [ 489.977392][T31134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.119423][T31148] lo speed is unknown, defaulting to 1000 [ 490.361839][ T29] audit: type=1326 audit(1755037860.482:11782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.2.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 490.463362][ T29] audit: type=1326 audit(1755037860.512:11783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.2.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 490.487270][ T29] audit: type=1326 audit(1755037860.512:11784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.2.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 490.511290][ T29] audit: type=1326 audit(1755037860.512:11785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.2.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 490.534937][ T29] audit: type=1326 audit(1755037860.512:11786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.2.6500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 490.629880][T31164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=31164 comm=syz.3.6505 [ 490.801949][T31171] bond2: entered promiscuous mode [ 490.807106][T31171] bond2: entered allmulticast mode [ 490.812610][T31171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.158338][T31177] __nla_validate_parse: 115 callbacks suppressed [ 491.158355][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6509'. [ 491.173596][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6509'. [ 491.192983][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6509'. [ 491.285517][T31198] 9pnet_fd: Insufficient options for proto=fd [ 491.301476][T31198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 491.318705][T31198] SELinux: failed to load policy [ 491.331881][T31198] netlink: 'syz.1.6516': attribute type 4 has an invalid length. [ 491.339757][T31198] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6516'. [ 491.384401][T31198] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 491.600181][T31210] siw: device registration error -23 [ 491.664192][T31209] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6520'. [ 491.689422][T31209] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6520'. [ 491.944678][T31292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6524'. [ 491.953844][T31292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6524'. [ 491.973012][T31292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6524'. [ 491.986303][T31287] loop2: detected capacity change from 0 to 512 [ 492.014497][T31287] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 492.038499][T31292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6524'. [ 492.057867][T31287] EXT4-fs (loop2): orphan cleanup on readonly fs [ 492.078258][T31287] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.6525: Block bitmap for bg 0 marked uninitialized [ 492.130026][T31287] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 492.171193][T31287] EXT4-fs (loop2): 1 orphan inode deleted [ 492.190800][T31287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 492.214844][T31287] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 492.237296][T31287] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 492.319054][T31597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=31597 comm=syz.1.6529 [ 492.319577][T31287] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.558446][ T3445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.635773][ T3445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.675006][T31633] lo speed is unknown, defaulting to 1000 [ 492.687146][ T3445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.766592][ T3445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.831833][T31717] loop4: detected capacity change from 0 to 512 [ 492.840552][T31717] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 492.848324][T31720] lo speed is unknown, defaulting to 1000 [ 492.863493][T31717] EXT4-fs (loop4): orphan cleanup on readonly fs [ 492.873147][T31717] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.6539: Block bitmap for bg 0 marked uninitialized [ 492.903145][T31717] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 492.942403][T31729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=31729 comm=syz.3.6541 [ 492.952393][T31717] EXT4-fs (loop4): 1 orphan inode deleted [ 492.965497][T31633] chnl_net:caif_netlink_parms(): no params data found [ 492.967041][T31717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 492.987728][T31717] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 493.001403][T31717] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 493.086104][T31732] loop1: detected capacity change from 0 to 256 [ 493.167667][T31717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.210258][ T3445] bridge_slave_1: left allmulticast mode [ 493.216119][ T3445] bridge_slave_1: left promiscuous mode [ 493.221935][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.231018][ T3445] bridge_slave_0: left promiscuous mode [ 493.236814][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.457316][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.487636][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.513993][ T3445] bond0 (unregistering): Released all slaves [ 493.590711][T31633] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.597997][T31633] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.618776][T31633] bridge_slave_0: entered allmulticast mode [ 493.639359][T31633] bridge_slave_0: entered promiscuous mode [ 493.684441][T31633] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.691773][T31633] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.744966][T31633] bridge_slave_1: entered allmulticast mode [ 493.762353][T31633] bridge_slave_1: entered promiscuous mode [ 493.769776][ T3445] tipc: Disabling bearer [ 493.775623][ T3445] tipc: Left network mode [ 493.821727][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.829157][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.847277][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.854875][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.871915][ T3445] veth1_macvtap: left promiscuous mode [ 493.878370][ T3445] veth0_macvtap: left promiscuous mode [ 493.885306][ T3445] veth1_vlan: left promiscuous mode [ 493.950784][ T3445] team0 (unregistering): Port device vlan0 removed [ 494.018885][ T3445] team_slave_1 (unregistering): left promiscuous mode [ 494.041948][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 494.075059][ T3445] team_slave_0 (unregistering): left promiscuous mode [ 494.082293][T31776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=31776 comm=syz.4.6551 [ 494.096776][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 494.322147][ T3532] lo speed is unknown, defaulting to 1000 [ 494.328042][ T3532] infiniband syz2: ib_query_port failed (-19) [ 494.339401][T31633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.394705][T31633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.509565][T31633] team0: Port device team_slave_0 added [ 494.546016][T31633] team0: Port device team_slave_1 added [ 494.555363][T31786] SELinux: failed to load policy [ 494.570572][T31633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.577615][T31633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.603540][T31633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.614856][T31633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.621924][T31633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.647858][T31633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.671006][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 494.671085][ T29] audit: type=1326 audit(1755037864.792:11961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31797 comm="syz.3.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 494.700890][ T29] audit: type=1326 audit(1755037864.792:11962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31797 comm="syz.3.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 494.724515][ T29] audit: type=1326 audit(1755037864.792:11963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31797 comm="syz.3.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 494.748119][ T29] audit: type=1326 audit(1755037864.792:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31797 comm="syz.3.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 494.771781][ T29] audit: type=1326 audit(1755037864.792:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31797 comm="syz.3.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 494.811349][T31804] pim6reg: entered allmulticast mode [ 494.824202][T31633] hsr_slave_0: entered promiscuous mode [ 494.830458][T31633] hsr_slave_1: entered promiscuous mode [ 494.836707][T31633] debugfs: 'hsr0' already exists in 'hsr' [ 494.842539][T31633] Cannot create hsr debugfs directory [ 494.851306][T31804] netlink: 'syz.3.6558': attribute type 1 has an invalid length. [ 494.871266][T31805] SELinux: failed to load policy [ 494.889048][T31804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.897893][T31814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=31814 comm=syz.1.6561 [ 494.908867][T31815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 494.920044][T31815] bond1: (slave batadv1): making interface the new active one [ 494.928744][T31815] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 495.571528][ T29] audit: type=1326 audit(1755037865.692:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31887 comm="syz.4.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 495.618833][ T29] audit: type=1326 audit(1755037865.722:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31887 comm="syz.4.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 495.642601][ T29] audit: type=1326 audit(1755037865.722:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31887 comm="syz.4.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 495.666319][ T29] audit: type=1326 audit(1755037865.722:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31887 comm="syz.4.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 495.690059][ T29] audit: type=1326 audit(1755037865.722:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31887 comm="syz.4.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea329ebe9 code=0x7ffc0000 [ 495.862373][T31895] lo speed is unknown, defaulting to 1000 [ 495.879443][T31633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 495.919283][T31899] loop4: detected capacity change from 0 to 1024 [ 495.930625][T31895] lo speed is unknown, defaulting to 1000 [ 495.939210][T31633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 495.987725][T31899] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 495.998683][T31899] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 496.024962][T31633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.037946][T31902] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 496.059294][T31895] lo speed is unknown, defaulting to 1000 [ 496.073427][T31633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 496.081064][T31895] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 496.100389][T31902] SELinux: failed to load policy [ 496.119310][T31899] JBD2: no valid journal superblock found [ 496.125157][T31899] EXT4-fs (loop4): Could not load journal inode [ 496.190717][T31912] __nla_validate_parse: 25 callbacks suppressed [ 496.190731][T31912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6571'. [ 496.214577][T31895] lo speed is unknown, defaulting to 1000 [ 496.260153][T31895] lo speed is unknown, defaulting to 1000 [ 496.299026][T31912] bond1: entered promiscuous mode [ 496.304138][T31912] bond1: entered allmulticast mode [ 496.316692][T31912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.325486][T31915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6566'. [ 496.355583][T31915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6566'. [ 496.371939][T31895] lo speed is unknown, defaulting to 1000 [ 496.436086][T31895] lo speed is unknown, defaulting to 1000 [ 496.445144][T31633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.491799][T31633] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.510036][T31633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.520552][T31633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.565505][T31895] lo speed is unknown, defaulting to 1000 [ 496.573529][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.580638][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.636970][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.644068][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.720888][T31956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=31956 comm=syz.4.6578 [ 496.781507][T31939] lo speed is unknown, defaulting to 1000 [ 496.814038][T31633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.871816][T31963] SELinux: failed to load policy [ 496.956751][T31975] SELinux: failed to load policy [ 497.021312][T31633] veth0_vlan: entered promiscuous mode [ 497.048447][T31633] veth1_vlan: entered promiscuous mode [ 497.064853][T31989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6582'. [ 497.073835][T31989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6582'. [ 497.082004][T31633] veth0_macvtap: entered promiscuous mode [ 497.099750][T31992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6583'. [ 497.105586][T31989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6582'. [ 497.138467][T31633] veth1_macvtap: entered promiscuous mode [ 497.160420][T31992] bond4: entered promiscuous mode [ 497.164339][T31989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6582'. [ 497.165541][T31992] bond4: entered allmulticast mode [ 497.174405][T31989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6582'. [ 497.181989][T31992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 497.197069][T31989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6582'. [ 497.227995][T31633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.241363][T31633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.257542][ T3445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.309953][ T3445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.355271][ T3445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.378595][ T3445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.609938][T32046] lo speed is unknown, defaulting to 1000 [ 497.750109][T32060] loop2: detected capacity change from 0 to 512 [ 498.017972][T32062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.026796][T32062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.036527][T32062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.045336][T32062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.140904][T32068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=32068 comm=syz.3.6602 [ 498.255316][T32062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.263955][T32062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.356604][T32060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.370600][T32060] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.706973][T29165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.912557][T32093] 9pnet_fd: Insufficient options for proto=fd [ 498.934778][T32093] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 498.968828][T32093] SELinux: failed to load policy [ 499.011195][T32095] netlink: 'syz.4.6609': attribute type 4 has an invalid length. [ 499.051335][T32095] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 499.464468][T32123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=32123 comm=syz.4.6620 [ 499.477486][T32124] siw: device registration error -23 [ 499.617256][T32132] 9pnet_fd: Insufficient options for proto=fd [ 499.625650][T32132] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 499.633465][T32132] SELinux: failed to load policy [ 499.641140][T32132] netlink: 'syz.1.6622': attribute type 4 has an invalid length. [ 499.649159][T32132] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 499.808042][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 499.808058][ T29] audit: type=1326 audit(1755037869.932:12295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 499.839204][ T29] audit: type=1326 audit(1755037869.962:12296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 499.862875][ T29] audit: type=1326 audit(1755037869.962:12297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 499.886617][ T29] audit: type=1326 audit(1755037869.962:12298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 499.910301][ T29] audit: type=1326 audit(1755037869.962:12299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 499.933902][ T29] audit: type=1326 audit(1755037869.962:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 499.957606][ T29] audit: type=1326 audit(1755037869.962:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 499.984038][ T29] audit: type=1326 audit(1755037870.052:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 500.007710][ T29] audit: type=1326 audit(1755037870.052:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 500.031398][ T29] audit: type=1326 audit(1755037870.052:12304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32149 comm="syz.2.6631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e2bebe9 code=0x7ffc0000 [ 500.214712][T32156] siw: device registration error -23 [ 500.243231][T32156] loop2: detected capacity change from 0 to 1024 [ 500.257925][T32156] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 500.268871][T32156] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 500.319358][T32156] JBD2: no valid journal superblock found [ 500.325173][T32156] EXT4-fs (loop2): Could not load journal inode [ 500.559358][T32169] loop4: detected capacity change from 0 to 1024 [ 500.573976][T32169] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 500.585058][T32169] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 500.596393][T32169] JBD2: no valid journal superblock found [ 500.602189][T32169] EXT4-fs (loop4): Could not load journal inode [ 500.778824][T32176] SELinux: failed to load policy [ 500.816480][T32188] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 500.827652][T32188] SELinux: failed to load policy [ 500.858684][T32190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=32190 comm=syz.0.6645 [ 500.939483][T32196] siw: device registration error -23 [ 500.945744][T32173] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 500.976513][T32196] loop2: detected capacity change from 0 to 1024 [ 500.999755][T32196] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 501.010691][T32196] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 501.026879][T32196] JBD2: no valid journal superblock found [ 501.032821][T32196] EXT4-fs (loop2): Could not load journal inode [ 501.083634][T32203] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 501.091689][T32203] SELinux: failed to load policy [ 501.111497][T32203] netlink: 'syz.4.6649': attribute type 4 has an invalid length. [ 501.122612][T32203] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 501.251063][T32213] siw: device registration error -23 [ 501.308788][T32213] loop2: detected capacity change from 0 to 1024 [ 501.336370][T32213] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 501.347420][T32213] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 501.640862][T32218] loop4: detected capacity change from 0 to 2048 [ 501.674334][T32217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.682881][T32217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.692244][T32217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.700894][T32217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.762150][T32218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.906283][T32222] bond2: entered promiscuous mode [ 501.911370][T32222] bond2: entered allmulticast mode [ 501.917527][T32217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.926027][T32217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.980177][T32218] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.018597][T32222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.031986][T32218] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.6653: failed to insert inode 13: doubly allocated? [ 502.315562][T29550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.650428][T32235] __nla_validate_parse: 56 callbacks suppressed [ 502.650526][T32235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6659'. [ 502.707348][T32236] FAULT_INJECTION: forcing a failure. [ 502.707348][T32236] name failslab, interval 1, probability 0, space 0, times 0 [ 502.720541][T32236] CPU: 1 UID: 0 PID: 32236 Comm: syz.1.6659 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 502.720587][T32236] Tainted: [W]=WARN [ 502.720593][T32236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.720604][T32236] Call Trace: [ 502.720609][T32236] [ 502.720616][T32236] __dump_stack+0x1d/0x30 [ 502.720635][T32236] dump_stack_lvl+0xe8/0x140 [ 502.720752][T32236] dump_stack+0x15/0x1b [ 502.720771][T32236] should_fail_ex+0x265/0x280 [ 502.720840][T32236] ? __se_sys_memfd_create+0x1cc/0x590 [ 502.720863][T32236] should_failslab+0x8c/0xb0 [ 502.720889][T32236] __kmalloc_cache_noprof+0x4c/0x320 [ 502.720971][T32236] ? fput+0x8f/0xc0 [ 502.721002][T32236] __se_sys_memfd_create+0x1cc/0x590 [ 502.721021][T32236] __x64_sys_memfd_create+0x31/0x40 [ 502.721069][T32236] x64_sys_call+0x2abe/0x2ff0 [ 502.721091][T32236] do_syscall_64+0xd2/0x200 [ 502.721118][T32236] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 502.721142][T32236] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 502.721214][T32236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.721237][T32236] RIP: 0033:0x7fbc8994ebe9 [ 502.721253][T32236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.721272][T32236] RSP: 002b:00007fbc8838de18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 502.721290][T32236] RAX: ffffffffffffffda RBX: 00000000000002b0 RCX: 00007fbc8994ebe9 [ 502.721350][T32236] RDX: 00007fbc8838def0 RSI: 0000000000000000 RDI: 00007fbc899d27e8 [ 502.721361][T32236] RBP: 0000200000000280 R08: 00007fbc8838dbb7 R09: 00007fbc8838de40 [ 502.721373][T32236] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 502.721384][T32236] R13: 00007fbc8838def0 R14: 00007fbc8838deb0 R15: 0000200000000140 [ 502.721424][T32236] [ 503.043177][T32213] JBD2: no valid journal superblock found [ 503.048979][T32213] EXT4-fs (loop2): Could not load journal inode [ 503.089696][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 503.098626][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 503.134172][T32240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6660'. [ 503.143277][T32240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6660'. [ 503.143864][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 503.185138][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 503.194182][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 503.204583][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 503.221173][T32249] netlink: 300 bytes leftover after parsing attributes in process `syz.0.6664'. [ 503.309432][T32258] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.332732][T32262] lo speed is unknown, defaulting to 1000 [ 503.415925][T32259] loop2: detected capacity change from 0 to 2048 [ 503.446384][T32259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.460918][T32259] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.473353][T32259] EXT4-fs error (device loop2): __ext4_new_inode:1279: comm syz.2.6667: failed to insert inode 13: doubly allocated? [ 503.506143][T32272] lo speed is unknown, defaulting to 1000 [ 503.833030][T32284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=32284 comm=syz.1.6674 [ 504.189602][T29165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.251275][T32287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.260021][T32287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.270927][T32287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.279568][T32287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.490534][T32287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.499446][T32287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.851909][T32305] siw: device registration error -23 [ 504.925376][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 504.925391][ T29] audit: type=1326 audit(1755037875.052:12454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 504.966682][T32304] lo speed is unknown, defaulting to 1000 [ 505.105117][T32309] loop0: detected capacity change from 0 to 1024 [ 505.197539][T32309] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 505.208507][T32309] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 505.315300][ T29] audit: type=1326 audit(1755037875.082:12455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 505.338995][ T29] audit: type=1326 audit(1755037875.092:12456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 505.362653][ T29] audit: type=1326 audit(1755037875.092:12457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 505.386274][ T29] audit: type=1326 audit(1755037875.092:12458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 505.409999][ T29] audit: type=1326 audit(1755037875.102:12459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 505.433677][ T29] audit: type=1326 audit(1755037875.102:12460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 505.457239][ T29] audit: type=1326 audit(1755037875.102:12461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 505.481002][ T29] audit: type=1326 audit(1755037875.102:12462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 505.504648][ T29] audit: type=1326 audit(1755037875.102:12463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32306 comm="syz.3.6682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3a68ebe9 code=0x7ffc0000 [ 505.591177][T32309] JBD2: no valid journal superblock found [ 505.596979][T32309] EXT4-fs (loop0): Could not load journal inode [ 505.987082][T32335] lo speed is unknown, defaulting to 1000 [ 506.122628][T32349] loop0: detected capacity change from 0 to 1764 [ 506.744907][ T477] netlink: 'syz.1.6710': attribute type 10 has an invalid length. [ 506.744905][ T479] netlink: 'syz.1.6710': attribute type 10 has an invalid length. [ 506.744932][ T477] dummy0: entered promiscuous mode [ 506.792994][ T477] bridge0: port 3(dummy0) entered blocking state [ 506.799402][ T477] bridge0: port 3(dummy0) entered disabled state [ 506.815967][ T477] dummy0: entered allmulticast mode [ 506.880014][ T477] bridge0: port 3(dummy0) entered blocking state [ 506.886431][ T477] bridge0: port 3(dummy0) entered forwarding state [ 506.983343][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.991810][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.000913][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.009441][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.218639][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.227270][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.321389][ T916] lo speed is unknown, defaulting to 1000 [ 507.560821][ T949] loop1: detected capacity change from 0 to 512 [ 507.567744][ T949] ext4: Unknown parameter 'smackfstransmute' [ 507.582282][ T949] loop1: detected capacity change from 0 to 1024 [ 507.589502][ T949] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 507.726197][ T949] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.6739: lblock 1 mapped to illegal pblock 1 (length 1) [ 507.740669][ T949] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6739: Failed to acquire dquot type 0 [ 507.753777][ T949] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.6739: Freeing blocks not in datazone - block = 0, count = 4096 [ 507.768001][ T949] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6739: Invalid inode bitmap blk 0 in block_group 0 [ 507.781601][ T949] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 507.795779][ T949] EXT4-fs (loop1): 1 orphan inode deleted [ 507.802051][ T949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.832145][ T955] lo speed is unknown, defaulting to 1000 [ 507.928079][ T949] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.6739: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 507.951562][ T949] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.6739: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 507.974064][ T947] syzkaller0: entered promiscuous mode [ 507.975907][T11977] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 507.979560][ T947] syzkaller0: entered allmulticast mode [ 508.001585][T11977] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 508.404919][T28220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.425180][ T976] __nla_validate_parse: 22 callbacks suppressed [ 508.425195][ T976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6747'. [ 508.440669][ T976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6747'. [ 508.551519][ T984] siw: device registration error -23 [ 508.562537][ T987] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6749'. [ 508.563017][ T983] loop0: detected capacity change from 0 to 512 [ 508.574311][ T980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6749'. [ 508.599367][ T983] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 508.611157][ T984] loop1: detected capacity change from 0 to 1024 [ 508.614265][ T983] EXT4-fs (loop0): orphan cleanup on readonly fs [ 508.639852][ T984] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 508.650833][ T984] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 508.650951][ T983] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.6750: Block bitmap for bg 0 marked uninitialized [ 508.664060][ T984] JBD2: no valid journal superblock found [ 508.679435][ T984] EXT4-fs (loop1): Could not load journal inode [ 508.692314][ T983] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 508.775489][ T983] EXT4-fs (loop0): 1 orphan inode deleted [ 508.783849][ T983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 508.818824][ T983] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 508.830778][ T983] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 508.858780][ T983] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.224635][ T1003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.233354][ T1003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.244496][ T1003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.253151][ T1003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.465135][ T1003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.473778][ T1003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.851335][ T1843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6758'. [ 509.860399][ T1843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6758'. [ 510.124525][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 510.124538][ T29] audit: type=1326 audit(1755037880.252:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1929 comm="syz.0.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 510.309336][ T29] audit: type=1326 audit(1755037880.282:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1929 comm="syz.0.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 510.333000][ T29] audit: type=1326 audit(1755037880.282:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1929 comm="syz.0.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 510.341032][ T1935] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6764'. [ 510.365724][ T1931] loop1: detected capacity change from 0 to 2048 [ 510.384627][ T1935] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6764'. [ 510.404651][ T1931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.417617][ T1931] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.477190][ T1947] loop2: detected capacity change from 0 to 2364 [ 510.588404][ T29] audit: type=1326 audit(1755037880.712:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1958 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 510.612308][ T29] audit: type=1326 audit(1755037880.712:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1958 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 510.653018][ T29] audit: type=1326 audit(1755037880.762:12679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1958 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 510.676688][ T29] audit: type=1326 audit(1755037880.762:12680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1958 comm="syz.0.6774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 510.770809][ T1969] FAULT_INJECTION: forcing a failure. [ 510.770809][ T1969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.783986][ T1969] CPU: 0 UID: 0 PID: 1969 Comm: syz.0.6777 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 510.784019][ T1969] Tainted: [W]=WARN [ 510.784026][ T1969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.784038][ T1969] Call Trace: [ 510.784045][ T1969] [ 510.784126][ T1969] __dump_stack+0x1d/0x30 [ 510.784149][ T1969] dump_stack_lvl+0xe8/0x140 [ 510.784166][ T1969] dump_stack+0x15/0x1b [ 510.784180][ T1969] should_fail_ex+0x265/0x280 [ 510.784198][ T1969] should_fail+0xb/0x20 [ 510.784236][ T1969] should_fail_usercopy+0x1a/0x20 [ 510.784259][ T1969] _copy_to_user+0x20/0xa0 [ 510.784352][ T1969] simple_read_from_buffer+0xb5/0x130 [ 510.784371][ T1969] proc_fail_nth_read+0x10e/0x150 [ 510.784395][ T1969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.784419][ T1969] vfs_read+0x1a8/0x770 [ 510.784489][ T1969] ? __rcu_read_unlock+0x4f/0x70 [ 510.784557][ T1969] ? __fget_files+0x184/0x1c0 [ 510.784579][ T1969] ? __rcu_read_unlock+0x4f/0x70 [ 510.784602][ T1969] ksys_read+0xda/0x1a0 [ 510.784702][ T1969] __x64_sys_read+0x40/0x50 [ 510.784773][ T1969] x64_sys_call+0x27bc/0x2ff0 [ 510.784793][ T1969] do_syscall_64+0xd2/0x200 [ 510.784825][ T1969] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 510.784848][ T1969] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 510.784944][ T1969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.784990][ T1969] RIP: 0033:0x7fa365b6d5fc [ 510.785006][ T1969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 510.785020][ T1969] RSP: 002b:00007fa3645cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.785037][ T1969] RAX: ffffffffffffffda RBX: 00007fa365d95fa0 RCX: 00007fa365b6d5fc [ 510.785048][ T1969] RDX: 000000000000000f RSI: 00007fa3645cf0a0 RDI: 0000000000000004 [ 510.785114][ T1969] RBP: 00007fa3645cf090 R08: 0000000000000000 R09: 0000000000000000 [ 510.785124][ T1969] R10: 00000000000000c8 R11: 0000000000000246 R12: 0000000000000001 [ 510.785138][ T1969] R13: 00007fa365d96038 R14: 00007fa365d95fa0 R15: 00007fff75d78b78 [ 510.785191][ T1969] [ 511.038149][T28220] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.059523][ T1970] lo speed is unknown, defaulting to 1000 [ 511.179306][ T1973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6779'. [ 511.188527][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6779'. [ 511.370692][ T1980] FAULT_INJECTION: forcing a failure. [ 511.370692][ T1980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.383842][ T1980] CPU: 1 UID: 0 PID: 1980 Comm: syz.0.6781 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 511.383903][ T1980] Tainted: [W]=WARN [ 511.383909][ T1980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.383919][ T1980] Call Trace: [ 511.383925][ T1980] [ 511.383969][ T1980] __dump_stack+0x1d/0x30 [ 511.383993][ T1980] dump_stack_lvl+0xe8/0x140 [ 511.384078][ T1980] dump_stack+0x15/0x1b [ 511.384093][ T1980] should_fail_ex+0x265/0x280 [ 511.384175][ T1980] should_fail+0xb/0x20 [ 511.384190][ T1980] should_fail_usercopy+0x1a/0x20 [ 511.384209][ T1980] _copy_from_user+0x1c/0xb0 [ 511.384252][ T1980] ___sys_sendmsg+0xc1/0x1d0 [ 511.384289][ T1980] __x64_sys_sendmsg+0xd4/0x160 [ 511.384310][ T1980] x64_sys_call+0x191e/0x2ff0 [ 511.384328][ T1980] do_syscall_64+0xd2/0x200 [ 511.384432][ T1980] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 511.384458][ T1980] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 511.384523][ T1980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.384546][ T1980] RIP: 0033:0x7fa365b6ebe9 [ 511.384561][ T1980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.384574][ T1980] RSP: 002b:00007fa3645cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.384592][ T1980] RAX: ffffffffffffffda RBX: 00007fa365d95fa0 RCX: 00007fa365b6ebe9 [ 511.384606][ T1980] RDX: 0000000000008000 RSI: 0000200000000240 RDI: 0000000000000003 [ 511.384617][ T1980] RBP: 00007fa3645cf090 R08: 0000000000000000 R09: 0000000000000000 [ 511.384653][ T1980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.384667][ T1980] R13: 00007fa365d96038 R14: 00007fa365d95fa0 R15: 00007fff75d78b78 [ 511.384687][ T1980] [ 511.715653][ T29] audit: type=1326 audit(1755037881.842:12681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1991 comm="syz.0.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 511.739392][ T29] audit: type=1326 audit(1755037881.842:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1991 comm="syz.0.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 511.763130][ T29] audit: type=1326 audit(1755037881.842:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1991 comm="syz.0.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa365b6ebe9 code=0x7ffc0000 [ 511.879030][ T2005] batadv0: entered allmulticast mode [ 511.944844][ T2016] siw: device registration error -23 [ 512.015948][ T2020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=2020 comm=syz.0.6796 [ 512.224445][ T2029] IPv6: sit1: Disabled Multicast RS [ 512.239435][ T2027] lo speed is unknown, defaulting to 1000 [ 512.269315][ T2027] vlan2: entered allmulticast mode [ 512.538873][ T2057] loop4: detected capacity change from 0 to 1024 [ 512.558519][ T2057] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 512.569516][ T2057] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 512.623771][ T2057] JBD2: no valid journal superblock found [ 512.629559][ T2057] EXT4-fs (loop4): Could not load journal inode [ 512.911826][ T2066] lo speed is unknown, defaulting to 1000 [ 513.224961][ T2091] IPv6: sit1: Disabled Multicast RS [ 513.388147][ T2110] SELinux: failed to load policy [ 513.468530][ T2119] __nla_validate_parse: 51 callbacks suppressed [ 513.468546][ T2119] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6832'. [ 513.634333][ T2128] loop4: detected capacity change from 0 to 1024 [ 513.660351][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 513.661601][ T2128] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 513.669283][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 513.689138][ T2128] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 513.693166][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 513.746102][ T2128] JBD2: no valid journal superblock found [ 513.751844][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 513.751856][ T2128] EXT4-fs (loop4): Could not load journal inode [ 513.767138][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 513.813676][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 513.889752][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 513.898815][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 513.908798][ T2130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6836'. [ 513.940979][ T2139] 9pnet_fd: Insufficient options for proto=fd [ 513.954342][ T2139] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 513.972744][ T2139] SELinux: failed to load policy [ 514.014518][ T2139] netlink: 'syz.1.6838': attribute type 4 has an invalid length. [ 514.015867][ T2142] SELinux: failed to load policy [ 514.029881][ T2143] loop4: detected capacity change from 0 to 1024 [ 514.042463][ T2139] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 514.069300][ T2143] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 514.080325][ T2143] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 514.108550][ T2143] JBD2: no valid journal superblock found [ 514.114418][ T2143] EXT4-fs (loop4): Could not load journal inode [ 514.452840][ T2172] siw: device registration error -23 [ 515.011777][ T2199] lo speed is unknown, defaulting to 1000 [ 515.101437][ T2207] 9pnet_fd: Insufficient options for proto=fd [ 515.110912][ T2207] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 515.121897][ T2207] SELinux: failed to load policy [ 515.134115][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 515.134130][ T29] audit: type=1326 audit(1755037885.262:12781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.166147][ T2207] netlink: 'syz.1.6851': attribute type 4 has an invalid length. [ 515.174055][ T2207] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 515.191976][ T29] audit: type=1326 audit(1755037885.292:12782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.215474][ T29] audit: type=1326 audit(1755037885.292:12783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.239061][ T29] audit: type=1326 audit(1755037885.292:12784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.262596][ T29] audit: type=1326 audit(1755037885.292:12785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.286244][ T29] audit: type=1326 audit(1755037885.292:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.309840][ T29] audit: type=1326 audit(1755037885.292:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.333407][ T29] audit: type=1326 audit(1755037885.292:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.368861][ T29] audit: type=1326 audit(1755037885.492:12789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.392525][ T29] audit: type=1326 audit(1755037885.492:12790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2206 comm="syz.1.6851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8994ebe9 code=0x7ffc0000 [ 515.541248][ T2222] loop4: detected capacity change from 0 to 1024 [ 515.565841][ T2222] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 515.577155][ T2222] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 515.663184][ T2222] JBD2: no valid journal superblock found [ 515.669057][ T2222] EXT4-fs (loop4): Could not load journal inode [ 515.775598][ T2236] siw: device registration error -23 [ 515.845049][ T2236] loop1: detected capacity change from 0 to 1024 [ 515.892889][ T2236] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 515.904002][ T2236] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 515.985185][ T2236] JBD2: no valid journal superblock found [ 515.990961][ T2236] EXT4-fs (loop1): Could not load journal inode [ 516.388187][ T2288] 9pnet_fd: Insufficient options for proto=fd [ 516.398915][ T2288] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 516.406885][ T2288] SELinux: failed to load policy [ 516.416087][ T2288] netlink: 'syz.1.6888': attribute type 4 has an invalid length. [ 516.425026][ T2288] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 516.608362][ T2308] lo speed is unknown, defaulting to 1000 [ 516.660207][ T2316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=2316 comm=syz.2.6899 [ 516.812059][ T2320] 9pnet_fd: Insufficient options for proto=fd [ 516.819806][ T2320] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 516.827542][ T2320] SELinux: failed to load policy [ 516.834151][ T2320] netlink: 'syz.3.6900': attribute type 4 has an invalid length. [ 516.841955][ T2320] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 516.878283][ T2321] lo speed is unknown, defaulting to 1000 [ 516.904841][ T2321] vlan2: entered allmulticast mode [ 517.033518][ T2318] ================================================================== [ 517.041636][ T2318] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 517.048231][ T2318] [ 517.050538][ T2318] write to 0xffff88810cf22190 of 80 bytes by task 3445 on cpu 1: [ 517.058238][ T2318] __bpf_get_stackid+0x761/0x800 [ 517.063172][ T2318] bpf_get_stackid+0xee/0x120 [ 517.067852][ T2318] bpf_get_stackid_raw_tp+0xf6/0x120 [ 517.073123][ T2318] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 517.078570][ T2318] bpf_trace_run2+0x104/0x1c0 [ 517.083234][ T2318] kfree+0x27b/0x320 [ 517.087120][ T2318] bpf_map_free_deferred+0x88/0x160 [ 517.092308][ T2318] process_scheduled_works+0x4cb/0x9d0 [ 517.097763][ T2318] worker_thread+0x582/0x770 [ 517.102346][ T2318] kthread+0x489/0x510 [ 517.106399][ T2318] ret_from_fork+0xda/0x150 [ 517.110885][ T2318] ret_from_fork_asm+0x1a/0x30 [ 517.115802][ T2318] [ 517.118126][ T2318] read to 0xffff88810cf221d0 of 8 bytes by task 2318 on cpu 0: [ 517.125660][ T2318] bcmp+0x23/0x90 [ 517.129297][ T2318] __bpf_get_stackid+0x371/0x800 [ 517.134230][ T2318] bpf_get_stackid+0xee/0x120 [ 517.138896][ T2318] bpf_get_stackid_raw_tp+0xf6/0x120 [ 517.144170][ T2318] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 517.149621][ T2318] bpf_trace_run2+0x104/0x1c0 [ 517.154288][ T2318] kfree+0x27b/0x320 [ 517.158175][ T2318] ___sys_recvmsg+0x135/0x370 [ 517.162838][ T2318] do_recvmmsg+0x1ef/0x540 [ 517.167239][ T2318] __x64_sys_recvmmsg+0xe5/0x170 [ 517.172191][ T2318] x64_sys_call+0x27a6/0x2ff0 [ 517.176868][ T2318] do_syscall_64+0xd2/0x200 [ 517.181379][ T2318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.187270][ T2318] [ 517.189584][ T2318] value changed: 0xffffffff8567aeb2 -> 0xffffffff812edefa [ 517.196676][ T2318] [ 517.199009][ T2318] Reported by Kernel Concurrency Sanitizer on: [ 517.205156][ T2318] CPU: 0 UID: 0 PID: 2318 Comm: syz.2.6899 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 517.219208][ T2318] Tainted: [W]=WARN [ 517.222995][ T2318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.233043][ T2318] ==================================================================