last executing test programs: 1m20.20273539s ago: executing program 2 (id=44): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0x4008800) 1m19.795116583s ago: executing program 2 (id=52): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) getpgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000085000000230000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 1m19.082144021s ago: executing program 2 (id=61): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x38, 0x10, 0x437, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 1m18.695907132s ago: executing program 2 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000002000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="a1830071967b745cbef105"], 0x74}}, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet(r10, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$poke(0x15, r11, 0x0, 0x7) recvmmsg(r10, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1m18.044531044s ago: executing program 2 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1m17.441975303s ago: executing program 2 (id=83): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x36, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000d336b749b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 1m17.377528088s ago: executing program 32 (id=83): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x36, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000d336b749b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 49.408984791s ago: executing program 3 (id=628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r6}, 0x18) r7 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r8, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r7}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000340), 0x1, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4], 0xffffffffffffffd6}}], 0x1, 0x80) r9 = socket$netlink(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000108000200ac1e00010c000280050001000000000008000740ff"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'macsec0\x00', {0x4}, 0x8}) 49.310783009s ago: executing program 3 (id=633): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@cswp={0x58, 0x114, 0x7, {{0xffffff2f, 0x677}, &(0x7f00000002c0)=0x3, &(0x7f0000000340)=0xb, 0x5, 0x4, 0x0, 0x6, 0x2, 0x2}}], 0x58}, 0x0) 49.243234164s ago: executing program 3 (id=638): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x20004004) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xb8}}, 0x0) 48.357296085s ago: executing program 3 (id=667): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r0, &(0x7f0000000000)=""/77, 0x4d) getdents64(r0, 0xffffffffffffffff, 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f0000000280), 0x0}, 0x20) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$eJzs3EtvG0UcAPD/bl59hZhSXm2hhoKIeCRNWqAHJB4CqRckJDiUY0jTqjRtUBMkWkU0IFSOqJ+gcETiE3CCCwIkJBBXuCOkCuXS0gNatLY3dRI7OGkc0+T3k1zPeGZ3ZnY969mZbgLYssr5P0nEroj4LSIGqtHFGcrVtxvzs+N/z8+OJ5Flb/6VVPJdn58dL7IW2+2sRQbTiPSTJPY1KHf6wsUzY5OTE+dr8eGZs+8NT1+4+Mzps2OnJk5NnBs9evTI4ZHnnxt9dl3a2Z/Xde+HU/sfPPb2ldfHj19554ev8vruqqVfn5/tXbxFqQjsjYhs6f5eaqHMcpQXH8s6j6+u+v97/XXhpLuDFWFVuiIiP109lf4/EF1x6+QNxGsfR6QdrR/QPlmWZX3LPs2vCtvzwFwGbGJJdLoGQGcUv/j5fXzx2uAhSEdde7l6A5S3+0btVU3prtz5lEvVe6P+NpVfjgMRcfPq8bmbV2PJfAoAQDt8k49/nm40/kvjvrp8d9XWhkoRcXdE7I6IeyJiT0TcG1HJe39EPNBqwUnjpZHl459ftq+xaS3Jx38v1Na2Fo//Fua9S121WH+l/T3JydOTE4dqx2Qwevry+MgKZXz76q+fNUsrR0Q+9iteefnFWLBWjz+7l0zQnRibGbudNte7diBib3ej9icLKwFJbFvz/vNjdvrJL/c3S//v9q9gHdaZsi8inqie/7lY0v5CsvL65PC2mJw4NFx8K5b78efLbzQr/7bavw6ufRSxo+H3f6H9paR+vXZ61UV0X/7906b3NGv9/vcmb1XCxaLtB2MzM+dHInqTueWfj97atogX+fP2Dx5s3P93R/zzeW27fRGRf4kfioiHIyp3bXndH4mIRyPi4AoH4PtXHns3f/9pTe1vr7z9J1Z1/usDPbH0k0aBrjPffd2s/NbO/5FKaLD2SSvXv2rhxXWreQXXetwAAADgTpJW/g98kkRU50121aXtiR3p5NT0zFMnp94/d6KaVoqetJjpGqibDx2pzQ0X8dEl8cOVeeMsy7LtlfjQ+NRku9bUgdbsrPb/dGjhWpCmQ0PVtD+6Fud9sSM1BNpqVetozZ5oA+5IrfV/HR82o4X+v/xJwILOD5tUtf93DXS6HsDG8/daYOtq1P8vRdzoQFWADeb3H7Yu/R+2rtX2/1Kb6gFsPL//sCUtfiS+N1p4nL+lwO5j67OfzR/o6nQ1+ta2eaQdP3TLA0mDpLRB5rTlPfeuS8VipTx9EdHqDi/FRh3MTl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1se/AQAA//++KOKq") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020000000b00000000006e"], 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 47.93088007s ago: executing program 3 (id=673): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1000, 0x7}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, 0x0, 0x0, 0x0, 0x3000) msgsnd(r4, &(0x7f0000000180)={0x2}, 0x8, 0x800) fstat(0xffffffffffffffff, 0x0) 47.277045822s ago: executing program 3 (id=681): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001600010a00009fff"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) 47.275801472s ago: executing program 33 (id=681): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001600010a00009fff"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x10) 7.488352017s ago: executing program 5 (id=1491): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000700000000000007000000000030002e612e2e2e2e3e0084938b62677848d28d0d0a291defd17b199576101fece696f2e397839c7d79acff1b4b15f1e10447b80a397a622d254f33b6b655c000e83dc201bf77a74ed9cd9d7438063ef7ac0e5b69b080ac42d149ad4bbce77026e1a0c11ea91a1603343db4fa483a3e8f9161ba7e5fcbf38608374b19c48fe50ff59c1e53ca6f5b6f71c164de7550feeea43fdc9a4702d433c2e157e07b8feb799e81d0bce91fdf1c24d699b1464035832b02d7c7d10ca1955fb84fdf30679d7f6a5009ce0fcfb4fe4a44b26c"], 0x0, 0x2f, 0x0, 0x1, 0x8, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x3}, @acquire={0x40046305, 0x1}, @clear_death={0x400c630f, 0x1}, @request_death, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @dead_binder_done], 0x82, 0x0, &(0x7f0000000240)="3342d66d054854aa76a8c54fbc79e3bed852c42f8ac813013cf2bf3709d5b143397ff47100658d34cd0b48362d927fa290f66da26b88f36a90a6297a6a152a1c24e3ef903119637529eba4ef0a875524dd2207ca978a1eca8847708de646ed045ef11ae2c9cd6cc6da89ea46838a08f1508e0f8e863d30dfac99a4472c17bd0933e0"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000001, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_access(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x5f) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20084084) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") socket$netlink(0x10, 0x3, 0x4) 5.301432273s ago: executing program 5 (id=1524): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 5.163199434s ago: executing program 5 (id=1529): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 5.003162527s ago: executing program 5 (id=1533): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xa4000021) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) close(r0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x703, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r8, 0x40085503, &(0x7f0000000000)=0x1) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) 4.372796448s ago: executing program 6 (id=1547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) 4.301168484s ago: executing program 6 (id=1549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r2 = socket(0x1, 0x5, 0x0) sendfile(r2, r1, 0x0, 0x8) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x200, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x401}, {{0x18, 0x4, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11fa, &(0x7f00000015c0)="$eJzs3E+LW1UYB+C349iZTp0/aq22IB50o5tLZxZudBNkCtKA0jZCKwi3zo2GXJOQGwYiYnXl1s8hLt0J4k43s/EzuJtNl7MQr5hMnUaiVGQaKM+zyQvn/HjPIXAg4Z57+ObXn3TbVdbOR7F05kwsDSLSUYoUS3HfF/HaGz/9/OKNW7evNZrN3espXW3c3H49pbTx0g/vf/btyz+Ozr/33cb3K3Gw9cHhvZ1fDy4eXDr8/ebHnSp1qtTrj1Ke7vT7o/xOWaS9TtXNUnq3LPKqSJ1eVQxnxttlfzAYp7y3t742GBZVlfLeOHWLcRr102g4TvlHeaeXsixL62vB/9H65qiu662o6yfjbNR1XZ+LtTgfT8V6bMRmbMXT8Uw8GxfiubgYz8cLcWkya9HrBgAAAAAAAAAAAAAAAAAAgMfL0eQ2v/v/AAAAAAAAAAAAAAAAAAAAsEg3bt2+1mg2d6+ntBpRfrXf2m9NP6fjjXZ0oowirsRm/BaT2/9T0/rq283dK2liK74s7x7n7+63npjNb09eJzA3vz3Np9n8Sqw9mN+JzbgwP78zN78ar77yQD6Lzfjlw+hHGXvxZ/Yk//l2Sm+90/xb/vJkHgAAADwOsvSXub/fs+yfxqf5h/l/YOl+s5n8clxeXti2OVaNP+3mZVkMT604G6fe4t+K1YhYXPeHK+5183I5Fr4MheKkOD4gVhZ8QHGqTr70Ra8EAAAAAAAAAACA/+JRPE44t/G5R75VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A924FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFQAA///O9NGh") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110a10000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000300)={0x1e, 0x1, 0x3, "a6391d955044886f7f3a8e34f8240e777c4d1a60760dd0c249acefcf19d7"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000340)={0x7, 0x7fffffff, 0x3, 0x1, 0x7, "41f470813b0e00"}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000005ffffff"], 0x20}}, 0x0) 3.684093793s ago: executing program 6 (id=1563): mkdir(&(0x7f0000000580)='./file0\x00', 0x84) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 3.619217089s ago: executing program 6 (id=1564): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.555731913s ago: executing program 6 (id=1565): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x95bda107d86ebb57, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "ffffffffffffffff", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="b9", 0xfffffffffffffca2, 0x8000, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$netlink(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) personality(0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000800000000000000000000000000000000000000000000000003c34f0903aea39e67d82bbd87a98b10fa8baae92a6031d3cfbe246d0e95d0be3074ef131c2b963c44fd5292c3cfa46c2e3950aeb294c4258d2c2416239ca6f9bb2ee2379cb5bd5e0ec1ae739064191242d1b69c2252b45a33b27b3b02b4e9f3bfefc502ec1d3719bd1bbb0d0c63ec2ab329c8c739a106c3c61f2ecca246f51fc93c2c7ec24dbbc1cacd5550766"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3.372606179s ago: executing program 6 (id=1566): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000700000000000007000000000030002e612e2e2e2e3e0084938b62677848d28d0d0a291defd17b199576101fece696f2e397839c7d79acff1b4b15f1e10447b80a397a622d254f33b6b655c000e83dc201bf77a74ed9cd9d7438063ef7ac0e5b69b080ac42d149ad4bbce77026e1a0c11ea91a1603343db4fa483a3e8f9161ba7e5fcbf38608374b19c48fe50ff59c1e53ca6f5b6f71c164de7550feeea43fdc9a4702d433c2e157e07b8feb799e81d0bce91fdf1c24d699b1464035832b02d7c7d10ca1955fb84fdf30679d7f6a5009ce0fcfb4fe4a44b26c"], 0x0, 0x2f, 0x0, 0x1, 0x8, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x3}, @acquire={0x40046305, 0x1}, @clear_death={0x400c630f, 0x1}, @request_death, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @dead_binder_done], 0x82, 0x0, &(0x7f0000000240)="3342d66d054854aa76a8c54fbc79e3bed852c42f8ac813013cf2bf3709d5b143397ff47100658d34cd0b48362d927fa290f66da26b88f36a90a6297a6a152a1c24e3ef903119637529eba4ef0a875524dd2207ca978a1eca8847708de646ed045ef11ae2c9cd6cc6da89ea46838a08f1508e0f8e863d30dfac99a4472c17bd0933e0"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000001, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_access(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x5f) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20084084) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") socket$netlink(0x10, 0x3, 0x4) 2.380364689s ago: executing program 0 (id=1581): mkdir(&(0x7f0000000580)='./file0\x00', 0x84) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.960274812s ago: executing program 5 (id=1585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) 1.872245839s ago: executing program 0 (id=1587): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x23, "4b721b782a17a7b6a00d96363f7fdafd95073830fb8cfb34eb74bd173ef6f0710ef226"}}) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x400008bf) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$TCSETA(r5, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x4, 0x20, 0x0, "0000e5ff0100"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x15}, 0x2424, 0x0, 0x800000, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) close(r2) 1.547662936s ago: executing program 4 (id=1592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000400)={0x1, 0x1, 0x95, r4, 0x5}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) r6 = syz_io_uring_setup(0x7051, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x24}, &(0x7f0000000940), &(0x7f0000000280)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/255, 0xff}], &(0x7f00000003c0)=[0x7ba]}, 0x20) r10 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080)) 1.444847474s ago: executing program 1 (id=1594): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r1 = syz_open_dev$mouse(0x0, 0x4, 0x40400) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e21, 0x5, @remote, 0x1}}, 0x4, 0x9, 0x8, 0x4, 0xf24}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000400)={r2, 0x9}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00'}, 0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x8000, 0x1, 0x2, 0xdccb}, &(0x7f0000000100)=0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r4, &(0x7f0000002400)=""/4102, 0x1006) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) 1.443902694s ago: executing program 4 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x4, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c9", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000000000000000000000a0000000000000", @ANYRES32, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) 1.36600257s ago: executing program 1 (id=1596): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/config\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000080)={0x0, 0x3, 0x7da, 0x101, 0x0, 0x8, 0x0}) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0100230100003402000002000000080001", @ANYRES32=r3], 0x1c}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmmsg$inet(r6, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="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", 0x5c5}], 0x1, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x44000840) 1.319764444s ago: executing program 0 (id=1597): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x1, 0x7, {{0x19, 0x4, 0x1, 0x20, 0x64, 0x67, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@cipso={0x86, 0x3b, 0x0, [{0x2, 0x4, 'ts'}, {0x1, 0xe, "a39109412626488c91abc151"}, {0x2, 0x9, "c6298d215af848"}, {0x7, 0xb, "3028010000f88d0849"}, {0x7, 0xf, "b531f0e99da90e3854c151f53d"}]}, @generic={0x83, 0xd, "dd328a44b93ff051336178"}, @ra={0x94, 0x4}, @noop]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$inet_smc(0x2b, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f00000001c0)={0x404, 0xc6, 0x3, 0xfffffffffffffffd, 0x100000000, 0x2}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x800000000, 0x0, 0x7fffffff}, 0x0, 0x0) 1.157417147s ago: executing program 1 (id=1598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 1.11715426s ago: executing program 1 (id=1599): creat(&(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000008400088080000080580009801c000080060001000200000008000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a0101020500030020000000240001000000000000000000000000000000000000000000000000000000000000000000080005000100000014000200776731"], 0xb4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040), 0x1, 0x512, &(0x7f0000000380)="$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") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x1c, 0x0, 0x407, 0x71bd25, 0x25dfdbf7, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c840}, 0x4000044) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="d4030c9ca8a0db6605d3b618cf049ec4f251715bd73fc7fc14009c934243bbbd80b6e3179f3a370b985ad6931e0569e6493ece81d4d8cf4477f17dc69c7872899566b81a7c2571f80a2b51007d02059c9934c414079ed4d3aec448ade56e3efd784e1f4d0dd981140b70f58bed4d6476860cd397fba97d7b096fc0d5bb8f129bb7acbfdaa60fba14d1f1917e", 0x8c, 0x0) 771.929348ms ago: executing program 5 (id=1600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x4}, 0x18) socket(0x1, 0x5, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x200, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x401}, {{0x18, 0x4, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11fa, &(0x7f00000015c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000300)={0x1e, 0x1, 0x3, "a6391d955044886f7f3a8e34f8240e777c4d1a60760dd0c249acefcf19d7"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000340)={0x7, 0x7fffffff, 0x3, 0x1, 0x7, "41f470813b0e00"}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000005ffffff"], 0x20}}, 0x0) 769.247968ms ago: executing program 4 (id=1601): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 656.098047ms ago: executing program 0 (id=1602): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_open_dev$loop(0x0, 0x7, 0x180862) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x20100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 602.345352ms ago: executing program 4 (id=1603): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x40000012) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 470.745812ms ago: executing program 4 (id=1604): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x20004004) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xb8}}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) 440.996635ms ago: executing program 1 (id=1605): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 305.671135ms ago: executing program 1 (id=1606): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x84040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x5, 0x50}, 0xa002, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x1, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 242.75867ms ago: executing program 0 (id=1607): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b000002", @ANYRES32=r2], 0x20, 0x2400e044}, 0x0) 195.927594ms ago: executing program 4 (id=1608): close(0x3) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000880)={0x14, 0x3, 0x2, 0x201, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=1609): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x1, 0x7, {{0x19, 0x4, 0x1, 0x20, 0x64, 0x67, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010100, @remote, {[@cipso={0x86, 0x3b, 0x0, [{0x2, 0x4, 'ts'}, {0x1, 0xe, "a39109412626488c91abc151"}, {0x2, 0x9, "c6298d215af848"}, {0x7, 0xb, "3028010000f88d0849"}, {0x7, 0xf, "b531f0e99da90e3854c151f53d"}]}, @generic={0x83, 0xd, "dd328a44b93ff051336178"}, @ra={0x94, 0x4}, @noop]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400), 0x4) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_init1(0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f00000001c0)={0x404, 0xc6, 0x3, 0xfffffffffffffffd, 0x100000000, 0x2}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x800000000, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): erval 1, probability 0, space 0, times 0 [ 67.285829][ T5566] CPU: 0 UID: 0 PID: 5566 Comm: syz.3.617 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 67.285863][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 67.285876][ T5566] Call Trace: [ 67.285897][ T5566] [ 67.285906][ T5566] __dump_stack+0x1d/0x30 [ 67.285932][ T5566] dump_stack_lvl+0xe8/0x140 [ 67.285994][ T5566] dump_stack+0x15/0x1b [ 67.286014][ T5566] should_fail_ex+0x265/0x280 [ 67.286040][ T5566] should_failslab+0x8c/0xb0 [ 67.286143][ T5566] kmem_cache_alloc_noprof+0x50/0x310 [ 67.286177][ T5566] ? getname_flags+0x80/0x3b0 [ 67.286223][ T5566] getname_flags+0x80/0x3b0 [ 67.286252][ T5566] do_sys_openat2+0x60/0x110 [ 67.286350][ T5566] __x64_sys_open+0xe6/0x110 [ 67.286390][ T5566] x64_sys_call+0x1457/0x2ff0 [ 67.286411][ T5566] do_syscall_64+0xd2/0x200 [ 67.286502][ T5566] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.286567][ T5566] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 67.286593][ T5566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.286613][ T5566] RIP: 0033:0x7f51fb1bebe9 [ 67.286628][ T5566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.286720][ T5566] RSP: 002b:00007f51f9c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 67.286740][ T5566] RAX: ffffffffffffffda RBX: 00007f51fb3e5fa0 RCX: 00007f51fb1bebe9 [ 67.286756][ T5566] RDX: 0000000000000102 RSI: 0000000000145142 RDI: 0000200000000300 [ 67.286771][ T5566] RBP: 00007f51f9c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.286785][ T5566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.286796][ T5566] R13: 00007f51fb3e6038 R14: 00007f51fb3e5fa0 R15: 00007ffe9a427118 [ 67.286823][ T5566] [ 67.512814][ T5573] atomic_op ffff8881058a4928 conn xmit_atomic 0000000000000000 [ 67.557088][ T5576] netlink: 14 bytes leftover after parsing attributes in process `syz.5.622'. [ 67.570317][ T5576] hsr_slave_0: left promiscuous mode [ 67.579666][ T5576] hsr_slave_1: left promiscuous mode [ 67.608841][ T5583] capability: warning: `syz.0.625' uses deprecated v2 capabilities in a way that may be insecure [ 67.689482][ T5589] loop3: detected capacity change from 0 to 128 [ 67.784371][ T5605] atomic_op ffff88811ba06928 conn xmit_atomic 0000000000000000 [ 67.894498][ T5618] netlink: 14 bytes leftover after parsing attributes in process `syz.4.639'. [ 67.905798][ T5619] loop5: detected capacity change from 0 to 512 [ 67.912313][ T5618] hsr_slave_0: left promiscuous mode [ 67.919090][ T5618] hsr_slave_1: left promiscuous mode [ 67.930178][ T10] IPVS: starting estimator thread 0... [ 67.937674][ T5619] EXT4-fs (loop5): orphan cleanup on readonly fs [ 67.946004][ T5619] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.640: bad orphan inode 13 [ 67.957911][ T5619] ext4_test_bit(bit=12, block=18) = 1 [ 67.963324][ T5619] is_bad_inode(inode)=0 [ 67.967690][ T5619] NEXT_ORPHAN(inode)=2130706432 [ 67.972572][ T5619] max_ino=32 [ 67.975830][ T5619] i_nlink=1 [ 67.991377][ T5625] serio: Serial port ttyS3 [ 68.007502][ T5619] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 68.031584][ T5627] atomic_op ffff888126862528 conn xmit_atomic 0000000000000000 [ 68.043830][ T5629] netlink: 14 bytes leftover after parsing attributes in process `syz.4.642'. [ 68.054473][ T5623] IPVS: using max 2304 ests per chain, 115200 per kthread [ 68.077506][ T5619] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.640: bg 0: block 248: padding at end of block bitmap is not set [ 68.124937][ T5619] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.640: Failed to acquire dquot type 1 [ 68.162132][ T5619] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.186407][ T31] IPVS: stop unused estimator thread 0... [ 68.206147][ T5638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.646'. [ 68.245499][ T5642] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 68.476544][ T5665] loop5: detected capacity change from 0 to 8192 [ 68.543648][ T5673] atomic_op ffff888104015d28 conn xmit_atomic 0000000000000000 [ 68.561246][ T5676] atomic_op ffff8881058d6128 conn xmit_atomic 0000000000000000 [ 68.598324][ T5678] @ÿ: renamed from veth0_vlan (while UP) [ 68.648880][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 68.648896][ T29] audit: type=1326 audit(1755392454.895:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.726122][ T29] audit: type=1326 audit(1755392454.895:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.749569][ T29] audit: type=1326 audit(1755392454.895:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.772931][ T29] audit: type=1326 audit(1755392454.895:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.796344][ T29] audit: type=1326 audit(1755392454.895:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.819696][ T29] audit: type=1326 audit(1755392454.895:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.843188][ T29] audit: type=1326 audit(1755392454.895:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.866600][ T29] audit: type=1326 audit(1755392454.895:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.889941][ T29] audit: type=1326 audit(1755392454.895:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.913276][ T29] audit: type=1326 audit(1755392454.935:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.0.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 68.967770][ T5691] loop3: detected capacity change from 0 to 512 [ 68.983547][ T5691] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.667: bad orphan inode 13 [ 68.995574][ T5691] ext4_test_bit(bit=12, block=4) = 1 [ 69.000900][ T5691] is_bad_inode(inode)=0 [ 69.005142][ T5691] NEXT_ORPHAN(inode)=0 [ 69.007715][ T5697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.670'. [ 69.009246][ T5691] max_ino=32 [ 69.021345][ T5691] i_nlink=1 [ 69.025648][ T5691] EXT4-fs mount: 29 callbacks suppressed [ 69.025665][ T5691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.057878][ T5691] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.667: Unrecognised inode hash code 20 [ 69.069605][ T5691] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.667: Corrupt directory, running e2fsck is recommended [ 69.154914][ T3310] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz-executor: Unrecognised inode hash code 20 [ 69.166804][ T3310] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 69.218053][ T3407] Process accounting resumed [ 69.344442][ T3310] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /127/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 69.345722][ T3407] IPVS: starting estimator thread 0... [ 69.386485][ T5721] serio: Serial port ttyS3 [ 69.397817][ T3310] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 69.464312][ T5720] IPVS: using max 1920 ests per chain, 96000 per kthread [ 69.478193][ T3310] EXT4-fs error (device loop3): ext4_lookup:1787: inode #16: comm syz-executor: iget: bad i_size value: 880468304680 [ 69.525542][ T3310] EXT4-fs error (device loop3): ext4_lookup:1787: inode #16: comm syz-executor: iget: bad i_size value: 880468304680 [ 69.729470][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.756189][ T4662] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.823895][ T4662] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.911810][ T5740] atomic_op ffff888105965928 conn xmit_atomic 0000000000000000 [ 69.922768][ T4662] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.989022][ T4662] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.103235][ T4662] bridge_slave_1: left allmulticast mode [ 70.109143][ T4662] bridge_slave_1: left promiscuous mode [ 70.114872][ T4662] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.123527][ T4662] bridge_slave_0: left allmulticast mode [ 70.129387][ T4662] bridge_slave_0: left promiscuous mode [ 70.135110][ T4662] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.347505][ T5762] FAULT_INJECTION: forcing a failure. [ 70.347505][ T5762] name failslab, interval 1, probability 0, space 0, times 0 [ 70.360317][ T5762] CPU: 1 UID: 0 PID: 5762 Comm: syz.5.690 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 70.360348][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 70.360428][ T5762] Call Trace: [ 70.360435][ T5762] [ 70.360444][ T5762] __dump_stack+0x1d/0x30 [ 70.360471][ T5762] dump_stack_lvl+0xe8/0x140 [ 70.360495][ T5762] dump_stack+0x15/0x1b [ 70.360512][ T5762] should_fail_ex+0x265/0x280 [ 70.360534][ T5762] should_failslab+0x8c/0xb0 [ 70.360618][ T5762] __kmalloc_noprof+0xa5/0x3e0 [ 70.360652][ T5762] ? sk_prot_alloc+0xa8/0x190 [ 70.360675][ T5762] ? should_fail_ex+0xdb/0x280 [ 70.360743][ T5762] sk_prot_alloc+0xa8/0x190 [ 70.360769][ T5762] sk_alloc+0x34/0x360 [ 70.360806][ T5762] bpf_prog_test_run_skb+0x234/0xbd0 [ 70.360852][ T5762] ? kstrtouint_from_user+0x9f/0xf0 [ 70.360882][ T5762] ? 0xffffffff81000000 [ 70.360895][ T5762] ? __rcu_read_unlock+0x4f/0x70 [ 70.360918][ T5762] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 70.361014][ T5762] bpf_prog_test_run+0x22a/0x390 [ 70.361050][ T5762] __sys_bpf+0x4b9/0x7b0 [ 70.361117][ T5762] __x64_sys_bpf+0x41/0x50 [ 70.361148][ T5762] x64_sys_call+0x2aea/0x2ff0 [ 70.361176][ T5762] do_syscall_64+0xd2/0x200 [ 70.361210][ T5762] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.361310][ T5762] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.361368][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.361392][ T5762] RIP: 0033:0x7f8fd609ebe9 [ 70.361406][ T5762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.361440][ T5762] RSP: 002b:00007f8fd4aff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.361464][ T5762] RAX: ffffffffffffffda RBX: 00007f8fd62c5fa0 RCX: 00007f8fd609ebe9 [ 70.361480][ T5762] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 70.361549][ T5762] RBP: 00007f8fd4aff090 R08: 0000000000000000 R09: 0000000000000000 [ 70.361640][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.361656][ T5762] R13: 00007f8fd62c6038 R14: 00007f8fd62c5fa0 R15: 00007ffe21176458 [ 70.361681][ T5762] [ 70.589412][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 70.618849][ T4662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.640545][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 70.641924][ T4662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.661412][ T4662] bond0 (unregistering): Released all slaves [ 70.707105][ T4662] hsr_slave_0: left promiscuous mode [ 70.712975][ T4662] hsr_slave_1: left promiscuous mode [ 70.727858][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.735391][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.745499][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'. [ 70.755033][ T4662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.762592][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.781373][ T4662] veth1_macvtap: left promiscuous mode [ 70.792553][ T4662] veth0_macvtap: left promiscuous mode [ 70.798560][ T4662] veth1_vlan: left promiscuous mode [ 70.803924][ T4662] veth0_vlan: left promiscuous mode [ 70.930283][ T4662] team0 (unregistering): Port device team_slave_1 removed [ 70.956601][ T4662] team0 (unregistering): Port device C removed [ 71.131378][ T5807] atomic_op ffff88812d33a928 conn xmit_atomic 0000000000000000 [ 71.172831][ T5737] chnl_net:caif_netlink_parms(): no params data found [ 71.241332][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.248579][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.256953][ T5737] bridge_slave_0: entered allmulticast mode [ 71.263968][ T5737] bridge_slave_0: entered promiscuous mode [ 71.271601][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.278779][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.286260][ T5737] bridge_slave_1: entered allmulticast mode [ 71.292888][ T5737] bridge_slave_1: entered promiscuous mode [ 71.323628][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.340053][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.397725][ T5737] team0: Port device team_slave_0 added [ 71.413236][ T5737] team0: Port device team_slave_1 added [ 71.462397][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.469489][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.495505][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.507105][ T5834] loop5: detected capacity change from 0 to 8192 [ 71.532749][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.539936][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.565961][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.626151][ T5737] hsr_slave_0: entered promiscuous mode [ 71.632335][ T5737] hsr_slave_1: entered promiscuous mode [ 71.678801][ T4662] IPVS: stop unused estimator thread 0... [ 71.891637][ T5737] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.912695][ T5737] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.936530][ T5737] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 72.015191][ T5737] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 72.155934][ T5892] loop5: detected capacity change from 0 to 512 [ 72.168066][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.191660][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.217735][ T5892] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 72.231681][ T4662] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.238794][ T4662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.262413][ T5892] EXT4-fs (loop5): orphan cleanup on readonly fs [ 72.266164][ T5737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.279181][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.305433][ T4662] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.310313][ T5892] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.721: corrupted inode contents [ 72.312562][ T4662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.349906][ T5888] __nla_validate_parse: 4 callbacks suppressed [ 72.349924][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 72.368823][ T5892] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.721: mark_inode_dirty error [ 72.380941][ T5892] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.721: corrupted inode contents [ 72.394963][ T5892] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.721: mark_inode_dirty error [ 72.431769][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.444338][ T5892] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.721: corrupted inode contents [ 72.494249][ T5892] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 72.509608][ T5902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.519529][ T5892] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.721: corrupted inode contents [ 72.544522][ T5902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.555909][ T5892] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.721: mark_inode_dirty error [ 72.568934][ T5892] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 72.597711][ T5892] EXT4-fs (loop5): 1 truncate cleaned up [ 72.605278][ T4657] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 72.647011][ T5892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.676219][ T5892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.808366][ T5737] veth0_vlan: entered promiscuous mode [ 72.833372][ T5737] veth1_vlan: entered promiscuous mode [ 72.866193][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.896688][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.897496][ T5737] veth0_macvtap: entered promiscuous mode [ 72.930909][ T5737] veth1_macvtap: entered promiscuous mode [ 72.940409][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.952172][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.963294][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.971760][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.992061][ T4687] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.023354][ T4654] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.033817][ T4654] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.047364][ T4654] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.071500][ T5964] loop6: detected capacity change from 0 to 512 [ 73.114952][ T5964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.129753][ T5964] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.141912][ T5964] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.682: corrupted inode contents [ 73.158492][ T5964] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.682: mark_inode_dirty error [ 73.170522][ T5964] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.682: corrupted inode contents [ 73.186368][ T5964] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.682: corrupted inode contents [ 73.199512][ T5964] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.682: mark_inode_dirty error [ 73.212112][ T5964] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.682: corrupted inode contents [ 73.240365][ T5737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.421328][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.731'. [ 73.431171][ T5971] netlink: 32 bytes leftover after parsing attributes in process `syz.6.731'. [ 73.732028][ T5983] loop5: detected capacity change from 0 to 1024 [ 73.740258][ T5983] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.896350][ T5983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.071052][ T5983] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.094247][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 74.094308][ T29] audit: type=1400 audit(1755392460.265:5297): avc: denied { remove_name } for pid=5974 comm="syz.5.733" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.123119][ T29] audit: type=1400 audit(1755392460.265:5298): avc: denied { unlink } for pid=5974 comm="syz.5.733" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.205661][ T5983] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.272958][ T5983] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.353166][ T5983] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.456654][ T4662] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465963][ T4662] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.474560][ T4662] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.483239][ T4662] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.484590][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.610425][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.622156][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.632079][ T29] audit: type=1326 audit(1755392460.875:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 74.660685][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.671453][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.673656][ T6007] loop5: detected capacity change from 0 to 8192 [ 74.685593][ T29] audit: type=1326 audit(1755392460.905:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 74.709096][ T29] audit: type=1326 audit(1755392460.905:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 74.732572][ T29] audit: type=1326 audit(1755392460.905:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 74.756024][ T29] audit: type=1326 audit(1755392460.905:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 74.779401][ T29] audit: type=1326 audit(1755392460.905:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 74.802781][ T29] audit: type=1326 audit(1755392460.905:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 74.826149][ T29] audit: type=1326 audit(1755392460.905:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.0.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 74.999838][ T6024] binfmt_misc: register: failed to install interpreter file ./file2 [ 75.184239][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 75.197890][ T6027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.748'. [ 75.588610][ T6037] loop5: detected capacity change from 0 to 512 [ 75.600450][ T6037] EXT4-fs: Ignoring removed nobh option [ 75.634346][ T6057] serio: Serial port ttyS3 [ 75.667569][ T6037] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.750: corrupted inode contents [ 75.692567][ T6037] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.750: mark_inode_dirty error [ 75.725661][ T6037] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.750: corrupted inode contents [ 75.738096][ T6037] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.750: mark_inode_dirty error [ 75.761098][ T6037] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.750: Failed to acquire dquot type 0 [ 75.805797][ T6037] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.750: corrupted inode contents [ 75.807014][ T6064] loop4: detected capacity change from 0 to 512 [ 75.819896][ T6037] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.750: mark_inode_dirty error [ 75.856974][ T6064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.860673][ T6037] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.750: corrupted inode contents [ 75.883320][ T6037] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.750: mark_inode_dirty error [ 75.895367][ T6064] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.900275][ T6037] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.750: corrupted inode contents [ 75.924116][ T6064] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.759: corrupted inode contents [ 75.938211][ T6037] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 75.959176][ T6037] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.750: corrupted inode contents [ 75.973647][ T6037] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.750: mark_inode_dirty error [ 75.974479][ T6064] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.759: mark_inode_dirty error [ 75.985277][ T6037] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 76.009067][ T6064] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.759: corrupted inode contents [ 76.021654][ T6037] EXT4-fs (loop5): 1 truncate cleaned up [ 76.022965][ T6073] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.759: corrupted inode contents [ 76.035799][ T6037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.039997][ T6073] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.759: mark_inode_dirty error [ 76.071249][ T6073] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.759: corrupted inode contents [ 76.072512][ T6037] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.095516][ T6073] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.759: mark_inode_dirty error [ 76.107542][ T6073] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.759: corrupted inode contents [ 76.121192][ T6073] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.759: mark_inode_dirty error [ 76.137216][ T6064] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.759: corrupted inode contents [ 76.166494][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.301380][ T6083] serio: Serial port ttyS3 [ 76.382596][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.435325][ T6085] bridge0: entered promiscuous mode [ 76.443320][ T6085] bridge0: port 1(macsec1) entered blocking state [ 76.449952][ T6085] bridge0: port 1(macsec1) entered disabled state [ 76.456882][ T6085] macsec1: entered allmulticast mode [ 76.462281][ T6085] bridge0: entered allmulticast mode [ 76.471027][ T6085] macsec1: left allmulticast mode [ 76.476176][ T6085] bridge0: left allmulticast mode [ 76.492925][ T6085] bridge0: left promiscuous mode [ 76.507962][ T6095] loop6: detected capacity change from 0 to 256 [ 76.585867][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.770'. [ 76.594968][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.770'. [ 76.658761][ T6105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.773'. [ 76.667732][ T6105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.773'. [ 76.772368][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.771'. [ 76.872183][ T6128] loop5: detected capacity change from 0 to 512 [ 76.889637][ T6128] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 76.900879][ T6128] EXT4-fs (loop5): orphan cleanup on readonly fs [ 76.912406][ T6128] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.780: corrupted inode contents [ 76.941947][ T6128] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.780: mark_inode_dirty error [ 76.953160][ T6121] serio: Serial port ttyS3 [ 76.953786][ T6128] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.780: corrupted inode contents [ 76.970524][ T6128] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.780: mark_inode_dirty error [ 76.982856][ T6128] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.780: corrupted inode contents [ 76.995360][ T6128] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 77.008714][ T6128] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.780: corrupted inode contents [ 77.017346][ T6135] loop6: detected capacity change from 0 to 256 [ 77.025528][ T6128] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.780: mark_inode_dirty error [ 77.048942][ T6128] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 77.059659][ T6128] EXT4-fs (loop5): 1 truncate cleaned up [ 77.068122][ T4654] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 77.097771][ T6128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.111139][ T6128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.239488][ T6150] loop5: detected capacity change from 0 to 764 [ 77.418844][ T6175] serio: Serial port ttyS3 [ 77.429916][ T6179] __nla_validate_parse: 2 callbacks suppressed [ 77.429933][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 77.447643][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.796'. [ 77.549412][ T6184] loop6: detected capacity change from 0 to 512 [ 77.670491][ T6190] bridge2: entered allmulticast mode [ 78.019774][ T6211] atomic_op ffff888104014128 conn xmit_atomic 0000000000000000 [ 78.267569][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.808'. [ 78.389068][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.429612][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.477103][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.516787][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.550494][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.816'. [ 78.571322][ T6232] binfmt_misc: register: failed to install interpreter file ./file2 [ 78.585930][ T6228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.816'. [ 79.262860][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 79.286293][ T6251] loop5: detected capacity change from 0 to 8192 [ 79.353851][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.824'. [ 79.387925][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.823'. [ 79.568397][ T6270] loop4: detected capacity change from 0 to 256 [ 79.586820][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 79.586839][ T29] audit: type=1326 audit(1755392465.835:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.676375][ T29] audit: type=1326 audit(1755392465.835:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.699793][ T29] audit: type=1326 audit(1755392465.835:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.700446][ T6273] netlink: 64 bytes leftover after parsing attributes in process `syz.4.829'. [ 79.723152][ T29] audit: type=1326 audit(1755392465.845:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.756044][ T29] audit: type=1326 audit(1755392465.845:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.779414][ T29] audit: type=1326 audit(1755392465.845:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.779944][ T6238] loop6: detected capacity change from 0 to 512 [ 79.802766][ T29] audit: type=1326 audit(1755392465.845:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.802808][ T29] audit: type=1326 audit(1755392465.845:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.855657][ T29] audit: type=1326 audit(1755392465.845:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.879058][ T29] audit: type=1326 audit(1755392465.845:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="syz.4.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30cf50ebe9 code=0x7ffc0000 [ 79.908327][ T6238] EXT4-fs: Ignoring removed nobh option [ 79.938881][ T6273] IPVS: length: 211 != 8 [ 79.950009][ T6238] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.820: corrupted inode contents [ 79.977965][ T6238] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.820: mark_inode_dirty error [ 80.063180][ T6238] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.820: corrupted inode contents [ 80.082460][ T6238] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.820: mark_inode_dirty error [ 80.101899][ T6238] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.820: Failed to acquire dquot type 0 [ 80.114580][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 80.116331][ T6238] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.820: corrupted inode contents [ 80.137201][ T6238] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.820: mark_inode_dirty error [ 80.150840][ T6238] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.820: corrupted inode contents [ 80.165403][ T6238] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.820: mark_inode_dirty error [ 80.178379][ T6238] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.820: corrupted inode contents [ 80.193676][ T6238] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 80.203975][ T6238] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.820: corrupted inode contents [ 80.218113][ T6238] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.820: mark_inode_dirty error [ 80.229780][ T6238] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 80.241572][ T6238] EXT4-fs (loop6): 1 truncate cleaned up [ 80.247923][ T6238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.264093][ T6238] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.606704][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.615499][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.624662][ T6313] binfmt_misc: register: failed to install interpreter file ./file2 [ 80.660564][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.705072][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.768890][ T6327] loop5: detected capacity change from 0 to 164 [ 80.818436][ T5737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.023594][ T6346] loop5: detected capacity change from 0 to 512 [ 81.058162][ T6346] EXT4-fs (loop5): orphan cleanup on readonly fs [ 81.081869][ T6346] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.856: bad orphan inode 13 [ 81.113313][ T6346] ext4_test_bit(bit=12, block=18) = 1 [ 81.118820][ T6346] is_bad_inode(inode)=0 [ 81.123117][ T6346] NEXT_ORPHAN(inode)=2130706432 [ 81.128027][ T6346] max_ino=32 [ 81.131273][ T6346] i_nlink=1 [ 81.134990][ T6346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.157220][ T6346] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 81.178917][ T6346] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.856: bg 0: block 248: padding at end of block bitmap is not set [ 81.194751][ T6346] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.856: Failed to acquire dquot type 1 [ 81.206607][ T6346] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.236383][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.413285][ T6374] sd 0:0:1:0: device reset [ 81.493615][ T6377] loop4: detected capacity change from 0 to 8192 [ 81.585788][ T6387] atomic_op ffff888116fa3528 conn xmit_atomic 0000000000000000 [ 81.860187][ T6400] hsr_slave_0: left promiscuous mode [ 81.867412][ T6400] hsr_slave_1: left promiscuous mode [ 81.892041][ T6401] binfmt_misc: register: failed to install interpreter file ./file2 [ 81.950411][ T6409] atomic_op ffff88811a4bd928 conn xmit_atomic 0000000000000000 [ 81.997778][ T6416] loop5: detected capacity change from 0 to 512 [ 82.077371][ T6416] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 82.090900][ T6416] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.114889][ T6416] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.880: corrupted inode contents [ 82.146323][ T6416] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.880: mark_inode_dirty error [ 82.158478][ T6416] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.880: corrupted inode contents [ 82.171685][ T6432] serio: Serial port ttyS3 [ 82.180524][ T6416] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.880: mark_inode_dirty error [ 82.193610][ T6433] loop4: detected capacity change from 0 to 512 [ 82.199366][ T6416] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.880: corrupted inode contents [ 82.224006][ T6416] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 82.237578][ T6416] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.880: corrupted inode contents [ 82.239852][ T6433] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.280416][ T6433] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.886: bad orphan inode 13 [ 82.284697][ T6416] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.880: mark_inode_dirty error [ 82.311677][ T6416] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 82.322010][ T6416] EXT4-fs (loop5): 1 truncate cleaned up [ 82.324366][ T6433] ext4_test_bit(bit=12, block=18) = 1 [ 82.333205][ T6433] is_bad_inode(inode)=0 [ 82.337430][ T6433] NEXT_ORPHAN(inode)=2130706432 [ 82.342290][ T6433] max_ino=32 [ 82.345549][ T6433] i_nlink=1 [ 82.345844][ T4687] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:44: Failed to release dquot type 1 [ 82.361414][ T6416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.375731][ T6433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.378990][ T6446] atomic_op ffff8881003e0928 conn xmit_atomic 0000000000000000 [ 82.388891][ T6416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.433954][ T6433] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 82.443454][ T6449] hsr_slave_0: left promiscuous mode [ 82.449668][ T6449] hsr_slave_1: left promiscuous mode [ 82.460497][ T6433] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.886: bg 0: block 248: padding at end of block bitmap is not set [ 82.477702][ T6433] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.886: Failed to acquire dquot type 1 [ 82.489987][ T6452] __nla_validate_parse: 19 callbacks suppressed [ 82.490006][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.891'. [ 82.490362][ T6433] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.537438][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.605147][ T6456] loop5: detected capacity change from 0 to 512 [ 82.667164][ T6456] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 82.696016][ T6456] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.704943][ T6456] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.893: corrupted inode contents [ 82.736668][ T6456] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.893: mark_inode_dirty error [ 82.769831][ T6456] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.893: corrupted inode contents [ 82.791299][ T6456] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.893: mark_inode_dirty error [ 82.806279][ T6471] serio: Serial port ttyS3 [ 82.833174][ T6456] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.893: corrupted inode contents [ 82.848175][ T6456] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 82.875289][ T6456] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.893: corrupted inode contents [ 82.890159][ T6456] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.893: mark_inode_dirty error [ 82.902111][ T6481] atomic_op ffff888118bdd128 conn xmit_atomic 0000000000000000 [ 82.911196][ T6456] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 82.928531][ T6456] EXT4-fs (loop5): 1 truncate cleaned up [ 82.935003][ T4662] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:19: Failed to release dquot type 1 [ 82.958450][ T6456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.976054][ T6485] binfmt_misc: register: failed to install interpreter file ./file2 [ 82.995880][ T6456] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.039639][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 83.069568][ T6467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.897'. [ 83.114893][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 83.127710][ T6483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.902'. [ 83.295636][ T6502] netlink: 14 bytes leftover after parsing attributes in process `syz.5.907'. [ 83.666005][ T6521] serio: Serial port ttyS3 [ 84.002890][ T6544] netlink: 14 bytes leftover after parsing attributes in process `syz.4.922'. [ 84.181594][ T6558] loop4: detected capacity change from 0 to 256 [ 84.267010][ T6550] loop5: detected capacity change from 0 to 512 [ 84.297393][ T6550] EXT4-fs: Ignoring removed nobh option [ 84.347500][ T6575] atomic_op ffff888105974d28 conn xmit_atomic 0000000000000000 [ 84.371800][ T6550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.920: corrupted inode contents [ 84.390114][ T6550] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.920: mark_inode_dirty error [ 84.405886][ T6550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.920: corrupted inode contents [ 84.414305][ T6571] loop6: detected capacity change from 0 to 8192 [ 84.458517][ T6550] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.920: mark_inode_dirty error [ 84.498267][ T6550] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.920: Failed to acquire dquot type 0 [ 84.510735][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.926'. [ 84.538513][ T6550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.920: corrupted inode contents [ 84.557806][ T6550] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.920: mark_inode_dirty error [ 84.569413][ T6590] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 84.576046][ T6590] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 84.583890][ T6590] vhci_hcd vhci_hcd.0: Device attached [ 84.590674][ T6550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.920: corrupted inode contents [ 84.612569][ T6550] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.920: mark_inode_dirty error [ 84.625117][ T6550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.920: corrupted inode contents [ 84.637731][ T6591] vhci_hcd: connection closed [ 84.637900][ T4657] vhci_hcd: stop threads [ 84.646911][ T4657] vhci_hcd: release socket [ 84.651338][ T4657] vhci_hcd: disconnect device [ 84.657751][ T6550] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 84.667260][ T6550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.920: corrupted inode contents [ 84.694753][ T6550] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.920: mark_inode_dirty error [ 84.711906][ T6550] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 84.727279][ T6550] EXT4-fs (loop5): 1 truncate cleaned up [ 84.736822][ T6550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.759875][ T6550] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.929644][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 84.929662][ T29] audit: type=1326 audit(1755392471.175:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 85.005314][ T29] audit: type=1326 audit(1755392471.215:6010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 85.028823][ T29] audit: type=1326 audit(1755392471.215:6011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 85.052188][ T29] audit: type=1326 audit(1755392471.215:6012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 85.075570][ T29] audit: type=1326 audit(1755392471.215:6013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 85.099031][ T29] audit: type=1326 audit(1755392471.215:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 85.122390][ T29] audit: type=1326 audit(1755392471.215:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 85.145777][ T29] audit: type=1326 audit(1755392471.215:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 85.169227][ T29] audit: type=1326 audit(1755392471.215:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d22755ba7 code=0x7ffc0000 [ 85.192562][ T29] audit: type=1326 audit(1755392471.215:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d226fadd9 code=0x7ffc0000 [ 85.306123][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.316872][ T6628] loop4: detected capacity change from 0 to 512 [ 85.351993][ T6628] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 85.381569][ T6638] loop6: detected capacity change from 0 to 512 [ 85.389221][ T6628] EXT4-fs (loop4): orphan cleanup on readonly fs [ 85.409152][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 85.419333][ T6599] netlink: 32 bytes leftover after parsing attributes in process `syz.0.933'. [ 85.435868][ T6643] loop5: detected capacity change from 0 to 256 [ 85.454102][ T6628] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.938: corrupted inode contents [ 85.486247][ T6638] EXT4-fs (loop6): orphan cleanup on readonly fs [ 85.507634][ T6638] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.937: bad orphan inode 13 [ 85.519824][ T6628] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.938: mark_inode_dirty error [ 85.519881][ T6638] ext4_test_bit(bit=12, block=18) = 1 [ 85.519895][ T6638] is_bad_inode(inode)=0 [ 85.519901][ T6638] NEXT_ORPHAN(inode)=2130706432 [ 85.545759][ T6638] max_ino=32 [ 85.548969][ T6638] i_nlink=1 [ 85.553367][ T6638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.578814][ T6628] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.938: corrupted inode contents [ 85.599029][ T6628] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.938: mark_inode_dirty error [ 85.611646][ T6638] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 85.633176][ T6628] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.938: corrupted inode contents [ 85.647763][ T6628] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 85.657334][ T6638] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.937: bg 0: block 248: padding at end of block bitmap is not set [ 85.672854][ T6628] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.938: corrupted inode contents [ 85.687162][ T6638] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.937: Failed to acquire dquot type 1 [ 85.699662][ T6638] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.706494][ T6628] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.938: mark_inode_dirty error [ 85.750597][ T6628] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 85.751008][ T5737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.780009][ T6628] EXT4-fs (loop4): 1 truncate cleaned up [ 85.786169][ T4687] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:44: Failed to release dquot type 1 [ 85.808222][ T6628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.825295][ T6628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.940440][ T6669] serio: Serial port ttyS3 [ 86.027446][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.038280][ T6657] loop5: detected capacity change from 0 to 512 [ 86.057745][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.068624][ T6657] EXT4-fs: Ignoring removed nobh option [ 86.103734][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.130705][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.265569][ T6657] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.943: corrupted inode contents [ 86.325867][ T6694] loop6: detected capacity change from 0 to 128 [ 86.336915][ T6694] /dev/loop6: Can't open blockdev [ 86.408201][ T6657] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.943: mark_inode_dirty error [ 86.426557][ T6657] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.943: corrupted inode contents [ 86.491398][ T6657] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.943: mark_inode_dirty error [ 86.519443][ T6657] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.943: Failed to acquire dquot type 0 [ 86.532780][ T6657] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.943: corrupted inode contents [ 86.548992][ T6657] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.943: mark_inode_dirty error [ 86.561047][ T6657] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.943: corrupted inode contents [ 86.587144][ T6657] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.943: mark_inode_dirty error [ 86.618222][ T6657] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.943: corrupted inode contents [ 86.630935][ T6657] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 86.644009][ T6657] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.943: corrupted inode contents [ 86.662862][ T6657] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.943: mark_inode_dirty error [ 86.677175][ T6657] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 86.687550][ T6657] EXT4-fs (loop5): 1 truncate cleaned up [ 86.693838][ T6657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.707380][ T6709] loop6: detected capacity change from 0 to 512 [ 86.715861][ T6657] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.781716][ T6709] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 86.798334][ T6709] EXT4-fs (loop6): orphan cleanup on readonly fs [ 86.807488][ T6709] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.961: corrupted inode contents [ 86.826856][ T6709] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.961: mark_inode_dirty error [ 86.894759][ T6709] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.961: corrupted inode contents [ 86.914961][ T6709] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.961: mark_inode_dirty error [ 86.941553][ T6709] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.961: corrupted inode contents [ 86.957375][ T6709] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 86.966960][ T6709] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.961: corrupted inode contents [ 86.979545][ T6709] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.961: mark_inode_dirty error [ 86.999721][ T6709] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 87.011603][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.022815][ T6709] EXT4-fs (loop6): 1 truncate cleaned up [ 87.029126][ T4657] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 87.042772][ T6709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.056383][ T6709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.146028][ T6738] FAULT_INJECTION: forcing a failure. [ 87.146028][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 87.158756][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: +}[@ Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 87.158785][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.158797][ T6738] Call Trace: [ 87.158803][ T6738] [ 87.158809][ T6738] __dump_stack+0x1d/0x30 [ 87.158837][ T6738] dump_stack_lvl+0xe8/0x140 [ 87.158861][ T6738] dump_stack+0x15/0x1b [ 87.158953][ T6738] should_fail_ex+0x265/0x280 [ 87.158974][ T6738] ? __se_sys_memfd_create+0x1cc/0x590 [ 87.158996][ T6738] should_failslab+0x8c/0xb0 [ 87.159026][ T6738] __kmalloc_cache_noprof+0x4c/0x320 [ 87.159080][ T6738] __se_sys_memfd_create+0x1cc/0x590 [ 87.159138][ T6738] __x64_sys_memfd_create+0x31/0x40 [ 87.159165][ T6738] x64_sys_call+0x2abe/0x2ff0 [ 87.159192][ T6738] do_syscall_64+0xd2/0x200 [ 87.159227][ T6738] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.159261][ T6738] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.159333][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.159363][ T6738] RIP: 0033:0x7f5318b6ebe9 [ 87.159379][ T6738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.159399][ T6738] RSP: 002b:00007f53175cee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 87.159418][ T6738] RAX: ffffffffffffffda RBX: 0000000000000498 RCX: 00007f5318b6ebe9 [ 87.159432][ T6738] RDX: 00007f53175ceef0 RSI: 0000000000000000 RDI: 00007f5318bf27e8 [ 87.159445][ T6738] RBP: 0000200000001b40 R08: 00007f53175cebb7 R09: 00007f53175cee40 [ 87.159495][ T6738] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 87.159508][ T6738] R13: 00007f53175ceef0 R14: 00007f53175ceeb0 R15: 0000200000000040 [ 87.159530][ T6738] [ 87.658028][ T6751] __nla_validate_parse: 11 callbacks suppressed [ 87.658069][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.976'. [ 87.678114][ T6751] netlink: 32 bytes leftover after parsing attributes in process `syz.6.976'. [ 87.698566][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 87.708085][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 87.733693][ T6765] loop4: detected capacity change from 0 to 8192 [ 87.783178][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.6.984'. [ 88.097370][ T6785] atomic_op ffff888116fa1128 conn xmit_atomic 0000000000000000 [ 88.386575][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.992'. [ 88.396229][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.5.992'. [ 88.581724][ T6806] loop5: detected capacity change from 0 to 8192 [ 88.838934][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.995'. [ 88.853007][ T6808] netlink: 32 bytes leftover after parsing attributes in process `syz.6.995'. [ 88.962998][ T6818] atomic_op ffff8881003e2928 conn xmit_atomic 0000000000000000 [ 89.155095][ T6835] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1005'. [ 89.191869][ T6850] atomic_op ffff888103735528 conn xmit_atomic 0000000000000000 [ 89.263329][ T6851] loop4: detected capacity change from 0 to 8192 [ 89.657443][ T6891] atomic_op ffff88812d33b528 conn xmit_atomic 0000000000000000 [ 89.704564][ T6893] 9pnet: Could not find request transport: 0xffffffffffffffff [ 89.954878][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 89.954897][ T29] audit: type=1326 audit(1755392476.205:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd6095ba7 code=0x7ffc0000 [ 89.984719][ T29] audit: type=1326 audit(1755392476.205:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fd603add9 code=0x7ffc0000 [ 90.008252][ T29] audit: type=1326 audit(1755392476.205:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 90.031765][ T29] audit: type=1326 audit(1755392476.205:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 90.073762][ T29] audit: type=1326 audit(1755392476.265:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd6095ba7 code=0x7ffc0000 [ 90.097287][ T29] audit: type=1326 audit(1755392476.265:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fd603add9 code=0x7ffc0000 [ 90.120929][ T29] audit: type=1326 audit(1755392476.265:6656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 90.144481][ T29] audit: type=1326 audit(1755392476.265:6657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd6095ba7 code=0x7ffc0000 [ 90.168618][ T29] audit: type=1326 audit(1755392476.265:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fd603add9 code=0x7ffc0000 [ 90.192118][ T29] audit: type=1326 audit(1755392476.265:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6897 comm="syz.5.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 90.442234][ T6929] serio: Serial port ttyS3 [ 90.448802][ T6923] loop6: detected capacity change from 0 to 8192 [ 90.516509][ T6934] serio: Serial port ttyS3 [ 91.434382][ T6957] loop6: detected capacity change from 0 to 8192 [ 91.496241][ T3662] loop6: p1 p2 p3 p4 [ 91.506858][ T3662] loop6: p1 size 3523149824 extends beyond EOD, truncated [ 91.538410][ T3662] loop6: p2 start 4293394688 is beyond EOD, truncated [ 91.545258][ T3662] loop6: p3 start 150994944 is beyond EOD, truncated [ 91.551972][ T3662] loop6: p4 size 50331648 extends beyond EOD, truncated [ 91.599899][ T6957] loop6: p1 p2 p3 p4 [ 91.611409][ T6956] sd 0:0:1:0: device reset [ 91.611796][ T6957] loop6: p1 size 3523149824 extends beyond EOD, truncated [ 91.634420][ T6957] loop6: p2 start 4293394688 is beyond EOD, truncated [ 91.641348][ T6957] loop6: p3 start 150994944 is beyond EOD, truncated [ 91.648151][ T6957] loop6: p4 size 50331648 extends beyond EOD, truncated [ 91.718336][ T6918] loop5: detected capacity change from 0 to 512 [ 91.738616][ T6918] EXT4-fs: Ignoring removed nobh option [ 91.779611][ T6918] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1031: corrupted inode contents [ 91.845038][ T3662] udevd[3662]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 91.846205][ T4861] udevd[4861]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 91.865878][ T6918] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1031: mark_inode_dirty error [ 91.921610][ T4861] udevd[4861]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 91.925386][ T6918] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1031: corrupted inode contents [ 91.953702][ T3662] udevd[3662]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 91.967218][ T6968] usb usb1: usbfs: process 6968 (syz.1.1047) did not claim interface 0 before use [ 92.062746][ T6918] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1031: mark_inode_dirty error [ 92.101889][ T6918] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1031: Failed to acquire dquot type 0 [ 92.118995][ T6976] atomic_op ffff88811b057528 conn xmit_atomic 0000000000000000 [ 92.122870][ T6920] Process accounting resumed [ 92.144124][ T6918] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1031: corrupted inode contents [ 92.168750][ T6918] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1031: mark_inode_dirty error [ 92.210464][ T6918] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1031: corrupted inode contents [ 92.251498][ T6918] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1031: mark_inode_dirty error [ 92.277733][ T6918] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1031: corrupted inode contents [ 92.313184][ T6918] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 92.343618][ T6918] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1031: corrupted inode contents [ 92.377550][ T6918] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1031: mark_inode_dirty error [ 92.402571][ T6918] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 92.422030][ T6918] EXT4-fs (loop5): 1 truncate cleaned up [ 92.427858][ T6989] TCP: TCP_TX_DELAY enabled [ 92.434379][ T6918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.447929][ T6918] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.697956][ T6996] __nla_validate_parse: 9 callbacks suppressed [ 92.697974][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1060'. [ 92.715166][ T6996] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1060'. [ 92.737536][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.956209][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1061'. [ 92.966173][ T7001] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1061'. [ 93.113469][ T7020] loop6: detected capacity change from 0 to 8192 [ 93.139526][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'. [ 93.150066][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1072'. [ 93.166260][ T7032] loop5: detected capacity change from 0 to 256 [ 93.242347][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1067'. [ 93.388355][ T7040] loop5: detected capacity change from 0 to 512 [ 93.421969][ T7040] EXT4-fs (loop5): orphan cleanup on readonly fs [ 93.445437][ T7040] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1076: bad orphan inode 13 [ 93.475319][ T7040] ext4_test_bit(bit=12, block=18) = 1 [ 93.480781][ T7040] is_bad_inode(inode)=0 [ 93.485000][ T7040] NEXT_ORPHAN(inode)=2130706432 [ 93.489865][ T7040] max_ino=32 [ 93.493071][ T7040] i_nlink=1 [ 93.578759][ T7040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.601194][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'. [ 93.631964][ T7047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1077'. [ 93.655980][ T7040] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 93.686826][ T7040] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1076: bg 0: block 248: padding at end of block bitmap is not set [ 93.738956][ T7040] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1076: Failed to acquire dquot type 1 [ 93.751855][ T7040] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.784626][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.056216][ T7075] loop4: detected capacity change from 0 to 512 [ 94.065748][ T7075] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1088: error while reading EA inode 32 err=-116 [ 94.078877][ T7075] EXT4-fs (loop4): Remounting filesystem read-only [ 94.085563][ T7075] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 94.096249][ T7075] EXT4-fs (loop4): 1 orphan inode deleted [ 94.102352][ T7075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.129817][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.214009][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 94.243586][ T7079] netlink: 'syz.1.1089': attribute type 2 has an invalid length. [ 94.720696][ T7121] serio: Serial port ttyS3 [ 94.949830][ T7128] loop6: detected capacity change from 0 to 8192 [ 94.969733][ T29] kauditd_printk_skb: 843 callbacks suppressed [ 94.969751][ T29] audit: type=1326 audit(1755392481.215:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd6095ba7 code=0x7ffc0000 [ 94.999654][ T29] audit: type=1326 audit(1755392481.215:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fd603add9 code=0x7ffc0000 [ 95.000267][ T7114] Process accounting resumed [ 95.023087][ T29] audit: type=1326 audit(1755392481.215:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 95.067840][ T29] audit: type=1326 audit(1755392481.305:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd6095ba7 code=0x7ffc0000 [ 95.091880][ T29] audit: type=1326 audit(1755392481.305:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fd603add9 code=0x7ffc0000 [ 95.115353][ T29] audit: type=1326 audit(1755392481.305:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 95.138918][ T29] audit: type=1326 audit(1755392481.305:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 95.165969][ T29] audit: type=1326 audit(1755392481.415:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8fd6095ba7 code=0x7ffc0000 [ 95.203935][ T29] audit: type=1326 audit(1755392481.415:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8fd603add9 code=0x7ffc0000 [ 95.227295][ T29] audit: type=1326 audit(1755392481.415:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7124 comm="syz.5.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 95.341215][ T7151] atomic_op ffff88812d33b528 conn xmit_atomic 0000000000000000 [ 95.414087][ T7149] capability: warning: `syz.6.1108' uses 32-bit capabilities (legacy support in use) [ 95.598943][ T7184] loop6: detected capacity change from 0 to 512 [ 95.620431][ T7184] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.639238][ T7184] EXT4-fs: dax option not supported [ 95.669476][ T7184] bridge_slave_1: left allmulticast mode [ 95.675250][ T7184] bridge_slave_1: left promiscuous mode [ 95.680984][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.681968][ T7178] loop4: detected capacity change from 0 to 8192 [ 95.719432][ T7184] bridge_slave_0: left allmulticast mode [ 95.725556][ T7184] bridge_slave_0: left promiscuous mode [ 95.731301][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.786797][ T7190] binfmt_misc: register: failed to install interpreter file ./file2 [ 95.873054][ T7196] loop4: detected capacity change from 0 to 512 [ 95.905713][ T7196] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 95.919240][ T7196] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.956371][ T7196] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1129: corrupted inode contents [ 95.973474][ T7196] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1129: mark_inode_dirty error [ 95.986640][ T7196] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1129: corrupted inode contents [ 96.023477][ T7196] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1129: mark_inode_dirty error [ 96.037719][ T7196] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1129: corrupted inode contents [ 96.053022][ T7196] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 96.063581][ T7196] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1129: corrupted inode contents [ 96.080730][ T7196] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1129: mark_inode_dirty error [ 96.093160][ T7196] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 96.105680][ T7196] EXT4-fs (loop4): 1 truncate cleaned up [ 96.112132][ T4687] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:44: Failed to release dquot type 1 [ 96.129680][ T7196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.155229][ T7196] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.278618][ T7228] loop5: detected capacity change from 0 to 8192 [ 96.296932][ T7233] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 96.334773][ T7235] binfmt_misc: register: failed to install interpreter file ./file2 [ 96.437844][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.449966][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.489884][ T7250] atomic_op ffff88811b054528 conn xmit_atomic 0000000000000000 [ 96.592911][ T7259] loop5: detected capacity change from 0 to 512 [ 96.634116][ T7259] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 96.644093][ T7259] EXT4-fs (loop5): orphan cleanup on readonly fs [ 96.662707][ T7259] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1153: corrupted inode contents [ 96.685058][ T7259] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1153: mark_inode_dirty error [ 96.704354][ T7259] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1153: corrupted inode contents [ 96.725085][ T7259] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1153: mark_inode_dirty error [ 96.755341][ T7259] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1153: corrupted inode contents [ 96.772608][ T7259] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 96.810068][ T7259] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1153: corrupted inode contents [ 96.848007][ T7259] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1153: mark_inode_dirty error [ 96.888787][ T7259] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 96.910273][ T7259] EXT4-fs (loop5): 1 truncate cleaned up [ 96.917641][ T4685] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 1 [ 96.948834][ T7259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.972187][ T7259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.071322][ T7286] atomic_op ffff88811998c928 conn xmit_atomic 0000000000000000 [ 97.243265][ T7309] loop4: detected capacity change from 0 to 256 [ 97.278608][ T7313] loop6: detected capacity change from 0 to 512 [ 97.297013][ T7313] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 97.305547][ T7313] EXT4-fs (loop6): orphan cleanup on readonly fs [ 97.315865][ T7313] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1174: corrupted inode contents [ 97.328959][ T7313] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.1174: mark_inode_dirty error [ 97.342782][ T7313] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1174: corrupted inode contents [ 97.358639][ T7313] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1174: mark_inode_dirty error [ 97.376695][ T7313] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1174: corrupted inode contents [ 97.378509][ T7321] atomic_op ffff88811998f528 conn xmit_atomic 0000000000000000 [ 97.399555][ T7313] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 97.411840][ T7313] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1174: corrupted inode contents [ 97.445475][ T7313] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.1174: mark_inode_dirty error [ 97.470261][ T7313] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 97.490503][ T7313] EXT4-fs (loop6): 1 truncate cleaned up [ 97.500722][ T4657] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 97.518125][ T7313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.552407][ T7313] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.672528][ T7345] loop6: detected capacity change from 0 to 256 [ 97.713195][ T7348] atomic_op ffff88811b055528 conn xmit_atomic 0000000000000000 [ 97.761809][ T7352] __nla_validate_parse: 19 callbacks suppressed [ 97.761905][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 97.781200][ T7352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'. [ 97.798436][ T7354] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1192'. [ 97.928474][ T7368] serio: Serial port ttyS3 [ 98.046734][ T7379] loop6: detected capacity change from 0 to 256 [ 98.288238][ T7388] loop4: detected capacity change from 0 to 512 [ 98.299279][ T7388] EXT4-fs: Ignoring removed nobh option [ 98.411248][ T7388] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1203: corrupted inode contents [ 98.452658][ T7388] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1203: mark_inode_dirty error [ 98.486799][ T7388] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1203: corrupted inode contents [ 98.553843][ T7388] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1203: mark_inode_dirty error [ 98.583110][ T7388] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1203: Failed to acquire dquot type 0 [ 98.612114][ T7388] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1203: corrupted inode contents [ 98.627843][ T7408] serio: Serial port ttyS3 [ 98.627912][ T7388] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1203: mark_inode_dirty error [ 98.650862][ T7388] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1203: corrupted inode contents [ 98.663562][ T7388] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1203: mark_inode_dirty error [ 98.676766][ T7388] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1203: corrupted inode contents [ 98.690154][ T7388] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 98.702577][ T7388] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1203: corrupted inode contents [ 98.716211][ T7388] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1203: mark_inode_dirty error [ 98.727924][ T7388] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 98.744931][ T7388] EXT4-fs (loop4): 1 truncate cleaned up [ 98.761548][ T7388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.783918][ T7388] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.203596][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.327772][ T7429] atomic_op ffff88811b054528 conn xmit_atomic 0000000000000000 [ 99.448232][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1218'. [ 99.478485][ T7431] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1218'. [ 99.511181][ T7437] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1220'. [ 99.537568][ T7435] loop4: detected capacity change from 0 to 8192 [ 99.629469][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1219'. [ 99.973123][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1230'. [ 100.012202][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 100.012222][ T29] audit: type=1326 audit(1755392486.255:8044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.025585][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.049549][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.057028][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.064488][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.071891][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.079455][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.086952][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.089049][ T29] audit: type=1326 audit(1755392486.255:8045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.094521][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.117927][ T29] audit: type=1326 audit(1755392486.255:8046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.125335][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.125358][ T23] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 100.148879][ T29] audit: type=1326 audit(1755392486.255:8047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.162846][ T23] hid-generic 0008:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz0 [ 100.163623][ T29] audit: type=1326 audit(1755392486.255:8048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.220334][ T29] audit: type=1326 audit(1755392486.255:8049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.244112][ T29] audit: type=1326 audit(1755392486.255:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.267615][ T29] audit: type=1326 audit(1755392486.255:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.291314][ T29] audit: type=1326 audit(1755392486.255:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.314759][ T29] audit: type=1326 audit(1755392486.255:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.5.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fd609ebe9 code=0x7ffc0000 [ 100.372494][ T7469] fido_id[7469]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.431459][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1234'. [ 100.546482][ T7483] serio: Serial port ttyS3 [ 100.598678][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1235'. [ 100.796786][ T7510] loop6: detected capacity change from 0 to 256 [ 100.925986][ T7513] loop4: detected capacity change from 0 to 8192 [ 101.271332][ T7562] atomic_op ffff8881199b3528 conn xmit_atomic 0000000000000000 [ 101.546784][ T7595] loop6: detected capacity change from 0 to 764 [ 101.607166][ T7603] atomic_op ffff888118bde928 conn xmit_atomic 0000000000000000 [ 101.621095][ T7595] vhci_hcd: invalid port number 96 [ 101.626313][ T7595] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 101.798087][ T7630] atomic_op ffff88812d338928 conn xmit_atomic 0000000000000000 [ 102.033012][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.042028][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.089654][ T7659] atomic_op ffff88813b5ed928 conn xmit_atomic 0000000000000000 [ 102.173115][ T7671] loop5: detected capacity change from 0 to 256 [ 102.399727][ T7691] binfmt_misc: register: failed to install interpreter file ./file2 [ 102.447691][ T7695] atomic_op ffff88813b5ed928 conn xmit_atomic 0000000000000000 [ 102.498139][ T7699] binfmt_misc: register: failed to install interpreter file ./file2 [ 102.726367][ T7726] serio: Serial port ttyS3 [ 102.732508][ T7721] loop4: detected capacity change from 0 to 512 [ 102.757017][ T7721] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 102.766743][ T7721] EXT4-fs (loop4): orphan cleanup on readonly fs [ 102.777492][ T7721] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1328: corrupted inode contents [ 102.789903][ T7721] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1328: mark_inode_dirty error [ 102.802934][ T7721] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1328: corrupted inode contents [ 102.816674][ T7721] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1328: mark_inode_dirty error [ 102.828903][ T7721] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1328: corrupted inode contents [ 102.842320][ T7721] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 102.853252][ T7721] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1328: corrupted inode contents [ 102.866856][ T7721] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1328: mark_inode_dirty error [ 102.882911][ T7721] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 102.894646][ T7721] EXT4-fs (loop4): 1 truncate cleaned up [ 102.901280][ T4654] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 102.944824][ T7721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.965443][ T7721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.987746][ T7734] __nla_validate_parse: 17 callbacks suppressed [ 102.987805][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 103.039242][ T7741] serio: Serial port ttyS3 [ 103.218489][ T7753] loop4: detected capacity change from 0 to 8192 [ 103.431005][ T7777] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1348'. [ 103.478148][ T7783] serio: Serial port ttyS3 [ 103.670591][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 103.682765][ T7779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1350'. [ 103.729858][ T7811] atomic_op ffff888120220128 conn xmit_atomic 0000000000000000 [ 103.766219][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.776407][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.792372][ T7815] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1363'. [ 103.833399][ T7817] FAULT_INJECTION: forcing a failure. [ 103.833399][ T7817] name failslab, interval 1, probability 0, space 0, times 0 [ 103.846113][ T7817] CPU: 0 UID: 0 PID: 7817 Comm: syz.4.1364 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 103.846154][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.846170][ T7817] Call Trace: [ 103.846178][ T7817] [ 103.846186][ T7817] __dump_stack+0x1d/0x30 [ 103.846209][ T7817] dump_stack_lvl+0xe8/0x140 [ 103.846228][ T7817] dump_stack+0x15/0x1b [ 103.846244][ T7817] should_fail_ex+0x265/0x280 [ 103.846269][ T7817] should_failslab+0x8c/0xb0 [ 103.846301][ T7817] kmem_cache_alloc_noprof+0x50/0x310 [ 103.846337][ T7817] ? vm_area_dup+0x33/0x2c0 [ 103.846375][ T7817] vm_area_dup+0x33/0x2c0 [ 103.846414][ T7817] copy_vma+0x2e2/0x580 [ 103.846458][ T7817] move_vma+0x42e/0xcf0 [ 103.846491][ T7817] ? do_vmi_munmap+0x1db/0x220 [ 103.846528][ T7817] mremap_to+0x3eb/0x440 [ 103.846562][ T7817] ? check_prep_vma+0x5d6/0x660 [ 103.846601][ T7817] __se_sys_mremap+0x652/0xc60 [ 103.846642][ T7817] __x64_sys_mremap+0x67/0x80 [ 103.846675][ T7817] x64_sys_call+0x2a24/0x2ff0 [ 103.846703][ T7817] do_syscall_64+0xd2/0x200 [ 103.846737][ T7817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.846769][ T7817] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.846801][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.846828][ T7817] RIP: 0033:0x7f30cf50ebe9 [ 103.846847][ T7817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.846871][ T7817] RSP: 002b:00007f30cdf77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 103.846896][ T7817] RAX: ffffffffffffffda RBX: 00007f30cf735fa0 RCX: 00007f30cf50ebe9 [ 103.846912][ T7817] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 103.846927][ T7817] RBP: 00007f30cdf77090 R08: 0000200000000000 R09: 0000000000000000 [ 103.846943][ T7817] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 103.846959][ T7817] R13: 00007f30cf736038 R14: 00007f30cf735fa0 R15: 00007ffc8dfd4c68 [ 103.846986][ T7817] [ 104.212155][ T7833] loop4: detected capacity change from 0 to 8192 [ 104.492692][ T7851] loop4: detected capacity change from 0 to 512 [ 104.528437][ T7851] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.560023][ T7851] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1376: bad orphan inode 13 [ 104.593800][ T7851] ext4_test_bit(bit=12, block=18) = 1 [ 104.599360][ T7851] is_bad_inode(inode)=0 [ 104.603554][ T7851] NEXT_ORPHAN(inode)=2130706432 [ 104.608465][ T7851] max_ino=32 [ 104.611665][ T7851] i_nlink=1 [ 104.686920][ T7851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.767143][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 104.782922][ T7851] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 104.796607][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'. [ 104.816874][ T7851] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1376: bg 0: block 248: padding at end of block bitmap is not set [ 104.857640][ T7851] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1376: Failed to acquire dquot type 1 [ 104.892105][ T7851] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.996144][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.112004][ T29] kauditd_printk_skb: 881 callbacks suppressed [ 105.112023][ T29] audit: type=1326 audit(1755392491.355:8932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.150941][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1379'. [ 105.160050][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1379'. [ 105.180742][ T29] audit: type=1326 audit(1755392491.385:8933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.204337][ T29] audit: type=1326 audit(1755392491.385:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.227920][ T29] audit: type=1326 audit(1755392491.385:8935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.251398][ T29] audit: type=1326 audit(1755392491.385:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.274837][ T29] audit: type=1326 audit(1755392491.385:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.298274][ T29] audit: type=1326 audit(1755392491.385:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.321717][ T29] audit: type=1326 audit(1755392491.385:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.345360][ T29] audit: type=1326 audit(1755392491.385:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.368926][ T29] audit: type=1326 audit(1755392491.385:8941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7865 comm="syz.1.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 105.441816][ T7869] loop4: detected capacity change from 0 to 8192 [ 105.516732][ T7871] 9pnet: Could not find request transport: 0xffffffffffffffff [ 105.518151][ T7880] serio: Serial port ttyS3 [ 105.673482][ T7901] loop6: detected capacity change from 0 to 256 [ 105.743523][ T7907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1397'. [ 106.030926][ T7925] loop6: detected capacity change from 0 to 8192 [ 106.237475][ T7940] serio: Serial port ttyS3 [ 106.301958][ T7941] loop6: detected capacity change from 0 to 8192 [ 106.862043][ T7995] atomic_op ffff888120221d28 conn xmit_atomic 0000000000000000 [ 106.963594][ T8006] serio: Serial port ttyS3 [ 107.162732][ T8021] loop6: detected capacity change from 0 to 8192 [ 107.620722][ T8049] atomic_op ffff888120223d28 conn xmit_atomic 0000000000000000 [ 107.731743][ T8057] loop6: detected capacity change from 0 to 512 [ 107.805524][ T8057] EXT4-fs (loop6): orphan cleanup on readonly fs [ 107.824785][ T8057] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1453: bad orphan inode 13 [ 107.842116][ T8057] ext4_test_bit(bit=12, block=18) = 1 [ 107.847694][ T8057] is_bad_inode(inode)=0 [ 107.851858][ T8057] NEXT_ORPHAN(inode)=2130706432 [ 107.856809][ T8057] max_ino=32 [ 107.860011][ T8057] i_nlink=1 [ 107.904999][ T8057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.953677][ T8066] serio: Serial port ttyS3 [ 108.006310][ T8057] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 108.049374][ T8057] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 108.112297][ T5737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.146040][ T8081] atomic_op ffff888146f42128 conn xmit_atomic 0000000000000000 [ 108.163662][ T8080] __nla_validate_parse: 13 callbacks suppressed [ 108.163678][ T8080] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1464'. [ 108.185605][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 108.200901][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 108.278458][ T8091] loop5: detected capacity change from 0 to 512 [ 108.315981][ T8091] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 108.334111][ T8091] EXT4-fs (loop5): orphan cleanup on readonly fs [ 108.343662][ T8091] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1469: corrupted inode contents [ 108.373920][ T8091] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1469: mark_inode_dirty error [ 108.393668][ T8091] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1469: corrupted inode contents [ 108.417238][ T8091] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1469: mark_inode_dirty error [ 108.443345][ T8091] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1469: corrupted inode contents [ 108.456578][ T8098] loop6: detected capacity change from 0 to 8192 [ 108.470027][ T8091] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 108.525642][ T8091] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1469: corrupted inode contents [ 108.545285][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1462'. [ 108.597523][ T8091] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1469: mark_inode_dirty error [ 108.619223][ T8116] atomic_op ffff888120223928 conn xmit_atomic 0000000000000000 [ 108.624642][ T8091] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 108.650641][ T8091] EXT4-fs (loop5): 1 truncate cleaned up [ 108.656700][ T4685] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 1 [ 108.656883][ T8118] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1478'. [ 108.711462][ T8091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.750131][ T8091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.977660][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.999316][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.010461][ T8132] loop4: detected capacity change from 0 to 512 [ 109.053393][ T8132] EXT4-fs: Ignoring removed nobh option [ 109.102289][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 109.139155][ T8132] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1482: corrupted inode contents [ 109.154119][ T8140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1487'. [ 109.194513][ T8132] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.1482: mark_inode_dirty error [ 109.224844][ T8132] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.1482: corrupted inode contents [ 109.248634][ T8150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.259223][ T8150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.272326][ T8132] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1482: mark_inode_dirty error [ 109.285199][ T8132] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1482: Failed to acquire dquot type 0 [ 109.318656][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 109.318655][ T8132] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1482: corrupted inode contents [ 109.337604][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'. [ 109.369118][ T8132] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1482: mark_inode_dirty error [ 109.389773][ T8132] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1482: corrupted inode contents [ 109.413592][ T8132] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1482: mark_inode_dirty error [ 109.441375][ T8132] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1482: corrupted inode contents [ 109.453873][ T8132] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 109.485754][ T8132] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1482: corrupted inode contents [ 109.507239][ T8132] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1482: mark_inode_dirty error [ 109.533896][ T8132] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 109.562126][ T8132] EXT4-fs (loop4): 1 truncate cleaned up [ 109.568364][ T8132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.600182][ T8132] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.834998][ T8161] loop5: detected capacity change from 0 to 512 [ 109.861694][ T8161] EXT4-fs: Ignoring removed nobh option [ 109.906204][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.930038][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'. [ 109.944998][ T8161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1491: corrupted inode contents [ 109.963598][ T8161] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1491: mark_inode_dirty error [ 110.108858][ T8161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1491: corrupted inode contents [ 110.130610][ T8181] loop4: detected capacity change from 0 to 512 [ 110.148379][ T8161] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1491: mark_inode_dirty error [ 110.181706][ T8181] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 110.210845][ T8161] __quota_error: 361 callbacks suppressed [ 110.210865][ T8161] Quota error (device loop5): write_blk: dquota write failed [ 110.232570][ T8181] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.246816][ T8161] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 110.265022][ T8161] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1491: Failed to acquire dquot type 0 [ 110.266581][ T8181] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1499: corrupted inode contents [ 110.303511][ T8161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1491: corrupted inode contents [ 110.345643][ T8161] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1491: mark_inode_dirty error [ 110.349390][ T8181] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.1499: mark_inode_dirty error [ 110.381365][ T8161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1491: corrupted inode contents [ 110.396515][ T8181] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1499: corrupted inode contents [ 110.418954][ T8161] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1491: mark_inode_dirty error [ 110.440588][ T8181] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1499: mark_inode_dirty error [ 110.477636][ T8181] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1499: corrupted inode contents [ 110.489927][ T8161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1491: corrupted inode contents [ 110.508289][ T8181] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 110.517660][ T8161] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 110.531491][ T8181] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1499: corrupted inode contents [ 110.552800][ T8161] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1491: corrupted inode contents [ 110.577144][ T8181] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.1499: mark_inode_dirty error [ 110.588860][ T8161] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1491: mark_inode_dirty error [ 110.606677][ T29] audit: type=1326 audit(1755392496.845:9300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 110.619209][ T8161] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 110.630159][ T29] audit: type=1326 audit(1755392496.845:9301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 110.643275][ T8161] EXT4-fs (loop5): 1 truncate cleaned up [ 110.662582][ T29] audit: type=1326 audit(1755392496.855:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 110.691735][ T29] audit: type=1326 audit(1755392496.855:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 110.712805][ T8161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.715171][ T29] audit: type=1326 audit(1755392496.855:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 110.751125][ T8181] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 110.779408][ T8181] EXT4-fs (loop4): 1 truncate cleaned up [ 110.786212][ T31] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.796013][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 110.812776][ T8161] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.849602][ T8181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.873191][ T8181] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.883057][ T29] audit: type=1326 audit(1755392496.855:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 110.906522][ T29] audit: type=1326 audit(1755392496.855:9306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.0.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d2275ebe9 code=0x7ffc0000 [ 111.783021][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.966823][ T8260] serio: Serial port ttyS3 [ 112.148179][ T8277] loop6: detected capacity change from 0 to 1024 [ 112.178061][ T8277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.217455][ T8277] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.350055][ T8277] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.1536: lblock 0 mapped to illegal pblock 0 (length 1) [ 112.380938][ T8277] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 112.393307][ T8277] EXT4-fs (loop6): This should not happen!! Data will be lost [ 112.393307][ T8277] [ 112.417682][ T4687] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 112.439074][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.441372][ T4687] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 3 with error 28 [ 112.454736][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.459940][ T4687] EXT4-fs (loop6): This should not happen!! Data will be lost [ 112.459940][ T4687] [ 112.477360][ T4687] EXT4-fs (loop6): Total free blocks count 0 [ 112.483355][ T4687] EXT4-fs (loop6): Free/Dirty block details [ 112.489496][ T4687] EXT4-fs (loop6): free_blocks=4293918720 [ 112.495511][ T4687] EXT4-fs (loop6): dirty_blocks=16 [ 112.500654][ T4687] EXT4-fs (loop6): Block reservation details [ 112.575099][ T8300] serio: Serial port ttyS3 [ 112.870983][ T8317] loop6: detected capacity change from 0 to 8192 [ 113.082687][ T8328] 9pnet_fd: Insufficient options for proto=fd [ 113.173860][ T8332] sd 0:0:1:0: device reset [ 113.269477][ T8340] atomic_op ffff888120220128 conn xmit_atomic 0000000000000000 [ 113.338526][ T8346] __nla_validate_parse: 13 callbacks suppressed [ 113.338593][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 113.386284][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 113.789683][ T8362] 9pnet_fd: Insufficient options for proto=fd [ 113.867700][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 113.898396][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 114.129764][ T8360] loop6: detected capacity change from 0 to 512 [ 114.155632][ T8360] EXT4-fs: Ignoring removed nobh option [ 114.171831][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1569'. [ 114.193311][ T8366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1569'. [ 114.246960][ T8360] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.1566: corrupted inode contents [ 114.275889][ T8360] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.1566: mark_inode_dirty error [ 114.309886][ T8360] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.1566: corrupted inode contents [ 114.337510][ T8360] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.1566: mark_inode_dirty error [ 114.370893][ T8360] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1566: Failed to acquire dquot type 0 [ 114.402497][ T8360] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1566: corrupted inode contents [ 114.424920][ T8360] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.1566: mark_inode_dirty error [ 114.456139][ T8360] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1566: corrupted inode contents [ 114.480045][ T8360] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1566: mark_inode_dirty error [ 114.488685][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 114.492356][ T8394] atomic_op ffff888120220128 conn xmit_atomic 0000000000000000 [ 114.503499][ T8377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1573'. [ 114.618001][ T8360] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1566: corrupted inode contents [ 114.641586][ T8360] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 114.667097][ T8360] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1566: corrupted inode contents [ 114.672722][ T8399] serio: Serial port ttyS3 [ 114.701316][ T8360] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.1566: mark_inode_dirty error [ 114.725711][ T8360] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 115.198914][ T8413] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1586'. [ 115.226871][ T8360] EXT4-fs (loop6): 1 truncate cleaned up [ 115.233002][ T8360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.268824][ T8360] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.582321][ T8428] sd 0:0:1:0: device reset [ 115.972876][ T8360] syz.6.1566 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 115.984124][ T8360] CPU: 0 UID: 0 PID: 8360 Comm: syz.6.1566 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 115.984164][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.984179][ T8360] Call Trace: [ 115.984186][ T8360] [ 115.984230][ T8360] __dump_stack+0x1d/0x30 [ 115.984254][ T8360] dump_stack_lvl+0xe8/0x140 [ 115.984273][ T8360] dump_stack+0x15/0x1b [ 115.984289][ T8360] dump_header+0x81/0x220 [ 115.984326][ T8360] oom_kill_process+0x342/0x400 [ 115.984468][ T8360] out_of_memory+0x979/0xb80 [ 115.984514][ T8360] try_charge_memcg+0x5e6/0x9e0 [ 115.984555][ T8360] charge_memcg+0x51/0xc0 [ 115.984591][ T8360] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 115.984651][ T8360] __read_swap_cache_async+0x1df/0x350 [ 115.984711][ T8360] swap_cluster_readahead+0x277/0x3e0 [ 115.984821][ T8360] swapin_readahead+0xde/0x6f0 [ 115.984863][ T8360] ? __filemap_get_folio+0x4f7/0x6b0 [ 115.984926][ T8360] ? __rcu_read_unlock+0x34/0x70 [ 115.984956][ T8360] ? swap_cache_get_folio+0x77/0x200 [ 115.985000][ T8360] do_swap_page+0x301/0x2430 [ 115.985034][ T8360] ? css_rstat_updated+0xb7/0x240 [ 115.985065][ T8360] ? __pfx_default_wake_function+0x10/0x10 [ 115.985094][ T8360] handle_mm_fault+0x9a5/0x2c20 [ 115.985136][ T8360] do_user_addr_fault+0x636/0x1090 [ 115.985238][ T8360] exc_page_fault+0x62/0xa0 [ 115.985269][ T8360] asm_exc_page_fault+0x26/0x30 [ 115.985295][ T8360] RIP: 0033:0x7f5318b6d52d [ 115.985316][ T8360] Code: 24 80 00 00 00 80 3d 49 b0 1f 00 00 44 8b 54 24 40 c7 44 24 10 10 00 00 00 48 89 44 24 18 48 8d 44 24 30 48 89 44 24 20 75 93 <44> 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 [ 115.985374][ T8360] RSP: 002b:00007f53175addf0 EFLAGS: 00010246 [ 115.985395][ T8360] RAX: 0000000000010000 RBX: 0000000000010000 RCX: 00007f5318b7038a [ 115.985410][ T8360] RDX: 00002000000000c0 RSI: 0000000000010000 RDI: 0000200000000980 [ 115.985423][ T8360] RBP: 0000200000000980 R08: 00007f53175adef0 R09: 0000000003000010 [ 115.985436][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000980 [ 115.985452][ T8360] R13: 00007f53175adeb0 R14: 0000000000000519 R15: 0000200000000100 [ 115.985477][ T8360] [ 116.195264][ T8360] memory: usage 307200kB, limit 307200kB, failcnt 690 [ 116.202092][ T8360] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 116.210180][ T8360] kmem: usage 302948kB, limit 9007199254740988kB, failcnt 0 [ 116.217499][ T8360] Memory cgroup stats for /syz6: [ 116.223412][ T8360] cache 12288 [ 116.231713][ T8360] rss 4341760 [ 116.235214][ T8360] shmem 0 [ 116.238163][ T8360] mapped_file 0 [ 116.241629][ T8360] dirty 0 [ 116.244610][ T8360] writeback 0 [ 116.247939][ T8360] workingset_refault_anon 129 [ 116.252611][ T8360] workingset_refault_file 4 [ 116.257215][ T8360] swap 450560 [ 116.260509][ T8360] swapcached 0 [ 116.263892][ T8360] pgpgin 48909 [ 116.267310][ T8360] pgpgout 47846 [ 116.270770][ T8360] pgfault 66378 [ 116.274262][ T8360] pgmajfault 54 [ 116.277760][ T8360] inactive_anon 0 [ 116.281393][ T8360] active_anon 0 [ 116.284905][ T8360] inactive_file 4341760 [ 116.289129][ T8360] active_file 12288 [ 116.292967][ T8360] unevictable 0 [ 116.296506][ T8360] hierarchical_memory_limit 314572800 [ 116.301940][ T8360] hierarchical_memsw_limit 9223372036854771712 [ 116.308152][ T8360] total_cache 12288 [ 116.312220][ T8360] total_rss 4341760 [ 116.316205][ T8360] total_shmem 0 [ 116.319844][ T8360] total_mapped_file 0 [ 116.323924][ T8360] total_dirty 0 [ 116.327428][ T8360] total_writeback 0 [ 116.331241][ T8360] total_workingset_refault_anon 129 [ 116.336469][ T8360] total_workingset_refault_file 4 [ 116.341503][ T8360] total_swap 450560 [ 116.345363][ T8360] total_swapcached 0 [ 116.349263][ T8360] total_pgpgin 48909 [ 116.353164][ T8360] total_pgpgout 47846 [ 116.357175][ T8360] total_pgfault 66378 [ 116.361159][ T8360] total_pgmajfault 54 [ 116.365208][ T8360] total_inactive_anon 0 [ 116.369379][ T8360] total_active_anon 0 [ 116.373377][ T8360] total_inactive_file 4341760 [ 116.378123][ T8360] total_active_file 12288 [ 116.382711][ T8360] total_unevictable 0 [ 116.386907][ T8360] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1566,pid=8358,uid=0 [ 116.401927][ T8360] Memory cgroup out of memory: Killed process 8358 (syz.6.1566) total-vm:93896kB, anon-rss:5296kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 116.568848][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 116.593095][ T8451] loop5: detected capacity change from 0 to 8192 [ 116.808626][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 116.808644][ T29] audit: type=1326 audit(1755392503.055:9781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 116.838943][ T29] audit: type=1326 audit(1755392503.055:9782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 117.034381][ T29] audit: type=1326 audit(1755392503.115:9783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 117.057810][ T29] audit: type=1326 audit(1755392503.115:9784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 117.081497][ T29] audit: type=1326 audit(1755392503.115:9785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 117.104949][ T29] audit: type=1326 audit(1755392503.135:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 117.104979][ T8371] ================================================================== [ 117.105029][ T8371] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 117.128687][ T29] audit: type=1326 audit(1755392503.135:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 117.136402][ T8371] [ 117.136411][ T8371] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 117.136433][ T8371] tick_do_update_jiffies64+0x113/0x1c0 [ 117.146307][ T29] audit: type=1326 audit(1755392503.135:9788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 117.169588][ T8371] tick_nohz_handler+0x7f/0x2d0 [ 117.169624][ T8371] __hrtimer_run_queues+0x20f/0x5a0 [ 117.169650][ T8371] hrtimer_interrupt+0x21a/0x460 [ 117.169673][ T8371] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 117.169707][ T8371] sysvec_apic_timer_interrupt+0x6f/0x80 [ 117.169732][ T8371] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.169758][ T8371] console_flush_all+0x55b/0x730 [ 117.169783][ T8371] console_unlock+0xa1/0x330 [ 117.169804][ T8371] vprintk_emit+0x388/0x650 [ 117.169823][ T8371] vprintk_default+0x26/0x30 [ 117.169843][ T8371] vprintk+0x1d/0x30 [ 117.169870][ T8371] _printk+0x79/0xa0 [ 117.169902][ T8371] kauditd_hold_skb+0x1b1/0x1c0 [ 117.169923][ T8371] kauditd_send_queue+0x273/0x2c0 [ 117.169944][ T8371] kauditd_thread+0x421/0x630 [ 117.169981][ T8371] kthread+0x489/0x510 [ 117.170002][ T8371] ret_from_fork+0xda/0x150 [ 117.170026][ T8371] ret_from_fork_asm+0x1a/0x30 [ 117.170059][ T8371] [ 117.170066][ T8371] read to 0xffffffff868099c0 of 8 bytes by task 8371 on cpu 1: [ 117.170084][ T8371] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 117.170115][ T8371] count_shadow_nodes+0x6a/0x230 [ 117.170139][ T8371] do_shrink_slab+0x60/0x680 [ 117.170173][ T8371] shrink_slab+0x448/0x760 [ 117.170207][ T8371] shrink_node+0x6c3/0x2120 [ 117.170239][ T8371] do_try_to_free_pages+0x3f6/0xcd0 [ 117.170264][ T8371] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 117.170292][ T8371] try_charge_memcg+0x358/0x9e0 [ 117.170316][ T8371] charge_memcg+0x51/0xc0 [ 117.170336][ T8371] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 117.170362][ T8371] __read_swap_cache_async+0x1df/0x350 [ 117.170398][ T8371] swap_cluster_readahead+0x376/0x3e0 [ 117.170435][ T8371] swapin_readahead+0xde/0x6f0 [ 117.170473][ T8371] do_swap_page+0x301/0x2430 [ 117.170497][ T8371] handle_mm_fault+0x9a5/0x2c20 [ 117.170524][ T8371] do_user_addr_fault+0x3fe/0x1090 [ 117.170563][ T8371] exc_page_fault+0x62/0xa0 [ 117.170588][ T8371] asm_exc_page_fault+0x26/0x30 [ 117.170610][ T8371] __get_user_8+0x14/0x30 [ 117.170631][ T8371] exit_robust_list+0x31/0x280 [ 117.170659][ T8371] futex_exit_release+0xe0/0x130 [ 117.170683][ T8371] exit_mm_release+0x1a/0x30 [ 117.170712][ T8371] exit_mm+0x38/0x190 [ 117.170742][ T8371] do_exit+0x417/0x15c0 [ 117.170773][ T8371] do_group_exit+0xff/0x140 [ 117.170805][ T8371] get_signal+0xe59/0xf70 [ 117.173171][ T29] audit: type=1326 audit(1755392503.145:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 117.181221][ T8371] arch_do_signal_or_restart+0x96/0x480 [ 117.181247][ T8371] exit_to_user_mode_loop+0x7a/0x100 [ 117.186875][ T29] audit: type=1326 audit(1755392503.145:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.1.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2048c1ebe9 code=0x7ffc0000 [ 117.210158][ T8371] do_syscall_64+0x1d6/0x200 [ 117.210194][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.210218][ T8371] [ 117.210223][ T8371] value changed: 0x00000000ffffb857 -> 0x00000000ffffb85a [ 117.210236][ T8371] [ 117.210240][ T8371] Reported by Kernel Concurrency Sanitizer on: [ 117.210253][ T8371] CPU: 1 UID: 0 PID: 8371 Comm: syz.6.1566 Not tainted 6.17.0-rc1-syzkaller-00211-g90d970cade8e #0 PREEMPT(voluntary) [ 117.531525][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.541588][ T8371] ================================================================== [ 117.764511][ T5737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.