last executing test programs: 3m16.327568897s ago: executing program 3 (id=301): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 3m15.476335716s ago: executing program 3 (id=316): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) close(r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000798600000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r3 = syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x3}, 0x0, 0x0) r4 = dup3(r0, r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7", @ANYRES16=r3, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff18) r5 = gettid() sched_rr_get_interval(r5, &(0x7f0000000000)) syz_read_part_table(0x618, &(0x7f0000002200)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r7, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 3m15.002314625s ago: executing program 3 (id=325): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc7, 0x1, 0x0, 0x240}, &(0x7f0000000000), &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000009d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000000001000000010000003f20175fd29166fb305a1a054cef9e3a721f0d805303e60e8abbd6ad382d176014faf107b08598583602889fab52d7221e11e30fa3a3296787e3015d50d5eeac1f24baf40bcfe5dd8940d2f559d0c64b3fa3172764", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x4000000}}], 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c756e616d653dd0"]) 3m14.717407728s ago: executing program 3 (id=330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x400000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x10}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x81}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0x3e1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x74c, &(0x7f0000000f40)="$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") linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x6, 0x3, 0xf8, 0x7f, 0x0, 0x2, 0x3800, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3c403e73, 0x4, @perf_config_ext={0x5, 0x4}, 0x101000, 0x6, 0xb, 0x6, 0x3, 0x2, 0x7fff, 0x0, 0xffff4255, 0x0, 0x6}, r3, 0x4, r1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000000)=0x7) bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, r6, 0x1, 0x1, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x2}, 0x18) r12 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_read_part_table(0x5e0, &(0x7f0000000600)="$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") ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0xff) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) 3m14.279066753s ago: executing program 3 (id=346): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x18) lstat(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x8, 0x3, r0, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18006, &(0x7f0000003b40)=ANY=[], 0x8, 0x2f0, &(0x7f0000000a00)="$eJzs3M9LG2kYwPEnP4xJRONhWdiFxYfdy+5l0Oyedw2LQmmgYk3pDyiMOmlDpolkgiWl1PbUa/+GHsWjN6H1H/DSW3vppTcvhV48lKZkMmM0jr+SaKx+PyDzOO/7TN43GYfnHZxs3371qJh3jLxZlXBcJSQisiMyKmHxhbxt2I1jstdz+Wvoy/vfbt65ez2TzU7Nqk5n5v5Oq+rI2JvHTxNet41B2Rq9v/05/Wnr561ftr/NPSw4WnC0VK6qqfPlj1Vz3rZ0seAUDdUZ2zIdSwslx6o028vN9rxdXlqqqVlaHE4uVSzHUbNU06JV02pZq5WaRh6YhZIahqHDScFxcquzs2amw+SFHg8GZ6RSyZgREUkcaMmt9mVAAACgr9rr/7BoL+v/td83q0O31ke8+n8jFlT///Oheax99X9cRALrf//1A+t/83T1/8GK6Grpqv7HxTAWO7Ar1AobjZWMmfT+fl0v7q2NuwH1PwAAAAAAAAAAAAAAAAAAAAAAP4Kdej1Vr9dT/tb/GRSRuIj4vwekRkTkvz4MGT3UxeePS6D14F50RMR+uZxbzjW3XodNEbHFknFJyVf3fPA0Yv/JI20Ylbf2ipe/spyLuC2ZvBTc/AlJDUh7fr0+fS07NaFN+/MHJLk3Py0p+Sk4Px2YH5M//9iTb0hK3i1IWWxZdMfRyn82ofr/jWxbfsLtBwAAAADAZWDorsD1u2Ec1t7M311ft98fiLTW1+OB6/Oo/Brt79wBAAAAALgqnNqTomnbVuWIICHH9+k8iJ7Rkf0ZnjTL/1+Gs5vpEYH/4vua4t7Onr8toVO8LYcEYekka6wxG+12Fv5to8P6yMzk+X+Cpm17w3rdqwP+ux4/ZqadB5GjT4CBk1094t1fgAAAAACcm1bR7++Z7O+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4gs7j29H6PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgovgeAAD//y9GAg0=") r4 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x104) pwritev2(r4, &(0x7f0000000000), 0x0, 0x6, 0x7, 0x3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000000600)=""/156, 0xffffffffffffff0b}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffc) ptrace(0x10, 0x0) ptrace(0x4211, 0x0) syz_clone3(&(0x7f00000008c0)={0x222025080, &(0x7f0000000040), 0x0, 0x0, {0x7}, &(0x7f0000000300)=""/220, 0xdc, 0x0, 0x0, 0x0, {r4}}, 0x58) connect$inet6(r5, &(0x7f00000024c0)={0xa, 0x4e22, 0x80, @empty}, 0x1c) 3m13.683297771s ago: executing program 3 (id=353): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 3m13.669789662s ago: executing program 32 (id=353): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 3.45762331s ago: executing program 2 (id=3335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 3.028104205s ago: executing program 2 (id=3343): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x94) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$igmp(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x10c0c8, 0x2000000010003, 0x7, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x330}}, 0x0) r1 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r1, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) 2.555757853s ago: executing program 2 (id=3354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 2.444065522s ago: executing program 2 (id=3358): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) dup2(0xffffffffffffffff, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020b196f8eecca454a3298740073797a31000000000100010073697700140033007665746830"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0xd2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000740)='ext4_begin_ordered_truncate\x00', r4, 0x0, 0x2}, 0x18) r5 = syz_io_uring_setup(0x52f, &(0x7f0000000140)={0x0, 0x8b7c, 0x80, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='f2fs_truncate_data_blocks_range\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) syz_open_procfs(r9, &(0x7f0000000700)='net/stat\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) vmsplice(r10, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r10, 0x407, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021008000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='fsi_master_gpio_cmd_same_addr\x00', r3, 0x0, 0x8000000000000001}, 0xfffffd43) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x138000, 0x1000, 0x0, 0x4000000}, 0x20) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x4db, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000380), 0x800, 0x2d0800) 2.406247795s ago: executing program 2 (id=3360): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) bind$bt_hci(r0, &(0x7f0000000240)={0x27, 0x3}, 0x6) 2.390519136s ago: executing program 2 (id=3361): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x18) pwritev2(r3, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x800000009) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r0, &(0x7f0000000500)="c091cf6a0917c43f7e61f65dc2f1ad81d133fbfb90590f73f7bb751c3d97df933f685f990ba3754d6e9fab35eac476403382588115cc4d513fbe313e0703f8ec4a9f04cd4df25a1c76feee3dd846252256d943deb09228d80ff5a444de81ca31756797257df5cf91fa5f4f6d5c46f2b7a9ba", &(0x7f00000003c0)=""/16}, 0x20) readv(r7, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r7, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) syz_usb_connect$uac1(0x5, 0x7a, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x6, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xc7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x81, 0x10, '8'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x1, 0x2, {0x7, 0x25, 0x1, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xa, 0x0, 0x40, {0x7, 0x25, 0x1, 0x3, 0x8, 0x6}}}}}}}]}}, 0x0) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) 945.833264ms ago: executing program 4 (id=3399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="4caad239aae9db1ac986aabf9c2af290e900000000", @ANYRES16, @ANYBLOB="08002cbd7000fddbdf250d00000005001b000c000000050018000200000005001a00b800000005001700e300000005001b000400000006000800ffff00000500180004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000005c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24000080) 678.457465ms ago: executing program 4 (id=3403): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x86) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 632.627988ms ago: executing program 4 (id=3406): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0xff87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x6, 0x2}, 0x0, 0x10000, 0xc8d, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) r2 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3a1}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 583.337493ms ago: executing program 5 (id=3407): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) dup2(0xffffffffffffffff, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020b196f8eecca454a3298740073797a31000000000100010073697700140033007665746830"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0xd2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000740)='ext4_begin_ordered_truncate\x00', r4, 0x0, 0x2}, 0x18) r5 = syz_io_uring_setup(0x52f, &(0x7f0000000140)={0x0, 0x8b7c, 0x80, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='f2fs_truncate_data_blocks_range\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) syz_open_procfs(r9, &(0x7f0000000700)='net/stat\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) vmsplice(r10, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r10, 0x407, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021008000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='fsi_master_gpio_cmd_same_addr\x00', r3, 0x0, 0x8000000000000001}, 0xfffffd43) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x138000, 0x1000, 0x0, 0x4000000}, 0x20) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x4db, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000380), 0x800, 0x2d0800) 567.202654ms ago: executing program 1 (id=3408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r2, 0x7f, 0x0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)={'#! ', '', [], 0xa, "f2949381f99a1e262595f16ae1eb642fc7e17bdfd9e5ef9e8de08665d159e3bb6472eb34e476510157a7f2d98613f3a79c8e0399ab33b6a7030f10b028af44ef340f9a033f07354b02823eec81991908bd1d0b2f1b4e281c97b9d395c4c9b617d47a6254ff53e2178f610471b983b77d922d91dfbbd67019ed33bfd205c2373cf1ffb72cb0a57091c76a51e70b5c25fe"}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 455.144473ms ago: executing program 1 (id=3411): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000bc0)={0x0, "afd711ca3da0ab6dcbec1d429dd61fae"}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000000)={{r0}, {@val={r3}, @actul_num={@void, 0x32cb, 0x47}}}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzDb59U9+JhURWxQDHipIt9lYrHpqezGHggU9iHhoaDY1ZNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7NJTHaTELJOmvl8YHbfn03e++7wMu/t7CMBlNZw9pBGnImIG0nE4Ka6Y5FXDrdet/rH3ZvZkcTa2lu/J5HkZe3XJ/nzqTxzPCK+uxrxZGV7uwtLy9PjjUZ9Ps9fWJyZu7CwtHx+amb8Vv1W/XZt9NWLl0Zeq12sHVisD7767Jexa28++/GH778y+X3jfBKXYyCv2xzHQRmO4fX3ZLPsfb100I0VpJLH0ylODr/2+euLiKdjMCr5qM8MxtSDQjsH9NRaJWINKKnE+IeSas8D2mv7XqyDD7NHV1oLoO3xH2t9NhLHm2ujk6vJppVRa707dADtZ238fffsF9kRPfocYif37kfEM53iT5p9G2p+ipPFn/4r/jQiRvL+Z+Wj+2x/eEv+cYr/cv6clV/dZ/tFxw9AOa1caV3It1//0vX5T3SY/wx0uHbtR9HXv+7zv434K13mf9f32MbPH4192q1u8/wvO7L223PB/8Kj+xFnO8afrMefdIg/m/fc2GMbb/zw21i3uqLjX3sYca7j+mfjjlay8/3JC5NTjfpI67FjG998+96X3dovOv7s/J/sEv9O5z8rm9tjG19ffzjTrW73+NNf+5O3m6n+vOSD8cXF+VpEf3Jte/kuC5H2a9q/I4v/xRd2Hv+d4j+RrR32GP/cO9Or+4+/t7L4J/Z5/j/ZYxt/vXvnuW51RccPAAAAAAAAR0na/C5HklbX02larbb28D4VJ9PG7MLiS5Ozd25PtL7zMRR9aftO92Arn2T5Wv592HZ+dEv+5Yg4HRGfV04089Wbs42JooMHAAAAAAAAAAAAAAAAAACAQ+LUlv3/f1Za+/+BkjhWdAeAwhj/UF7GP5SX8Q/lZfxDeRn/UF7GP5SX8Q/lZfxDeRn/UF7GPwAAAAAcSaefX/kpiYh7r59oHpn+vK6v0J4BvZYW3QGgMJWiOwAUxq1/KC9rfCDZpf54t4qV3X4SAAAAAAAAAAAAADgo587Y/w9lZf8/lJf9/1Be9v9DeVnjA/b/AwAAAAAAAAAAAMDhN9A8krSa7wUeiDStViP+HxFD0ZdMTjXqIxHxRET8WOn7X5avFd1pAAAAAAAAAAAAAAAAAAAAOGIWlpanxxuN+ryEhITEeqLov0wAAAAAAAAAAAAAAAAAAFA+G5t+i+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn4///9y5RdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPpnwAAAP//bKsggw==") 404.361237ms ago: executing program 0 (id=3412): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c041}, 0x4048) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f00000004c0)={&(0x7f0000000440)=@qipcrtr, 0x80, 0x0}, 0x40010060) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x3, 0x9}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e2473", 0x32}], 0x1}, 0x8001) 403.738517ms ago: executing program 0 (id=3413): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) dup2(0xffffffffffffffff, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500009dcb573220207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020b196f8eecca454a3298740073797a31000000000100010073697700140033007665746830"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0xd2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000740)='ext4_begin_ordered_truncate\x00', r4, 0x0, 0x2}, 0x18) r5 = syz_io_uring_setup(0x52f, &(0x7f0000000140)={0x0, 0x8b7c, 0x80, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='f2fs_truncate_data_blocks_range\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) syz_open_procfs(r9, &(0x7f0000000700)='net/stat\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) vmsplice(r10, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r10, 0x407, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021008000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='fsi_master_gpio_cmd_same_addr\x00', r3, 0x0, 0x8000000000000001}, 0xfffffd43) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x138000, 0x1000, 0x0, 0x4000000}, 0x20) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x4db, 0x0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000380), 0x800, 0x2d0800) 365.3015ms ago: executing program 5 (id=3414): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 308.576345ms ago: executing program 1 (id=3415): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) write$binfmt_register(r0, &(0x7f0000000e80)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xf, 0x3a, '@', 0x3a, '', 0x3a, './bus', 0x3a, [0x46]}, 0x27) 308.372115ms ago: executing program 4 (id=3416): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0xa00, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'virt_wifi0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x3f, "abb89b3fdeb4002222a840a45a8c2673714e7232a7a7060b4ecfe63a2c199751f02e0c13f934a7291c4d37add72c980906de84128d2064e3c628684e43454e"}}) 308.000765ms ago: executing program 5 (id=3417): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 279.546707ms ago: executing program 1 (id=3418): keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000008c0)) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000074000/0x4000)=nil, 0x4000, 0x3, 0x2013, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = socket(0x2, 0x805, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) timer_delete(r0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1c, 0x0, r2, 0x0, &(0x7f0000000340)="fae0ca88958915f21bfa9c260bf76b5eab1fb020e6ac1d82f8e972ba7dec2521dddb7f11b790454a471c7dc41790261e98cc39cb7bb1e640b22c9da745c71988e334aed33983e65dc7c151b9730d4757db92c7c72db9bf02cf8e49dfdc160f5714a0e9b117c13a935f1ce5f9f6", 0x6d, 0x1b46865ac35f676d, 0x1}) r5 = epoll_create(0x1) open(&(0x7f0000000280)='./file0\x00', 0x60842, 0x45) syz_io_uring_setup(0x4a82, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0xa, 0x0, r5, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r4}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={r8, 0xffffffff, 0x80000007, 0xfffffff7}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x589102, 0x90) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) 191.335834ms ago: executing program 5 (id=3419): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) dup2(0xffffffffffffffff, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500009dcb573220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000a500000008000000950000000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020b196f8eecca454a3298740073797a31000000000100010073697700140033007665746830"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0xd2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 191.125555ms ago: executing program 4 (id=3420): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r2, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 150.693998ms ago: executing program 0 (id=3421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89\x89\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zpo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8000000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 149.509618ms ago: executing program 4 (id=3422): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffea, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a31000000000500040001000000140007800500150000000000080011400000006c050005000a0000000500010006938d730ae0dc706b0f45bf5c0d05dbdd00000014000300d39e4cb301b9936b4fd524e8e874cad5c6250034376157d2cf92813f9317715dc4bdddec916904b3b55809787cd392f8e9"], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x42}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r5 = dup2(r4, r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4, 0x1}) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 125.66588ms ago: executing program 0 (id=3423): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c041}, 0x4048) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f00000004c0)={&(0x7f0000000440)=@qipcrtr, 0x80, 0x0}, 0x40010060) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x3, 0x9}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e2473", 0x32}], 0x1}, 0x8001) 108.890441ms ago: executing program 5 (id=3424): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb7", 0x79}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8000000000001a, &(0x7f0000000080)='@', 0x1) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@remote, @broadcast, @remote}, &(0x7f0000000140)=0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 65.786635ms ago: executing program 1 (id=3425): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="4caad239aae9db1ac986aabf9c2af290e900000000", @ANYRES16, @ANYBLOB="08002cbd7000fddbdf250d00000005001b000c000000050018000200000005001a00b800000005001700e300000005001b000400000006000800ffff00000500180004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000005c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24000080) 65.492165ms ago: executing program 0 (id=3426): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x86) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 10.294679ms ago: executing program 5 (id=3427): ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x9, 0x8001}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee0ff04c0000001400010125bd7000fddbd625011f08104e264e2203000000060000000f000000c3000000060000000e00000000000040076c2924b25f6d7ebe2c59730edd5cebd91ad5754a84fa515326c8af90160c9cb7f20e9115eba40f8791eccb7a1823e95ef24ccd5df22021293a7eea62634e9d5a2ec858f9c00611a85c09c8fbe648375ad83b30318a02d4b7bbdf4b339d24", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c7000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x4040000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a30000a2ab40a26d93dd083c0074dcccdb6fa446676dc34690086b5f9c02ab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257994fd30fe2d72f171da72e389f382dea3c8d91906aead5aeccc097ef1092ea987c2b00000000000000002c00"]) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 7.450029ms ago: executing program 1 (id=3428): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) write$binfmt_register(r0, &(0x7f0000000e80)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xf, 0x3a, '@', 0x3a, '', 0x3a, './bus', 0x3a, [0x46]}, 0x27) 0s ago: executing program 0 (id=3429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r2, 0x7f, 0x0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000005c0)={'#! ', '', [], 0xa, "f2949381f99a1e262595f16ae1eb642fc7e17bdfd9e5ef9e8de08665d159e3bb6472eb34e476510157a7f2d98613f3a79c8e0399ab33b6a7030f10b028af44ef340f9a033f07354b02823eec81991908bd1d0b2f1b4e281c97b9d395c4c9b617d47a6254ff53e2178f610471b983b77d922d91dfbbd67019ed33bfd205c2373cf1ffb72cb0a57091c76a51e70b5c25fe"}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) creat(&(0x7f00000003c0)='./file0\x00', 0x36) kernel console output (not intermixed with test programs): total_pgpgout 155833 [ 214.161547][T18080] total_pgfault 185835 [ 214.165654][T18080] total_pgmajfault 79 [ 214.169628][T18080] total_inactive_anon 0 [ 214.173823][T18080] total_active_anon 8192 [ 214.178114][T18080] total_inactive_file 0 [ 214.182259][T18080] total_active_file 4096 [ 214.186530][T18080] total_unevictable 0 [ 214.190510][T18080] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2865,pid=18080,uid=0 [ 214.205325][T18080] Memory cgroup out of memory: Killed process 18080 (syz.5.2865) total-vm:93764kB, anon-rss:1072kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 214.208375][T18134] loop2: detected capacity change from 0 to 512 [ 214.231738][T18136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=18136 comm=syz.1.2876 [ 214.287370][T18148] loop0: detected capacity change from 0 to 512 [ 214.329497][T18134] EXT4-fs (loop2): 1 orphan inode deleted [ 214.357450][ T2195] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 214.381969][T18134] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.411499][T18172] FAULT_INJECTION: forcing a failure. [ 214.411499][T18172] name failslab, interval 1, probability 0, space 0, times 0 [ 214.416071][T18148] EXT4-fs (loop0): 1 orphan inode deleted [ 214.424282][T18172] CPU: 1 UID: 0 PID: 18172 Comm: syz.4.2889 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 214.424310][T18172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.424391][T18172] Call Trace: [ 214.424398][T18172] [ 214.424406][T18172] __dump_stack+0x1d/0x30 [ 214.424428][T18172] dump_stack_lvl+0xe8/0x140 [ 214.424450][T18172] dump_stack+0x15/0x1b [ 214.424466][T18172] should_fail_ex+0x265/0x280 [ 214.424489][T18172] should_failslab+0x8c/0xb0 [ 214.424512][T18172] kmem_cache_alloc_noprof+0x50/0x310 [ 214.424586][T18172] ? alloc_empty_file+0x76/0x200 [ 214.424615][T18172] alloc_empty_file+0x76/0x200 [ 214.424673][T18172] alloc_file_pseudo+0xc6/0x160 [ 214.424702][T18172] anon_inode_getfd+0xc1/0x150 [ 214.424733][T18172] __se_sys_fsopen+0x193/0x1e0 [ 214.424805][T18172] __x64_sys_fsopen+0x31/0x40 [ 214.424886][T18172] x64_sys_call+0x2a9d/0x2ff0 [ 214.424906][T18172] do_syscall_64+0xd2/0x200 [ 214.424930][T18172] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.424954][T18172] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 214.425017][T18172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.425038][T18172] RIP: 0033:0x7fc996feebe9 [ 214.425054][T18172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.425069][T18172] RSP: 002b:00007fc995a4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 214.425159][T18172] RAX: ffffffffffffffda RBX: 00007fc997215fa0 RCX: 00007fc996feebe9 [ 214.425172][T18172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 214.425184][T18172] RBP: 00007fc995a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.425196][T18172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.425261][T18172] R13: 00007fc997216038 R14: 00007fc997215fa0 R15: 00007fff518d15e8 [ 214.425282][T18172] [ 214.619373][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 214.619970][T18148] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.638021][T18134] netlink: 'syz.2.2880': attribute type 4 has an invalid length. [ 214.642464][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 214.672128][T18183] bond1: entered promiscuous mode [ 214.677335][T18183] bond1: entered allmulticast mode [ 214.684705][T18183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.695931][T18183] bond1 (unregistering): Released all slaves [ 214.708908][T18178] netlink: 'syz.2.2880': attribute type 4 has an invalid length. [ 214.734545][T18253] loop1: detected capacity change from 0 to 256 [ 214.742450][T18253] vfat: Unknown parameter 'sh†rtname' [ 214.803085][T18263] loop4: detected capacity change from 0 to 128 [ 214.943523][T18290] 9pnet: p9_errstr2errno: server reported unknown error [ 215.029537][T18303] loop4: detected capacity change from 0 to 128 [ 215.050180][T18290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=18290 comm=syz.0.2898 [ 215.057857][T18303] ext4 filesystem being mounted at /551/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.083238][T18305] ip6gre4: entered allmulticast mode [ 215.221025][T18319] loop0: detected capacity change from 0 to 512 [ 215.270134][T18319] EXT4-fs (loop0): 1 orphan inode deleted [ 215.286209][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 215.304602][T18319] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.354997][ T2195] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 215.481200][T18336] loop2: detected capacity change from 0 to 512 [ 215.535938][T18336] EXT4-fs (loop2): 1 orphan inode deleted [ 215.546269][T18319] __nla_validate_parse: 7 callbacks suppressed [ 215.546286][T18319] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2903'. [ 215.558579][T18336] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.571615][ T2195] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 215.600500][T18341] netlink: 'syz.0.2903': attribute type 4 has an invalid length. [ 215.611587][T18355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2910'. [ 215.647068][T18319] netlink: 'syz.0.2903': attribute type 4 has an invalid length. [ 215.673896][T18359] loop5: detected capacity change from 0 to 128 [ 215.846072][T18377] 9pnet: p9_errstr2errno: server reported unknown error [ 215.953944][T18377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=18377 comm=syz.1.2913 [ 216.004398][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 216.365434][T18411] loop0: detected capacity change from 0 to 512 [ 216.377061][T18412] FAULT_INJECTION: forcing a failure. [ 216.377061][T18412] name failslab, interval 1, probability 0, space 0, times 0 [ 216.389909][T18412] CPU: 1 UID: 0 PID: 18412 Comm: syz.1.2919 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 216.389943][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.389953][T18412] Call Trace: [ 216.389961][T18412] [ 216.389972][T18412] __dump_stack+0x1d/0x30 [ 216.390012][T18412] dump_stack_lvl+0xe8/0x140 [ 216.390029][T18412] dump_stack+0x15/0x1b [ 216.390043][T18412] should_fail_ex+0x265/0x280 [ 216.390080][T18412] should_failslab+0x8c/0xb0 [ 216.390104][T18412] kmem_cache_alloc_noprof+0x50/0x310 [ 216.390141][T18412] ? getname_flags+0x80/0x3b0 [ 216.390165][T18412] getname_flags+0x80/0x3b0 [ 216.390265][T18412] do_sys_openat2+0x60/0x110 [ 216.390297][T18412] __x64_sys_creat+0x65/0x90 [ 216.390405][T18412] x64_sys_call+0x2d94/0x2ff0 [ 216.390426][T18412] do_syscall_64+0xd2/0x200 [ 216.390449][T18412] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.390471][T18412] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 216.390548][T18412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.390569][T18412] RIP: 0033:0x7f7efab4ebe9 [ 216.390587][T18412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.390604][T18412] RSP: 002b:00007f7ef95b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 216.390624][T18412] RAX: ffffffffffffffda RBX: 00007f7efad75fa0 RCX: 00007f7efab4ebe9 [ 216.390689][T18412] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0 [ 216.390703][T18412] RBP: 00007f7ef95b7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.390714][T18412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.390726][T18412] R13: 00007f7efad76038 R14: 00007f7efad75fa0 R15: 00007ffe6a9dc598 [ 216.390746][T18412] [ 216.623873][T18411] EXT4-fs (loop0): 1 orphan inode deleted [ 216.636037][T18411] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.646854][ T41] __quota_error: 440 callbacks suppressed [ 216.646871][ T41] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 216.662648][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 216.694343][ T3306] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 216.705572][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 216.705604][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.705616][ T3306] Call Trace: [ 216.705625][ T3306] [ 216.705635][ T3306] __dump_stack+0x1d/0x30 [ 216.705656][ T3306] dump_stack_lvl+0xe8/0x140 [ 216.705694][ T3306] dump_stack+0x15/0x1b [ 216.705711][ T3306] dump_header+0x81/0x220 [ 216.705741][ T3306] oom_kill_process+0x342/0x400 [ 216.705772][ T3306] out_of_memory+0x979/0xb80 [ 216.705817][ T3306] try_charge_memcg+0x5e6/0x9e0 [ 216.705850][ T3306] charge_memcg+0x51/0xc0 [ 216.705866][ T3306] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 216.705886][ T3306] __read_swap_cache_async+0x1df/0x350 [ 216.705926][ T3306] swap_cluster_readahead+0x277/0x3e0 [ 216.705992][ T3306] swapin_readahead+0xde/0x6f0 [ 216.706074][ T3306] ? __filemap_get_folio+0x4f7/0x6b0 [ 216.706103][ T3306] ? __rcu_read_unlock+0x34/0x70 [ 216.706123][ T3306] ? swap_cache_get_folio+0x77/0x200 [ 216.706178][ T3306] do_swap_page+0x301/0x2430 [ 216.706205][ T3306] ? css_rstat_updated+0xb7/0x240 [ 216.706232][ T3306] ? __pfx_default_wake_function+0x10/0x10 [ 216.706270][ T3306] handle_mm_fault+0x9a5/0x2c20 [ 216.706358][ T3306] do_user_addr_fault+0x636/0x1090 [ 216.706431][ T3306] exc_page_fault+0x62/0xa0 [ 216.706455][ T3306] asm_exc_page_fault+0x26/0x30 [ 216.706476][ T3306] RIP: 0033:0x7f5f7c7feb8a [ 216.706493][ T3306] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 9b 63 ff ff 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 32 00 00 90 [ 216.706509][ T3306] RSP: 002b:00007ffe70c30e70 EFLAGS: 00010202 [ 216.706524][ T3306] RAX: 0000000000000000 RBX: 00000000000005b5 RCX: 00007f5f7c831463 [ 216.706536][ T3306] RDX: bfa5be9918ecb300 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.706554][ T3306] RBP: 00007ffe70c30edc R08: 00000000276af829 R09: 0000000000000000 [ 216.706623][ T3306] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 216.706636][ T3306] R13: 00000000000927c0 R14: 0000000000034bd5 R15: 00007ffe70c30f30 [ 216.706734][ T3306] [ 216.706741][ T3306] memory: usage 303040kB, limit 307200kB, failcnt 2933 [ 216.885777][ T41] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 216.893612][ T3306] memory+swap: usage 27424kB, limit 9007199254740988kB, failcnt 0 [ 216.893632][ T3306] kmem: usage 26220kB, limit 9007199254740988kB, failcnt 0 [ 216.901691][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 216.938939][T18422] loop5: detected capacity change from 0 to 128 [ 216.946047][ T3306] Memory cgroup stats for /syz2: [ 216.975960][ T3306] cache 0 [ 216.983859][ T3306] rss 24576 [ 216.987143][ T3306] shmem 0 [ 216.990084][ T3306] mapped_file 4927488 [ 216.994075][ T3306] dirty 0 [ 216.997111][ T3306] writeback 0 [ 217.000412][ T3306] workingset_refault_anon 267 [ 217.005259][ T3306] workingset_refault_file 1328 [ 217.010026][ T3306] swap 1024000 [ 217.013395][ T3306] swapcached 16384 [ 217.017222][ T29] audit: type=1326 audit(1755007403.747:14418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18426 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 217.017256][ T29] audit: type=1326 audit(1755007403.747:14419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18426 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 217.017311][ T29] audit: type=1326 audit(1755007403.747:14420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18426 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 217.017335][ T29] audit: type=1326 audit(1755007403.747:14421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18426 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 217.041096][ T3306] pgpgin 197213 [ 217.064988][ T29] audit: type=1326 audit(1755007403.747:14422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18426 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 217.065023][ T29] audit: type=1326 audit(1755007403.747:14423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18426 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 217.065048][ T29] audit: type=1326 audit(1755007403.747:14424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18426 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 217.089250][ T3306] pgpgout 197206 [ 217.113170][ T29] audit: type=1326 audit(1755007403.747:14425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18426 comm="syz.1.2921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 217.116753][ T3306] pgfault 236671 [ 217.218787][ T3306] pgmajfault 107 [ 217.222391][ T3306] inactive_anon 0 [ 217.226244][ T3306] active_anon 20480 [ 217.230044][ T3306] inactive_file 0 [ 217.233862][ T3306] active_file 0 [ 217.237485][ T3306] unevictable 0 [ 217.241036][ T3306] hierarchical_memory_limit 314572800 [ 217.246505][ T3306] hierarchical_memsw_limit 9223372036854771712 [ 217.252720][ T3306] total_cache 0 [ 217.256217][ T3306] total_rss 24576 [ 217.259903][ T3306] total_shmem 0 [ 217.263418][ T3306] total_mapped_file 4927488 [ 217.268013][ T3306] total_dirty 0 [ 217.271934][ T3306] total_writeback 0 [ 217.275811][ T3306] total_workingset_refault_anon 267 [ 217.281165][ T3306] total_workingset_refault_file 1328 [ 217.282307][T18422] ext4 filesystem being mounted at /511/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.286605][ T3306] total_swap 1024000 [ 217.301118][ T3306] total_swapcached 16384 [ 217.305618][ T3306] total_pgpgin 197213 [ 217.309682][ T3306] total_pgpgout 197206 [ 217.313763][ T3306] total_pgfault 236671 [ 217.317843][ T3306] total_pgmajfault 107 [ 217.321900][ T3306] total_inactive_anon 0 [ 217.326171][ T3306] total_active_anon 20480 [ 217.330713][ T3306] total_inactive_file 0 [ 217.334902][ T3306] total_active_file 0 [ 217.338903][ T3306] total_unevictable 0 [ 217.342904][ T3306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2493,pid=15718,uid=0 [ 217.357659][ T3306] Memory cgroup out of memory: Killed process 15718 (syz.2.2493) total-vm:95368kB, anon-rss:992kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 217.515024][T18449] netlink: 'syz.0.2920': attribute type 4 has an invalid length. [ 217.633837][ T36] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x4 [ 217.641740][ T36] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x2 [ 217.671934][ T36] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x3 [ 217.695288][ T36] hid-generic 0000:3000000:0000.0023: hidraw0: HID v0.00 Device [sy] on syz0 [ 217.721352][T18473] loop1: detected capacity change from 0 to 128 [ 217.800994][T18473] ext4 filesystem being mounted at /571/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.802430][T18485] fido_id[18485]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.970651][ T6358] syz_tun (unregistering): left allmulticast mode [ 217.984657][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 218.020596][ T4902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.082531][ T4902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.108356][T18508] 9pnet: p9_errstr2errno: server reported unknown error [ 218.131278][T18512] 9pnet: p9_errstr2errno: server reported unknown error [ 218.156349][ T4902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.271214][ T4902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.381715][T18538] loop1: detected capacity change from 0 to 736 [ 218.520083][ T4902] bridge_slave_1: left allmulticast mode [ 218.525852][ T4902] bridge_slave_1: left promiscuous mode [ 218.531671][ T4902] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.563793][T18492] syz.4.2936 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 218.575075][T18492] CPU: 0 UID: 0 PID: 18492 Comm: syz.4.2936 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 218.575108][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.575120][T18492] Call Trace: [ 218.575128][T18492] [ 218.575137][T18492] __dump_stack+0x1d/0x30 [ 218.575161][T18492] dump_stack_lvl+0xe8/0x140 [ 218.575230][T18492] dump_stack+0x15/0x1b [ 218.575243][T18492] dump_header+0x81/0x220 [ 218.575274][T18492] oom_kill_process+0x342/0x400 [ 218.575327][T18492] out_of_memory+0x979/0xb80 [ 218.575359][T18492] try_charge_memcg+0x5e6/0x9e0 [ 218.575397][T18492] charge_memcg+0x51/0xc0 [ 218.575416][T18492] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 218.575511][T18492] __read_swap_cache_async+0x1df/0x350 [ 218.575625][T18492] swap_cluster_readahead+0x277/0x3e0 [ 218.575668][T18492] swapin_readahead+0xde/0x6f0 [ 218.575723][T18492] ? __filemap_get_folio+0x4f7/0x6b0 [ 218.575808][T18492] ? swap_cache_get_folio+0x77/0x200 [ 218.575912][T18492] do_swap_page+0x301/0x2430 [ 218.575934][T18492] ? css_rstat_updated+0xb7/0x240 [ 218.575984][T18492] ? __pfx_default_wake_function+0x10/0x10 [ 218.576010][T18492] handle_mm_fault+0x9a5/0x2c20 [ 218.576038][T18492] do_user_addr_fault+0x636/0x1090 [ 218.576067][T18492] ? fpregs_restore_userregs+0xe2/0x1d0 [ 218.576121][T18492] ? switch_fpu_return+0xe/0x20 [ 218.576148][T18492] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 218.576177][T18492] exc_page_fault+0x62/0xa0 [ 218.576276][T18492] asm_exc_page_fault+0x26/0x30 [ 218.576297][T18492] RIP: 0033:0x7fc997021453 [ 218.576314][T18492] Code: f6 08 00 48 8d 3d 56 f6 08 00 e8 f8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 218.576331][T18492] RSP: 002b:00007fff518d1708 EFLAGS: 00010293 [ 218.576347][T18492] RAX: 00000000fffffffa RBX: 00007fc997215fa0 RCX: 0000000000000000 [ 218.576412][T18492] RDX: 00007fff518d1720 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.576425][T18492] RBP: 00007fc997217da0 R08: 000000001a168af7 R09: 7fffffffffffffff [ 218.576439][T18492] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000035634 [ 218.576450][T18492] R13: 00007fc997215fa0 R14: ffffffffffffffff R15: 00007fff518d1860 [ 218.576468][T18492] [ 218.576475][T18492] memory: usage 303300kB, limit 307200kB, failcnt 5471 [ 218.676234][T16908] EXT4-fs unmount: 25 callbacks suppressed [ 218.676249][T16908] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.679001][T18492] memory+swap: usage 218180kB, limit 9007199254740988kB, failcnt 0 [ 218.679013][T18492] kmem: usage 217268kB, limit 9007199254740988kB, failcnt 0 [ 218.734687][T18538] rock: directory entry would overflow storage [ 218.750950][T18492] Memory cgroup stats for /syz4: [ 218.755208][T18492] cache 0 [ 218.757755][T18538] rock: sig=0x3b10, size=4, remaining=3 [ 218.765427][T18492] rss 0 [ 218.765435][T18492] shmem 0 [ 218.765442][T18492] mapped_file 4927488 [ 218.765449][T18492] dirty 0 [ 218.765455][T18492] writeback 0 [ 218.765462][T18492] workingset_refault_anon 289 [ 218.765471][T18492] workingset_refault_file 2004 [ 218.765558][T18492] swap 696320 [ 218.765566][T18492] swapcached 12288 [ 218.765573][T18492] pgpgin 217104 [ 218.765580][T18492] pgpgout 217100 [ 218.765587][T18492] pgfault 230620 [ 218.765595][T18492] pgmajfault 162 [ 218.765602][T18492] inactive_anon 12288 [ 218.765608][T18492] active_anon 0 [ 218.765613][T18492] inactive_file 4096 [ 218.765621][T18492] active_file 0 [ 218.765628][T18492] unevictable 0 [ 218.765641][T18492] hierarchical_memory_limit 314572800 [ 218.765649][T18492] hierarchical_memsw_limit 9223372036854771712 [ 218.765658][T18492] total_cache 0 [ 218.765665][T18492] total_rss 0 [ 218.765672][T18492] total_shmem 0 [ 218.765678][T18492] total_mapped_file 4927488 [ 218.765684][T18492] total_dirty 0 [ 218.765690][T18492] total_writeback 0 [ 218.765740][T18492] total_workingset_refault_anon 289 [ 218.765748][T18492] total_workingset_refault_file 2004 [ 218.765806][T18492] total_swap 696320 [ 218.765814][T18492] total_swapcached 12288 [ 218.765822][T18492] total_pgpgin 217104 [ 218.765829][T18492] total_pgpgout 217100 [ 218.765835][T18492] total_pgfault 230620 [ 218.765841][T18492] total_pgmajfault 162 [ 218.765848][T18492] total_inactive_anon 12288 [ 218.765856][T18492] total_active_anon 0 [ 218.765864][T18492] total_inactive_file 4096 [ 218.765872][T18492] total_active_file 0 [ 218.765878][T18492] total_unevictable 0 [ 218.765885][T18492] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2097,pid=13811,uid=0 [ 218.765965][T18492] Memory cgroup out of memory: Killed process 13811 (syz.4.2097) total-vm:95368kB, anon-rss:992kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 219.025557][ T3381] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x4 [ 219.070897][ T3381] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x2 [ 219.082752][ T4902] bridge_slave_0: left allmulticast mode [ 219.088690][ T4902] bridge_slave_0: left promiscuous mode [ 219.094781][ T4902] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.109542][ T3381] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x3 [ 219.156776][ T3381] hid-generic 0000:3000000:0000.0024: hidraw0: HID v0.00 Device [sy] on syz0 [ 219.183280][T18688] fido_id[18688]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.236689][ T4902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.246109][ T4902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.255746][ T4902] bond0 (unregistering): Released all slaves [ 219.270765][T18673] veth1_to_bond: entered allmulticast mode [ 219.289121][T18673] veth1_to_bond: left allmulticast mode [ 219.306458][T18495] chnl_net:caif_netlink_parms(): no params data found [ 219.316308][T18717] loop1: detected capacity change from 0 to 128 [ 219.330437][ T4902] tipc: Left network mode [ 219.344093][T18722] 9pnet: p9_errstr2errno: server reported unknown error [ 219.387453][T18740] loop0: detected capacity change from 0 to 128 [ 219.401592][ T4902] hsr_slave_0: left promiscuous mode [ 219.414644][ T4902] hsr_slave_1: left promiscuous mode [ 219.421096][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.430581][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.432185][T18740] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.451528][T18740] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.526736][T18771] serio: Serial port ptm0 [ 219.538368][ T4902] team0 (unregistering): Port device team_slave_1 removed [ 219.577718][ T4902] team0 (unregistering): Port device team_slave_0 removed [ 219.705513][T18495] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.712684][T18495] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.720547][T18495] bridge_slave_0: entered allmulticast mode [ 219.727064][T18495] bridge_slave_0: entered promiscuous mode [ 219.734155][T18495] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.741269][T18495] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.748814][T18495] bridge_slave_1: entered allmulticast mode [ 219.755328][T18495] bridge_slave_1: entered promiscuous mode [ 219.769102][T16908] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.792712][T18818] veth1_to_bond: entered allmulticast mode [ 219.818184][T18818] veth1_to_bond: left allmulticast mode [ 219.835225][T18495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.840130][T18862] loop4: detected capacity change from 0 to 512 [ 219.860211][T18864] loop0: detected capacity change from 0 to 1024 [ 219.865627][T18495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.876498][T18864] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 219.896394][T18862] EXT4-fs (loop4): 1 orphan inode deleted [ 219.916983][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 219.932770][T18862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.933106][T18495] team0: Port device team_slave_0 added [ 219.953101][T18495] team0: Port device team_slave_1 added [ 219.974994][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 219.981941][T18862] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.988187][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x4 [ 220.002349][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x2 [ 220.027223][T18495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.034288][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.034398][ T36] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x3 [ 220.060742][T18495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.081331][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 220.093530][T18864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.101000][T18864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.116946][T18864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.124561][T18864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.133715][ T36] hid-generic 0000:3000000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 220.157906][T18495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.164907][T18495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.190981][T18495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.218305][T18949] fido_id[18949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.276627][T18495] hsr_slave_0: entered promiscuous mode [ 220.283102][T18495] hsr_slave_1: entered promiscuous mode [ 220.290029][T18495] debugfs: 'hsr0' already exists in 'hsr' [ 220.295938][T18495] Cannot create hsr debugfs directory [ 220.309621][T18862] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2958'. [ 220.354528][T18992] 9pnet: p9_errstr2errno: server reported unknown error [ 220.376865][T18862] netlink: 'syz.4.2958': attribute type 4 has an invalid length. [ 220.389023][T19015] loop5: detected capacity change from 0 to 128 [ 220.420012][T18862] netlink: 'syz.4.2958': attribute type 4 has an invalid length. [ 220.586201][T19083] veth1_to_bond: entered allmulticast mode [ 220.621642][T19083] veth1_to_bond: left allmulticast mode [ 220.629900][T19096] loop5: detected capacity change from 0 to 512 [ 220.636872][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.695531][T19096] EXT4-fs (loop5): 1 orphan inode deleted [ 220.715913][T19096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.725926][ T36] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x4 [ 220.728984][ T4902] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 220.788782][T19147] serio: Serial port ptm0 [ 220.795234][ T36] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 220.803004][T18495] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.817833][T19125] loop1: detected capacity change from 0 to 736 [ 220.826722][T19096] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.841772][T19157] fido_id[19157]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.864998][T18495] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.865496][ T56] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 220.885468][T18495] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.921415][T18495] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.986081][T19125] rock: directory entry would overflow storage [ 220.992485][T19125] rock: sig=0x3b10, size=4, remaining=3 [ 221.018353][T18495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.029570][T19189] 9pnet: p9_errstr2errno: server reported unknown error [ 221.056904][T18495] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.069446][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.076545][ T4902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.087702][ T2195] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.094796][ T2195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.182633][T19199] netlink: 'syz.5.2968': attribute type 4 has an invalid length. [ 221.237444][T18495] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.447733][T19214] veth1_to_bond: entered allmulticast mode [ 221.469873][T19214] veth1_to_bond: left allmulticast mode [ 221.497662][T18495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.551781][ T4464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.648628][T18495] veth0_vlan: entered promiscuous mode [ 221.677156][T18495] veth1_vlan: entered promiscuous mode [ 221.733771][T18495] veth0_macvtap: entered promiscuous mode [ 221.747604][T19254] 9pnet: p9_errstr2errno: server reported unknown error [ 221.766952][T18495] veth1_macvtap: entered promiscuous mode [ 221.792608][T19259] loop1: detected capacity change from 0 to 128 [ 221.796331][T18495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.820584][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 221.820598][ T29] audit: type=1326 audit(1755007408.577:14950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 221.859598][T18495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.873556][ T2195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.906477][ T2195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.935394][ T2195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.936729][T19277] binfmt_misc: register: failed to install interpreter file ./bus [ 221.944212][ T29] audit: type=1326 audit(1755007408.577:14951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 221.975975][ T29] audit: type=1326 audit(1755007408.577:14952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 222.000176][ T29] audit: type=1326 audit(1755007408.577:14953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 222.023940][ T29] audit: type=1326 audit(1755007408.577:14954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 222.047841][ T29] audit: type=1326 audit(1755007408.577:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7efab50a7c code=0x7ffc0000 [ 222.071607][ T29] audit: type=1326 audit(1755007408.577:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7efab509b4 code=0x7ffc0000 [ 222.095523][ T29] audit: type=1326 audit(1755007408.577:14957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7efab509b4 code=0x7ffc0000 [ 222.119562][ T29] audit: type=1326 audit(1755007408.577:14958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 222.124982][ T2195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.143356][ T29] audit: type=1326 audit(1755007408.577:14959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19258 comm="syz.1.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7efab4ebe9 code=0x7ffc0000 [ 222.215282][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2995'. [ 222.229890][T19308] loop1: detected capacity change from 0 to 512 [ 222.294703][T19317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.336070][T19308] EXT4-fs (loop1): 1 orphan inode deleted [ 222.342197][T19308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.350647][T19317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.366576][ T56] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 222.396739][T19334] loop5: detected capacity change from 0 to 128 [ 222.460993][T19308] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.487774][T19356] loop0: detected capacity change from 0 to 128 [ 222.504709][ T2195] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 222.534247][T19356] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.558594][T19366] veth1_to_bond: entered allmulticast mode [ 222.565501][T19366] veth1_to_bond: left allmulticast mode [ 222.606062][T19356] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.653976][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3008'. [ 222.701842][ T3381] hid_parser_main: 2 callbacks suppressed [ 222.701896][ T3381] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x4 [ 222.715504][ T3381] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x2 [ 222.732978][ T3381] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x3 [ 222.747798][ T3381] hid-generic 0000:3000000:0000.0027: hidraw0: HID v0.00 Device [sy] on syz0 [ 222.762389][T19402] netlink: 'syz.1.2991': attribute type 4 has an invalid length. [ 222.789743][T19398] fido_id[19398]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 222.862261][T16908] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.009497][T19436] loop5: detected capacity change from 0 to 512 [ 223.079143][T19436] EXT4-fs (loop5): 1 orphan inode deleted [ 223.095079][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 223.121240][T19450] loop0: detected capacity change from 0 to 128 [ 223.155216][T19436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.196868][T19463] loop4: detected capacity change from 0 to 512 [ 223.208521][T19463] EXT4-fs: Ignoring removed bh option [ 223.240444][T19463] EXT4-fs error (device loop4): __ext4_iget:5464: inode #15: block 1803188595: comm syz.4.3020: invalid block [ 223.253109][T19436] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.276030][T19463] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3020: couldn't read orphan inode 15 (err -117) [ 223.310913][T19463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.453118][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.698312][ T4464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.761852][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.942791][ T3381] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x4 [ 223.951129][ T3381] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x2 [ 223.962792][ T3381] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x3 [ 223.987201][ T3381] hid-generic 0000:3000000:0000.0028: hidraw0: HID v0.00 Device [sy] on syz0 [ 224.003060][T19553] veth1_to_bond: entered allmulticast mode [ 224.020386][T19559] fido_id[19559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 224.024720][T19553] veth1_to_bond: left allmulticast mode [ 224.098960][T19572] loop4: detected capacity change from 0 to 512 [ 224.124174][T19572] EXT4-fs (loop4): 1 orphan inode deleted [ 224.133113][T19572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.146281][ T2195] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 224.159528][T19572] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.205675][T19579] loop1: detected capacity change from 0 to 512 [ 224.228350][T19579] EXT4-fs (loop1): 1 orphan inode deleted [ 224.238426][T19579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.251360][ T2195] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 224.251622][T19579] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.305421][ T2195] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 224.409990][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.427581][T19598] loop0: detected capacity change from 0 to 1024 [ 224.491222][T19602] netlink: 'syz.1.3037': attribute type 4 has an invalid length. [ 224.598608][T19598] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.648777][T19598] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 224.673654][T19598] EXT4-fs (loop0): orphan cleanup on readonly fs [ 224.697771][T19614] veth1_to_bond: entered allmulticast mode [ 224.708146][T19598] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.3043: Freeing blocks not in datazone - block = 0, count = 4096 [ 224.729856][T19614] veth1_to_bond: left allmulticast mode [ 224.759355][T19598] EXT4-fs (loop0): 1 orphan inode deleted [ 224.789935][T19598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 224.847336][T19598] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.3043: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 224.875616][T19598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3043'. [ 224.953560][T19646] binfmt_misc: register: failed to install interpreter file ./bus [ 224.966017][T19649] loop4: detected capacity change from 0 to 512 [ 224.987758][T19649] EXT4-fs (loop4): 1 orphan inode deleted [ 224.994084][T19649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.006921][ T2195] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 225.007567][T19649] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.030788][T16908] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.122792][T19662] loop5: detected capacity change from 0 to 128 [ 225.153352][T19662] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.181816][T19662] ext4 filesystem being mounted at /544/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.258667][ T4464] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.270398][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.283246][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.303174][T19681] loop5: detected capacity change from 0 to 128 [ 225.332471][T19693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.342501][T19693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.434398][T19710] binfmt_misc: register: failed to install interpreter file ./bus [ 225.477762][T19718] loop5: detected capacity change from 0 to 512 [ 225.525806][T19718] EXT4-fs (loop5): 1 orphan inode deleted [ 225.537942][T19718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.552005][ T4902] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 225.564142][T19732] loop4: detected capacity change from 0 to 128 [ 225.572907][T19718] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.574201][T19732] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.600006][T19732] ext4 filesystem being mounted at /589/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.610799][ T4902] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 225.750027][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.790294][T19718] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3065'. [ 225.801154][T19718] netlink: 'syz.5.3065': attribute type 4 has an invalid length. [ 225.816847][T19757] loop4: detected capacity change from 0 to 512 [ 225.830428][T19718] netlink: 'syz.5.3065': attribute type 4 has an invalid length. [ 225.855855][T19757] EXT4-fs (loop4): 1 orphan inode deleted [ 225.875333][ T4902] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 225.888808][T19757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.903886][ T4464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.914072][T19757] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.949358][T19743] chnl_net:caif_netlink_parms(): no params data found [ 225.960531][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 226.070476][T19757] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3072'. [ 226.080688][T19757] netlink: 'syz.4.3072': attribute type 4 has an invalid length. [ 226.080806][T19743] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.096200][T19743] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.105152][T19743] bridge_slave_0: entered allmulticast mode [ 226.111513][T19743] bridge_slave_0: entered promiscuous mode [ 226.120335][T19743] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.121922][T19757] netlink: 'syz.4.3072': attribute type 4 has an invalid length. [ 226.127514][T19743] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.142616][T19743] bridge_slave_1: entered allmulticast mode [ 226.149341][T19743] bridge_slave_1: entered promiscuous mode [ 226.173942][T19743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.185338][T19743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.214337][T19963] serio: Serial port ptm1 [ 226.223235][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.234364][T19743] team0: Port device team_slave_0 added [ 226.243852][T19743] team0: Port device team_slave_1 added [ 226.281556][T19743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.288860][T19743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.290660][T19990] loop4: detected capacity change from 0 to 736 [ 226.314909][T19743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.315917][T19743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.339538][T19743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.365866][T19743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.380563][T19990] rock: directory entry would overflow storage [ 226.387939][T19990] rock: sig=0x3b10, size=4, remaining=3 [ 226.407665][T19743] hsr_slave_0: entered promiscuous mode [ 226.413989][T19743] hsr_slave_1: entered promiscuous mode [ 226.421595][T19743] debugfs: 'hsr0' already exists in 'hsr' [ 226.427509][T19743] Cannot create hsr debugfs directory [ 226.520580][T19743] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.567541][T19743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.569808][T20129] 9pnet_fd: Insufficient options for proto=fd [ 226.618923][T19743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.637814][T20143] loop4: detected capacity change from 0 to 512 [ 226.657537][T20143] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 226.666421][T20143] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.3088: iget: bad i_size value: 12154757448730 [ 226.679193][T20147] bond1: entered promiscuous mode [ 226.679288][T20147] bond1: entered allmulticast mode [ 226.679449][T20147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.698010][T20143] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3088: couldn't read orphan inode 13 (err -117) [ 226.713772][T19743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.727830][T20143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.749431][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.787355][T19743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.801399][T19743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.809571][T20147] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3087'. [ 226.810923][T19743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.831255][ T29] kauditd_printk_skb: 698 callbacks suppressed [ 226.831269][ T29] audit: type=1326 audit(1755007413.587:15647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc996fed69f code=0x7ffc0000 [ 226.865213][T19743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.874582][T20187] loop4: detected capacity change from 0 to 736 [ 226.920376][ T29] audit: type=1326 audit(1755007413.627:15648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc996feec77 code=0x7ffc0000 [ 226.941109][T19743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.944000][ T29] audit: type=1326 audit(1755007413.627:15649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc996fed550 code=0x7ffc0000 [ 226.962688][T19743] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.974293][ T29] audit: type=1326 audit(1755007413.627:15650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc996fee7eb code=0x7ffc0000 [ 227.004979][ T29] audit: type=1326 audit(1755007413.637:15651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc996fed84a code=0x7ffc0000 [ 227.028691][ T29] audit: type=1326 audit(1755007413.637:15652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc996fed84a code=0x7ffc0000 [ 227.035625][T20187] rock: directory entry would overflow storage [ 227.052160][ T29] audit: type=1326 audit(1755007413.637:15653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc996fed457 code=0x7ffc0000 [ 227.052225][ T29] audit: type=1326 audit(1755007413.637:15654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc996ff038a code=0x7ffc0000 [ 227.107772][T20187] rock: sig=0x3b10, size=4, remaining=3 [ 227.127014][ T4902] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.134093][ T4902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.161040][ T29] audit: type=1326 audit(1755007413.897:15655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc996fed550 code=0x7ffc0000 [ 227.164911][ T4902] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.184787][ T29] audit: type=1326 audit(1755007413.897:15656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20185 comm="syz.4.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc996fed937 code=0x7ffc0000 [ 227.192121][ T4902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.248387][T19743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.367253][T20242] 9pnet_fd: Insufficient options for proto=fd [ 227.369029][T19743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.422770][T20247] loop5: detected capacity change from 0 to 128 [ 227.443812][T20254] loop4: detected capacity change from 0 to 512 [ 227.467389][T20247] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.487774][T19743] veth0_vlan: entered promiscuous mode [ 227.500712][T20247] ext4 filesystem being mounted at /561/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.513332][T19743] veth1_vlan: entered promiscuous mode [ 227.532886][T19743] veth0_macvtap: entered promiscuous mode [ 227.540533][T20254] EXT4-fs (loop4): 1 orphan inode deleted [ 227.543275][T19743] veth1_macvtap: entered promiscuous mode [ 227.555279][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 227.557845][T19743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.575819][T20254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.590267][T19743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.599338][T20254] ext4 filesystem being mounted at /601/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.621042][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.636227][ T4902] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 227.647971][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.671206][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.696156][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.721511][ T4464] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.734566][T20278] loop1: detected capacity change from 0 to 512 [ 227.768443][T20275] loop2: detected capacity change from 0 to 736 [ 227.790266][T20278] EXT4-fs (loop1): 1 orphan inode deleted [ 227.805938][ T4902] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 227.820574][T20278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.839884][T20278] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.842732][T20254] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3100'. [ 227.882292][ T3381] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x4 [ 227.890196][ T3381] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x2 [ 227.907949][T20275] rock: directory entry would overflow storage [ 227.915167][T20275] rock: sig=0x3b10, size=4, remaining=3 [ 227.925437][T20254] netlink: 'syz.4.3100': attribute type 4 has an invalid length. [ 227.934172][ T3381] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x3 [ 227.950097][T20254] netlink: 'syz.4.3100': attribute type 4 has an invalid length. [ 227.971956][ T3381] hid-generic 0000:3000000:0000.0029: hidraw0: HID v0.00 Device [sy] on syz0 [ 228.026847][T19743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.045753][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.091644][T20320] loop5: detected capacity change from 0 to 512 [ 228.111759][T20320] EXT4-fs (loop5): 1 orphan inode deleted [ 228.125437][T20320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.139576][ T4902] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 228.169593][T20320] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.248262][ T2195] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 228.293709][T20349] SELinux: Context @ is not valid (left unmapped). [ 228.327779][T20353] veth1_to_bond: entered allmulticast mode [ 228.343034][T20353] veth1_to_bond: left allmulticast mode [ 228.416564][T20378] loop2: detected capacity change from 0 to 128 [ 228.447583][T20380] loop0: detected capacity change from 0 to 512 [ 228.459938][T20378] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.472868][T20378] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.498979][T20380] EXT4-fs (loop0): 1 orphan inode deleted [ 228.522140][T20320] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3110'. [ 228.531923][T20320] netlink: 'syz.5.3110': attribute type 4 has an invalid length. [ 228.540189][ T2195] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 228.540783][T20380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.583112][T20388] netlink: 'syz.5.3110': attribute type 4 has an invalid length. [ 228.592534][T20380] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.638146][ T4902] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 228.681269][T20332] chnl_net:caif_netlink_parms(): no params data found [ 228.737972][T20519] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3119'. [ 228.768104][T20380] netlink: 'syz.0.3119': attribute type 4 has an invalid length. [ 228.777091][ T4464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.818635][T20380] netlink: 'syz.0.3119': attribute type 4 has an invalid length. [ 228.821740][T20332] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.833661][T20332] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.845233][T20332] bridge_slave_0: entered allmulticast mode [ 228.851879][T20332] bridge_slave_0: entered promiscuous mode [ 228.871956][T20332] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.879445][T20332] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.911403][T20332] bridge_slave_1: entered allmulticast mode [ 228.932678][T20332] bridge_slave_1: entered promiscuous mode [ 228.943937][T18495] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.971552][T20332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.992394][T16908] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.002259][T20332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.087746][T20332] team0: Port device team_slave_0 added [ 229.094447][T20332] team0: Port device team_slave_1 added [ 229.130284][T20620] loop5: detected capacity change from 0 to 736 [ 229.149666][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3133'. [ 229.159044][T20332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.166099][T20332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.192391][T20332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.213777][T20332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.220830][T20332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.246965][T20332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.247939][T20620] rock: directory entry would overflow storage [ 229.264708][T20620] rock: sig=0x3b10, size=4, remaining=3 [ 229.274460][T20678] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 229.303964][T20646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3133'. [ 229.317412][T20332] hsr_slave_0: entered promiscuous mode [ 229.332474][T20332] hsr_slave_1: entered promiscuous mode [ 229.334982][T20712] loop0: detected capacity change from 0 to 512 [ 229.343581][T20332] debugfs: 'hsr0' already exists in 'hsr' [ 229.350317][T20332] Cannot create hsr debugfs directory [ 229.370782][T20707] loop2: detected capacity change from 0 to 128 [ 229.380167][T20707] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.405418][T20707] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.414681][T20712] EXT4-fs (loop0): 1 orphan inode deleted [ 229.425054][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 229.442952][T20712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.457256][T20712] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.487457][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 229.544147][T18495] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.583300][T20332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.618062][T20800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'. [ 229.627188][T20712] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3138'. [ 229.653515][T20800] ip6gre7: entered allmulticast mode [ 229.678091][T20332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.747425][T20830] loop1: detected capacity change from 0 to 512 [ 229.769448][T20332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.786004][T20826] loop2: detected capacity change from 0 to 736 [ 229.787744][T16908] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.818587][ T3402] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x4 [ 229.825405][T20830] EXT4-fs (loop1): 1 orphan inode deleted [ 229.826581][ T3402] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x2 [ 229.834592][T20830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.853151][ T4902] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 229.866056][ T3402] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x3 [ 229.884257][T20332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.896158][T20830] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.910303][ T3402] hid-generic 0000:3000000:0000.002A: hidraw0: HID v0.00 Device [sy] on syz0 [ 229.933276][T20826] rock: directory entry would overflow storage [ 229.940347][T20826] rock: sig=0x3b10, size=4, remaining=3 [ 229.980167][T20332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.994414][T20332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 230.003467][T20332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.014015][T20332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.028150][ T56] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 230.123905][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3157'. [ 230.128494][T20332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.151003][T20899] ip6gre8: entered allmulticast mode [ 230.161727][T20332] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.193559][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.200687][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.233054][T20332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.243962][T20332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.260147][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.262107][T20916] loop5: detected capacity change from 0 to 512 [ 230.267248][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.277726][T20912] 9pnet_fd: Insufficient options for proto=fd [ 230.309182][T20919] loop2: detected capacity change from 0 to 512 [ 230.336114][T20923] 9pnet_fd: Insufficient options for proto=fd [ 230.376864][T20916] EXT4-fs (loop5): 1 orphan inode deleted [ 230.383741][T20919] EXT4-fs (loop2): 1 orphan inode deleted [ 230.396350][T20919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.413048][T20916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.440015][T20332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.447483][T10354] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 230.448037][T20919] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.459310][T10354] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 230.523206][T20916] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.555087][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 230.587524][ T2195] bridge_slave_1: left allmulticast mode [ 230.593247][ T2195] bridge_slave_1: left promiscuous mode [ 230.599147][ T2195] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.630868][ T2195] bridge_slave_0: left allmulticast mode [ 230.636624][ T2195] bridge_slave_0: left promiscuous mode [ 230.642391][ T2195] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.778156][ T2195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.806834][ T2195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.824259][ T2195] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 230.846507][ T2195] bond0 (unregistering): Released all slaves [ 230.866541][T20958] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3162'. [ 230.883787][T20916] validate_nla: 4 callbacks suppressed [ 230.883800][T20916] netlink: 'syz.5.3162': attribute type 4 has an invalid length. [ 230.898132][ T2195] tipc: Disabling bearer [ 230.903523][ T2195] tipc: Disabling bearer [ 230.908889][ T2195] tipc: Left network mode [ 230.928002][T20916] netlink: 'syz.5.3162': attribute type 4 has an invalid length. [ 230.962520][ T2195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.970163][ T2195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.015479][ T2195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.035389][ T2195] veth1_macvtap: left promiscuous mode [ 231.040970][ T2195] veth0_macvtap: left promiscuous mode [ 231.055177][ T2195] veth1_vlan: left promiscuous mode [ 231.061360][T18495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.065090][ T2195] veth0_vlan: left promiscuous mode [ 231.092872][ T4464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.121421][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3172'. [ 231.150663][T20980] 9pnet_fd: Insufficient options for proto=fd [ 231.185988][T20990] loop5: detected capacity change from 0 to 1024 [ 231.196400][T20994] loop0: detected capacity change from 0 to 1024 [ 231.211432][T20994] EXT4-fs: Ignoring removed orlov option [ 231.239993][T20990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.245978][T20994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.284516][T19743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.286484][T20990] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3174: bg 0: block 88: padding at end of block bitmap is not set [ 231.301720][ T2195] team0 (unregistering): Port device team_slave_1 removed [ 231.305964][ T2195] team0 (unregistering): Port device team_slave_0 removed [ 231.347517][ T4464] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.377195][T20985] ip6gre1: entered allmulticast mode [ 231.408600][T20332] veth0_vlan: entered promiscuous mode [ 231.416964][T20332] veth1_vlan: entered promiscuous mode [ 231.439641][T20332] veth0_macvtap: entered promiscuous mode [ 231.449351][T20332] veth1_macvtap: entered promiscuous mode [ 231.475187][T20332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.493375][T20332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.507472][T16908] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 231.513923][T21031] loop1: detected capacity change from 0 to 512 [ 231.541701][T10354] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.562707][T10354] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.562774][T10354] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.562815][T10354] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.562847][T16908] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 231.602138][T21031] EXT4-fs (loop1): 1 orphan inode deleted [ 231.602502][T21031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.661697][ T3351] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x4 [ 231.669423][ T3351] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x2 [ 231.670167][T21031] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.678300][ T3351] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x3 [ 231.689234][ T4902] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 231.707386][ T3351] hid-generic 0000:3000000:0000.002B: hidraw0: HID v0.00 Device [sy] on syz0 [ 231.732357][T21048] fido_id[21048]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.763743][T21058] 9pnet_fd: Insufficient options for proto=fd [ 231.789557][T21065] loop5: detected capacity change from 0 to 512 [ 231.810873][T21068] loop4: detected capacity change from 0 to 128 [ 231.835852][T21068] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.848767][T21068] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.890306][T21077] loop2: detected capacity change from 0 to 128 [ 231.890312][T21065] EXT4-fs (loop5): 1 orphan inode deleted [ 231.890870][T21065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.916825][ T2195] __quota_error: 715 callbacks suppressed [ 231.916842][ T2195] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 231.932512][ T2195] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 231.944198][T21065] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.958018][T21077] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.959962][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.980882][T21077] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.060509][ T31] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 232.070309][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 232.083179][T19743] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.091054][T16908] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.105981][T21065] netlink: 'syz.5.3184': attribute type 4 has an invalid length. [ 232.116811][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.224051][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.250211][ T29] audit: type=1326 audit(1755007419.007:16357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30b02ebe9 code=0x7ffc0000 [ 232.307064][ T29] audit: type=1326 audit(1755007419.007:16358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30b02ebe9 code=0x7ffc0000 [ 232.331437][ T29] audit: type=1326 audit(1755007419.007:16359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd30b02ebe9 code=0x7ffc0000 [ 232.355239][ T29] audit: type=1326 audit(1755007419.007:16360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30b02ebe9 code=0x7ffc0000 [ 232.379392][ T29] audit: type=1326 audit(1755007419.007:16361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fd30b02ebe9 code=0x7ffc0000 [ 232.403734][ T29] audit: type=1326 audit(1755007419.007:16362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30b02ebe9 code=0x7ffc0000 [ 232.427659][ T29] audit: type=1326 audit(1755007419.007:16363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd30b02ebe9 code=0x7ffc0000 [ 232.451615][ T29] audit: type=1326 audit(1755007419.007:16364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21094 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30b02ebe9 code=0x7ffc0000 [ 232.485541][T21120] netlink: 'syz.5.3196': attribute type 11 has an invalid length. [ 232.507435][T21124] loop1: detected capacity change from 0 to 512 [ 232.544393][T21141] loop4: detected capacity change from 0 to 128 [ 232.554986][T21124] EXT4-fs (loop1): 1 orphan inode deleted [ 232.561315][T21124] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.574462][T21141] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.584901][T10354] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 232.604944][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.751748][T21184] loop4: detected capacity change from 0 to 512 [ 232.758247][ T56] bridge_slave_1: left allmulticast mode [ 232.763904][ T56] bridge_slave_1: left promiscuous mode [ 232.769650][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.817027][ T56] bridge_slave_0: left allmulticast mode [ 232.822768][ T56] bridge_slave_0: left promiscuous mode [ 232.828742][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.840373][T21184] EXT4-fs (loop4): 1 orphan inode deleted [ 232.856453][T21184] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.867230][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 232.982153][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 232.995133][T21184] netlink: 'syz.4.3200': attribute type 4 has an invalid length. [ 233.057728][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.076553][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.088202][ T56] bond0 (unregistering): Released all slaves [ 233.102604][T21191] ip6gre2: entered allmulticast mode [ 233.240853][ T56] hsr_slave_0: left promiscuous mode [ 233.264659][ T56] hsr_slave_1: left promiscuous mode [ 233.297656][T21272] loop4: detected capacity change from 0 to 512 [ 233.311123][ T56] veth1_macvtap: left promiscuous mode [ 233.324642][ T56] veth0_macvtap: left promiscuous mode [ 233.334134][ T56] veth1_vlan: left promiscuous mode [ 233.359898][ T56] veth0_vlan: left promiscuous mode [ 233.372034][T21259] loop2: detected capacity change from 0 to 736 [ 233.385342][T21272] EXT4-fs (loop4): 1 orphan inode deleted [ 233.405117][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 233.429504][T21272] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.473445][ T56] team0 (unregistering): Port device team_slave_1 removed [ 233.492989][ T56] team0 (unregistering): Port device team_slave_0 removed [ 233.501637][T21259] rock: directory entry would overflow storage [ 233.508385][T21259] rock: sig=0x3b10, size=4, remaining=3 [ 233.609038][T21316] loop1: detected capacity change from 0 to 512 [ 233.645009][T21316] EXT4-fs (loop1): 1 orphan inode deleted [ 233.653320][T21316] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.657522][T21106] chnl_net:caif_netlink_parms(): no params data found [ 233.710942][T21383] veth1_to_bond: entered allmulticast mode [ 233.734425][T21383] veth1_to_bond: left allmulticast mode [ 233.763162][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 233.778920][T21316] netlink: 'syz.1.3217': attribute type 4 has an invalid length. [ 233.921078][T21106] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.928385][T21106] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.938462][T21465] loop2: detected capacity change from 0 to 128 [ 233.945563][T21106] bridge_slave_0: entered allmulticast mode [ 233.952090][T21106] bridge_slave_0: entered promiscuous mode [ 233.959673][T21106] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.964268][T21465] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.967150][T21106] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.986715][T21106] bridge_slave_1: entered allmulticast mode [ 234.003216][T21106] bridge_slave_1: entered promiscuous mode [ 234.040918][T21106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.055864][T21497] serio: Serial port ptm0 [ 234.064556][T21106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.091761][T21106] team0: Port device team_slave_0 added [ 234.106974][T21106] team0: Port device team_slave_1 added [ 234.163425][T21106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.170446][T21106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.196439][T21106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.213193][T21106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.220269][T21106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.246356][T21106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.275293][T21590] capability: warning: `syz.2.3230' uses deprecated v2 capabilities in a way that may be insecure [ 234.286310][T21590] FAULT_INJECTION: forcing a failure. [ 234.286310][T21590] name failslab, interval 1, probability 0, space 0, times 0 [ 234.298997][T21590] CPU: 1 UID: 0 PID: 21590 Comm: syz.2.3230 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 234.299062][T21590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.299073][T21590] Call Trace: [ 234.299080][T21590] [ 234.299089][T21590] __dump_stack+0x1d/0x30 [ 234.299111][T21590] dump_stack_lvl+0xe8/0x140 [ 234.299130][T21590] dump_stack+0x15/0x1b [ 234.299144][T21590] should_fail_ex+0x265/0x280 [ 234.299218][T21590] should_failslab+0x8c/0xb0 [ 234.299285][T21590] kmem_cache_alloc_noprof+0x50/0x310 [ 234.299312][T21590] ? audit_log_start+0x365/0x6c0 [ 234.299342][T21590] audit_log_start+0x365/0x6c0 [ 234.299408][T21590] ? rcu_report_exp_cpu_mult+0xcd/0x100 [ 234.299432][T21590] audit_seccomp+0x48/0x100 [ 234.299457][T21590] ? __seccomp_filter+0x68c/0x10d0 [ 234.299479][T21590] __seccomp_filter+0x69d/0x10d0 [ 234.299547][T21590] ? save_fpregs_to_fpstate+0x100/0x160 [ 234.299570][T21590] ? _raw_spin_unlock+0x26/0x50 [ 234.299597][T21590] __secure_computing+0x82/0x150 [ 234.299613][T21590] syscall_trace_enter+0xcf/0x1e0 [ 234.299655][T21590] do_syscall_64+0xac/0x200 [ 234.299686][T21590] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.299704][T21590] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.299723][T21590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.299742][T21590] RIP: 0033:0x7f52e605d5fc [ 234.299822][T21590] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 234.299835][T21590] RSP: 002b:00007f52e4ac7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.299852][T21590] RAX: ffffffffffffffda RBX: 00007f52e6285fa0 RCX: 00007f52e605d5fc [ 234.299863][T21590] RDX: 000000000000000f RSI: 00007f52e4ac70a0 RDI: 0000000000000005 [ 234.299876][T21590] RBP: 00007f52e4ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.299941][T21590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.299951][T21590] R13: 00007f52e6286038 R14: 00007f52e6285fa0 R15: 00007fff4178e6e8 [ 234.299967][T21590] [ 234.517416][T21618] veth1_to_bond: entered allmulticast mode [ 234.526030][T21106] hsr_slave_0: entered promiscuous mode [ 234.532318][T21106] hsr_slave_1: entered promiscuous mode [ 234.538463][T21106] debugfs: 'hsr0' already exists in 'hsr' [ 234.544219][T21106] Cannot create hsr debugfs directory [ 234.557792][T21625] 9pnet_fd: Insufficient options for proto=fd [ 234.564681][T21618] veth1_to_bond: left allmulticast mode [ 234.614291][ T10] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x4 [ 234.622100][ T10] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x2 [ 234.623297][T21660] loop1: detected capacity change from 0 to 512 [ 234.654174][ T10] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x3 [ 234.684904][ T10] hid-generic 0000:3000000:0000.002C: hidraw0: HID v0.00 Device [sy] on syz0 [ 234.685154][T21660] EXT4-fs (loop1): 1 orphan inode deleted [ 234.706074][ T56] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 234.737835][T21660] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.756246][T21707] fido_id[21707]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.891195][T21748] __nla_validate_parse: 5 callbacks suppressed [ 234.891212][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3240'. [ 235.018943][T21790] loop2: detected capacity change from 0 to 512 [ 235.029524][T21783] veth1_to_bond: entered allmulticast mode [ 235.049009][T21106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.068072][T21790] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 235.094562][T21783] veth1_to_bond: left allmulticast mode [ 235.104859][T21106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.111918][T21790] EXT4-fs (loop2): orphan cleanup on readonly fs [ 235.116644][T21806] 9pnet_fd: Insufficient options for proto=fd [ 235.126098][T21790] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 235.151436][T21106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.182890][T21790] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 235.189936][T21106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.195596][T21818] FAULT_INJECTION: forcing a failure. [ 235.195596][T21818] name failslab, interval 1, probability 0, space 0, times 0 [ 235.209542][T21818] CPU: 0 UID: 0 PID: 21818 Comm: syz.4.3247 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 235.209569][T21818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.209579][T21818] Call Trace: [ 235.209584][T21818] [ 235.209616][T21818] __dump_stack+0x1d/0x30 [ 235.209638][T21818] dump_stack_lvl+0xe8/0x140 [ 235.209658][T21818] dump_stack+0x15/0x1b [ 235.209675][T21818] should_fail_ex+0x265/0x280 [ 235.209696][T21818] should_failslab+0x8c/0xb0 [ 235.209742][T21818] kmem_cache_alloc_node_noprof+0x57/0x320 [ 235.209769][T21818] ? __alloc_skb+0x101/0x320 [ 235.209797][T21818] __alloc_skb+0x101/0x320 [ 235.209895][T21818] mgmt_cmd_complete+0x42/0x210 [ 235.209920][T21818] ? read_commands+0x4d/0x160 [ 235.209939][T21818] read_commands+0x13d/0x160 [ 235.209990][T21818] hci_mgmt_cmd+0x7f5/0x8a0 [ 235.210016][T21818] hci_sock_sendmsg+0x518/0x910 [ 235.210049][T21818] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 235.210140][T21818] __sock_sendmsg+0x145/0x180 [ 235.210166][T21818] sock_write_iter+0x165/0x1b0 [ 235.210258][T21818] aio_write+0x2e2/0x410 [ 235.210291][T21818] io_submit_one+0xacd/0x11d0 [ 235.210329][T21818] __se_sys_io_submit+0xfb/0x280 [ 235.210351][T21818] __x64_sys_io_submit+0x43/0x50 [ 235.210370][T21818] x64_sys_call+0x2d5d/0x2ff0 [ 235.210388][T21818] do_syscall_64+0xd2/0x200 [ 235.210423][T21818] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 235.210447][T21818] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 235.210534][T21818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.210556][T21818] RIP: 0033:0x7fa03722ebe9 [ 235.210571][T21818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.210589][T21818] RSP: 002b:00007fa035c97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 235.210676][T21818] RAX: ffffffffffffffda RBX: 00007fa037455fa0 RCX: 00007fa03722ebe9 [ 235.210706][T21818] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fa037f8e000 [ 235.210718][T21818] RBP: 00007fa035c97090 R08: 0000000000000000 R09: 0000000000000000 [ 235.210730][T21818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.210759][T21818] R13: 00007fa037456038 R14: 00007fa037455fa0 R15: 00007ffde55938c8 [ 235.210774][T21818] [ 235.213412][T21790] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3242: bg 0: block 40: padding at end of block bitmap is not set [ 235.218556][T21815] binfmt_misc: register: failed to install interpreter file ./bus [ 235.238438][T21790] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 235.309754][T21828] serio: Serial port ptm0 [ 235.387415][T21790] EXT4-fs (loop2): 1 truncate cleaned up [ 235.492999][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'. [ 235.493109][T21790] FAULT_INJECTION: forcing a failure. [ 235.493109][T21790] name failslab, interval 1, probability 0, space 0, times 0 [ 235.514687][T21790] CPU: 0 UID: 0 PID: 21790 Comm: syz.2.3242 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 235.514715][T21790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.514725][T21790] Call Trace: [ 235.514736][T21790] [ 235.514744][T21790] __dump_stack+0x1d/0x30 [ 235.514836][T21790] dump_stack_lvl+0xe8/0x140 [ 235.514853][T21790] dump_stack+0x15/0x1b [ 235.514867][T21790] should_fail_ex+0x265/0x280 [ 235.514886][T21790] should_failslab+0x8c/0xb0 [ 235.514957][T21790] kmem_cache_alloc_node_noprof+0x57/0x320 [ 235.514981][T21790] ? __alloc_skb+0x101/0x320 [ 235.515032][T21790] __alloc_skb+0x101/0x320 [ 235.515057][T21790] tipc_msg_create+0x47/0x230 [ 235.515082][T21790] ? __slab_free+0x77/0x270 [ 235.515114][T21790] tipc_group_proto_xmit+0xb7/0x2f0 [ 235.515133][T21790] tipc_group_delete+0x97/0x290 [ 235.515151][T21790] tipc_sk_leave+0xa9/0x270 [ 235.515222][T21790] tipc_setsockopt+0x4de/0x620 [ 235.515305][T21790] ? __pfx_tipc_setsockopt+0x10/0x10 [ 235.515369][T21790] __sys_setsockopt+0x184/0x200 [ 235.515386][T21790] __x64_sys_setsockopt+0x64/0x80 [ 235.515402][T21790] x64_sys_call+0x20ec/0x2ff0 [ 235.515420][T21790] do_syscall_64+0xd2/0x200 [ 235.515448][T21790] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 235.515468][T21790] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 235.515487][T21790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.515527][T21790] RIP: 0033:0x7f52e605ebe9 [ 235.515540][T21790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.515554][T21790] RSP: 002b:00007f52e4ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.515591][T21790] RAX: ffffffffffffffda RBX: 00007f52e6285fa0 RCX: 00007f52e605ebe9 [ 235.515601][T21790] RDX: 0000000000000088 RSI: 000000000000010f RDI: 0000000000000004 [ 235.515677][T21790] RBP: 00007f52e4ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 235.515687][T21790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.515706][T21790] R13: 00007f52e6286038 R14: 00007f52e6285fa0 R15: 00007fff4178e6e8 [ 235.515722][T21790] [ 235.755385][T21852] loop5: detected capacity change from 0 to 512 [ 235.766309][T21106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.779868][T21106] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.798933][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.806176][T10354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.818780][T21852] EXT4-fs (loop5): 1 orphan inode deleted [ 235.842472][ T2195] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 235.858777][T21852] ext4 filesystem being mounted at /602/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.874802][T21863] veth1_to_bond: entered allmulticast mode [ 235.881698][T21863] veth1_to_bond: left allmulticast mode [ 235.891952][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.899075][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.948179][T21106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.958742][T21106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.019799][T21895] binfmt_misc: register: failed to install interpreter file ./bus [ 236.034076][T21106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.092340][T21905] 9pnet_fd: Insufficient options for proto=fd [ 236.118424][T21911] loop2: detected capacity change from 0 to 512 [ 236.156946][T21106] veth0_vlan: entered promiscuous mode [ 236.188499][T21922] loop1: detected capacity change from 0 to 128 [ 236.197418][T21106] veth1_vlan: entered promiscuous mode [ 236.216214][T21911] EXT4-fs (loop2): 1 orphan inode deleted [ 236.226206][T21911] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.230080][T21106] veth0_macvtap: entered promiscuous mode [ 236.243264][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 236.243879][T21106] veth1_macvtap: entered promiscuous mode [ 236.265793][T21106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.270410][T21922] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 236.274602][T21106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.292937][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.305953][T21934] 9pnet_fd: Insufficient options for proto=fd [ 236.333927][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.343959][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 236.382600][T21941] lo: entered promiscuous mode [ 236.410431][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.446202][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.583236][T21970] veth1_to_bond: entered allmulticast mode [ 236.592389][T21973] binfmt_misc: register: failed to install interpreter file ./bus [ 236.614052][T21970] veth1_to_bond: left allmulticast mode [ 236.650519][T21985] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3261'. [ 236.666148][T14067] syz_tun (unregistering): left allmulticast mode [ 236.667077][T21911] netlink: 'syz.2.3261': attribute type 4 has an invalid length. [ 236.720758][T21911] netlink: 'syz.2.3261': attribute type 4 has an invalid length. [ 236.820504][T21984] loop4: detected capacity change from 0 to 736 [ 236.879332][T22043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3275'. [ 236.958541][T21976] chnl_net:caif_netlink_parms(): no params data found [ 236.974375][T22043] loop2: detected capacity change from 0 to 1024 [ 237.049694][T22043] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3275: bg 0: block 88: padding at end of block bitmap is not set [ 237.069995][T21984] rock: directory entry would overflow storage [ 237.077081][T21984] rock: sig=0x3b10, size=4, remaining=3 [ 237.104258][T21976] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.111640][T21976] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.121214][T21976] bridge_slave_0: entered allmulticast mode [ 237.127906][T21976] bridge_slave_0: entered promiscuous mode [ 237.135227][T21976] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.142302][T21976] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.149735][T21976] bridge_slave_1: entered allmulticast mode [ 237.156189][T21976] bridge_slave_1: entered promiscuous mode [ 237.162231][ T29] kauditd_printk_skb: 901 callbacks suppressed [ 237.162269][ T29] audit: type=1326 audit(1755007423.917:17254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa03722d550 code=0x7ffc0000 [ 237.192221][ T29] audit: type=1326 audit(1755007423.917:17255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa03722d937 code=0x7ffc0000 [ 237.216293][ T29] audit: type=1326 audit(1755007423.917:17256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa03722d550 code=0x7ffc0000 [ 237.240235][ T29] audit: type=1326 audit(1755007423.917:17257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03722ebe9 code=0x7ffc0000 [ 237.268567][ T29] audit: type=1326 audit(1755007423.937:17258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa03722ebe9 code=0x7ffc0000 [ 237.292801][ T29] audit: type=1326 audit(1755007423.937:17259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03722ebe9 code=0x7ffc0000 [ 237.316706][ T29] audit: type=1326 audit(1755007423.957:17260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa03722ebe9 code=0x7ffc0000 [ 237.340588][ T29] audit: type=1326 audit(1755007423.957:17261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03722ebe9 code=0x7ffc0000 [ 237.364379][ T29] audit: type=1326 audit(1755007423.957:17262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa03722ebe9 code=0x7ffc0000 [ 237.388230][ T29] audit: type=1326 audit(1755007423.957:17263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21982 comm="syz.4.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03722ebe9 code=0x7ffc0000 [ 237.441323][T21976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.455992][T21976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.497661][T22247] binfmt_misc: register: failed to install interpreter file ./bus [ 237.509265][T22243] veth1_to_bond: entered allmulticast mode [ 237.515934][T22243] veth1_to_bond: left allmulticast mode [ 237.549842][T21976] team0: Port device team_slave_0 added [ 237.580638][T21976] team0: Port device team_slave_1 added [ 237.601316][T22277] loop4: detected capacity change from 0 to 128 [ 237.628730][T21976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.635811][T21976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.662346][T21976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.673494][T22277] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.699587][T21976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.706715][T21976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.733007][T21976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.782202][T21976] hsr_slave_0: entered promiscuous mode [ 237.790715][T21976] hsr_slave_1: entered promiscuous mode [ 237.797283][T21976] debugfs: 'hsr0' already exists in 'hsr' [ 237.803123][T21976] Cannot create hsr debugfs directory [ 237.844039][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'. [ 237.890660][T22390] loop1: detected capacity change from 0 to 736 [ 237.913175][T22414] serio: Serial port ptm0 [ 237.958010][T21976] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.977676][T22449] binfmt_misc: register: failed to install interpreter file ./bus [ 237.989517][T22390] rock: directory entry would overflow storage [ 237.997856][T22390] rock: sig=0x3b10, size=4, remaining=3 [ 238.025830][T21976] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.078253][T21976] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.125853][T21976] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.181164][ T4902] bridge_slave_1: left allmulticast mode [ 238.186882][ T4902] bridge_slave_1: left promiscuous mode [ 238.192543][ T4902] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.201159][ T4902] bridge_slave_0: left promiscuous mode [ 238.207049][ T4902] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.263427][T22480] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22480 comm=syz.0.3300 [ 238.318831][ T4902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.345681][ T4902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.357331][ T4902] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 238.368328][ T4902] bond0 (unregistering): Released all slaves [ 238.408129][ T4902] tipc: Left network mode [ 238.410099][T21976] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.441590][ T4902] hsr_slave_0: left promiscuous mode [ 238.448812][ T4902] hsr_slave_1: left promiscuous mode [ 238.456495][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.466038][ T4902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.474525][ T4902] batman_adv: batadv0: Removing interface: macvlan0 [ 238.511159][T22505] binfmt_misc: register: failed to install interpreter file ./bus [ 238.533477][ T4902] team0 (unregistering): Port device team_slave_1 removed [ 238.548760][ T4902] team0 (unregistering): Port device team_slave_0 removed [ 238.596967][T21976] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.608370][T21976] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.619351][T21976] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.669526][T21976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.681009][T21976] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.693514][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.700745][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.720062][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.727240][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.752653][T21976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.790660][T22525] loop0: detected capacity change from 0 to 736 [ 238.851046][T21976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.855153][T22525] rock: directory entry would overflow storage [ 238.864874][T22525] rock: sig=0x3b10, size=4, remaining=3 [ 238.886645][T22548] loop4: detected capacity change from 0 to 128 [ 238.951993][ T3381] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x4 [ 238.959880][ T3381] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x2 [ 238.963748][T22548] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.973667][ T3381] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x3 [ 239.022881][T22576] binfmt_misc: register: failed to install interpreter file ./bus [ 239.050907][T22580] loop0: detected capacity change from 0 to 512 [ 239.076641][ T3381] hid-generic 0000:3000000:0000.002D: hidraw0: HID v0.00 Device [sy] on syz0 [ 239.092625][T22580] EXT4-fs (loop0): 1 orphan inode deleted [ 239.106961][T22580] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.123918][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 239.133171][T22588] fido_id[22588]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 239.155727][ T2195] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 239.188937][T22603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 239.202211][T22603] ip6gre1: entered allmulticast mode [ 239.215061][T22607] serio: Serial port ptm0 [ 239.247459][T22612] loop1: detected capacity change from 0 to 512 [ 239.274603][T21976] veth0_vlan: entered promiscuous mode [ 239.298395][T22612] EXT4-fs (loop1): 1 orphan inode deleted [ 239.302136][T21976] veth1_vlan: entered promiscuous mode [ 239.317496][ T2195] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 239.322994][T21976] veth0_macvtap: entered promiscuous mode [ 239.330205][T22612] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.336524][T21976] veth1_macvtap: entered promiscuous mode [ 239.365354][T21976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.376515][T21976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.394310][ T2195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.409543][ T56] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 239.421905][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.433808][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.442670][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.460208][T22580] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3318'. [ 239.481902][T22580] netlink: 'syz.0.3318': attribute type 4 has an invalid length. [ 239.510602][T22580] netlink: 'syz.0.3318': attribute type 4 has an invalid length. [ 239.561056][T22640] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3321'. [ 239.590782][T22639] veth1_to_bond: entered allmulticast mode [ 239.600047][T22612] netlink: 'syz.1.3321': attribute type 4 has an invalid length. [ 239.610541][T22612] netlink: 'syz.1.3321': attribute type 4 has an invalid length. [ 239.628374][T22635] loop4: detected capacity change from 0 to 736 [ 239.635033][T22639] veth1_to_bond: left allmulticast mode [ 239.676002][T22650] FAULT_INJECTION: forcing a failure. [ 239.676002][T22650] name failslab, interval 1, probability 0, space 0, times 0 [ 239.688903][T22650] CPU: 1 UID: 0 PID: 22650 Comm: syz.5.3327 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 239.688974][T22650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.688987][T22650] Call Trace: [ 239.688993][T22650] [ 239.689001][T22650] __dump_stack+0x1d/0x30 [ 239.689023][T22650] dump_stack_lvl+0xe8/0x140 [ 239.689042][T22650] dump_stack+0x15/0x1b [ 239.689060][T22650] should_fail_ex+0x265/0x280 [ 239.689080][T22650] should_failslab+0x8c/0xb0 [ 239.689153][T22650] kmem_cache_alloc_noprof+0x50/0x310 [ 239.689179][T22650] ? security_inode_alloc+0x37/0x100 [ 239.689232][T22650] security_inode_alloc+0x37/0x100 [ 239.689255][T22650] inode_init_always_gfp+0x4b7/0x500 [ 239.689278][T22650] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 239.689364][T22650] alloc_inode+0x58/0x170 [ 239.689385][T22650] new_inode+0x1d/0xe0 [ 239.689411][T22650] __debugfs_create_file+0x109/0x330 [ 239.689436][T22650] debugfs_create_file_full+0x3f/0x60 [ 239.689461][T22650] ? __pfx_tun_setup+0x10/0x10 [ 239.689487][T22650] ref_tracker_dir_debugfs+0x100/0x1e0 [ 239.689559][T22650] alloc_netdev_mqs+0x1a2/0xa20 [ 239.689584][T22650] tun_set_iff+0x42c/0x890 [ 239.689614][T22650] __tun_chr_ioctl+0x5f0/0x14c0 [ 239.689658][T22650] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 239.689728][T22650] tun_chr_ioctl+0x27/0x40 [ 239.689754][T22650] __se_sys_ioctl+0xcb/0x140 [ 239.689823][T22650] __x64_sys_ioctl+0x43/0x50 [ 239.689881][T22650] x64_sys_call+0x1816/0x2ff0 [ 239.689901][T22650] do_syscall_64+0xd2/0x200 [ 239.689925][T22650] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.689949][T22650] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 239.690012][T22650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.690094][T22650] RIP: 0033:0x7f568d90ebe9 [ 239.690110][T22650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.690146][T22650] RSP: 002b:00007f568c36f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.690163][T22650] RAX: ffffffffffffffda RBX: 00007f568db35fa0 RCX: 00007f568d90ebe9 [ 239.690174][T22650] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 239.690185][T22650] RBP: 00007f568c36f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.690196][T22650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.690218][T22650] R13: 00007f568db36038 R14: 00007f568db35fa0 R15: 00007ffd294f4f28 [ 239.690236][T22650] [ 239.690245][T22650] debugfs: out of free dentries, can not create file 'netdev@ffff888126f88550' [ 239.783775][T22635] rock: directory entry would overflow storage [ 239.961316][T22635] rock: sig=0x3b10, size=4, remaining=3 [ 239.974369][T22656] veth1_to_bond: entered allmulticast mode [ 239.989442][T22656] veth1_to_bond: left allmulticast mode [ 240.048171][T22673] binfmt_misc: register: failed to install interpreter file ./bus [ 240.097212][T22681] FAULT_INJECTION: forcing a failure. [ 240.097212][T22681] name failslab, interval 1, probability 0, space 0, times 0 [ 240.109972][T22681] CPU: 0 UID: 0 PID: 22681 Comm: syz.4.3333 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 240.110059][T22681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.110080][T22681] Call Trace: [ 240.110086][T22681] [ 240.110093][T22681] __dump_stack+0x1d/0x30 [ 240.110112][T22681] dump_stack_lvl+0xe8/0x140 [ 240.110127][T22681] dump_stack+0x15/0x1b [ 240.110147][T22681] should_fail_ex+0x265/0x280 [ 240.110167][T22681] ? io_drain_req+0x67/0x350 [ 240.110189][T22681] should_failslab+0x8c/0xb0 [ 240.110211][T22681] __kmalloc_cache_noprof+0x4c/0x320 [ 240.110272][T22681] io_drain_req+0x67/0x350 [ 240.110293][T22681] ? io_queue_sqe_fallback+0x12a/0x140 [ 240.110318][T22681] io_queue_sqe_fallback+0x132/0x140 [ 240.110342][T22681] io_submit_sqes+0xc1d/0x1050 [ 240.110368][T22681] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 240.110389][T22681] ? 0xffffffff81000000 [ 240.110403][T22681] ? __rcu_read_unlock+0x4f/0x70 [ 240.110424][T22681] ? get_pid_task+0x96/0xd0 [ 240.110476][T22681] ? proc_fail_nth_write+0x13b/0x160 [ 240.110502][T22681] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 240.110528][T22681] ? vfs_write+0x7e8/0x960 [ 240.110549][T22681] ? __rcu_read_unlock+0x4f/0x70 [ 240.110645][T22681] ? __fget_files+0x184/0x1c0 [ 240.110672][T22681] ? fput+0x8f/0xc0 [ 240.110741][T22681] __x64_sys_io_uring_enter+0x78/0x90 [ 240.110760][T22681] x64_sys_call+0x2de1/0x2ff0 [ 240.110777][T22681] do_syscall_64+0xd2/0x200 [ 240.110799][T22681] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 240.110863][T22681] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 240.110882][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.110901][T22681] RIP: 0033:0x7fa03722ebe9 [ 240.110915][T22681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.110956][T22681] RSP: 002b:00007fa035c97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 240.110974][T22681] RAX: ffffffffffffffda RBX: 00007fa037455fa0 RCX: 00007fa03722ebe9 [ 240.110987][T22681] RDX: 00000000000004c1 RSI: 0000000000000627 RDI: 0000000000000003 [ 240.110999][T22681] RBP: 00007fa035c97090 R08: 0000000000000000 R09: 0000000000000000 [ 240.111011][T22681] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 240.111024][T22681] R13: 00007fa037456038 R14: 00007fa037455fa0 R15: 00007ffde55938c8 [ 240.111113][T22681] [ 240.389420][T22696] loop0: detected capacity change from 0 to 512 [ 240.409890][T22696] EXT4-fs (loop0): 1 orphan inode deleted [ 240.417771][T22696] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.450113][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 240.520079][T22731] FAULT_INJECTION: forcing a failure. [ 240.520079][T22731] name failslab, interval 1, probability 0, space 0, times 0 [ 240.532949][T22731] CPU: 1 UID: 0 PID: 22731 Comm: syz.5.3345 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 240.532975][T22731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.532985][T22731] Call Trace: [ 240.532991][T22731] [ 240.532997][T22731] __dump_stack+0x1d/0x30 [ 240.533060][T22731] dump_stack_lvl+0xe8/0x140 [ 240.533080][T22731] dump_stack+0x15/0x1b [ 240.533097][T22731] should_fail_ex+0x265/0x280 [ 240.533136][T22731] should_failslab+0x8c/0xb0 [ 240.533157][T22731] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 240.533185][T22731] ? __d_alloc+0x3d/0x340 [ 240.533253][T22731] __d_alloc+0x3d/0x340 [ 240.533277][T22731] d_alloc+0x2e/0x100 [ 240.533360][T22731] lookup_one_qstr_excl+0x99/0x250 [ 240.533385][T22731] filename_create+0x149/0x230 [ 240.533405][T22731] do_symlinkat+0x65/0x3c0 [ 240.533478][T22731] __x64_sys_symlinkat+0x5a/0x70 [ 240.533496][T22731] x64_sys_call+0x293d/0x2ff0 [ 240.533573][T22731] do_syscall_64+0xd2/0x200 [ 240.533598][T22731] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 240.533671][T22731] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 240.533693][T22731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.533715][T22731] RIP: 0033:0x7f568d90ebe9 [ 240.533731][T22731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.533747][T22731] RSP: 002b:00007f568c36f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 240.533767][T22731] RAX: ffffffffffffffda RBX: 00007f568db35fa0 RCX: 00007f568d90ebe9 [ 240.533862][T22731] RDX: 0000200000000040 RSI: 0000000000000007 RDI: 0000200000000000 [ 240.533877][T22731] RBP: 00007f568c36f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.533890][T22731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.533902][T22731] R13: 00007f568db36038 R14: 00007f568db35fa0 R15: 00007ffd294f4f28 [ 240.533920][T22731] [ 240.730790][T22722] loop2: detected capacity change from 0 to 736 [ 240.753315][T22741] binfmt_misc: register: failed to install interpreter file ./bus [ 240.790771][T22750] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3349'. [ 240.802697][T22696] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3336'. [ 240.837283][T22736] netlink: 'syz.0.3336': attribute type 4 has an invalid length. [ 240.857780][T22696] netlink: 'syz.0.3336': attribute type 4 has an invalid length. [ 240.894651][T22722] rock: directory entry would overflow storage [ 240.901723][T22722] rock: sig=0x3b10, size=4, remaining=3 [ 240.957415][T22787] SELinux: policydb version 0 does not match my version range 15-35 [ 240.977936][T22787] SELinux: failed to load policy [ 241.227336][T22836] loop5: detected capacity change from 0 to 512 [ 241.253677][T22836] EXT4-fs (loop5): 1 orphan inode deleted [ 241.264028][T22845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.273712][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 241.285916][T22845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.295330][T22836] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.312720][T22852] loop0: detected capacity change from 0 to 512 [ 241.335701][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 241.366857][T22852] EXT4-fs (loop0): 1 orphan inode deleted [ 241.383098][T22858] FAULT_INJECTION: forcing a failure. [ 241.383098][T22858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.396320][T22858] CPU: 0 UID: 0 PID: 22858 Comm: syz.1.3366 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 241.396349][T22858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.396362][T22858] Call Trace: [ 241.396369][T22858] [ 241.396377][T22858] __dump_stack+0x1d/0x30 [ 241.396448][T22858] dump_stack_lvl+0xe8/0x140 [ 241.396522][T22858] dump_stack+0x15/0x1b [ 241.396537][T22858] should_fail_ex+0x265/0x280 [ 241.396556][T22858] should_fail+0xb/0x20 [ 241.396574][T22858] should_fail_usercopy+0x1a/0x20 [ 241.396596][T22858] _copy_to_user+0x20/0xa0 [ 241.396669][T22858] simple_read_from_buffer+0xb5/0x130 [ 241.396693][T22858] proc_fail_nth_read+0x10e/0x150 [ 241.396721][T22858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.396783][T22858] vfs_read+0x1a8/0x770 [ 241.396805][T22858] ? __rcu_read_unlock+0x4f/0x70 [ 241.396827][T22858] ? __fget_files+0x184/0x1c0 [ 241.396860][T22858] ksys_read+0xda/0x1a0 [ 241.396942][T22858] __x64_sys_read+0x40/0x50 [ 241.396961][T22858] x64_sys_call+0x27bc/0x2ff0 [ 241.396979][T22858] do_syscall_64+0xd2/0x200 [ 241.397002][T22858] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.397062][T22858] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.397086][T22858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.397108][T22858] RIP: 0033:0x7f02f6abd5fc [ 241.397125][T22858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 241.397139][T22858] RSP: 002b:00007f02f5527030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.397164][T22858] RAX: ffffffffffffffda RBX: 00007f02f6ce5fa0 RCX: 00007f02f6abd5fc [ 241.397208][T22858] RDX: 000000000000000f RSI: 00007f02f55270a0 RDI: 0000000000000004 [ 241.397219][T22858] RBP: 00007f02f5527090 R08: 0000000000000000 R09: 0000000000000000 [ 241.397229][T22858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.397240][T22858] R13: 00007f02f6ce6038 R14: 00007f02f6ce5fa0 R15: 00007fffa3a93528 [ 241.397255][T22858] [ 241.397536][ T2195] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 241.414921][T22852] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.500202][T22836] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3363'. [ 241.602103][T22861] netlink: 'syz.5.3363': attribute type 4 has an invalid length. [ 241.602706][ T2195] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 241.673004][T22836] netlink: 'syz.5.3363': attribute type 4 has an invalid length. [ 241.766435][T22866] netlink: 'syz.0.3365': attribute type 4 has an invalid length. [ 241.935900][T22910] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3376'. [ 241.944962][T22910] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3376'. [ 242.002337][T22920] loop4: detected capacity change from 0 to 512 [ 242.042872][T22920] EXT4-fs (loop4): 1 orphan inode deleted [ 242.056141][ T2195] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 242.090460][T22920] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.190853][T10354] __quota_error: 1160 callbacks suppressed [ 242.190869][T10354] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 242.206948][T10354] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 242.337300][T22920] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3380'. [ 242.353761][T22920] netlink: 'syz.4.3380': attribute type 4 has an invalid length. [ 242.369431][T22920] netlink: 'syz.4.3380': attribute type 4 has an invalid length. [ 242.533828][ T29] audit: type=1326 audit(1755007429.287:18414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568d90ebe9 code=0x7ffc0000 [ 242.593383][ T29] audit: type=1326 audit(1755007429.317:18415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f568d90ebe9 code=0x7ffc0000 [ 242.617178][ T29] audit: type=1326 audit(1755007429.317:18416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568d90ebe9 code=0x7ffc0000 [ 242.641116][ T29] audit: type=1326 audit(1755007429.317:18417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568d90ebe9 code=0x7ffc0000 [ 242.664880][ T29] audit: type=1326 audit(1755007429.317:18418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f568d90ebe9 code=0x7ffc0000 [ 242.688569][ T29] audit: type=1326 audit(1755007429.317:18419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568d90ebe9 code=0x7ffc0000 [ 242.712522][ T29] audit: type=1326 audit(1755007429.317:18420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f568d90ebe9 code=0x7ffc0000 [ 242.736460][ T29] audit: type=1326 audit(1755007429.317:18421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568d90ebe9 code=0x7ffc0000 [ 242.760112][ T29] audit: type=1326 audit(1755007429.317:18422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22984 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f568d90ebe9 code=0x7ffc0000 [ 242.839999][T23009] binfmt_misc: register: failed to install interpreter file ./bus [ 242.935971][T23028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3404'. [ 243.121732][T23049] loop1: detected capacity change from 0 to 1024 [ 243.218943][T23070] binfmt_misc: register: failed to install interpreter file ./bus [ 243.278634][T23080] loop1: detected capacity change from 0 to 128 [ 243.294813][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3417'. [ 243.309499][T23083] ip6gre1: entered allmulticast mode [ 243.368845][T23080] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 243.376519][T23080] FAT-fs (loop1): Filesystem has been set read-only [ 243.420646][T23101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3422'. [ 243.509203][T23120] tipc: Started in network mode [ 243.514132][T23120] tipc: Node identity de9f59ebeff8, cluster identity 4711 [ 243.514261][T23101] loop4: detected capacity change from 0 to 1024 [ 243.521482][T23120] tipc: Enabled bearer , priority 0 [ 243.544926][T23124] binfmt_misc: register: failed to install interpreter file ./bus [ 243.553133][ T56] ================================================================== [ 243.561206][ T56] BUG: KCSAN: data-race in alloc_pid / copy_process [ 243.567780][ T56] [ 243.570084][ T56] read-write to 0xffffffff8685fc48 of 4 bytes by task 4902 on cpu 1: [ 243.578135][ T56] alloc_pid+0x539/0x720 [ 243.582448][ T56] copy_process+0xe25/0x2000 [ 243.587052][ T56] kernel_clone+0x16c/0x5c0 [ 243.591548][ T56] user_mode_thread+0x7d/0xb0 [ 243.596222][ T56] call_usermodehelper_exec_work+0x41/0x160 [ 243.602296][ T56] process_scheduled_works+0x4cb/0x9d0 [ 243.607771][ T56] worker_thread+0x582/0x770 [ 243.612365][ T56] kthread+0x489/0x510 [ 243.616523][ T56] ret_from_fork+0xda/0x150 [ 243.621013][ T56] ret_from_fork_asm+0x1a/0x30 [ 243.625760][ T56] [ 243.628153][ T56] read to 0xffffffff8685fc48 of 4 bytes by task 56 on cpu 0: [ 243.635516][ T56] copy_process+0x14a6/0x2000 [ 243.640185][ T56] kernel_clone+0x16c/0x5c0 [ 243.644677][ T56] user_mode_thread+0x7d/0xb0 [ 243.649351][ T56] call_usermodehelper_exec_work+0x41/0x160 [ 243.655408][ T56] process_scheduled_works+0x4cb/0x9d0 [ 243.660861][ T56] worker_thread+0x582/0x770 [ 243.665527][ T56] kthread+0x489/0x510 [ 243.669578][ T56] ret_from_fork+0xda/0x150 [ 243.674153][ T56] ret_from_fork_asm+0x1a/0x30 [ 243.679075][ T56] [ 243.681377][ T56] value changed: 0x800000f3 -> 0x800000f4 [ 243.687252][ T56] [ 243.689552][ T56] Reported by Kernel Concurrency Sanitizer on: [ 243.695688][ T56] CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 243.708180][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.718445][ T56] Workqueue: events_unbound call_usermodehelper_exec_work [ 243.725562][ T56] ================================================================== [ 243.742226][T23120] syzkaller0: entered promiscuous mode [ 243.747938][T23120] syzkaller0: entered allmulticast mode [ 243.786964][T23120] tipc: Resetting bearer [ 243.816824][T23119] tipc: Resetting bearer [ 243.824348][T23119] tipc: Disabling bearer