last executing test programs: 2.939523663s ago: executing program 2 (id=2773): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60020, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x476, 0x10000, 0x5, 0x1, 0x0, 0x20005, 0xb, 0x0, 0xfffffff8, 0x0, 0x20000006}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095a0eaa7430000e7"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x4) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) pwritev2(r8, 0x0, 0x0, 0x8800000, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40), 0x10, 0xfffffff4}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 2.820925005s ago: executing program 2 (id=2774): prlimit64(0x0, 0x8, 0x0, 0x0) getrlimit(0x5, &(0x7f00000000c0)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x0, 0xfc, 0xf3, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000008, 0x6}, 0x40, 0x2, 0x0, 0x1, 0x8, 0xfffffffe, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = socket(0x1, 0x5, 0x0) r2 = epoll_create1(0x80000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="75877a8eb7776490b17a1d6884048e0e5e6d4c432ff8633a73d2c9c6081bbff88debb5a23c027f35d2bca7e9f445c46f012c7991cf3add41410c1dd88658a8408b2f6eec0873035ce066997d9ae4e51fe3620147b95aaca9ac98d4250b6bf9a684e6e79d6f6f7b16e5ccc769bab2b04640d7a3652b8227f6d333cbe816cdba50639e9d39d396af7877848ca25c05607682ac0fe7b27cbfcc8ef6936bdc11cdede61e1c4c60e3af955397b7f675ee1314f8c1a5bcad224ff00af435fe9c0d6029b7077cbcd12a465831942c7b2410dd8cee2b9f742982fa63c91708fbab8e5f452bf872bbe3679e0277116156627d2ce7e189cbcd7cac7933e0d53eaa84feeb7a9e623d9e4c7cafd48099e2bf2b65a0fb30d6cb277ea8f0d51549f7f3de25726a4f017fe864fc413f5570ca75e11f41f151bef3cb243c771c2b6855206b1f153c96c2a323751de56d2fbfb9866b4e8a1c5cd316a6c50a1cff02865f052c874fda0e9bf3a77627985c723733db505f96f37b0552095a614fc322653c2409d59299ecd4e94e09d2512098d74faa454914bff427b167cba3e509c4a1d63a89da3e6beff86febc17c4d147153537bc7231354cb4537d60ce88c332dcc8f215dd2d7bf66b24bbce38faca3caa9feb2b440b89c9082c500b9819bdab33f266a563be805721a0e03c33acad301e6f4bfa20e3b88728434883a2e00d6c1cf043da3203fe22df1664fccde5d91e266d24465624c22df458e3ffb48f66df7a15fc8bffc83190280f44718691470aafafd93c53b041bfa48a4f1e4342c46d4fe0a2c3471f6723238dac5201b7fd4d64d9b25857d916ff9da2f19363b5e01b682062955ef0900a4d662ce1e299bce7a1fefe409ba96ae475bdf229fda610b2f3cfe3cf60f5824de31a88f0bda97217fc94e3069ce4594c56665b888e614922db6b0d602ed8a9fef6314badbce00c5705d1e701e6efa21cef03f29456d25f9ac45795fe7c1c9973ab2e2a64687fe7100f4364ad30d1917960a18763f0a867fd6969115806f901b3b2ebb989768fa125e3fe28370b7b26ab28102c17f820659ca9552d0d06ffb22a78fd1956beac3536d79c6792cb63537a4d3ad13721cce678617656e52c68b03295b025f6941a02802231d83d99d887145a1f51ec913cddd87b2f5a92124812f136d0387588336a35836556daa6059d7fcfe0657719a4e5fa914f81f2470f82fd237797b95e50fde9b9941328ef6eb3ad76ffee0760effb0187113ce097c25e6afc743431ee119b77cf9b1df5b3701a9e2d2fdcdcc83f6c38ad5eaba507f0adc56688adbd66e544352e73d1c258d0ae672060ad9c4f7ce024ccf634af86e4909bdc198b550ddca9831e021c9be7db4459d8dbc3d08954b20d73c19402066a706eb80582149902b1f572640d65e942f8543ec95863c7c72beb335796b5eaf22a162216cc43ecc9677ac1d1119f3e4c3c767de66de7df71ef120fd9a234c03759beaef8f90a31ebf991085ca19af0a631c86ee5cbce1051b5467288e73bfc2a3fb8c53a4b85994e6cec47c7198b75cadf3b448f53eb65959f8725c73f88eea4286c8624ed235ce2c31c67b595e827092d775607774c38c530680fa62012f120fedbbcbb716498a7ea9ab1504d80a0d971f2e53b827774a28eeb68626e65052aa34e1bd971ee84b57cc1025fa6f38e1ee04b78681c017346f0bc55910920b2f8daebdd4d4280360c648223cb46d048f1c91649de43790b2e9f9d4301c18d916a29377451cc7179fb6caea266d820e65fb6d6c5139e1085d2359d508fc42c4e9331ee957a770553c42e21cd2a698da58d0f092a24ab23164c643bd267df8dabc7bfe7a4a85ac657b691fe656476e31651a0ca50366cf9a299e952fa19a4a8840269e4b4187f324db177a9449abff2a712c557c8f15243a5fedb164174c4207b37f548386dd602979acc77139d6a0afc322e7597676c0ee0335b2492beaac250d74bc3378bfe1b664b4552a9d7e3b9eb784548fb0ea802a1668065ba1be26fd8b3dab8d32db11abaded81240bf3d146aa29a632e71409b937ab00e108441ee03011c03b310117a526130aa4078b9f89f769641ebbb54a370210deba350abde92975cb58a7e00219a96a66f3860f7850dac085657512e84b0d6341a0d4e0bd02184252d6f62d0f4f5ca17540132422d0ced0a625f3306c68233f8fb2801c9f0623628eb22a589b90fcfcf823dff03c768e02198b36878d41b09c405bff9668d4d96c068cfe25af60c649f6bb6f78f9deb8c5698be0c8c36f979acbb00db50aae4d128f76e95353f1d1d79ace75304026cb7be633e9645b57476bcdc40b5d22a3245f0dd6e90719deae9d4638134599b6882afaab8f34a1e6d2b81b7eb8103dfe41b311a83469441511e52d82cd397683aa7ff2f38270916b04a660de980482bb8930f20980ba4ad7e568717c3a66c78f73088721b3a6c4a3f92d94040609bab199e52430d5d2ffd5b6abbcf3bf0e14cb8149a41f11cf584d429820ed1a6c60cafb0fa242fd93fa33a3da73669a44199ff11df9d857b74444bf6767cf50a630515e7d8e7bfa1c34cc2f6c61cb66ed212e22b5c62c9662e84e7af6d12840f7c9521822795ea8fe9f2df87b8667c982a4cdd046d858c5e02d0d831f1ffeb8b23ce212d7aec032511e00b27ab79d56a590627f3da531c19c85b8b81495c14c6d0bfda2c9f531b895cad7c16651230c798e88be3105103cb8a2437d44cce7d25eced9dd26753c3383597cfe4d4c6529b83bae2a9630a0be58a3a302c24944cf10412a02ff0279d1e2990b18cc179ab538b445dd708a697f41a94e0d98b19d67e68bd4042f3bffe0945c29574e57318342a77235ee74d51b56fc163ebd075db2e50ba0092cd6d6fb237a063bc3bc2ce1ebb30af4a1428957064d31dfa3bb7babb9244ab0b2592bd96f5d6b57c90b6e5aef2f27bac29c4a30455336dd0d2697d624d64ba4ee0d6e0d997c92b8e0ea5838b948a4139d87ee719049ad90391b5b488684bd10221ccf85d52f89aef95f3222da820bb3b8fca2f19eba423f412c37baf6acb4c50df0cf8a5d2c81b4b13874b188e39affbb552bb946d77b7302c251b9744e67f4c4bd0336ec19688c73ff3c60cc3d869f46b25605f6f3f017c9fd5a1b336688c1b90d19f3114a757b9d90bf750f360ca5e932ebdd2d3ae177e59022f7d7dcd9a5ea477370992057eb53d0c4e3019d13ffffdbcb34817b2fe273cd1042c040e9254697a83e5f6b0dfb6c3fd5962968b61ffc2059478d8e7fac9ca2553163a73c3be6abc344a1de339a5120f6e27248975237d30cd19e125698ebce117715a1c80cdff3721c2f1a0ae29901e5a5ebf05794480d1f3e65e7be2ad8cd04c4998343b3b5e084826cc4ec8704a0b69f612675da0afa7487ca19eff015c8b0d8532ce0894133f6be256aeaafa00d9324db25ce698b3a873172aba67786d9786c7adbfcbc791afd2a5874cff6fa698cd35e421eaecd1c83e463f99c87ab72b8ee9cae4f5d4e06e4a824f6a56bce675400ab96e5c666ebcfb578c90289105edd2c810cd9d69b1aeb80a704fc48c8089d9c86609b0aaafb832c12dc9d9bb73ba322b1db7a3a753b0e4e8dfe797c2fd8f6c87e6e6b8055e65501e2036ed045b00fe5d7546bb52175f23ce099a64bc336578ee5a884adc54f2a04edefebcb4bee87dd6d474cc78e37b3a12dc76aa5ef1d51541f88d6b781b50fc8194659c7eaf7b4cbb08bfa846b1f0942b86c2382e704aff077a377e5f53f378bcf9ea390437f4b6fc4abd6283335d3e3e43571b8fc8423a0077ae6a3258b643b125b48f7d538e3b8fb26c9bc76fa4720ad05638761de1231b51fee9944678c8e740505091255b113581b5341ca9da25814eda896e7dd959271a862075af1f782636636e79705214aac5f5bf3b636752ce2f97eb3c1851065101b0c942bc7d331582377fe0b19c112eaed5460c8ae316f467b69119bf39b6f5f387bc0eccb4105417e15437989f32a2f0630248d6fda664b587e0c6004261e1ce4fa54e70d521f76c2108bdce62d2f6bbe4e6ff439c0c32444da3f9c10d2897a81474ca3596b351d5daadd720060119409ae1d4e29f46f342741c507bf8ede3466aaf6a5c46696d13818bf243c351297b4df5e90b883d9690238f5b13a61beb85bfe0dfb400672f63bcd5d860dfc3841d087c69798a894561c3ee1f9bbddcea953bb12ca9638ac086c2f3b5466a2abb5f8d3a37ac8eaf852608d09aac9f41339cef65d3b3e246d7203debd5e97b6e8be5231a33b51af1ced4d15d7f42b2afc6f7bc8e72d3d67e8d78871048d3af18b400dd885af29f12ca52719716797ed2055099c217d4b929569e203148353e2381eaf96c9c7d17365fce7e9e4aacd8a9fc114cc96105d2552304ee18f6b3e31a72bf5ba956ed28dfa23720bd8937a82b38f06c8f86b7866d3a0c1e0927a3f338364f5bcbc87b2a8f83496d9d9b669c8de80ff890404a32ad772a3f7867616a565329f1ccc6b9800472f7783dcf57cca1bbb1c62a5aebbbc70c955ce84e43917cf0505238c45afe1343a60e1bd7bd8611cc01887087ba660c2dab0e428d8ae868e59a3d82632d3d8f0192bee174004561a4f2ddec8e3b254ba97f6f1d188f539b9bf0ff62a920f2209a2e3bbda428137bd63a5f6572ea08dc2783545eb0fd7e3252239383fe1745e15ed3a0fd3e2a06ca6aa2ea71ced3bb76531aa312cc619ab463ca84a66be1fa4a6831178eaf218e654e080b7f0babf54d7cc32ce81eacb1837fe1d0882cc8689074cae02a3147ba342c3378ae65c4204e61d9a7116f2558c6da1e36690a69de8ac4e09d27b8615ae93bbdfb5a987c9b7ea774ada5262aa94f8e5b0241773de0a762ff1af588b9d35c14a2cf303d9beb777093f025fc323ab35d9098c57de6e7ee1b5a4946b95b6c291514d51c6e6b0e4fe91e43e54bddbe9f6256f35d631701695e91c76ebe7668cbaf504997deb986aa92831ea13537616eecf2e8b6e81668bbebdcfeca20beab4f214bd1df16a98811944704042e83eba798eea6c8defd734e4dfb7173ea6eca68c78de4c03d5192166821d76643a854b219f7dd221e5d7330ac6bfb3dbf6bb2ce414320585a5e38c16a961cfd781a801a5a61123f3416adc4224e10ac2ac14c788b2c70536c0346e6090beb390dd0506e34f9cbc390f4d6eaa0d370cd8aee076e2773d05e3dc3933528f511e56cf684ecd4251a97d7afb2eb4d1612e8420ed49550db147347499313ac410811a96bc4561b705c262d667b9dbea151896da46d73a3ca202f7cf45421ea295360faac83927860d09d9788ea919956abdf4bd86ba6af5ae733a795c478939e1a3ec028dccbf5a11d10515ecdf9a21ac0ee08f1e91d20a31d339293ed654148c54d0db22babaf7384a62a04ccdbb7a252dbb1a495a7b9116f2e83450990f94c4dff0ed2d7b003051057fd7ae0a3a917034b76890a09b4e7d46b5d33a92ca01b7903cd12f74ecf40a5d9895c8ec2ffa653b1158b966644b9c685293cf2d557769cd199a903aeac2eb07e6ab1e4a5b9b9f9296304aacb112f6b8a974c7b3a0543f64d3f25926b28ac2a4c40380e0b663073b106fb5bd2e4dfa42633ccfd2fae6a0e2185039244873153414bafda17de9c6b4959639ff089941eb1ea5da4dd6765b2c0bec66b3781ea232a994b8f290277511bc25595cf5073cb791a23078206370bd209e527f9f1b19c6e61884d2767be83a2e89384f17eb4e15abc4cd64e9da240cd1043a546bdb9688b2a8a8", @ANYRES8=r1, @ANYBLOB="ad6e268607"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000001c0)={0x80000002}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) tgkill(0x0, 0x0, 0xf) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000240)) mount$9p_virtio(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x400, &(0x7f0000000600)={'trans=virtio,', {[{@cache_loose}, {@fscache}, {@cache_loose}, {@version_L}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 2.521323271s ago: executing program 3 (id=2780): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x1000) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) r4 = socket(0x9, 0x2, 0x2) recvmmsg(r4, &(0x7f00000063c0), 0x0, 0x1, &(0x7f0000006540)={0x0, 0x3938700}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2.492091561s ago: executing program 4 (id=2781): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="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", 0x14d}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) syz_usb_connect(0x1, 0x314, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0xd8, 0x7e, 0xbd, 0x40, 0x12d1, 0x695e, 0xfec7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x302, 0x1, 0x9, 0x6, 0x80, 0x5, [{{0x9, 0x4, 0x5c, 0x7f, 0x6, 0xff, 0x1, 0x6d, 0x9, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, '\vv'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x2, 0xd1, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0xd}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x80, 0x6, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x8, 0x3, 0x1, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x494}, @country_functional={0xa, 0x24, 0x7, 0x9, 0x2, [0x7, 0x6]}, @mdlm_detail={0xef, 0x24, 0x13, 0x1, "62db8cd94279a8f06761d1410ecc1125e0c66096ee98f9bd6717f9854d9179c466748b32979ec55614c50933c0bb590481a6c0e6f2a4c697cc23e5670623fc3cc036d9d6a549722cdb405c634361fba95a35ac5e7e00758e9fa8e49cc7e2ae2ecd1be6cfa9bc8bf419875e04c80077b708c92f8b251083da3a7771f9068e65ba870b47c98acf9f28edac27aa13bbd8b8c3dbcdde9fe5969fdbb605151fe9fa59dda5fbee8ecb7a7c83df0e9ff289919796507cab2c04fa98b34235c9e7142ed33c030d33b6cf52a82b574738a55c88e821939c35887bef6a6173ee0585f64bb64d3630498abdff83041967"}, @obex={0x5, 0x24, 0x15, 0x7ff}]}], [{{0x9, 0x5, 0x3, 0xc, 0x200, 0x5, 0x3c, 0x81, [@generic={0x67, 0x24, "60ae920d9eb361e8282267946ab8a467069c3270477432db53d5cb2f7023db3dacc47d4fb6608dc19d9a1aeb12dffa3c477d85ed923b1a71372d4b5de3f372633477b25f176f55803a5916c1a3391fd83613841a68c08f111e5e3eb03e41132538913824d4"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x3, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x89, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0xed56badb76cd442e, 0xee, 0x6, 0xc3}}, {{0x9, 0x5, 0x3, 0x0, 0x440, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x2c, 0x2, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x2, 0x0, 0x6, [@generic={0xe4, 0x6, "c78830638f1bb2aacb80200ab7e176a41a13d762fdc9d91a1bcd15e4f019eb2b9e9957b46177d1904e76dc2c8dca831e0bc6c0c129fc466ddc47039095ddb7a26b85f4df00d65623be6e7d5daca73705f9657c68ffa50ad909fc0e872eb862fed5d39188f1f2ec0003d169eb9e95ac7cda4851876e5eb8488a18e46be06a271385bae6d2720b53c4892c1f0764a3547789de669d6f8ae8c94dd13920af2881b3eb017cad84118bf715c9599d2e1f8c6dea9c5412f7fd7b1e3b2045cf6a6526b26339a9333ad0284ac6214fdab1501d55ee807342376cdbbb062970247fafd48abe2d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x5, 0x7, 0x6, 0x20, 0x7}, 0x119, &(0x7f0000000600)={0x5, 0xf, 0x119, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xd8, 0x3, 0x0, 0x5, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x8, 0xff00, 0x6, [0xffc00f, 0x7fbf30]}, @generic={0xde, 0x10, 0x3, "4b86f7e1e082b124d0bbb3801e3f3421d32f2453b51ffb21e9d11cfc472ea7df20b45fdd5293e37fff3d77060d11a5af0b46f3f68e2feb31e8a179146819a50140b4953b130244ca906d559fb2b72b1ca645ed3847d1d4b98206989eef781296654d8b7c47efb16992c81845af2137b486f1f5ebf2b6be7e8fb8da9f9012456187dfd37820e4280575f477e7c810daded2a2f45cc72dfa46c75464119294a85c7a9c287959be06aab3d150d691b02389fcb14d76c3db043e9aad8b48d0701321392059794e7e51095a79784ca5952dea5085d6606a0d5e20700551"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6b4b3333dad77860a2d734e628d99617"}, @ptm_cap={0x3}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2781) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x799d, 0xfffffffe, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xd, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="779ef3600a7eabe8549c"]}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 2.320680165s ago: executing program 3 (id=2783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x20003) pause() fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 2.122242839s ago: executing program 1 (id=2785): open(&(0x7f0000000000)='./bus\x00', 0x10d8c1, 0x170) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) creat(0x0, 0x102) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x8801) accept$inet6(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 2.06811298s ago: executing program 0 (id=2786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x1000}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8dfffffb703000008000000b70400004d44e50e85000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x5) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x141488c, &(0x7f0000000040)={[{@orlov}, {@discard}]}, 0x1, 0x776, &(0x7f0000001180)="$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") sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1.996909991s ago: executing program 2 (id=2787): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40080, &(0x7f0000000600)={[{@norecovery}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@barrier_val}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@data_err_abort}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@commit={'commit', 0x3d, 0x8}}, {@dioread_nolock}, {@bh}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nolazytime}]}, 0x1, 0x557, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_open_pts(r0, 0x10200) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000f1ff000000000000000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="182a0002000000000000000004000000041100855de94fecbb7619da8900", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c42", 0x21) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendfile(r6, r2, 0x0, 0x3ffff) sendfile(r6, r2, 0x0, 0x7fffeffd) 1.975801481s ago: executing program 0 (id=2788): r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) sendmsg$key(r0, 0x0, 0x4040805) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000015c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1.871544984s ago: executing program 4 (id=2789): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) 1.766371366s ago: executing program 4 (id=2790): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) timer_create(0x7, 0x0, &(0x7f0000000440)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f00000003c0)={[{@nodots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@discard}, {@fat=@nfs_stale_rw}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000540)={0x0, 0x66bd, 0x0, [0x7, 0x9dd7, 0x2, 0xc, 0x80000000], [0x4, 0x9241, 0x0, 0xe1a, 0x260, 0xcd64, 0x3, 0x5, 0x2, 0x8000000000000000, 0x7ff, 0x3, 0x6, 0x7, 0x5, 0x0, 0x200, 0x9fc2, 0x4, 0x1a3, 0x6, 0x100, 0x3, 0x800, 0x4a67, 0x4, 0x1, 0x2, 0x7ff, 0x8, 0x3, 0x8, 0xffffffffffffff81, 0x8000, 0x6, 0x3, 0x1, 0x7, 0x5, 0x5, 0x4, 0x5, 0x400, 0x5, 0xfffffffffffffbff, 0xffffffff, 0x7, 0x9, 0x3, 0x2, 0x1a, 0xfffffffffffff000, 0x6, 0x7, 0x1, 0x401, 0x9, 0x8, 0x4, 0x8380, 0x9e, 0x2f1, 0xd48, 0x2, 0x0, 0xe, 0x8, 0x9, 0x7, 0x7, 0xc4, 0x0, 0x7fffffffffffffff, 0x80000001, 0x0, 0x9, 0x2, 0x729, 0x1, 0x6, 0x3, 0x6, 0x4, 0x7, 0x1, 0xce, 0x2, 0x205, 0x24c0000, 0x8001, 0x0, 0x9, 0x30730000000000, 0x1, 0x6, 0x1, 0x40, 0x2f, 0x200, 0x2, 0x8, 0x7, 0xca, 0x3, 0x3, 0x5, 0xe, 0x32a003a9, 0xc3, 0x8, 0x400, 0x68e, 0x200, 0x7, 0x6, 0x4, 0xfffffffffffffffb, 0x9, 0x3fffffffc00000, 0x4, 0xffffffff]}) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) syz_emit_ethernet(0x83, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x6}, 0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7f, 0x80000000, 0x6, 0x0, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 1.765748256s ago: executing program 0 (id=2791): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.718756047s ago: executing program 0 (id=2792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) unshare(0x10000400) r3 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6e, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) setgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000008, &(0x7f0000000200)={[{@grpid}, {@grpjquota}, {@nobarrier}]}, 0x1, 0x521, &(0x7f0000000b80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) r6 = epoll_create1(0x80000) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2011}) 1.450711561s ago: executing program 3 (id=2793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a3200000000140000"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1.384082383s ago: executing program 3 (id=2794): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x18, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xcf, 0x0, 0x6, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x400, 0x2, 0x0, 0x0, 0x2, 0x1fffffff, 0x0, 0x0, 0x3d, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x32, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x1}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000090a010400000000000000000a0000040900020073797a3108070000000000000000010073797a3100000000080005400000000b2000128015000180090001006c617374000000000c00028008000140000000070800034000000130140000001100010000000000000000000100000a"], 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', r6, 0x0, 0x0, 0x3, 0x0, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @empty}, 0x105, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='bridge0\x00', 0x8, 0x401, 0x5}) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575ac8ca62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf", 0xd8}], 0x1}, 0x200088c0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xfffffffffffff005}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="9110bb000000000095000000000000005ce17c29ab355baf000dc3b7d5fa7f7f9e73a826823566f5f50e756e161380d116f01db046a6f445498a0cd74aa5833925f14048"], &(0x7f0000000280)='GPL\x00'}, 0x90) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000100)={0xc, 0xb, 0x5}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448e3, 0x0) 1.315863094s ago: executing program 1 (id=2795): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x1000) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) r4 = socket(0x9, 0x2, 0x2) recvmmsg(r4, &(0x7f00000063c0), 0x0, 0x1, &(0x7f0000006540)={0x0, 0x3938700}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1.215944776s ago: executing program 3 (id=2796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000007000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f0ffffffffffffff000000000000758eb4c18591b4be"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_usbip_server_init(0x1) write$usbip_server(r6, &(0x7f0000000080)=@ret_unlink={{0x4, 0xb35, 0x0, 0x0, 0x5}, {0x8}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@const={0x9, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x2e, 0xeca7bf9729d56073, 0x0]}}, &(0x7f0000000340)=""/39, 0x2a, 0x27, 0x1, 0x9}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.01368438s ago: executing program 2 (id=2797): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60020, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x476, 0x10000, 0x5, 0x1, 0x0, 0x20005, 0xb, 0x0, 0xfffffff8, 0x0, 0x20000006}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095a0eaa7430000e7"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x4) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) pwritev2(r8, 0x0, 0x0, 0x8800000, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40), 0x10, 0xfffffff4}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 919.785852ms ago: executing program 2 (id=2798): prlimit64(0x0, 0x8, 0x0, 0x0) getrlimit(0x5, &(0x7f00000000c0)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x0, 0xfc, 0xf3, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000008, 0x6}, 0x40, 0x2, 0x0, 0x1, 0x8, 0xfffffffe, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = socket(0x1, 0x5, 0x0) r2 = epoll_create1(0x80000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="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", @ANYRES8=r1, @ANYBLOB="ad6e268607"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000001c0)={0x80000002}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) tgkill(0x0, 0x0, 0xf) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000240)) mount$9p_virtio(&(0x7f00000002c0), 0x0, &(0x7f0000000480), 0x400, &(0x7f0000000600)={'trans=virtio,', {[{@cache_loose}, {@fscache}, {@cache_loose}, {@version_L}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 919.169032ms ago: executing program 4 (id=2799): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x1000}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000840000007b8af8ff00000000bfa200000000000007020000f8dfffffb703000008000000b70400004d44e50e85000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x5) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x141488c, &(0x7f0000000040)={[{@orlov}, {@discard}]}, 0x1, 0x776, &(0x7f0000001180)="$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") sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 806.181344ms ago: executing program 0 (id=2800): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000300)="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", 0x14d}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) syz_usb_connect(0x1, 0x314, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0xd8, 0x7e, 0xbd, 0x40, 0x12d1, 0x695e, 0xfec7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x302, 0x1, 0x9, 0x6, 0x80, 0x5, [{{0x9, 0x4, 0x5c, 0x7f, 0x6, 0xff, 0x1, 0x6d, 0x9, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, '\vv'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x2, 0xd1, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0xd}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x80, 0x6, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xa, 0x8, 0x3, 0x1, 0x2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x494}, @country_functional={0xa, 0x24, 0x7, 0x9, 0x2, [0x7, 0x6]}, @mdlm_detail={0xef, 0x24, 0x13, 0x1, "62db8cd94279a8f06761d1410ecc1125e0c66096ee98f9bd6717f9854d9179c466748b32979ec55614c50933c0bb590481a6c0e6f2a4c697cc23e5670623fc3cc036d9d6a549722cdb405c634361fba95a35ac5e7e00758e9fa8e49cc7e2ae2ecd1be6cfa9bc8bf419875e04c80077b708c92f8b251083da3a7771f9068e65ba870b47c98acf9f28edac27aa13bbd8b8c3dbcdde9fe5969fdbb605151fe9fa59dda5fbee8ecb7a7c83df0e9ff289919796507cab2c04fa98b34235c9e7142ed33c030d33b6cf52a82b574738a55c88e821939c35887bef6a6173ee0585f64bb64d3630498abdff83041967"}, @obex={0x5, 0x24, 0x15, 0x7ff}]}], [{{0x9, 0x5, 0x3, 0xc, 0x200, 0x5, 0x3c, 0x81, [@generic={0x67, 0x24, "60ae920d9eb361e8282267946ab8a467069c3270477432db53d5cb2f7023db3dacc47d4fb6608dc19d9a1aeb12dffa3c477d85ed923b1a71372d4b5de3f372633477b25f176f55803a5916c1a3391fd83613841a68c08f111e5e3eb03e41132538913824d4"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x3, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x89, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0xed56badb76cd442e, 0xee, 0x6, 0xc3}}, {{0x9, 0x5, 0x3, 0x0, 0x440, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x2c, 0x2, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x2, 0x0, 0x6, [@generic={0xe4, 0x6, "c78830638f1bb2aacb80200ab7e176a41a13d762fdc9d91a1bcd15e4f019eb2b9e9957b46177d1904e76dc2c8dca831e0bc6c0c129fc466ddc47039095ddb7a26b85f4df00d65623be6e7d5daca73705f9657c68ffa50ad909fc0e872eb862fed5d39188f1f2ec0003d169eb9e95ac7cda4851876e5eb8488a18e46be06a271385bae6d2720b53c4892c1f0764a3547789de669d6f8ae8c94dd13920af2881b3eb017cad84118bf715c9599d2e1f8c6dea9c5412f7fd7b1e3b2045cf6a6526b26339a9333ad0284ac6214fdab1501d55ee807342376cdbbb062970247fafd48abe2d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x5, 0x7, 0x6, 0x20, 0x7}, 0x119, &(0x7f0000000600)={0x5, 0xf, 0x119, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xd8, 0x3, 0x0, 0x5, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x8, 0xff00, 0x6, [0xffc00f, 0x7fbf30]}, @generic={0xde, 0x10, 0x3, "4b86f7e1e082b124d0bbb3801e3f3421d32f2453b51ffb21e9d11cfc472ea7df20b45fdd5293e37fff3d77060d11a5af0b46f3f68e2feb31e8a179146819a50140b4953b130244ca906d559fb2b72b1ca645ed3847d1d4b98206989eef781296654d8b7c47efb16992c81845af2137b486f1f5ebf2b6be7e8fb8da9f9012456187dfd37820e4280575f477e7c810daded2a2f45cc72dfa46c75464119294a85c7a9c287959be06aab3d150d691b02389fcb14d76c3db043e9aad8b48d0701321392059794e7e51095a79784ca5952dea5085d6606a0d5e20700551"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6b4b3333dad77860a2d734e628d99617"}, @ptm_cap={0x3}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2781) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x799d, 0xfffffffe, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xd, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="779ef3600a7eabe8549c"]}]}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 661.431867ms ago: executing program 4 (id=2801): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) 588.089869ms ago: executing program 4 (id=2802): r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) sendmsg$key(r0, 0x0, 0x4040805) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000015c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 587.656549ms ago: executing program 1 (id=2803): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 587.371789ms ago: executing program 3 (id=2804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x20003) pause() fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 194.557486ms ago: executing program 1 (id=2805): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a32000000001400000011"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x14, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 158.054477ms ago: executing program 0 (id=2806): open(&(0x7f0000000000)='./bus\x00', 0x10d8c1, 0x170) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000002100210100000000000000000a00000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) creat(0x0, 0x102) listen(r5, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x8801) accept$inet6(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 96.016738ms ago: executing program 1 (id=2807): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x18, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xcf, 0x0, 0x6, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000080)}, 0x400, 0x2, 0x0, 0x0, 0x2, 0x1fffffff, 0x0, 0x0, 0x3d, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff44, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x32, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x1}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000090a010400000000000000000a0000040900020073797a3108070000000000000000010073797a3100000000080005400000000b2000128015000180090001006c617374000000000c00028008000140000000070800034000000130140000001100010000000000000000000100000a"], 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'syztnl0\x00', r6, 0x0, 0x0, 0x3, 0x0, 0x30000, @loopback, @local, 0x8000, 0x0, 0x1, 0x6}}) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @empty}, 0x105, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='bridge0\x00', 0x8, 0x401, 0x5}) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575ac8ca62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf", 0xd8}], 0x1}, 0x200088c0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0xfffffffffffff005}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="9110bb000000000095000000000000005ce17c29ab355baf000dc3b7d5fa7f7f9e73a826823566f5f50e756e161380d116f01db046a6f445498a0cd74aa5833925f14048"], &(0x7f0000000280)='GPL\x00'}, 0x90) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000100)={0xc, 0xb, 0x5}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448e3, 0x0) 67.354358ms ago: executing program 2 (id=2808): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40080, &(0x7f0000000600)={[{@norecovery}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@barrier_val}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@data_err_abort}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@commit={'commit', 0x3d, 0x8}}, {@dioread_nolock}, {@bh}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nolazytime}]}, 0x1, 0x557, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_open_pts(r0, 0x10200) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000f1ff000000000000000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="182a0002000000000000000004000000041100855de94fecbb7619da8900", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r6, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c42", 0x21) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendfile(r6, r2, 0x0, 0x3ffff) sendfile(r6, r2, 0x0, 0x7fffeffd) 0s ago: executing program 1 (id=2809): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) timer_create(0x7, 0x0, &(0x7f0000000440)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f00000003c0)={[{@nodots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@discard}, {@fat=@nfs_stale_rw}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000540)={0x0, 0x66bd, 0x0, [0x7, 0x9dd7, 0x2, 0xc, 0x80000000], [0x4, 0x9241, 0x0, 0xe1a, 0x260, 0xcd64, 0x3, 0x5, 0x2, 0x8000000000000000, 0x7ff, 0x3, 0x6, 0x7, 0x5, 0x0, 0x200, 0x9fc2, 0x4, 0x1a3, 0x6, 0x100, 0x3, 0x800, 0x4a67, 0x4, 0x1, 0x2, 0x7ff, 0x8, 0x3, 0x8, 0xffffffffffffff81, 0x8000, 0x6, 0x3, 0x1, 0x7, 0x5, 0x5, 0x4, 0x5, 0x400, 0x5, 0xfffffffffffffbff, 0xffffffff, 0x7, 0x9, 0x3, 0x2, 0x1a, 0xfffffffffffff000, 0x6, 0x7, 0x1, 0x401, 0x9, 0x8, 0x4, 0x8380, 0x9e, 0x2f1, 0xd48, 0x2, 0x0, 0xe, 0x8, 0x9, 0x7, 0x7, 0xc4, 0x0, 0x7fffffffffffffff, 0x80000001, 0x0, 0x9, 0x2, 0x729, 0x1, 0x6, 0x3, 0x6, 0x4, 0x7, 0x1, 0xce, 0x2, 0x205, 0x24c0000, 0x8001, 0x0, 0x9, 0x30730000000000, 0x1, 0x6, 0x1, 0x40, 0x2f, 0x200, 0x2, 0x8, 0x7, 0xca, 0x3, 0x3, 0x5, 0xe, 0x32a003a9, 0xc3, 0x8, 0x400, 0x68e, 0x200, 0x7, 0x6, 0x4, 0xfffffffffffffffb, 0x9, 0x3fffffffc00000, 0x4, 0xffffffff]}) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) syz_emit_ethernet(0x83, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x6}, 0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7f, 0x80000000, 0x6, 0x0, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ] fscontext_release+0x40/0x60 [ 175.174574][ T9712] __fput+0x298/0x650 [ 175.174614][ T9712] fput_close_sync+0x6e/0x120 [ 175.174645][ T9712] __x64_sys_close+0x56/0xf0 [ 175.174683][ T9712] x64_sys_call+0x2738/0x2ff0 [ 175.174703][ T9712] do_syscall_64+0xd2/0x200 [ 175.174799][ T9712] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.174826][ T9712] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.174858][ T9712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.174915][ T9712] RIP: 0033:0x7fa91c90eba9 [ 175.174946][ T9712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.175054][ T9712] RSP: 002b:00007fa91b377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 175.175074][ T9712] RAX: ffffffffffffffda RBX: 00007fa91cb55fa0 RCX: 00007fa91c90eba9 [ 175.175088][ T9712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 175.175112][ T9712] RBP: 00007fa91b377090 R08: 0000000000000000 R09: 0000000000000000 [ 175.175126][ T9712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.175140][ T9712] R13: 00007fa91cb56038 R14: 00007fa91cb55fa0 R15: 00007ffd20925528 [ 175.175162][ T9712] [ 175.473309][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.533419][ T9723] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2084'. [ 175.646972][ T9727] lo speed is unknown, defaulting to 1000 [ 175.672871][ T9736] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2089'. [ 175.706774][ T9735] 9pnet_virtio: no channels available for device syz [ 175.718072][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2091'. [ 175.718564][ T9729] lo speed is unknown, defaulting to 1000 [ 175.762015][ T9742] FAULT_INJECTION: forcing a failure. [ 175.762015][ T9742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.775783][ T9742] CPU: 0 UID: 0 PID: 9742 Comm: syz.3.2092 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.775812][ T9742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.775825][ T9742] Call Trace: [ 175.775831][ T9742] [ 175.775837][ T9742] __dump_stack+0x1d/0x30 [ 175.775861][ T9742] dump_stack_lvl+0xe8/0x140 [ 175.775959][ T9742] dump_stack+0x15/0x1b [ 175.775995][ T9742] should_fail_ex+0x265/0x280 [ 175.776018][ T9742] should_fail+0xb/0x20 [ 175.776036][ T9742] should_fail_usercopy+0x1a/0x20 [ 175.776080][ T9742] _copy_from_user+0x1c/0xb0 [ 175.776113][ T9742] ____sys_sendmsg+0x1c5/0x4e0 [ 175.776146][ T9742] __sys_sendmsg_sock+0x28/0x40 [ 175.776253][ T9742] io_sendmsg+0x144/0x5b0 [ 175.776305][ T9742] __io_issue_sqe+0xfe/0x2e0 [ 175.776328][ T9742] ? io_assign_file+0x139/0x200 [ 175.776358][ T9742] io_issue_sqe+0x53/0x970 [ 175.776456][ T9742] ? io_sendmsg_prep+0x38b/0x3d0 [ 175.776498][ T9742] io_submit_sqes+0x675/0x1060 [ 175.776531][ T9742] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 175.776556][ T9742] ? 0xffffffff81000000 [ 175.776622][ T9742] ? __rcu_read_unlock+0x4f/0x70 [ 175.776712][ T9742] ? get_pid_task+0x96/0xd0 [ 175.776732][ T9742] ? proc_fail_nth_write+0x13b/0x160 [ 175.776766][ T9742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 175.776814][ T9742] ? vfs_write+0x7e8/0x960 [ 175.776843][ T9742] ? __rcu_read_unlock+0x4f/0x70 [ 175.776869][ T9742] ? __fget_files+0x184/0x1c0 [ 175.776945][ T9742] ? __x64_sys_io_uring_enter+0x2c/0x90 [ 175.777017][ T9742] __x64_sys_io_uring_enter+0x78/0x90 [ 175.777045][ T9742] x64_sys_call+0x2de1/0x2ff0 [ 175.777068][ T9742] do_syscall_64+0xd2/0x200 [ 175.777186][ T9742] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.777212][ T9742] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.777434][ T9742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.777456][ T9742] RIP: 0033:0x7fa9f135eba9 [ 175.777486][ T9742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.777511][ T9742] RSP: 002b:00007fa9efdbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 175.777531][ T9742] RAX: ffffffffffffffda RBX: 00007fa9f15a5fa0 RCX: 00007fa9f135eba9 [ 175.777544][ T9742] RDX: 000000000000ddd3 RSI: 0000000000003516 RDI: 0000000000000005 [ 175.777557][ T9742] RBP: 00007fa9efdbf090 R08: 0000000000000000 R09: 0000000000000000 [ 175.777570][ T9742] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 175.777582][ T9742] R13: 00007fa9f15a6038 R14: 00007fa9f15a5fa0 R15: 00007ffcbe1f67c8 [ 175.777678][ T9742] [ 176.057931][ T9744] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 176.064521][ T9744] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.072063][ T9744] vhci_hcd vhci_hcd.0: Device attached [ 176.122357][ T9752] loop3: detected capacity change from 0 to 1024 [ 176.143040][ T9746] vhci_hcd: connection closed [ 176.143574][ T5355] vhci_hcd: stop threads [ 176.153287][ T5355] vhci_hcd: release socket [ 176.157778][ T5355] vhci_hcd: disconnect device [ 176.174349][ T9752] loop3: detected capacity change from 0 to 1024 [ 176.184081][ T9752] EXT4-fs: Ignoring removed bh option [ 176.195302][ T9752] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 176.234218][ T9752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.627193][ T9765] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2099'. [ 176.728890][ T9769] program syz.2.2101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.940493][ T9774] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2103'. [ 176.998266][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.034519][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2106'. [ 177.123803][ T9785] lo speed is unknown, defaulting to 1000 [ 177.204633][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 177.204667][ T29] audit: type=1326 audit(2000000015.720:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.262038][ T9789] 9pnet_virtio: no channels available for device syz [ 177.269047][ T29] audit: type=1326 audit(2000000015.720:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.292863][ T29] audit: type=1326 audit(2000000015.720:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.316290][ T29] audit: type=1326 audit(2000000015.720:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.322208][ T9788] lo speed is unknown, defaulting to 1000 [ 177.339776][ T29] audit: type=1326 audit(2000000015.720:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.368969][ T29] audit: type=1326 audit(2000000015.720:8941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.392404][ T29] audit: type=1326 audit(2000000015.720:8942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.415849][ T29] audit: type=1326 audit(2000000015.720:8943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.439352][ T29] audit: type=1326 audit(2000000015.720:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.462824][ T29] audit: type=1326 audit(2000000015.730:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9784 comm="syz.0.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 177.554491][ T9796] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 177.561054][ T9796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.568627][ T9796] vhci_hcd vhci_hcd.0: Device attached [ 177.575133][ T9797] vhci_hcd: cannot find the pending unlink 2869 [ 177.584679][ T9797] vhci_hcd: connection closed [ 177.586209][ T51] vhci_hcd: stop threads [ 177.596095][ T51] vhci_hcd: release socket [ 177.596104][ T51] vhci_hcd: disconnect device [ 177.609312][ T9800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2112'. [ 177.895639][ T9814] loop4: detected capacity change from 0 to 512 [ 177.902628][ T9814] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.916195][ T9814] EXT4-fs (loop4): failed to initialize system zone (-117) [ 177.925084][ T9814] EXT4-fs (loop4): mount failed [ 177.987002][ T9817] program syz.0.2119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.111229][ T9823] loop2: detected capacity change from 0 to 1024 [ 178.142370][ T9823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.158806][ T9823] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2122: Allocating blocks 385-513 which overlap fs metadata [ 178.191596][ T9823] EXT4-fs (loop2): pa ffff8881071848c0: logic 16, phys. 129, len 24 [ 178.199676][ T9823] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 178.261331][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.359898][ T9831] loop2: detected capacity change from 0 to 8192 [ 178.594998][ T9842] lo speed is unknown, defaulting to 1000 [ 178.619974][ T9844] 9pnet_virtio: no channels available for device syz [ 178.655465][ T9843] lo speed is unknown, defaulting to 1000 [ 178.716404][ T9851] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 178.722949][ T9851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.730557][ T9851] vhci_hcd vhci_hcd.0: Device attached [ 178.740677][ T9852] vhci_hcd: cannot find the pending unlink 2869 [ 178.751831][ T9852] vhci_hcd: connection closed [ 178.754365][ T9181] vhci_hcd: stop threads [ 178.763469][ T9181] vhci_hcd: release socket [ 178.767950][ T9181] vhci_hcd: disconnect device [ 179.218784][ T9862] __nla_validate_parse: 2 callbacks suppressed [ 179.218814][ T9862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2137'. [ 179.342610][ T9864] loop3: detected capacity change from 0 to 8192 [ 179.524863][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2144'. [ 179.679051][ T9884] loop3: detected capacity change from 0 to 512 [ 179.702614][ T9884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.731680][ T9884] EXT4-fs (loop3): failed to initialize system zone (-117) [ 179.746553][ T9884] EXT4-fs (loop3): mount failed [ 179.802034][ T9889] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2149'. [ 179.889741][ T9891] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 179.896307][ T9891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.903889][ T9891] vhci_hcd vhci_hcd.0: Device attached [ 179.911815][ T9892] vhci_hcd: cannot find the pending unlink 2869 [ 179.918199][ T9892] vhci_hcd: connection closed [ 179.918940][ T9181] vhci_hcd: stop threads [ 179.927915][ T9181] vhci_hcd: release socket [ 179.932343][ T9181] vhci_hcd: disconnect device [ 180.259418][ T9899] loop4: detected capacity change from 0 to 8192 [ 180.515297][ T9906] 9pnet_virtio: no channels available for device syz [ 180.585271][ T9918] loop3: detected capacity change from 0 to 512 [ 180.589497][ T9902] lo speed is unknown, defaulting to 1000 [ 180.639325][ T9923] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2160'. [ 180.656354][ T9918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.694474][ T9918] EXT4-fs (loop3): 1 orphan inode deleted [ 180.706611][ T9181] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 1 [ 180.706850][ T9918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.731914][ T9918] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.770585][ T9907] lo speed is unknown, defaulting to 1000 [ 180.816250][ T9933] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2163'. [ 180.851945][ T9931] netlink: 'syz.2.2163': attribute type 21 has an invalid length. [ 180.865752][ T9931] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2163'. [ 180.874934][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 180.961278][ T9938] loop2: detected capacity change from 0 to 8192 [ 181.031767][ T9940] loop2: detected capacity change from 0 to 1024 [ 181.065752][ T9940] loop2: detected capacity change from 0 to 1024 [ 181.086744][ T9940] EXT4-fs: Ignoring removed bh option [ 181.098312][ T9940] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 181.118310][ T9940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.352810][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.368341][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2167'. [ 181.392217][ T9954] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 181.398778][ T9954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.406357][ T9954] vhci_hcd vhci_hcd.0: Device attached [ 181.429339][ T9955] vhci_hcd: cannot find the pending unlink 2869 [ 181.437387][ T9955] vhci_hcd: connection closed [ 181.438371][ T9191] vhci_hcd: stop threads [ 181.447375][ T9191] vhci_hcd: release socket [ 181.451895][ T9191] vhci_hcd: disconnect device [ 181.491665][ T9962] loop4: detected capacity change from 0 to 512 [ 181.503953][ T9962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 181.515872][ T9962] EXT4-fs (loop4): failed to initialize system zone (-117) [ 181.527499][ T9962] EXT4-fs (loop4): mount failed [ 181.601983][ T9967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2173'. [ 181.705249][ T9974] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2175'. [ 181.765586][ T9971] netlink: 'syz.0.2175': attribute type 21 has an invalid length. [ 181.857844][ T9979] 9pnet_virtio: no channels available for device syz [ 181.902115][ T9978] lo speed is unknown, defaulting to 1000 [ 181.909513][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.069007][ T9990] loop2: detected capacity change from 0 to 512 [ 182.102691][ T9990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.140905][ T9990] EXT4-fs (loop2): 1 orphan inode deleted [ 182.159795][ T9990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.172426][ T5355] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1 [ 182.194234][ T9990] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.225767][ T9999] loop4: detected capacity change from 0 to 512 [ 182.233075][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 182.233091][ T29] audit: type=1326 audit(2000000020.760:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f397c00d510 code=0x7ffc0000 [ 182.271772][ T9999] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 182.276388][ T29] audit: type=1326 audit(2000000020.760:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f397c00d8f7 code=0x7ffc0000 [ 182.302869][ T29] audit: type=1326 audit(2000000020.760:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f397c00d510 code=0x7ffc0000 [ 182.326299][ T29] audit: type=1326 audit(2000000020.760:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 182.349785][ T29] audit: type=1326 audit(2000000020.760:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 182.373425][ T29] audit: type=1326 audit(2000000020.760:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 182.396893][ T29] audit: type=1326 audit(2000000020.760:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 182.396933][ T29] audit: type=1326 audit(2000000020.760:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 182.397078][ T29] audit: type=1326 audit(2000000020.760:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 182.397110][ T29] audit: type=1326 audit(2000000020.760:9252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9984 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 182.490173][T10004] loop3: detected capacity change from 0 to 2048 [ 182.539250][T10004] EXT4-fs (loop3): failed to initialize system zone (-117) [ 182.539337][T10004] EXT4-fs (loop3): mount failed [ 182.829453][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.035444][T10015] netlink: 'syz.2.2189': attribute type 21 has an invalid length. [ 183.100137][ T9988] syz.3.2181 (9988) used greatest stack depth: 7336 bytes left [ 183.112097][T10022] loop2: detected capacity change from 0 to 2048 [ 183.121141][T10024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 183.127677][T10024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.135255][T10024] vhci_hcd vhci_hcd.0: Device attached [ 183.144365][T10022] EXT4-fs: Ignoring removed orlov option [ 183.163380][T10027] vhci_hcd: cannot find the pending unlink 2869 [ 183.172039][T10022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.195416][T10027] vhci_hcd: connection closed [ 183.196123][ T51] vhci_hcd: stop threads [ 183.205181][ T51] vhci_hcd: release socket [ 183.209638][ T51] vhci_hcd: disconnect device [ 183.230409][T10029] 9pnet_virtio: no channels available for device syz [ 183.248929][T10026] lo speed is unknown, defaulting to 1000 [ 183.298392][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.348293][T10042] loop3: detected capacity change from 0 to 512 [ 183.355503][T10042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.379556][T10042] EXT4-fs (loop3): failed to initialize system zone (-117) [ 183.395379][T10042] EXT4-fs (loop3): mount failed [ 183.464624][T10050] loop2: detected capacity change from 0 to 512 [ 183.474622][T10050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.494098][T10050] EXT4-fs (loop2): 1 orphan inode deleted [ 183.500598][T10050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.513511][ T5355] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 1 [ 183.525295][T10050] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.625354][T10058] netlink: 'syz.0.2203': attribute type 21 has an invalid length. [ 184.134547][T10082] loop4: detected capacity change from 0 to 8192 [ 184.200549][T10086] netlink: 'syz.3.2214': attribute type 21 has an invalid length. [ 184.260596][T10093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 184.267173][T10093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.275497][T10093] vhci_hcd vhci_hcd.0: Device attached [ 184.285364][T10094] vhci_hcd: cannot find the pending unlink 2869 [ 184.304005][T10094] vhci_hcd: connection closed [ 184.304932][ T51] vhci_hcd: stop threads [ 184.313995][ T51] vhci_hcd: release socket [ 184.318474][ T51] vhci_hcd: disconnect device [ 184.340846][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.387778][T10104] loop2: detected capacity change from 0 to 2048 [ 184.397793][T10104] EXT4-fs: Ignoring removed orlov option [ 184.418969][T10104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.495286][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.522822][T10110] __nla_validate_parse: 16 callbacks suppressed [ 184.522841][T10110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2222'. [ 184.603487][T10112] lo speed is unknown, defaulting to 1000 [ 184.628989][T10115] 9pnet_virtio: no channels available for device syz [ 184.673121][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2225'. [ 184.880072][T10121] loop3: detected capacity change from 0 to 8192 [ 184.997548][T10126] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2227'. [ 185.028145][T10123] netlink: 'syz.3.2227': attribute type 21 has an invalid length. [ 185.036310][T10123] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2227'. [ 185.045445][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2227'. [ 185.141196][T10139] loop3: detected capacity change from 0 to 512 [ 185.151287][T10139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.169063][T10139] EXT4-fs (loop3): 1 orphan inode deleted [ 185.175295][T10139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.186895][ T9191] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 185.188655][T10139] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.232522][T10146] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2234'. [ 185.276277][T10149] loop4: detected capacity change from 0 to 1024 [ 185.288177][T10149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.303967][T10149] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2235: Allocating blocks 385-513 which overlap fs metadata [ 185.320758][T10149] EXT4-fs (loop4): pa ffff888107297f50: logic 16, phys. 129, len 24 [ 185.328839][T10149] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 185.356473][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.414765][T10155] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 185.421433][T10155] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 185.429104][T10155] vhci_hcd vhci_hcd.0: Device attached [ 185.435583][T10158] vhci_hcd: cannot find the pending unlink 2869 [ 185.446414][T10158] vhci_hcd: connection closed [ 185.446640][ T9191] vhci_hcd: stop threads [ 185.455593][ T9191] vhci_hcd: release socket [ 185.460093][ T9191] vhci_hcd: disconnect device [ 185.473651][T10157] loop2: detected capacity change from 0 to 8192 [ 185.555265][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.564147][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.593991][T10168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2241'. [ 185.624077][T10168] netlink: 'syz.2.2241': attribute type 21 has an invalid length. [ 185.632369][T10168] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2241'. [ 185.641490][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2241'. [ 185.747389][T10175] loop2: detected capacity change from 0 to 2048 [ 185.754881][T10175] EXT4-fs: Ignoring removed orlov option [ 185.769043][T10175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.807408][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.855669][T10181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2246'. [ 185.916170][T10183] loop2: detected capacity change from 0 to 1024 [ 185.928468][T10183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.943962][T10183] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2247: Allocating blocks 385-513 which overlap fs metadata [ 185.965011][T10183] EXT4-fs (loop2): pa ffff888107184850: logic 16, phys. 129, len 24 [ 185.973158][T10183] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 186.012923][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.039504][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.120220][T10197] loop3: detected capacity change from 0 to 8192 [ 186.152822][T10195] lo speed is unknown, defaulting to 1000 [ 186.162882][T10200] loop4: detected capacity change from 0 to 512 [ 186.171487][T10199] 9pnet_virtio: no channels available for device syz [ 186.180873][T10200] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.207734][T10200] EXT4-fs (loop4): failed to initialize system zone (-117) [ 186.214996][T10200] EXT4-fs (loop4): mount failed [ 186.273498][T10208] netlink: 'syz.1.2254': attribute type 21 has an invalid length. [ 186.302467][T10213] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 186.309044][T10213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.317302][T10213] vhci_hcd vhci_hcd.0: Device attached [ 186.339558][T10215] vhci_hcd: cannot find the pending unlink 2869 [ 186.345978][T10215] vhci_hcd: connection closed [ 186.346208][ T9191] vhci_hcd: stop threads [ 186.355315][ T9191] vhci_hcd: release socket [ 186.359797][ T9191] vhci_hcd: disconnect device [ 186.366181][T10207] loop3: detected capacity change from 0 to 2048 [ 186.382694][T10207] EXT4-fs: Ignoring removed orlov option [ 186.409131][T10207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.449826][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.525870][T10224] lo speed is unknown, defaulting to 1000 [ 186.616134][T10224] loop3: detected capacity change from 0 to 512 [ 186.635312][T10224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.658327][T10224] EXT4-fs (loop3): 1 orphan inode deleted [ 186.664756][T10224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.678625][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 1 [ 186.690883][T10224] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.037883][T10239] loop2: detected capacity change from 0 to 8192 [ 187.155489][T10248] netlink: 'syz.4.2269': attribute type 21 has an invalid length. [ 187.204169][T10251] loop2: detected capacity change from 0 to 2048 [ 187.213031][T10251] EXT4-fs: Ignoring removed orlov option [ 187.237106][T10251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.265152][T10255] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 187.271699][T10255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.279357][T10255] vhci_hcd vhci_hcd.0: Device attached [ 187.286275][T10256] vhci_hcd: cannot find the pending unlink 2869 [ 187.297319][T10256] vhci_hcd: connection closed [ 187.297884][ T9194] vhci_hcd: stop threads [ 187.307718][ T9194] vhci_hcd: release socket [ 187.312165][ T9194] vhci_hcd: disconnect device [ 187.330252][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.398681][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.487829][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 187.487843][ T29] audit: type=1326 audit(2000000026.010:9535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.518409][ T29] audit: type=1326 audit(2000000026.010:9536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.518967][T10261] lo speed is unknown, defaulting to 1000 [ 187.541865][ T29] audit: type=1326 audit(2000000026.010:9537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.541907][ T29] audit: type=1326 audit(2000000026.010:9538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.595891][T10270] loop3: detected capacity change from 0 to 512 [ 187.602621][ T29] audit: type=1326 audit(2000000026.010:9539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.611008][T10261] 9pnet_virtio: no channels available for device syz [ 187.626978][ T29] audit: type=1326 audit(2000000026.010:9540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.656368][ T29] audit: type=1326 audit(2000000026.010:9541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.668743][T10270] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.680675][ T29] audit: type=1326 audit(2000000026.010:9542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.691524][T10270] EXT4-fs (loop3): failed to initialize system zone (-117) [ 187.714031][ T29] audit: type=1326 audit(2000000026.010:9543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.722102][T10270] EXT4-fs (loop3): mount failed [ 187.744964][ T29] audit: type=1326 audit(2000000026.010:9544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz.2.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 187.882230][T10282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.895549][T10282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.334306][T10286] loop2: detected capacity change from 0 to 8192 [ 188.385216][T10289] netlink: 'syz.3.2283': attribute type 21 has an invalid length. [ 188.429920][T10293] loop2: detected capacity change from 0 to 2048 [ 188.448283][T10293] EXT4-fs: Ignoring removed orlov option [ 188.465061][T10293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.484102][T10299] loop3: detected capacity change from 0 to 1024 [ 188.548313][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.744481][T10306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 188.751226][T10306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.758857][T10306] vhci_hcd vhci_hcd.0: Device attached [ 188.787837][T10307] vhci_hcd: cannot find the pending unlink 2869 [ 188.799064][T10307] vhci_hcd: connection closed [ 188.799606][ T51] vhci_hcd: stop threads [ 188.808709][ T51] vhci_hcd: release socket [ 188.813128][ T51] vhci_hcd: disconnect device [ 188.934953][T10315] 9pnet_virtio: no channels available for device syz [ 188.954051][T10314] lo speed is unknown, defaulting to 1000 [ 189.366100][T10325] loop2: detected capacity change from 0 to 8192 [ 189.398514][T10329] loop2: detected capacity change from 0 to 1024 [ 189.408810][T10329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.425141][T10329] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2297: Allocating blocks 385-513 which overlap fs metadata [ 189.442187][T10329] EXT4-fs (loop2): pa ffff8881071849a0: logic 16, phys. 129, len 24 [ 189.451001][T10329] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 189.461915][T10327] netlink: 'syz.3.2296': attribute type 21 has an invalid length. [ 189.496010][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.539421][T10337] loop2: detected capacity change from 0 to 2048 [ 189.548080][T10337] EXT4-fs: Ignoring removed orlov option [ 189.577369][T10337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.617723][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.689433][T10352] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 189.696037][T10352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 189.703650][T10352] vhci_hcd vhci_hcd.0: Device attached [ 189.711899][T10356] loop2: detected capacity change from 0 to 1024 [ 189.726806][T10353] vhci_hcd: cannot find the pending unlink 2869 [ 189.735352][T10353] vhci_hcd: connection closed [ 189.735567][ T9191] vhci_hcd: stop threads [ 189.744633][ T9191] vhci_hcd: release socket [ 189.749181][ T9191] vhci_hcd: disconnect device [ 189.768417][T10356] loop2: detected capacity change from 0 to 1024 [ 189.777300][T10356] EXT4-fs: Ignoring removed bh option [ 189.784942][T10356] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 189.801938][T10356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.814299][T10358] loop4: detected capacity change from 0 to 8192 [ 189.901922][T10369] __nla_validate_parse: 19 callbacks suppressed [ 189.901936][T10369] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2308'. [ 189.919175][T10369] netlink: 'syz.1.2308': attribute type 21 has an invalid length. [ 189.936666][T10369] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2308'. [ 189.945785][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2308'. [ 190.057584][T10372] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2311'. [ 190.486695][T10390] 9pnet_virtio: no channels available for device syz [ 190.517137][T10387] lo speed is unknown, defaulting to 1000 [ 190.571717][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.644227][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2320'. [ 190.716563][T10397] loop2: detected capacity change from 0 to 512 [ 190.726458][T10397] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.747664][T10397] EXT4-fs (loop2): failed to initialize system zone (-117) [ 190.755048][T10397] EXT4-fs (loop2): mount failed [ 191.111055][T10405] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2323'. [ 191.139650][T10405] netlink: 'syz.0.2323': attribute type 21 has an invalid length. [ 191.148460][T10405] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2323'. [ 191.157589][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 191.205807][T10410] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2324'. [ 191.281103][T10416] loop4: detected capacity change from 0 to 2048 [ 191.288415][T10416] EXT4-fs: Ignoring removed orlov option [ 191.298775][T10416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.314157][T10418] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 191.320791][T10418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.328369][T10418] vhci_hcd vhci_hcd.0: Device attached [ 191.334994][T10421] vhci_hcd: cannot find the pending unlink 2869 [ 191.341695][T10421] vhci_hcd: connection closed [ 191.342440][ T9191] vhci_hcd: stop threads [ 191.351453][ T9191] vhci_hcd: release socket [ 191.355910][ T9191] vhci_hcd: disconnect device [ 191.372341][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.427758][T10430] loop4: detected capacity change from 0 to 1024 [ 191.442479][T10430] loop4: detected capacity change from 0 to 1024 [ 191.453362][T10430] EXT4-fs: Ignoring removed bh option [ 191.467580][T10430] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 191.488915][T10430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.574232][T10438] lo speed is unknown, defaulting to 1000 [ 191.752769][T10438] 9pnet_virtio: no channels available for device syz [ 191.930762][T10445] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2336'. [ 191.972688][T10444] netlink: 'syz.3.2336': attribute type 21 has an invalid length. [ 192.286444][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.367725][T10471] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 192.374286][T10471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.381844][T10471] vhci_hcd vhci_hcd.0: Device attached [ 192.389499][T10472] vhci_hcd: cannot find the pending unlink 2869 [ 192.400132][T10472] vhci_hcd: connection closed [ 192.400264][ T51] vhci_hcd: stop threads [ 192.405045][T10474] loop2: detected capacity change from 0 to 512 [ 192.409316][ T51] vhci_hcd: release socket [ 192.420686][ T51] vhci_hcd: disconnect device [ 192.425853][T10474] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.440643][T10474] EXT4-fs (loop2): failed to initialize system zone (-117) [ 192.448047][T10474] EXT4-fs (loop2): mount failed [ 192.782686][T10479] netlink: 'syz.0.2349': attribute type 21 has an invalid length. [ 192.807517][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 192.807536][ T29] audit: type=1326 audit(2000000031.330:9857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 192.838909][ T29] audit: type=1326 audit(2000000031.330:9858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 192.843770][T10486] tipc: Started in network mode [ 192.862615][ T29] audit: type=1326 audit(2000000031.330:9859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 192.867562][T10486] tipc: Node identity baa87a410415, cluster identity 4711 [ 192.867623][T10486] tipc: Enabled bearer , priority 0 [ 192.873138][T10486] syzkaller0: entered promiscuous mode [ 192.891833][ T29] audit: type=1326 audit(2000000031.330:9860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 192.898892][T10486] syzkaller0: entered allmulticast mode [ 192.941280][ T29] audit: type=1326 audit(2000000031.330:9861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 192.965639][ T29] audit: type=1326 audit(2000000031.330:9862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 192.989915][ T29] audit: type=1326 audit(2000000031.330:9863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 193.013577][ T29] audit: type=1326 audit(2000000031.330:9864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 193.013612][ T29] audit: type=1326 audit(2000000031.330:9865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 193.013644][ T29] audit: type=1326 audit(2000000031.330:9866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10483 comm="syz.0.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 193.088109][T10490] tipc: Resetting bearer [ 193.104445][T10485] tipc: Resetting bearer [ 193.116123][T10485] tipc: Disabling bearer [ 193.137328][T10493] netlink: 'syz.1.2353': attribute type 10 has an invalid length. [ 193.165202][T10493] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 193.173163][T10497] loop4: detected capacity change from 0 to 2048 [ 193.182870][T10493] ipvlan2: entered promiscuous mode [ 193.190846][T10497] EXT4-fs: Ignoring removed orlov option [ 193.197894][T10493] bridge0: port 3(ipvlan2) entered blocking state [ 193.204381][T10493] bridge0: port 3(ipvlan2) entered disabled state [ 193.220570][T10493] ipvlan2: entered allmulticast mode [ 193.225938][T10493] bridge0: entered allmulticast mode [ 193.245592][T10502] loop3: detected capacity change from 0 to 1024 [ 193.255967][T10497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.285739][T10493] ipvlan2: left allmulticast mode [ 193.290877][T10493] bridge0: left allmulticast mode [ 193.304524][T10502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.357467][T10511] 9pnet_virtio: no channels available for device syz [ 193.385147][T10506] lo speed is unknown, defaulting to 1000 [ 193.393016][T10502] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2358: Allocating blocks 385-513 which overlap fs metadata [ 193.460879][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.501193][T10502] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2358: Allocating blocks 385-513 which overlap fs metadata [ 193.517727][T10502] EXT4-fs (loop3): pa ffff888107297f50: logic 16, phys. 129, len 24 [ 193.525885][T10502] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 193.598528][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.612450][T10519] loop4: detected capacity change from 0 to 8192 [ 193.619268][T10520] netlink: 'syz.1.2361': attribute type 21 has an invalid length. [ 193.693677][T10526] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 193.700277][T10526] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.707889][T10526] vhci_hcd vhci_hcd.0: Device attached [ 193.732789][T10527] vhci_hcd: cannot find the pending unlink 2869 [ 193.748300][T10527] vhci_hcd: connection closed [ 193.748580][ T51] vhci_hcd: stop threads [ 193.757601][ T51] vhci_hcd: release socket [ 193.762127][ T51] vhci_hcd: disconnect device [ 194.180131][T10552] loop2: detected capacity change from 0 to 8192 [ 194.232230][T10550] netlink: 'syz.0.2375': attribute type 21 has an invalid length. [ 194.452442][T10573] loop2: detected capacity change from 0 to 1024 [ 194.473637][T10574] loop4: detected capacity change from 0 to 512 [ 194.483829][T10573] loop2: detected capacity change from 0 to 1024 [ 194.491009][T10573] EXT4-fs: Ignoring removed bh option [ 194.498508][T10574] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 194.498693][T10573] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 194.524474][T10574] EXT4-fs (loop4): failed to initialize system zone (-117) [ 194.532043][T10574] EXT4-fs (loop4): mount failed [ 194.559621][T10573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.661964][T10580] netlink: 'syz.3.2383': attribute type 8 has an invalid length. [ 195.225107][T10586] loop4: detected capacity change from 0 to 2048 [ 195.235787][T10583] lo speed is unknown, defaulting to 1000 [ 195.244664][T10586] EXT4-fs: Ignoring removed orlov option [ 195.256059][T10585] 9pnet_virtio: no channels available for device syz [ 195.274116][T10586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.321767][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.355672][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.447296][T10591] loop2: detected capacity change from 0 to 8192 [ 195.454905][T10595] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 195.461441][T10595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.469053][T10595] vhci_hcd vhci_hcd.0: Device attached [ 195.480367][T10598] __nla_validate_parse: 20 callbacks suppressed [ 195.480383][T10598] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2388'. [ 195.498403][T10596] vhci_hcd: cannot find the pending unlink 2869 [ 195.537682][T10601] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2390'. [ 195.548560][T10596] vhci_hcd: connection closed [ 195.548856][ T9185] vhci_hcd: stop threads [ 195.557924][ T9185] vhci_hcd: release socket [ 195.562362][ T9185] vhci_hcd: disconnect device [ 195.567653][T10593] netlink: 'syz.4.2388': attribute type 21 has an invalid length. [ 195.577160][T10593] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2388'. [ 195.586220][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2388'. [ 195.657440][T10608] loop4: detected capacity change from 0 to 2048 [ 195.695010][T10608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 195.698986][T10616] loop2: detected capacity change from 0 to 512 [ 195.723448][T10608] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2392'. [ 195.735680][T10616] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 195.993954][T10608] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 196.010034][T10608] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 196.022542][T10608] EXT4-fs (loop4): This should not happen!! Data will be lost [ 196.022542][T10608] [ 196.032226][T10608] EXT4-fs (loop4): Total free blocks count 0 [ 196.038258][T10608] EXT4-fs (loop4): Free/Dirty block details [ 196.044175][T10608] EXT4-fs (loop4): free_blocks=2415919104 [ 196.049920][T10608] EXT4-fs (loop4): dirty_blocks=8208 [ 196.055214][T10608] EXT4-fs (loop4): Block reservation details [ 196.061245][T10608] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 196.117567][ T9194] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 196.147149][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2397'. [ 196.211082][T10623] loop3: detected capacity change from 0 to 1024 [ 196.255444][T10623] loop3: detected capacity change from 0 to 1024 [ 196.281687][T10623] EXT4-fs: Ignoring removed bh option [ 196.295447][T10623] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 196.328348][T10623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.486249][T10631] veth0: entered promiscuous mode [ 196.494055][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 196.561723][T10631] veth0 (unregistering): left promiscuous mode [ 196.586726][T10632] sd 0:0:1:0: device reset [ 196.623424][T10634] loop2: detected capacity change from 0 to 8192 [ 196.828347][T10638] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2403'. [ 196.863970][T10642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2404'. [ 196.869176][T10638] netlink: 'syz.4.2403': attribute type 21 has an invalid length. [ 196.883792][T10638] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2403'. [ 197.053577][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.081192][T10658] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 197.087775][T10658] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.095304][T10658] vhci_hcd vhci_hcd.0: Device attached [ 197.109217][T10660] 9pnet_virtio: no channels available for device syz [ 197.126058][T10659] vhci_hcd: cannot find the pending unlink 2869 [ 197.138008][T10659] vhci_hcd: connection closed [ 197.138345][ T9181] vhci_hcd: stop threads [ 197.147486][ T9181] vhci_hcd: release socket [ 197.151923][ T9181] vhci_hcd: disconnect device [ 197.164857][T10654] lo speed is unknown, defaulting to 1000 [ 197.217649][T10667] loop3: detected capacity change from 0 to 512 [ 197.228214][T10667] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 197.729657][T10671] loop2: detected capacity change from 0 to 8192 [ 197.877798][T10678] netlink: 'syz.4.2416': attribute type 21 has an invalid length. [ 197.991872][T10690] loop2: detected capacity change from 0 to 2048 [ 197.999732][T10690] EXT4-fs: Ignoring removed orlov option [ 198.038492][T10695] loop4: detected capacity change from 0 to 512 [ 198.055714][T10690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.077847][T10695] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.118945][T10695] EXT4-fs (loop4): failed to initialize system zone (-117) [ 198.136598][T10695] EXT4-fs (loop4): mount failed [ 198.181843][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.232469][T10706] loop3: detected capacity change from 0 to 1024 [ 198.266989][T10707] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 198.273547][T10707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.281919][T10707] vhci_hcd vhci_hcd.0: Device attached [ 198.302154][T10709] vhci_hcd: cannot find the pending unlink 2869 [ 198.303520][T10706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.324069][T10709] vhci_hcd: connection closed [ 198.324251][ T9194] vhci_hcd: stop threads [ 198.333276][ T9194] vhci_hcd: release socket [ 198.337892][ T9194] vhci_hcd: disconnect device [ 198.350222][T10706] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2425: Allocating blocks 385-513 which overlap fs metadata [ 198.385586][T10706] EXT4-fs (loop3): pa ffff888107297ee0: logic 16, phys. 129, len 24 [ 198.393706][T10706] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 198.455761][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.597187][T10721] lo speed is unknown, defaulting to 1000 [ 198.617033][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 198.617062][ T29] audit: type=1326 audit(2000000037.140:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.654546][ T29] audit: type=1326 audit(2000000037.140:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.678935][ T29] audit: type=1326 audit(2000000037.140:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.702614][ T29] audit: type=1326 audit(2000000037.140:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.727137][ T29] audit: type=1326 audit(2000000037.140:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.750839][ T29] audit: type=1326 audit(2000000037.140:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.775639][ T29] audit: type=1326 audit(2000000037.140:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.783723][T10729] netlink: 'syz.3.2430': attribute type 21 has an invalid length. [ 198.800069][ T29] audit: type=1326 audit(2000000037.140:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.831354][ T29] audit: type=1326 audit(2000000037.140:10107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.854959][ T29] audit: type=1326 audit(2000000037.140:10108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10720 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a2bbeba9 code=0x7ffc0000 [ 198.870865][T10730] 9pnet_virtio: no channels available for device syz [ 198.956086][T10735] loop3: detected capacity change from 0 to 512 [ 198.989692][T10735] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 199.098296][T10732] lo speed is unknown, defaulting to 1000 [ 199.192831][T10754] loop4: detected capacity change from 0 to 8192 [ 199.303269][T10761] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 199.309839][T10761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.317459][T10761] vhci_hcd vhci_hcd.0: Device attached [ 199.336730][T10762] vhci_hcd: cannot find the pending unlink 2869 [ 199.395436][T10762] vhci_hcd: connection closed [ 199.395575][ T51] vhci_hcd: stop threads [ 199.404612][ T51] vhci_hcd: release socket [ 199.409102][ T51] vhci_hcd: disconnect device [ 199.503118][T10768] netlink: 'syz.2.2444': attribute type 21 has an invalid length. [ 199.631615][T10773] 9pnet_virtio: no channels available for device syz [ 199.664614][T10772] lo speed is unknown, defaulting to 1000 [ 199.929647][T10780] loop4: detected capacity change from 0 to 1024 [ 199.969856][T10780] loop4: detected capacity change from 0 to 1024 [ 199.993626][T10780] EXT4-fs: Ignoring removed bh option [ 200.018131][T10780] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 200.051166][T10780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.435285][T10792] loop3: detected capacity change from 0 to 8192 [ 200.589730][T10798] __nla_validate_parse: 13 callbacks suppressed [ 200.589745][T10798] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2455'. [ 200.722460][T10798] netlink: 'syz.2.2455': attribute type 21 has an invalid length. [ 200.774808][T10808] loop3: detected capacity change from 0 to 512 [ 200.799951][T10798] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2455'. [ 200.809806][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'. [ 200.822861][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.844109][T10808] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 200.889326][T10810] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 200.895919][T10810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.903567][T10810] vhci_hcd vhci_hcd.0: Device attached [ 200.926452][T10811] vhci_hcd: cannot find the pending unlink 2869 [ 200.937237][T10811] vhci_hcd: connection closed [ 200.937578][ T9181] vhci_hcd: stop threads [ 200.947279][ T9181] vhci_hcd: release socket [ 200.951702][ T9181] vhci_hcd: disconnect device [ 200.961005][T10815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2459'. [ 201.050080][T10822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2462'. [ 201.066031][T10823] loop2: detected capacity change from 0 to 512 [ 201.086021][T10823] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.102722][T10823] EXT4-fs (loop2): failed to initialize system zone (-117) [ 201.117116][T10823] EXT4-fs (loop2): mount failed [ 201.323466][T10831] 9pnet_virtio: no channels available for device syz [ 201.395597][T10830] lo speed is unknown, defaulting to 1000 [ 201.678812][T10844] loop3: detected capacity change from 0 to 1024 [ 201.783357][T10844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.853085][T10844] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2470: Allocating blocks 385-513 which overlap fs metadata [ 201.886756][T10844] EXT4-fs (loop3): pa ffff888107297ee0: logic 16, phys. 129, len 24 [ 201.894991][T10844] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 201.917445][T10850] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2471'. [ 201.960345][T10850] netlink: 'syz.2.2471': attribute type 21 has an invalid length. [ 201.969502][T10850] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2471'. [ 201.978599][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 202.025259][T10854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2473'. [ 202.157052][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.243297][T10858] loop2: detected capacity change from 0 to 2048 [ 202.255812][T10861] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2472'. [ 202.266971][T10858] EXT4-fs: Ignoring removed orlov option [ 202.298231][T10858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.395782][T10869] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 202.402421][T10869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.409990][T10869] vhci_hcd vhci_hcd.0: Device attached [ 202.424095][T10871] vhci_hcd: cannot find the pending unlink 2869 [ 202.439659][T10871] vhci_hcd: connection closed [ 202.440158][ T9181] vhci_hcd: stop threads [ 202.449800][ T9181] vhci_hcd: release socket [ 202.454229][ T9181] vhci_hcd: disconnect device [ 202.460393][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.561158][T10893] loop2: detected capacity change from 0 to 512 [ 202.567852][T10881] netlink: 'syz.3.2484': attribute type 21 has an invalid length. [ 202.587496][T10893] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 202.606047][T10893] EXT4-fs (loop2): failed to initialize system zone (-117) [ 202.626641][T10893] EXT4-fs (loop2): mount failed [ 202.663072][T10895] lo speed is unknown, defaulting to 1000 [ 202.694464][T10899] 9pnet_virtio: no channels available for device syz [ 202.696577][T10901] tipc: Enabled bearer , priority 0 [ 202.713183][T10901] tipc: Disabling bearer [ 202.993489][T10909] loop4: detected capacity change from 0 to 8192 [ 203.046464][T10912] loop4: detected capacity change from 0 to 2048 [ 203.055864][T10912] EXT4-fs: Ignoring removed orlov option [ 203.078546][T10912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.149297][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.304413][T10922] loop4: detected capacity change from 0 to 8192 [ 203.382732][T10927] netlink: 'syz.1.2498': attribute type 21 has an invalid length. [ 203.501773][T10937] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 203.508364][T10937] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.516697][T10937] vhci_hcd vhci_hcd.0: Device attached [ 203.581262][T10938] vhci_hcd: connection closed [ 203.581575][ T51] vhci_hcd: stop threads [ 203.590649][ T51] vhci_hcd: release socket [ 203.595067][ T51] vhci_hcd: disconnect device [ 203.660956][T10946] loop3: detected capacity change from 0 to 2048 [ 203.694923][T10946] EXT4-fs: Ignoring removed orlov option [ 203.745279][T10946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.774788][T10932] lo speed is unknown, defaulting to 1000 [ 203.851478][T10950] loop4: detected capacity change from 0 to 8192 [ 203.881142][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.948545][T10960] loop2: detected capacity change from 0 to 1024 [ 203.968610][T10960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.000837][T10960] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 204.033394][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.058840][T10964] netlink: 'syz.4.2510': attribute type 21 has an invalid length. [ 204.144407][T10979] loop2: detected capacity change from 0 to 512 [ 204.157237][T10979] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 204.169870][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 204.169886][ T29] audit: type=1326 audit(2000000042.690:10391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.207246][T10979] EXT4-fs (loop2): failed to initialize system zone (-117) [ 204.213806][T10976] lo speed is unknown, defaulting to 1000 [ 204.219232][T10979] EXT4-fs (loop2): mount failed [ 204.220647][ T29] audit: type=1326 audit(2000000042.690:10392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.240864][T10980] 9pnet_virtio: no channels available for device syz [ 204.249465][ T29] audit: type=1326 audit(2000000042.690:10393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.279755][ T29] audit: type=1326 audit(2000000042.690:10394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.303371][ T29] audit: type=1326 audit(2000000042.690:10395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.327636][ T29] audit: type=1326 audit(2000000042.690:10396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.351292][ T29] audit: type=1326 audit(2000000042.700:10397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.375631][ T29] audit: type=1326 audit(2000000042.700:10398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.400124][ T29] audit: type=1326 audit(2000000042.700:10399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.423859][ T29] audit: type=1326 audit(2000000042.700:10400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10973 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 204.512161][T10989] loop4: detected capacity change from 0 to 2048 [ 204.543337][T10989] EXT4-fs: Ignoring removed orlov option [ 204.568266][T10989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.615833][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.689899][T10995] rdma_op ffff8881036a3d80 conn xmit_rdma 0000000000000000 [ 204.972668][T11011] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 204.979257][T11011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.987001][T11011] vhci_hcd vhci_hcd.0: Device attached [ 204.994884][T11012] vhci_hcd: cannot find the pending unlink 2869 [ 205.006695][T11012] vhci_hcd: connection closed [ 205.007289][ T9185] vhci_hcd: stop threads [ 205.016390][ T9185] vhci_hcd: release socket [ 205.020878][ T9185] vhci_hcd: disconnect device [ 205.057248][T11009] netlink: 'syz.2.2525': attribute type 21 has an invalid length. [ 205.174228][T11021] FAULT_INJECTION: forcing a failure. [ 205.174228][T11021] name failslab, interval 1, probability 0, space 0, times 0 [ 205.187076][T11021] CPU: 1 UID: 0 PID: 11021 Comm: syz.2.2528 Not tainted syzkaller #0 PREEMPT(voluntary) [ 205.187111][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.187128][T11021] Call Trace: [ 205.187136][T11021] [ 205.187144][T11021] __dump_stack+0x1d/0x30 [ 205.187166][T11021] dump_stack_lvl+0xe8/0x140 [ 205.187187][T11021] dump_stack+0x15/0x1b [ 205.187206][T11021] should_fail_ex+0x265/0x280 [ 205.187324][T11021] should_failslab+0x8c/0xb0 [ 205.187410][T11021] __kmalloc_node_noprof+0xa9/0x410 [ 205.187447][T11021] ? qdisc_alloc+0x65/0x440 [ 205.187472][T11021] qdisc_alloc+0x65/0x440 [ 205.187536][T11021] ? nla_strcmp+0xc3/0xe0 [ 205.187571][T11021] qdisc_create+0xf5/0x9e0 [ 205.187630][T11021] tc_modify_qdisc+0xf2e/0x1420 [ 205.187769][T11021] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 205.187814][T11021] rtnetlink_rcv_msg+0x65a/0x6d0 [ 205.187863][T11021] netlink_rcv_skb+0x120/0x220 [ 205.187906][T11021] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.187956][T11021] rtnetlink_rcv+0x1c/0x30 [ 205.187987][T11021] netlink_unicast+0x5c0/0x690 [ 205.188074][T11021] netlink_sendmsg+0x58b/0x6b0 [ 205.188109][T11021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.188136][T11021] __sock_sendmsg+0x142/0x180 [ 205.188243][T11021] ____sys_sendmsg+0x31e/0x4e0 [ 205.188283][T11021] ___sys_sendmsg+0x17b/0x1d0 [ 205.188346][T11021] __x64_sys_sendmsg+0xd4/0x160 [ 205.188402][T11021] x64_sys_call+0x191e/0x2ff0 [ 205.188434][T11021] do_syscall_64+0xd2/0x200 [ 205.188524][T11021] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 205.188551][T11021] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 205.188588][T11021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.188652][T11021] RIP: 0033:0x7f397c00eba9 [ 205.188672][T11021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.188757][T11021] RSP: 002b:00007f397aa6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.188776][T11021] RAX: ffffffffffffffda RBX: 00007f397c255fa0 RCX: 00007f397c00eba9 [ 205.188788][T11021] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 000000000000000b [ 205.188800][T11021] RBP: 00007f397aa6f090 R08: 0000000000000000 R09: 0000000000000000 [ 205.188812][T11021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.188823][T11021] R13: 00007f397c256038 R14: 00007f397c255fa0 R15: 00007ffc56911b68 [ 205.188846][T11021] [ 205.526600][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.542355][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.550397][T11029] loop2: detected capacity change from 0 to 512 [ 205.574678][T11029] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 205.644072][T11036] __nla_validate_parse: 24 callbacks suppressed [ 205.644086][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2535'. [ 205.814697][T11042] lo speed is unknown, defaulting to 1000 [ 205.840172][T11045] loop4: detected capacity change from 0 to 512 [ 205.844416][T11044] 9pnet_virtio: no channels available for device syz [ 205.854999][T11045] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.879344][T11045] EXT4-fs (loop4): failed to initialize system zone (-117) [ 205.908409][T11045] EXT4-fs (loop4): mount failed [ 206.083902][T11051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2539'. [ 206.130215][T11052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2538'. [ 206.154591][T11052] netlink: 'syz.0.2538': attribute type 21 has an invalid length. [ 206.162549][T11052] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2538'. [ 206.171723][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 206.388730][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2545'. [ 206.488302][T11074] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 206.494863][T11074] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 206.502448][T11074] vhci_hcd vhci_hcd.0: Device attached [ 206.508900][T11075] vhci_hcd: cannot find the pending unlink 2869 [ 206.519854][T11075] vhci_hcd: connection closed [ 206.519984][ T9181] vhci_hcd: stop threads [ 206.529082][ T9181] vhci_hcd: release socket [ 206.533561][ T9181] vhci_hcd: disconnect device [ 206.585640][T11078] loop4: detected capacity change from 0 to 1024 [ 206.623789][T11078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.646161][T11078] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2549: Allocating blocks 385-513 which overlap fs metadata [ 206.674464][T11077] EXT4-fs (loop4): pa ffff888107297ee0: logic 16, phys. 129, len 24 [ 206.682624][T11077] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 206.699974][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.771996][T11085] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2551'. [ 206.805662][T11085] netlink: 'syz.4.2551': attribute type 21 has an invalid length. [ 206.813605][T11085] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2551'. [ 206.822751][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 206.841033][T11090] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2552'. [ 206.879187][T11092] loop4: detected capacity change from 0 to 1024 [ 206.903671][T11092] loop4: detected capacity change from 0 to 1024 [ 206.911477][T11092] EXT4-fs: Ignoring removed bh option [ 206.923153][T11092] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 207.038647][T11092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.076716][T11098] loop2: detected capacity change from 0 to 512 [ 207.089677][T11098] ext4: Unknown parameter 'hash' [ 207.103101][T11102] loop3: detected capacity change from 0 to 512 [ 207.149688][T11102] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 207.250698][T11110] loop2: detected capacity change from 0 to 512 [ 207.263532][T11110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 207.275375][T11110] EXT4-fs (loop2): failed to initialize system zone (-117) [ 207.284283][T11110] EXT4-fs (loop2): mount failed [ 207.425913][T11118] 9pnet_virtio: no channels available for device syz [ 207.437228][T11114] lo speed is unknown, defaulting to 1000 [ 207.853497][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.982058][T11127] netlink: 'syz.4.2564': attribute type 21 has an invalid length. [ 208.054190][T11132] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 208.060754][T11132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.068443][T11132] vhci_hcd vhci_hcd.0: Device attached [ 208.074079][T11134] loop4: detected capacity change from 0 to 1024 [ 208.075365][T11135] vhci_hcd: cannot find the pending unlink 2869 [ 208.092838][T11135] vhci_hcd: connection closed [ 208.092957][ T51] vhci_hcd: stop threads [ 208.102130][ T51] vhci_hcd: release socket [ 208.107348][ T51] vhci_hcd: disconnect device [ 208.117108][T11134] loop4: detected capacity change from 0 to 1024 [ 208.133546][T11134] EXT4-fs: Ignoring removed bh option [ 208.139766][T11138] FAULT_INJECTION: forcing a failure. [ 208.139766][T11138] name failslab, interval 1, probability 0, space 0, times 0 [ 208.152434][T11138] CPU: 1 UID: 0 PID: 11138 Comm: syz.3.2568 Not tainted syzkaller #0 PREEMPT(voluntary) [ 208.152502][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.152514][T11138] Call Trace: [ 208.152522][T11138] [ 208.152530][T11138] __dump_stack+0x1d/0x30 [ 208.152556][T11138] dump_stack_lvl+0xe8/0x140 [ 208.152580][T11138] dump_stack+0x15/0x1b [ 208.152601][T11138] should_fail_ex+0x265/0x280 [ 208.152679][T11138] should_failslab+0x8c/0xb0 [ 208.152704][T11138] kmem_cache_alloc_node_noprof+0x57/0x320 [ 208.152740][T11138] ? __alloc_skb+0x101/0x320 [ 208.152797][T11138] __alloc_skb+0x101/0x320 [ 208.152826][T11138] netlink_alloc_large_skb+0xba/0xf0 [ 208.152907][T11138] netlink_sendmsg+0x3cf/0x6b0 [ 208.152937][T11138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.153020][T11138] __sock_sendmsg+0x142/0x180 [ 208.153062][T11138] ____sys_sendmsg+0x31e/0x4e0 [ 208.153172][T11138] ___sys_sendmsg+0x17b/0x1d0 [ 208.153219][T11138] __x64_sys_sendmsg+0xd4/0x160 [ 208.153277][T11138] x64_sys_call+0x191e/0x2ff0 [ 208.153298][T11138] do_syscall_64+0xd2/0x200 [ 208.153409][T11138] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.153519][T11138] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.153623][T11138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.153644][T11138] RIP: 0033:0x7fa9f135eba9 [ 208.153662][T11138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.153684][T11138] RSP: 002b:00007fa9efdbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.153706][T11138] RAX: ffffffffffffffda RBX: 00007fa9f15a5fa0 RCX: 00007fa9f135eba9 [ 208.153733][T11138] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 208.153748][T11138] RBP: 00007fa9efdbf090 R08: 0000000000000000 R09: 0000000000000000 [ 208.153778][T11138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.153789][T11138] R13: 00007fa9f15a6038 R14: 00007fa9f15a5fa0 R15: 00007ffcbe1f67c8 [ 208.153809][T11138] [ 208.358033][T11134] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 208.391121][T11134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.452037][T11142] SELinux: failed to load policy [ 208.457392][T11145] loop3: detected capacity change from 0 to 2048 [ 208.506853][T11145] EXT4-fs: Ignoring removed orlov option [ 208.524565][T11145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.703624][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.900992][T11161] lo speed is unknown, defaulting to 1000 [ 208.928322][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.938478][T11173] program syz.0.2579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.949864][T11170] loop2: detected capacity change from 0 to 512 [ 208.967192][T11170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.990140][T11170] EXT4-fs (loop2): 1 orphan inode deleted [ 208.996522][T11170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.009280][T11170] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.009802][ T9185] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 1 [ 209.515563][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 209.515581][ T29] audit: type=1400 audit(2000000048.030:11078): avc: denied { mount } for pid=11182 comm="syz.0.2582" name="/" dev="rpc_pipefs" ino=35629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 209.603198][ T29] audit: type=1400 audit(2000000048.120:11079): avc: denied { ioctl } for pid=11182 comm="syz.0.2582" path="socket:[35643]" dev="sockfs" ino=35643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.732506][ T29] audit: type=1400 audit(2000000048.250:11080): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 209.759518][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.780133][T11192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11192 comm=syz.0.2585 [ 209.795369][T11192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11192 comm=syz.0.2585 [ 209.840057][T11201] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 209.846686][T11201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.854319][T11201] vhci_hcd vhci_hcd.0: Device attached [ 209.879998][T11198] lo speed is unknown, defaulting to 1000 [ 209.917087][ T29] audit: type=1326 audit(2000000048.430:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 209.940881][ T29] audit: type=1326 audit(2000000048.430:11082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 209.964703][ T29] audit: type=1326 audit(2000000048.430:11083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 209.974904][T11209] 9pnet_virtio: no channels available for device syz [ 209.988246][ T29] audit: type=1326 audit(2000000048.430:11084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 209.988389][ T29] audit: type=1326 audit(2000000048.430:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 209.988420][ T29] audit: type=1326 audit(2000000048.430:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 209.988455][ T29] audit: type=1326 audit(2000000048.430:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.3.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f135eba9 code=0x7ffc0000 [ 209.990904][T11212] netlink: 'syz.4.2588': attribute type 21 has an invalid length. [ 210.096380][ T6570] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 210.117951][T11203] vhci_hcd: connection reset by peer [ 210.123829][ T51] vhci_hcd: stop threads [ 210.128237][ T51] vhci_hcd: release socket [ 210.132668][ T51] vhci_hcd: disconnect device [ 210.185362][T11216] loop4: detected capacity change from 0 to 2048 [ 210.202321][T11216] EXT4-fs: Ignoring removed orlov option [ 210.220597][T11216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.305221][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.342368][T11220] loop4: detected capacity change from 0 to 1024 [ 210.369946][T11220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.400228][T11220] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2590: Allocating blocks 385-513 which overlap fs metadata [ 210.429269][T11220] EXT4-fs (loop4): pa ffff888107297f50: logic 16, phys. 129, len 24 [ 210.437510][T11220] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 210.469136][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.490154][T11225] loop4: detected capacity change from 0 to 512 [ 210.515191][T11225] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 210.633961][T11232] program syz.3.2594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.767573][T11238] lo speed is unknown, defaulting to 1000 [ 211.034037][T11249] __nla_validate_parse: 10 callbacks suppressed [ 211.034054][T11249] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2600'. [ 211.050987][T11248] netlink: 'syz.1.2600': attribute type 21 has an invalid length. [ 211.058981][T11248] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2600'. [ 211.068065][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2600'. [ 211.275021][T11255] loop3: detected capacity change from 0 to 1024 [ 211.346878][T11255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.384064][T11255] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2603: Allocating blocks 385-513 which overlap fs metadata [ 211.408197][T11255] EXT4-fs (loop3): pa ffff888107184b60: logic 16, phys. 129, len 24 [ 211.416270][T11255] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 211.450161][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.484127][T11266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2606'. [ 211.498726][T11262] lo speed is unknown, defaulting to 1000 [ 211.510853][T11264] 9pnet_virtio: no channels available for device syz [ 211.527100][T11268] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 211.533738][T11268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.541362][T11268] vhci_hcd vhci_hcd.0: Device attached [ 211.611763][T11269] vhci_hcd: connection closed [ 211.612042][ T9185] vhci_hcd: stop threads [ 211.621250][ T9185] vhci_hcd: release socket [ 211.625668][ T9185] vhci_hcd: disconnect device [ 211.645971][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2612'. [ 211.697841][T11280] lo speed is unknown, defaulting to 1000 [ 211.769595][T11280] loop2: detected capacity change from 0 to 512 [ 211.777749][T11280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.787091][T11287] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2613'. [ 211.798687][T11280] EXT4-fs (loop2): 1 orphan inode deleted [ 211.804896][T11280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.817864][T11286] netlink: 'syz.3.2613': attribute type 21 has an invalid length. [ 211.817896][T11286] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2613'. [ 211.817940][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2613'. [ 211.843993][ T9185] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 1 [ 211.844146][T11280] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.887160][T11293] loop3: detected capacity change from 0 to 512 [ 211.898319][T11293] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 212.128271][T11297] program syz.0.2615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.207603][T11299] loop4: detected capacity change from 0 to 2048 [ 212.214344][T11299] EXT4-fs: Ignoring removed orlov option [ 212.229503][T11299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.265399][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.290272][T11303] loop4: detected capacity change from 0 to 1024 [ 212.306794][T11303] loop4: detected capacity change from 0 to 1024 [ 212.314100][T11303] EXT4-fs: Ignoring removed bh option [ 212.320233][T11303] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 212.338979][T11303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.516508][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.554511][T11310] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2619'. [ 212.826340][T11323] 9pnet_virtio: no channels available for device syz [ 213.019180][T11320] lo speed is unknown, defaulting to 1000 [ 213.170760][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.266199][T11334] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 213.272771][T11334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.280330][T11334] vhci_hcd vhci_hcd.0: Device attached [ 213.283319][T11337] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2625'. [ 213.286801][T11335] vhci_hcd: cannot find the pending unlink 2869 [ 213.308208][T11335] vhci_hcd: connection closed [ 213.308475][ T9185] vhci_hcd: stop threads [ 213.317587][ T9185] vhci_hcd: release socket [ 213.322032][ T9185] vhci_hcd: disconnect device [ 213.325884][T11337] netlink: 'syz.4.2625': attribute type 21 has an invalid length. [ 213.671998][T11353] program syz.1.2632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.684704][T11348] lo speed is unknown, defaulting to 1000 [ 213.744873][T11348] loop3: detected capacity change from 0 to 512 [ 213.756421][T11348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.771053][T11348] EXT4-fs (loop3): 1 orphan inode deleted [ 213.777450][T11348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.790293][T11348] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.790314][ T9191] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 213.831767][T11361] loop2: detected capacity change from 0 to 512 [ 213.844330][T11361] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 214.216285][T11367] loop4: detected capacity change from 0 to 1024 [ 214.243718][T11367] loop4: detected capacity change from 0 to 1024 [ 214.250835][T11367] EXT4-fs: Ignoring removed bh option [ 214.257167][T11367] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 214.277955][T11367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.349429][T11373] netlink: 'syz.1.2638': attribute type 21 has an invalid length. [ 214.510451][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.583573][T11381] loop3: detected capacity change from 0 to 2048 [ 214.626861][T11381] EXT4-fs: Ignoring removed orlov option [ 214.662444][T11381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.695656][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 214.695672][ T29] audit: type=1326 audit(2000000053.210:11331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 214.705589][T11383] lo speed is unknown, defaulting to 1000 [ 214.726534][ T29] audit: type=1326 audit(2000000053.210:11332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 214.755736][ T29] audit: type=1326 audit(2000000053.210:11333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 214.779390][ T29] audit: type=1326 audit(2000000053.210:11334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 214.803017][ T29] audit: type=1326 audit(2000000053.210:11335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 214.826644][ T29] audit: type=1326 audit(2000000053.210:11336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 214.850394][ T29] audit: type=1326 audit(2000000053.210:11337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 214.874001][ T29] audit: type=1326 audit(2000000053.210:11338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 214.919629][T11384] 9pnet_virtio: no channels available for device syz [ 214.931069][T11388] loop2: detected capacity change from 0 to 1024 [ 214.944415][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.954025][ T29] audit: type=1326 audit(2000000053.420:11339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 214.977873][ T29] audit: type=1326 audit(2000000053.420:11340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa91c90eba9 code=0x7ffc0000 [ 215.013686][T11388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.056539][T11388] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2642: Allocating blocks 385-513 which overlap fs metadata [ 215.073862][T11388] EXT4-fs (loop2): pa ffff888107297f50: logic 16, phys. 129, len 24 [ 215.078220][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.082835][T11388] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 215.092138][T11393] loop3: detected capacity change from 0 to 2048 [ 215.110638][T11393] EXT4-fs: Ignoring removed orlov option [ 215.166377][ T6570] usb 5-1: enqueue for inactive port 0 [ 215.177121][ T6570] usb 5-1: enqueue for inactive port 0 [ 215.182752][T11399] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 215.189281][T11399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.196926][T11399] vhci_hcd vhci_hcd.0: Device attached [ 215.206920][T11400] vhci_hcd: cannot find the pending unlink 2869 [ 215.229000][T11400] vhci_hcd: connection closed [ 215.234408][ T9185] vhci_hcd: stop threads [ 215.243499][ T9185] vhci_hcd: release socket [ 215.248663][ T9185] vhci_hcd: disconnect device [ 215.255524][T11405] program syz.1.2647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.268335][ T6570] vhci_hcd: vhci_device speed not set [ 215.484394][T11413] netlink: 'syz.3.2650': attribute type 21 has an invalid length. [ 215.494851][T11415] lo speed is unknown, defaulting to 1000 [ 215.530310][T11421] loop3: detected capacity change from 0 to 512 [ 215.548316][T11421] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 215.754922][T11425] loop2: detected capacity change from 0 to 2048 [ 215.761915][T11425] EXT4-fs: Ignoring removed orlov option [ 215.830605][T11431] loop2: detected capacity change from 0 to 1024 [ 216.366495][T11441] __nla_validate_parse: 11 callbacks suppressed [ 216.366576][T11441] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2658'. [ 216.625371][T11449] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 216.632064][T11449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.639628][T11449] vhci_hcd vhci_hcd.0: Device attached [ 216.666926][T11451] vhci_hcd: cannot find the pending unlink 2869 [ 216.681578][T11451] vhci_hcd: connection closed [ 216.681762][ T9185] vhci_hcd: stop threads [ 216.690895][ T9185] vhci_hcd: release socket [ 216.695326][ T9185] vhci_hcd: disconnect device [ 216.713998][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'. [ 216.724612][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'. [ 216.726597][T11456] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2664'. [ 216.734788][T11455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2665'. [ 216.759343][T11455] loop2: detected capacity change from 0 to 128 [ 216.787190][T11453] netlink: 'syz.3.2664': attribute type 21 has an invalid length. [ 216.795095][T11453] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2664'. [ 216.804842][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 216.908535][T11460] loop3: detected capacity change from 0 to 2048 [ 216.946667][T11460] EXT4-fs: Ignoring removed orlov option [ 217.186197][T11472] lo speed is unknown, defaulting to 1000 [ 217.267948][T11472] 9pnet_virtio: no channels available for device syz [ 217.385316][T11478] lo speed is unknown, defaulting to 1000 [ 217.635864][T11485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2671'. [ 217.730708][T11489] loop3: detected capacity change from 0 to 1024 [ 217.762959][T11489] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2673: Allocating blocks 385-513 which overlap fs metadata [ 217.782651][T11489] EXT4-fs (loop3): pa ffff888107297d90: logic 16, phys. 129, len 24 [ 217.790795][T11489] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 217.823491][T11498] loop4: detected capacity change from 0 to 1024 [ 217.852432][T11498] loop4: detected capacity change from 0 to 1024 [ 217.863087][T11498] EXT4-fs: Ignoring removed bh option [ 217.877901][T11498] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 217.928997][T11505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2677'. [ 217.959897][T11500] netlink: 'syz.3.2677': attribute type 21 has an invalid length. [ 217.970429][T11500] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2677'. [ 217.980598][T11502] loop2: detected capacity change from 0 to 2048 [ 217.988306][T11502] EXT4-fs: Ignoring removed orlov option [ 218.044429][T11512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 218.050988][T11512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.058687][T11512] vhci_hcd vhci_hcd.0: Device attached [ 218.068104][T11513] vhci_hcd: cannot find the pending unlink 2869 [ 218.080411][T11513] vhci_hcd: connection closed [ 218.081026][ T51] vhci_hcd: stop threads [ 218.091005][ T51] vhci_hcd: release socket [ 218.095497][ T51] vhci_hcd: disconnect device [ 218.310219][T11523] 9pnet_virtio: no channels available for device syz [ 218.343179][T11522] lo speed is unknown, defaulting to 1000 [ 218.701945][T11528] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 218.708601][T11528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.716331][T11528] vhci_hcd vhci_hcd.0: Device attached [ 218.731802][T11531] vhci_hcd: cannot find the pending unlink 2869 [ 218.738362][T11531] vhci_hcd: connection closed [ 218.738897][ T9181] vhci_hcd: stop threads [ 218.747909][ T9181] vhci_hcd: release socket [ 218.752416][ T9181] vhci_hcd: disconnect device [ 219.031664][T11535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.040664][T11535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.127513][T11535] lo speed is unknown, defaulting to 1000 [ 219.618052][T11555] netlink: 'syz.3.2690': attribute type 21 has an invalid length. [ 219.644507][T11558] loop2: detected capacity change from 0 to 2048 [ 219.666874][T11558] EXT4-fs: Ignoring removed orlov option [ 219.681967][T11560] loop3: detected capacity change from 0 to 512 [ 219.692577][T11560] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 219.883503][T11569] lo speed is unknown, defaulting to 1000 [ 219.964136][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 219.964265][ T29] audit: type=1326 audit(2000000058.480:11558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.001272][T11569] loop2: detected capacity change from 0 to 512 [ 220.010799][T11569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.023255][ T29] audit: type=1326 audit(2000000058.510:11559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.047911][ T29] audit: type=1326 audit(2000000058.510:11560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.071521][ T29] audit: type=1326 audit(2000000058.510:11561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.095769][ T29] audit: type=1326 audit(2000000058.520:11562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.120198][ T29] audit: type=1326 audit(2000000058.520:11563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.143785][ T29] audit: type=1326 audit(2000000058.520:11564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.168036][ T29] audit: type=1326 audit(2000000058.520:11565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.191671][ T29] audit: type=1326 audit(2000000058.520:11566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.215992][ T29] audit: type=1326 audit(2000000058.520:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.2.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f397c00eba9 code=0x7ffc0000 [ 220.248177][T11569] EXT4-fs (loop2): 1 orphan inode deleted [ 220.257904][T11569] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.292852][ T9185] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:11: Failed to release dquot type 1 [ 220.611230][T11578] lo speed is unknown, defaulting to 1000 [ 220.680726][T11579] 9pnet_virtio: no channels available for device syz [ 220.760151][ T3301] EXT4-fs unmount: 16 callbacks suppressed [ 220.760170][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.798465][T11587] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 220.805057][T11587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 220.812594][T11587] vhci_hcd vhci_hcd.0: Device attached [ 220.818849][T11588] vhci_hcd: cannot find the pending unlink 2869 [ 220.825190][T11588] vhci_hcd: connection closed [ 220.825543][ T5355] vhci_hcd: stop threads [ 220.834594][ T5355] vhci_hcd: release socket [ 220.839141][ T5355] vhci_hcd: disconnect device [ 221.325513][T11596] netlink: 'syz.1.2703': attribute type 21 has an invalid length. [ 221.385185][T11598] loop2: detected capacity change from 0 to 2048 [ 221.393096][T11598] EXT4-fs: Ignoring removed orlov option [ 221.418512][T11598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.454690][T11605] __nla_validate_parse: 9 callbacks suppressed [ 221.454705][T11605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2706'. [ 221.478436][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.506237][T11607] loop2: detected capacity change from 0 to 512 [ 221.522913][T11607] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 221.546238][T11609] loop3: detected capacity change from 0 to 1024 [ 221.568087][T11609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.604267][T11609] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2708: Allocating blocks 385-513 which overlap fs metadata [ 221.621709][T11609] EXT4-fs (loop3): pa ffff888107184af0: logic 16, phys. 129, len 24 [ 221.630570][T11609] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 221.662061][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.730196][T11618] lo speed is unknown, defaulting to 1000 [ 221.821697][T11618] loop3: detected capacity change from 0 to 512 [ 221.848574][T11618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.878285][T11624] program syz.4.2712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.896074][T11618] EXT4-fs (loop3): 1 orphan inode deleted [ 221.902921][T11618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.917054][T11618] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.937020][ T9194] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 1 [ 222.240859][T11630] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 222.247606][T11630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 222.255296][T11630] vhci_hcd vhci_hcd.0: Device attached [ 222.262767][T11631] vhci_hcd: cannot find the pending unlink 2869 [ 222.273625][T11631] vhci_hcd: connection closed [ 222.273827][ T51] vhci_hcd: stop threads [ 222.282991][ T51] vhci_hcd: release socket [ 222.287446][ T51] vhci_hcd: disconnect device [ 222.458228][T11636] lo speed is unknown, defaulting to 1000 [ 222.478174][T11642] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2717'. [ 222.506691][T11638] netlink: 'syz.0.2717': attribute type 21 has an invalid length. [ 222.519230][T11638] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2717'. [ 222.528447][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'. [ 222.539449][T11641] loop2: detected capacity change from 0 to 2048 [ 222.546237][T11641] EXT4-fs: Ignoring removed orlov option [ 222.558770][T11636] 9pnet_virtio: no channels available for device syz [ 222.580747][T11641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.611186][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.630918][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.647125][T11652] loop3: detected capacity change from 0 to 1024 [ 222.670458][T11652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.670534][T11654] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2721'. [ 222.703091][T11652] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2720: Allocating blocks 385-513 which overlap fs metadata [ 222.719041][T11652] EXT4-fs (loop3): pa ffff888107297c40: logic 16, phys. 129, len 24 [ 222.727956][T11652] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 222.758754][T11652] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 222.771738][T11652] EXT4-fs (loop3): This should not happen!! Data will be lost [ 222.771738][T11652] [ 222.781552][T11652] EXT4-fs (loop3): Total free blocks count 0 [ 222.787593][T11652] EXT4-fs (loop3): Free/Dirty block details [ 222.793567][T11652] EXT4-fs (loop3): free_blocks=128 [ 222.799456][T11652] EXT4-fs (loop3): dirty_blocks=0 [ 222.804508][T11652] EXT4-fs (loop3): Block reservation details [ 222.810651][T11652] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 222.901996][T11668] program syz.3.2726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.968337][T11673] loop2: detected capacity change from 0 to 1024 [ 222.982839][T11673] loop2: detected capacity change from 0 to 1024 [ 222.990990][T11673] EXT4-fs: Ignoring removed bh option [ 222.998433][T11673] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 223.018370][T11673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.432776][T11684] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2730'. [ 223.504958][T11681] netlink: 'syz.4.2730': attribute type 21 has an invalid length. [ 223.515770][T11687] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2732'. [ 223.522245][T11681] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2730'. [ 223.533972][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'. [ 223.662216][T11690] lo speed is unknown, defaulting to 1000 [ 223.703209][T11696] loop4: detected capacity change from 0 to 1024 [ 223.719494][T11694] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 223.726062][T11694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.734434][T11694] vhci_hcd vhci_hcd.0: Device attached [ 223.753860][T11696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.784980][T11697] vhci_hcd: connection closed [ 223.785272][ T51] vhci_hcd: stop threads [ 223.794301][ T51] vhci_hcd: release socket [ 223.798787][ T51] vhci_hcd: disconnect device [ 223.843026][T11696] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2736: Allocating blocks 385-513 which overlap fs metadata [ 223.863542][T11696] EXT4-fs (loop4): pa ffff888107297d90: logic 16, phys. 129, len 24 [ 223.871681][T11696] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 223.873882][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.883929][T11696] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 223.903902][T11696] EXT4-fs (loop4): This should not happen!! Data will be lost [ 223.903902][T11696] [ 223.913685][T11696] EXT4-fs (loop4): Total free blocks count 0 [ 223.919763][T11696] EXT4-fs (loop4): Free/Dirty block details [ 223.925704][T11696] EXT4-fs (loop4): free_blocks=128 [ 223.930968][T11696] EXT4-fs (loop4): dirty_blocks=0 [ 223.936151][T11696] EXT4-fs (loop4): Block reservation details [ 223.942303][T11696] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 224.077228][T11711] lo speed is unknown, defaulting to 1000 [ 224.132935][T11720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11720 comm=syz.0.2742 [ 224.134580][T11717] lo speed is unknown, defaulting to 1000 [ 224.147258][T11720] bridge0: port 3(syz_tun) entered blocking state [ 224.158497][T11720] bridge0: port 3(syz_tun) entered disabled state [ 224.165134][T11720] syz_tun: entered allmulticast mode [ 224.171029][T11720] syz_tun: entered promiscuous mode [ 224.176421][T11720] bridge0: port 3(syz_tun) entered blocking state [ 224.182965][T11720] bridge0: port 3(syz_tun) entered forwarding state [ 224.195209][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'. [ 224.409651][T11728] netlink: 'syz.3.2744': attribute type 21 has an invalid length. [ 224.477328][T11733] program syz.3.2746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.901145][T11748] loop2: detected capacity change from 0 to 1024 [ 224.939643][T11748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.955749][T11746] lo speed is unknown, defaulting to 1000 [ 224.965485][T11748] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2752: Allocating blocks 385-513 which overlap fs metadata [ 224.981227][T11748] EXT4-fs (loop2): pa ffff888107184b60: logic 16, phys. 129, len 24 [ 224.989961][T11748] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 225.007430][T11748] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 225.013391][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 225.013411][ T29] audit: type=1326 audit(2000000063.530:11771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.019775][T11748] EXT4-fs (loop2): This should not happen!! Data will be lost [ 225.019775][T11748] [ 225.027350][ T29] audit: type=1326 audit(2000000063.540:11772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.049571][T11748] EXT4-fs (loop2): Total free blocks count 0 [ 225.049592][T11748] EXT4-fs (loop2): Free/Dirty block details [ 225.049607][T11748] EXT4-fs (loop2): free_blocks=128 [ 225.049622][T11748] EXT4-fs (loop2): dirty_blocks=0 [ 225.049633][T11748] EXT4-fs (loop2): Block reservation details [ 225.049646][T11748] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 225.123786][T11752] loop4: detected capacity change from 0 to 512 [ 225.143859][ T29] audit: type=1326 audit(2000000063.570:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.168231][ T29] audit: type=1326 audit(2000000063.570:11774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.191915][ T29] audit: type=1326 audit(2000000063.640:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.216326][ T29] audit: type=1326 audit(2000000063.640:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.239938][ T29] audit: type=1326 audit(2000000063.640:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.264283][ T29] audit: type=1326 audit(2000000063.640:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.288687][ T29] audit: type=1326 audit(2000000063.640:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.312312][ T29] audit: type=1326 audit(2000000063.640:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11745 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59cf3eba9 code=0x7ffc0000 [ 225.317629][T11752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.352477][T11756] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 225.359029][T11756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.366596][T11756] vhci_hcd vhci_hcd.0: Device attached [ 225.384865][T11752] EXT4-fs (loop4): 1 orphan inode deleted [ 225.390822][T11757] vhci_hcd: cannot find the pending unlink 2869 [ 225.397626][T11752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.411099][T11752] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.416407][ T9181] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 1 [ 225.467898][T11757] vhci_hcd: connection closed [ 225.468030][ T51] vhci_hcd: stop threads [ 225.477265][ T51] vhci_hcd: release socket [ 225.481727][ T51] vhci_hcd: disconnect device [ 225.514480][T11765] netlink: 'syz.0.2756': attribute type 21 has an invalid length. [ 225.650435][T11769] loop2: detected capacity change from 0 to 2048 [ 225.664731][T11769] EXT4-fs: Ignoring removed orlov option [ 225.688403][T11769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.726647][T11777] lo speed is unknown, defaulting to 1000 [ 225.789914][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.828731][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.861305][T11792] program syz.4.2764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.882195][T11792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.893775][T11792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.934494][T11795] lo speed is unknown, defaulting to 1000 [ 226.012832][T11799] loop3: detected capacity change from 0 to 1024 [ 226.029989][T11799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.045576][T11799] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2767: Allocating blocks 385-513 which overlap fs metadata [ 226.064347][T11799] EXT4-fs (loop3): pa ffff888107297cb0: logic 16, phys. 129, len 24 [ 226.073234][T11799] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 226.085930][T11799] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 226.098958][T11799] EXT4-fs (loop3): This should not happen!! Data will be lost [ 226.098958][T11799] [ 226.108654][T11799] EXT4-fs (loop3): Total free blocks count 0 [ 226.114768][T11799] EXT4-fs (loop3): Free/Dirty block details [ 226.120752][T11799] EXT4-fs (loop3): free_blocks=128 [ 226.125913][T11799] EXT4-fs (loop3): dirty_blocks=0 [ 226.131701][T11799] EXT4-fs (loop3): Block reservation details [ 226.137806][T11799] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 226.270368][T11806] loop3: detected capacity change from 0 to 512 [ 226.282020][T11806] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 226.541494][T11811] __nla_validate_parse: 9 callbacks suppressed [ 226.541514][T11811] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2770'. [ 226.578519][T11811] netlink: 'syz.4.2770': attribute type 21 has an invalid length. [ 226.597748][T11811] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2770'. [ 226.606927][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2770'. [ 226.698078][T11817] loop4: detected capacity change from 0 to 2048 [ 226.706064][T11817] EXT4-fs: Ignoring removed orlov option [ 226.737077][T11820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2773'. [ 226.762840][T11817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.833403][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.862325][T11824] lo speed is unknown, defaulting to 1000 [ 226.993723][T11833] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 227.000322][T11833] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 227.007996][T11833] vhci_hcd vhci_hcd.0: Device attached [ 227.029171][T11835] vhci_hcd: cannot find the pending unlink 2869 [ 227.045771][T11835] vhci_hcd: connection closed [ 227.046111][ T51] vhci_hcd: stop threads [ 227.055125][ T51] vhci_hcd: release socket [ 227.059648][ T51] vhci_hcd: disconnect device [ 227.067562][T11830] lo speed is unknown, defaulting to 1000 [ 227.122259][T11841] loop3: detected capacity change from 0 to 1024 [ 227.139607][T11841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.149473][T11844] program syz.4.2781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.163493][T11841] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2780: Allocating blocks 385-513 which overlap fs metadata [ 227.165171][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.188204][T11841] EXT4-fs (loop3): pa ffff888107297d90: logic 16, phys. 129, len 24 [ 227.196237][T11841] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 227.206692][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.212875][T11841] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 4 with error 28 [ 227.227523][T11841] EXT4-fs (loop3): This should not happen!! Data will be lost [ 227.227523][T11841] [ 227.237245][T11841] EXT4-fs (loop3): Total free blocks count 0 [ 227.243250][T11841] EXT4-fs (loop3): Free/Dirty block details [ 227.249266][T11841] EXT4-fs (loop3): free_blocks=128 [ 227.254436][T11841] EXT4-fs (loop3): dirty_blocks=0 [ 227.260073][T11841] EXT4-fs (loop3): Block reservation details [ 227.266079][T11841] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 227.268424][T11848] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2782'. [ 227.292514][T11848] netlink: 'syz.1.2782': attribute type 21 has an invalid length. [ 227.301200][T11848] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2782'. [ 227.310398][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 227.419225][T11853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2784'. [ 227.463260][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2785'. [ 227.635968][T11861] loop2: detected capacity change from 0 to 1024 [ 227.859608][T11869] loop4: detected capacity change from 0 to 512 [ 227.883336][T11869] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 227.955738][T11873] lo speed is unknown, defaulting to 1000 [ 228.308646][T11881] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2794'. [ 228.364867][T11880] netlink: 'syz.3.2794': attribute type 21 has an invalid length. [ 228.424975][T11888] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 228.431544][T11888] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.439142][T11888] vhci_hcd vhci_hcd.0: Device attached [ 228.518082][T11889] vhci_hcd: connection closed [ 228.547207][ T5355] vhci_hcd: stop threads [ 228.556395][ T5355] vhci_hcd: release socket [ 228.560833][ T5355] vhci_hcd: disconnect device [ 228.760852][T11897] loop4: detected capacity change from 0 to 2048 [ 228.777681][T11897] EXT4-fs: Ignoring removed orlov option [ 228.816959][T11897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.839184][T11902] program syz.0.2800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.859949][T11895] lo speed is unknown, defaulting to 1000 [ 228.869072][T11902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.893696][T11902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.960756][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.567682][T11924] loop2: detected capacity change from 0 to 1024 [ 229.586943][T11924] loop2: detected capacity change from 0 to 1024 [ 229.587106][T11922] netlink: 'syz.1.2807': attribute type 21 has an invalid length. [ 229.593929][T11924] EXT4-fs: Ignoring removed bh option [ 229.610498][T11924] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 229.634529][T11924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.807523][T11924] ================================================================== [ 229.815675][T11924] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 229.823014][T11924] [ 229.825358][T11924] write to 0xffff8881073fce88 of 4 bytes by task 11931 on cpu 0: [ 229.833109][T11924] touch_atime+0x1e8/0x340 [ 229.837577][T11924] filemap_splice_read+0x6ba/0x740 [ 229.842718][T11924] ext4_file_splice_read+0x8f/0xb0 [ 229.847869][T11924] splice_direct_to_actor+0x26f/0x680 [ 229.853358][T11924] do_splice_direct+0xda/0x150 [ 229.858158][T11924] do_sendfile+0x380/0x650 [ 229.862657][T11924] __x64_sys_sendfile64+0x105/0x150 [ 229.867889][T11924] x64_sys_call+0x2bb0/0x2ff0 [ 229.872609][T11924] do_syscall_64+0xd2/0x200 [ 229.877154][T11924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.883065][T11924] [ 229.885403][T11924] read to 0xffff8881073fce88 of 4 bytes by task 11924 on cpu 1: [ 229.893088][T11924] atime_needs_update+0x25f/0x3e0 [ 229.898164][T11924] touch_atime+0x4a/0x340 [ 229.902527][T11924] filemap_splice_read+0x6ba/0x740 [ 229.907753][T11924] ext4_file_splice_read+0x8f/0xb0 [ 229.912909][T11924] splice_direct_to_actor+0x26f/0x680 [ 229.918323][T11924] do_splice_direct+0xda/0x150 [ 229.923119][T11924] do_sendfile+0x380/0x650 [ 229.927568][T11924] __x64_sys_sendfile64+0x105/0x150 [ 229.932874][T11924] x64_sys_call+0x2bb0/0x2ff0 [ 229.937579][T11924] do_syscall_64+0xd2/0x200 [ 229.942130][T11924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.948050][T11924] [ 229.950395][T11924] value changed: 0x1312d4f0 -> 0x13ab6b70 [ 229.956128][T11924] [ 229.958469][T11924] Reported by Kernel Concurrency Sanitizer on: [ 229.964628][T11924] CPU: 1 UID: 0 PID: 11924 Comm: syz.2.2808 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.974466][T11924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.984552][T11924] ================================================================== [ 230.416811][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.