last executing test programs: 2.309865066s ago: executing program 2 (id=532): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000008000000000fefe000000000000"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000f59000/0x4000)=nil, 0x4000, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fdatasync(r2) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000540)=""/248, &(0x7f0000000040)=0xf8) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) 2.112108628s ago: executing program 2 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfdef) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64b2, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@id={0x1e, 0x3, 0x199e118489294ff7, {0x4e20, 0x4}}, 0xfffffffffffffdb1) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x57) 2.111778979s ago: executing program 4 (id=538): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a756e636f6e66696e65645f657865636d656d5f657865635f873a73302073797374656d5f753a6f626a65637457723a64656661756c745f636f6e746578745f743a7330203030302030303030303030303030303031343935202f7573722f7362696e2f637570732d62726f7773ce15656400"], 0x82) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) close(r4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$eJzs3V1rHFUcB+D/2d2kL2lNKoLWXhgo2IKaNGlFEcEW650XvhS8KhiTtJRu29BEsLViC/Ub6AcQvBNEvCwiRb3x1jvBDyDFIm1uvFuZzUy6bXfTvGw6tfM8sM2cORnOmSy/npmzM7MBVNZo9k8tYndEzKWI4Y66RuSVo0u/d/vWpenFW5emU7Ra7/+TIuXrit9P+c+hfOOtEfH7zymerN/f7vyFi6enms3Z83l5fOHM3Pj8hYsvnTozdXL25OzZyYlXJl4+dHDy0IG+7OfOiPh17Gjj6ok393w//c2uz3/89lqKw7Ejr+/cj34ZjdHlv0mn7O/6ar8bK0k935/Otzg1SuwQa1K8fwMR8XQMRz3uvHnD8cW7pXYO2FStFNECKirJP1RUcRyQnf8Wr3KPSICH5eaRpQmA22lpbm9xOf+NpbnB2NqeG9i+mKJzWidFRD9m5rI25p5Pw9krNmkeDuju8pWIeKbb+J/a2Rxpz+Jn+a/dlf9aRLyT/8zWv7fO9kfvKcs/PDwbyf+HHfn/aJ3tyz8AAAAAAAD0z/UjEfFit8//asvX/0SX63+GIuJwH9p/8Od/tRt9aAbo4uaRiNcjorj2b7Ej/7mRel7a2b4eYCCdONWcPRART0TE/hjYkpUnVmhjdM9vAz3rOq7/y15Z+8W1gHk/bjS23L3NzNTC1Eb2GVhy80rEs41u+U/L43/qMv5nY//cKttoHX3jl151D84/sFlaX0fs6zr+33lyRVr5+Rzj7eOB8eKo4H6fHr/2Q6/25R/Kk43/21fO/0jqfF7P/Nrb+OzvPzeQ/+7H/4PpWPuRM4P5uk+mFhbOT0QMprfvXz+59j7D46jIQ5GXLP/793Y//1/p+H9bRFxeZZvHfnrraq864z+UJ8v/zJrG/7Uv7P3gq397tb+68f9Qe0zfn68x/wcrW21Ay+4nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwf1SJiR6Ta2PJyrTY2FjEUEU/F9lrz3PzCCyfOfXx2Jqtrf/9/rfim3+Glciq+/3+kozx5T/lgROyKiC/r29rlselzzZmydx4AAAAAAAAAAAAAAAAAAAAeEUM97v/P/FUvu3fApmuU3QGgNPIP1SX/UF3yD9Ul/1Bd8g/VJf9QXfIP1SX/UF311nfHy+4DAAAAAADQN7ueu/5HiojLr21rvzKDed1AqT0DNtvhsjsAlMYjfqC6XPoH1eUcH0gPqN+67i0BAAAAAAAAAAAAgH7Zt9v9/1BVtbI7AJSm9/3/ngwAjzv3/0N1OccH3P8PAAAAAAAAAAAAAI+++QsXT081m7Pn17uwZWObW7BQnYVIfUjcQ1oo+38mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg8F8AAAD//8rF+L8=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) tgkill(0x0, 0x0, 0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.256178481s ago: executing program 1 (id=547): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000015c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b8", 0x4a}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b", 0x16}, {&(0x7f00000014c0)}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982a", 0xa4}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.253755841s ago: executing program 3 (id=548): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000000)='./file0\x00', 0x0) 1.210616862s ago: executing program 2 (id=549): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9b, 0x0, @perf_config_ext={0x4, 0x9}, 0x1100, 0x2, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r2 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r4, 0x25, 0x0) perf_event_open(0x0, r2, 0x6, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4}, 0x18) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000180)={0x0}) 1.184537863s ago: executing program 1 (id=550): syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000020000", @ANYRES32, @ANYBLOB="0e00000000bd9b00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020600) fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 1.178299703s ago: executing program 3 (id=551): bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="040018"], 0x28}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffff9, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffb9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x1d, 0x1, {0x0, 0x0, 0x0, 0xffe, {@in6_addr=@ipv4={'\x00', '\xff\xff', @empty}, 0x86dd}}}]}, 0x38}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r6}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) 1.151028603s ago: executing program 2 (id=552): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x2, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000100"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f, 0x1}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 1.093735584s ago: executing program 1 (id=553): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000015c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e2", 0xd6}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea", 0xe3}], 0x5}}, {}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.049206304s ago: executing program 3 (id=556): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a2"], 0x10}}, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x410, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000580), &(0x7f00000006c0)=0x4) bind$can_raw(r0, &(0x7f0000000800), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) 1.017016775s ago: executing program 1 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 937.732426ms ago: executing program 0 (id=558): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc0000484) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) r1 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000140)=""/247) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000c80)=[@in6={0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x1c) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080), 0x0, 0x80000000, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 935.548566ms ago: executing program 1 (id=559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x2850, &(0x7f0000001200)={0x0, 0x7279, 0x20, 0x0, 0x4316}, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = gettid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r5, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r3, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x4008032, 0xffffffffffffffff, 0x8a031000) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000700)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) 904.853436ms ago: executing program 0 (id=560): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000015c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b8", 0x4a}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b", 0x16}, {&(0x7f00000014c0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aeaf75e9d1b381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678da2bbb2ecbf968e6be4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa4386890334ffff4a9f5f4f3005cd84", 0xd1}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a", 0x93}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 853.105617ms ago: executing program 0 (id=561): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000015c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b8", 0x4a}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b", 0x16}, {&(0x7f00000014c0)}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982a", 0xa4}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 818.075518ms ago: executing program 0 (id=562): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9b, 0x0, @perf_config_ext={0x4, 0x9}, 0x1100, 0x2, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r2 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r4, 0x25, 0x0) perf_event_open(0x0, r2, 0x6, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4}, 0x18) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000180)={0x0}) 745.768359ms ago: executing program 0 (id=563): syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000020000", @ANYRES32, @ANYBLOB="0e00000000bd9b00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020600) fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 745.389209ms ago: executing program 0 (id=564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x2, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000100"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0), 0x13f, 0x1}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 735.383279ms ago: executing program 3 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) umount2(0x0, 0x0) 665.7178ms ago: executing program 3 (id=566): bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="040018"], 0x28}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffff9, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffb9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x1d, 0x1, {0x0, 0x0, 0x0, 0xffe, {@in6_addr=@ipv4={'\x00', '\xff\xff', @empty}, 0x86dd}}}]}, 0x38}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r6}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r5, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) 573.210581ms ago: executing program 3 (id=567): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) creat(&(0x7f0000000000)='./file0\x00', 0x0) 350.164204ms ago: executing program 4 (id=568): syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000500000002000000020000", @ANYRES32, @ANYBLOB="0e00000000bd9b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020600) fgetxattr(r3, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x2, 0x0, 0xd6e}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 299.095695ms ago: executing program 4 (id=569): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000015c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e2", 0xd6}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f00000002c0)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea", 0xe3}], 0x5}}, {}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 278.610305ms ago: executing program 4 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, 0x0, 0x0) 259.995596ms ago: executing program 2 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e6400"], 0x44}}, 0x0) 259.732886ms ago: executing program 4 (id=572): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000015c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea827", 0x35}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b8", 0x4a}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b", 0x16}, {&(0x7f00000014c0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aeaf75e9d1b381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678da2bbb2ecbf968e6be4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa4386890334ffff4a9f5f4f3005cd84", 0xd1}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a", 0x93}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 218.441626ms ago: executing program 4 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfdef) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64b2, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@id={0x1e, 0x3, 0x199e118489294ff7, {0x4e20, 0x4}}, 0xfffffffffffffdb1) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x2}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000001070101"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000804) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) r10 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r12, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x1c}}, 0x0) r13 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3ed, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) setsockopt$inet_msfilter(r10, 0x0, 0x29, 0x0, 0x57) 179.923637ms ago: executing program 2 (id=574): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000001}, 0x18) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a756e636f6e66696e65645f657865636d656d5f657865635f873a73302073797374656d5f753a6f626a65637457723a64656661756c745f636f6e746578745f743a7330203030302030303030303030303030303031343935202f7573722f7362696e2f637570732d62726f7773ce15656400"], 0x82) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1c, 0x0, &(0x7f00000000c0)='GPL\x00', 0x7, 0xdb, &(0x7f0000000640)=""/219, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xed9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, r5, r5, r5], &(0x7f0000000540)=[{0x4, 0x1, 0x10, 0xa}, {0x5, 0x4, 0xe, 0xc}], 0x10, 0x780b, @void, @value}, 0x94) close(r6) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$eJzs3V1rHFUcB+D/2d2kL2lNKoLWXhgo2IKaNGlFEcEW650XvhS8KhiTtJRu29BEsLViC/Ub6AcQvBNEvCwiRb3x1jvBDyDFIm1uvFuZzUy6bXfTvGw6tfM8sM2cORnOmSy/npmzM7MBVNZo9k8tYndEzKWI4Y66RuSVo0u/d/vWpenFW5emU7Ra7/+TIuXrit9P+c+hfOOtEfH7zymerN/f7vyFi6enms3Z83l5fOHM3Pj8hYsvnTozdXL25OzZyYlXJl4+dHDy0IG+7OfOiPh17Gjj6ok393w//c2uz3/89lqKw7Ejr+/cj34ZjdHlv0mn7O/6ar8bK0k935/Otzg1SuwQa1K8fwMR8XQMRz3uvHnD8cW7pXYO2FStFNECKirJP1RUcRyQnf8Wr3KPSICH5eaRpQmA22lpbm9xOf+NpbnB2NqeG9i+mKJzWidFRD9m5rI25p5Pw9krNmkeDuju8pWIeKbb+J/a2Rxpz+Jn+a/dlf9aRLyT/8zWv7fO9kfvKcs/PDwbyf+HHfn/aJ3tyz8AAAAAAAD0z/UjEfFit8//asvX/0SX63+GIuJwH9p/8Od/tRt9aAbo4uaRiNcjorj2b7Ej/7mRel7a2b4eYCCdONWcPRART0TE/hjYkpUnVmhjdM9vAz3rOq7/y15Z+8W1gHk/bjS23L3NzNTC1Eb2GVhy80rEs41u+U/L43/qMv5nY//cKttoHX3jl151D84/sFlaX0fs6zr+33lyRVr5+Rzj7eOB8eKo4H6fHr/2Q6/25R/Kk43/21fO/0jqfF7P/Nrb+OzvPzeQ/+7H/4PpWPuRM4P5uk+mFhbOT0QMprfvXz+59j7D46jIQ5GXLP/793Y//1/p+H9bRFxeZZvHfnrraq864z+UJ8v/zJrG/7Uv7P3gq397tb+68f9Qe0zfn68x/wcrW21Ay+4nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwf1SJiR6Ta2PJyrTY2FjEUEU/F9lrz3PzCCyfOfXx2Jqtrf/9/rfim3+Glciq+/3+kozx5T/lgROyKiC/r29rlselzzZmydx4AAAAAAAAAAAAAAAAAAAAeEUM97v/P/FUvu3fApmuU3QGgNPIP1SX/UF3yD9Ul/1Bd8g/VJf9QXfIP1SX/UF311nfHy+4DAAAAAADQN7ueu/5HiojLr21rvzKDed1AqT0DNtvhsjsAlMYjfqC6XPoH1eUcH0gPqN+67i0BAAAAAAAAAAAAgH7Zt9v9/1BVtbI7AJSm9/3/ngwAjzv3/0N1OccH3P8PAAAAAAAAAAAAAI+++QsXT081m7Pn17uwZWObW7BQnYVIfUjcQ1oo+38mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg8F8AAAD//8rF+L8=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) tgkill(0x0, 0x0, 0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=575): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a2"], 0x10}}, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x410, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000580), &(0x7f00000006c0)=0x4) bind$can_raw(r0, &(0x7f0000000800), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) kernel console output (not intermixed with test programs): (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.089047][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.098885][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.109339][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.120963][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.128612][ T3319] veth1_macvtap: entered promiscuous mode [ 32.142244][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.152718][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.162631][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.173176][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.183028][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.193714][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.204442][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.213734][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.222501][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.231289][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.240078][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.265018][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.275541][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.285477][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.295949][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.305842][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.316335][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.326174][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.336726][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.362937][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.386234][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.396746][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.406649][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.417165][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.427017][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.437563][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.447450][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.457947][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.465997][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 32.466013][ T29] audit: type=1400 audit(1747182932.700:104): avc: denied { name_bind } for pid=3458 comm="syz.2.6" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.475661][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.495192][ T29] audit: type=1400 audit(1747182932.700:105): avc: denied { node_bind } for pid=3458 comm="syz.2.6" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.503738][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.533429][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.542260][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.551110][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.571611][ T29] audit: type=1400 audit(1747182932.890:106): avc: denied { validate_trans } for pid=3467 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.610507][ T29] audit: type=1400 audit(1747182932.930:107): avc: denied { create } for pid=3460 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.640542][ T29] audit: type=1400 audit(1747182932.930:108): avc: denied { setopt } for pid=3460 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.659874][ T29] audit: type=1400 audit(1747182932.930:109): avc: denied { write } for pid=3460 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.706106][ T3472] loop3: detected capacity change from 0 to 1024 [ 32.708973][ T29] audit: type=1400 audit(1747182932.980:110): avc: denied { read } for pid=3460 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.731438][ T29] audit: type=1400 audit(1747182933.020:111): avc: denied { create } for pid=3467 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.789927][ T3472] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 32.799110][ T3472] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 32.808546][ T3472] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.4: Failed to acquire dquot type 0 [ 32.837706][ T3472] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 32.866755][ T3472] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4: corrupted inode contents [ 32.883661][ T3472] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.4: mark_inode_dirty error [ 32.915122][ T3472] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4: corrupted inode contents [ 32.973949][ T3472] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.4: mark_inode_dirty error [ 33.023906][ T3472] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4: corrupted inode contents [ 33.062990][ T3472] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 33.092404][ T3472] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.4: corrupted inode contents [ 33.110826][ T3472] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.4: mark_inode_dirty error [ 33.128073][ T3472] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 33.139677][ T3472] EXT4-fs (loop3): 1 truncate cleaned up [ 33.152389][ T3472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.216448][ T3472] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 33.404953][ T3530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 33.418015][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 33.443659][ T3531] loop0: detected capacity change from 0 to 1024 [ 33.456399][ T3531] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.28: Failed to acquire dquot type 0 [ 33.469527][ T3531] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 33.490528][ T3531] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.28: corrupted inode contents [ 33.503601][ T3531] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.28: mark_inode_dirty error [ 33.515574][ T3531] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.28: corrupted inode contents [ 33.529231][ T3531] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.28: mark_inode_dirty error [ 33.542065][ T3531] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.28: corrupted inode contents [ 33.555212][ T3531] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 33.565603][ T3531] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.28: corrupted inode contents [ 33.578264][ T3531] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.28: mark_inode_dirty error [ 33.594694][ T3531] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 33.605090][ T3531] EXT4-fs (loop0): 1 truncate cleaned up [ 33.613983][ T3531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.635375][ T3531] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 33.679397][ T3530] syz.4.30 (3530) used greatest stack depth: 10272 bytes left [ 33.818034][ T3541] Zero length message leads to an empty skb [ 34.059372][ T3556] loop1: detected capacity change from 0 to 512 [ 34.073488][ T3556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.090385][ T3556] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.201700][ T3554] loop2: detected capacity change from 0 to 32768 [ 34.239225][ T3304] loop2: p1 p2 p3 < > [ 34.243586][ T3304] loop2: p1 size 242222080 extends beyond EOD, truncated [ 34.255670][ T3304] loop2: p2 start 4294967295 is beyond EOD, truncated [ 34.266819][ T3554] loop2: p1 p2 p3 < > [ 34.271247][ T3554] loop2: p1 size 242222080 extends beyond EOD, truncated [ 34.290194][ T3556] SELinux: failed to load policy [ 34.301756][ T3560] SELinux: Context Ü is not valid (left unmapped). [ 34.315446][ T3554] loop2: p2 start 4294967295 is beyond EOD, truncated [ 34.316451][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.427822][ T3566] loop2: detected capacity change from 0 to 1764 [ 34.469606][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.473689][ T3567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 34.490357][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 34.516611][ T3567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 34.520848][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.528102][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 34.572783][ T3567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3567 comm=syz.1.42 [ 34.695646][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 34.707172][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 34.767201][ T3582] mmap: syz.4.51 (3582) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.839042][ T3584] random: crng reseeded on system resumption [ 34.903075][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.909619][ T3582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.921148][ T3582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.006010][ T3580] loop2: detected capacity change from 0 to 2048 [ 35.016647][ T3580] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 35.026038][ T3596] loop3: detected capacity change from 0 to 1764 [ 35.191197][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.398574][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 35.410682][ T3627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 35.482700][ T3629] syz.4.69: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 35.497377][ T3629] CPU: 1 UID: 0 PID: 3629 Comm: syz.4.69 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 35.497408][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 35.497422][ T3629] Call Trace: [ 35.497429][ T3629] [ 35.497437][ T3629] __dump_stack+0x1d/0x30 [ 35.497459][ T3629] dump_stack_lvl+0xe8/0x140 [ 35.497529][ T3629] dump_stack+0x15/0x1b [ 35.497549][ T3629] warn_alloc+0x12b/0x1a0 [ 35.497578][ T3629] ? kmem_cache_free+0xdd/0x2f0 [ 35.497684][ T3629] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 35.497720][ T3629] ? slow_avc_audit+0x104/0x140 [ 35.497774][ T3629] ? should_fail_ex+0x30/0x280 [ 35.497814][ T3629] ? xskq_create+0x36/0xe0 [ 35.497854][ T3629] ? should_failslab+0x8c/0xb0 [ 35.497887][ T3629] vmalloc_user_noprof+0x59/0x70 [ 35.497990][ T3629] ? xskq_create+0x80/0xe0 [ 35.498031][ T3629] xskq_create+0x80/0xe0 [ 35.498063][ T3629] xsk_init_queue+0x95/0xf0 [ 35.498088][ T3629] xsk_setsockopt+0x35c/0x510 [ 35.498197][ T3629] ? __pfx_xsk_setsockopt+0x10/0x10 [ 35.498259][ T3629] __sys_setsockopt+0x181/0x200 [ 35.498359][ T3629] ? fpregs_restore_userregs+0xbb/0x190 [ 35.498389][ T3629] __x64_sys_setsockopt+0x64/0x80 [ 35.498485][ T3629] x64_sys_call+0x2bd5/0x2fb0 [ 35.498512][ T3629] do_syscall_64+0xd0/0x1a0 [ 35.498541][ T3629] ? clear_bhb_loop+0x40/0x90 [ 35.498567][ T3629] ? clear_bhb_loop+0x40/0x90 [ 35.498594][ T3629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.498627][ T3629] RIP: 0033:0x7fdb0daee969 [ 35.498653][ T3629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.498675][ T3629] RSP: 002b:00007fdb0c157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 35.498697][ T3629] RAX: ffffffffffffffda RBX: 00007fdb0dd15fa0 RCX: 00007fdb0daee969 [ 35.498710][ T3629] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 35.498724][ T3629] RBP: 00007fdb0db70ab1 R08: 0000000000000004 R09: 0000000000000000 [ 35.498738][ T3629] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.498753][ T3629] R13: 0000000000000000 R14: 00007fdb0dd15fa0 R15: 00007fff7fd4d888 [ 35.498830][ T3629] [ 35.717470][ T3629] Mem-Info: [ 35.721143][ T3629] active_anon:23468 inactive_anon:0 isolated_anon:0 [ 35.721143][ T3629] active_file:5832 inactive_file:2196 isolated_file:0 [ 35.721143][ T3629] unevictable:0 dirty:1424 writeback:0 [ 35.721143][ T3629] slab_reclaimable:2879 slab_unreclaimable:13338 [ 35.721143][ T3629] mapped:34241 shmem:4283 pagetables:1070 [ 35.721143][ T3629] sec_pagetables:0 bounce:0 [ 35.721143][ T3629] kernel_misc_reclaimable:0 [ 35.721143][ T3629] free:1890166 free_pcp:4820 free_cma:0 [ 35.766206][ T3629] Node 0 active_anon:93872kB inactive_anon:0kB active_file:23328kB inactive_file:8784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136964kB dirty:5696kB writeback:0kB shmem:17132kB writeback_tmp:0kB kernel_stack:2960kB pagetables:4280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 35.795424][ T3629] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 35.822531][ T3629] lowmem_reserve[]: 0 2884 7863 7863 [ 35.827942][ T3629] Node 0 DMA32 free:2950032kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953564kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 35.856448][ T3629] lowmem_reserve[]: 0 0 4978 4978 [ 35.861639][ T3629] Node 0 Normal free:4611976kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:82272kB inactive_anon:0kB active_file:23328kB inactive_file:8784kB unevictable:0kB writepending:5696kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:10396kB local_pcp:5700kB free_cma:0kB [ 35.892169][ T3629] lowmem_reserve[]: 0 0 0 0 [ 35.896963][ T3629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 35.909783][ T3629] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950032kB [ 35.926120][ T3629] Node 0 Normal: 32*4kB (ME) 18*8kB (M) 17*16kB (M) 19*32kB (UM) 14*64kB (UM) 21*128kB (UM) 15*256kB (UM) 14*512kB (UM) 10*1024kB (UME) 7*2048kB (UME) 1116*4096kB (M) = 4611456kB [ 35.944255][ T3629] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 35.953771][ T3629] 12307 total pagecache pages [ 35.958534][ T3629] 0 pages in swap cache [ 35.962800][ T3629] Free swap = 124996kB [ 35.967016][ T3629] Total swap = 124996kB [ 35.971205][ T3629] 2097051 pages RAM [ 35.975013][ T3629] 0 pages HighMem/MovableOnly [ 35.979716][ T3629] 80259 pages reserved [ 36.108312][ T3660] random: crng reseeded on system resumption [ 36.502613][ T3665] loop1: detected capacity change from 0 to 2048 [ 36.513258][ T3665] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 36.541460][ T3714] loop2: detected capacity change from 0 to 1024 [ 36.560005][ T3714] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.104: Failed to acquire dquot type 0 [ 36.588274][ T3714] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 36.689944][ T3714] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.104: corrupted inode contents [ 36.703589][ T3714] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.104: mark_inode_dirty error [ 36.737107][ T3714] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.104: corrupted inode contents [ 36.751357][ T3714] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.104: mark_inode_dirty error [ 36.764846][ T3714] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.104: corrupted inode contents [ 36.777963][ T3714] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 36.787925][ T3714] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.104: corrupted inode contents [ 36.801132][ T3714] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.104: mark_inode_dirty error [ 36.812392][ T3714] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 36.828871][ T3714] EXT4-fs (loop2): 1 truncate cleaned up [ 36.835030][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.852967][ T3714] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 36.995205][ T3727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 37.007270][ T3727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 37.087464][ T3731] loop4: detected capacity change from 0 to 1764 [ 37.205623][ T3745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3745 comm=syz.4.117 [ 37.381151][ T3764] loop4: detected capacity change from 0 to 1764 [ 37.387665][ T3765] loop3: detected capacity change from 0 to 1024 [ 37.424281][ T3765] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.122: Failed to acquire dquot type 0 [ 37.479478][ T3765] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 37.519195][ T3765] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.122: corrupted inode contents [ 37.585161][ T3765] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.122: mark_inode_dirty error [ 37.634376][ T3765] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.122: corrupted inode contents [ 37.667581][ T3755] loop0: detected capacity change from 0 to 2048 [ 37.678427][ T3755] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 37.685986][ T3765] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.122: mark_inode_dirty error [ 37.706862][ T3765] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.122: corrupted inode contents [ 37.720138][ T3765] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 37.762598][ T3765] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.122: corrupted inode contents [ 37.814627][ T3765] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.122: mark_inode_dirty error [ 37.834065][ T3765] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 37.850926][ T3765] EXT4-fs (loop3): 1 truncate cleaned up [ 37.857496][ T3765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.875336][ T3765] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 37.975395][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 37.975411][ T29] audit: type=1326 audit(1747182938.290:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.005769][ T29] audit: type=1326 audit(1747182938.290:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.063744][ T3792] loop1: detected capacity change from 0 to 1764 [ 38.108716][ T29] audit: type=1326 audit(1747182938.290:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.132234][ T29] audit: type=1326 audit(1747182938.290:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.155897][ T29] audit: type=1326 audit(1747182938.290:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.179234][ T29] audit: type=1326 audit(1747182938.290:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.202644][ T29] audit: type=1326 audit(1747182938.290:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.226049][ T29] audit: type=1326 audit(1747182938.300:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.249522][ T29] audit: type=1326 audit(1747182938.300:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.272797][ T29] audit: type=1326 audit(1747182938.300:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 38.317111][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.551588][ T3816] loop4: detected capacity change from 0 to 1764 [ 38.578778][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 38.592086][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 38.606140][ T3824] loop0: detected capacity change from 0 to 1024 [ 38.644084][ T3824] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.148: Failed to acquire dquot type 0 [ 38.662195][ T3824] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 38.677168][ T3824] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.148: corrupted inode contents [ 38.690660][ T3824] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.148: mark_inode_dirty error [ 38.736541][ T3824] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.148: corrupted inode contents [ 38.778494][ T3824] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.148: mark_inode_dirty error [ 38.801503][ T3824] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.148: corrupted inode contents [ 38.826169][ T3838] random: crng reseeded on system resumption [ 38.850026][ T3824] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 38.914529][ T3824] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.148: corrupted inode contents [ 38.926530][ T3824] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.148: mark_inode_dirty error [ 38.937846][ T3824] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 38.955397][ T3829] loop2: detected capacity change from 0 to 2048 [ 38.980924][ T3829] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 39.003072][ T3824] EXT4-fs (loop0): 1 truncate cleaned up [ 39.012278][ T3824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.027562][ T3824] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 39.488121][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.542260][ T3860] loop4: detected capacity change from 0 to 1764 [ 39.893470][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.930403][ T3875] loop4: detected capacity change from 0 to 2048 [ 39.938273][ T3875] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 39.978340][ T3887] loop0: detected capacity change from 0 to 1024 [ 40.049063][ T3887] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.170: Failed to acquire dquot type 0 [ 40.074294][ T3887] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 40.088992][ T3887] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.170: corrupted inode contents [ 40.101833][ T3887] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.170: mark_inode_dirty error [ 40.113485][ T3887] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.170: corrupted inode contents [ 40.118256][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 40.127046][ T3887] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.170: mark_inode_dirty error [ 40.146040][ T3887] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.170: corrupted inode contents [ 40.158868][ T3887] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 40.168927][ T3887] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.170: corrupted inode contents [ 40.215349][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 40.239545][ T3887] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.170: mark_inode_dirty error [ 40.254327][ T3887] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 40.263845][ T3887] EXT4-fs (loop0): 1 truncate cleaned up [ 40.283469][ T3887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.327445][ T3887] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 40.344371][ T3898] loop2: detected capacity change from 0 to 1764 [ 40.550259][ T3913] loop2: detected capacity change from 0 to 1024 [ 40.561014][ T3915] loop3: detected capacity change from 0 to 1024 [ 40.577442][ T3913] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.180: Failed to acquire dquot type 0 [ 40.587768][ T3915] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.182: Failed to acquire dquot type 0 [ 40.611295][ T3915] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 40.640485][ T3913] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 40.669107][ T3913] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.180: corrupted inode contents [ 40.689997][ T3915] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.182: corrupted inode contents [ 40.708848][ T3913] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.180: mark_inode_dirty error [ 40.710516][ T3915] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.182: mark_inode_dirty error [ 40.732470][ T3913] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.180: corrupted inode contents [ 40.734963][ T3912] loop4: detected capacity change from 0 to 32768 [ 40.752757][ T3913] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.180: mark_inode_dirty error [ 40.753450][ T3915] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.182: corrupted inode contents [ 40.778145][ T3913] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.180: corrupted inode contents [ 40.791436][ T3915] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.182: mark_inode_dirty error [ 40.803420][ T3304] loop4: p1 p2 p3 < > [ 40.807779][ T3304] loop4: p1 size 242222080 extends beyond EOD, truncated [ 40.815552][ T3915] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.182: corrupted inode contents [ 40.827820][ T3913] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 40.841337][ T3304] loop4: p2 start 4294967295 is beyond EOD, truncated [ 40.848765][ T3915] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 40.852106][ T3913] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.180: corrupted inode contents [ 40.875568][ T3913] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.180: mark_inode_dirty error [ 40.886634][ T3915] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.182: corrupted inode contents [ 40.908930][ T3912] loop4: p1 p2 p3 < > [ 40.913200][ T3912] loop4: p1 size 242222080 extends beyond EOD, truncated [ 40.924007][ T3912] loop4: p2 start 4294967295 is beyond EOD, truncated [ 40.933316][ T3913] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 40.941613][ T3915] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.182: mark_inode_dirty error [ 40.969354][ T3913] EXT4-fs (loop2): 1 truncate cleaned up [ 40.977276][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.993950][ T3915] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 40.996926][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 41.022369][ T3915] EXT4-fs (loop3): 1 truncate cleaned up [ 41.038788][ T3915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.064488][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 41.080300][ T3915] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 41.103748][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.103785][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.125244][ T3913] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 41.153640][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.172780][ T3819] udevd[3819]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.177258][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 41.453663][ T3955] loop4: detected capacity change from 0 to 1024 [ 41.473433][ T3955] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.198: Failed to acquire dquot type 0 [ 41.505682][ T3955] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 41.535367][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 41.541106][ T3955] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.198: corrupted inode contents [ 41.557948][ T3955] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.198: mark_inode_dirty error [ 41.561250][ T3960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 41.580255][ T3955] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.198: corrupted inode contents [ 41.610616][ T3955] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.198: mark_inode_dirty error [ 41.624103][ T3955] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.198: corrupted inode contents [ 41.636169][ T3955] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 41.646070][ T3955] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.198: corrupted inode contents [ 41.658355][ T3955] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.198: mark_inode_dirty error [ 41.670015][ T3955] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 41.680625][ T3955] EXT4-fs (loop4): 1 truncate cleaned up [ 41.694492][ T3955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.709444][ T3955] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 41.729063][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.760605][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.813305][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 41.927921][ T3978] loop4: detected capacity change from 0 to 1764 [ 42.009594][ T3984] syz_tun: entered allmulticast mode [ 42.021394][ T3984] netlink: 14 bytes leftover after parsing attributes in process `syz.4.210'. [ 42.035728][ T3984] syz_tun (unregistering): left allmulticast mode [ 42.099800][ T3988] loop0: detected capacity change from 0 to 1024 [ 42.109074][ T3988] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.213: Failed to acquire dquot type 0 [ 42.125815][ T3988] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.141173][ T3988] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.213: corrupted inode contents [ 42.153314][ T3988] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.213: mark_inode_dirty error [ 42.166480][ T3988] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.213: corrupted inode contents [ 42.189059][ T3988] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.213: mark_inode_dirty error [ 42.210806][ T3988] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.213: corrupted inode contents [ 42.224344][ T3988] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 42.237581][ T3988] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.213: corrupted inode contents [ 42.250841][ T3988] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.213: mark_inode_dirty error [ 42.267914][ T3988] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 42.287287][ T3988] EXT4-fs (loop0): 1 truncate cleaned up [ 42.293562][ T3988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.317111][ T3988] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 42.337221][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.411292][ T4012] loop3: detected capacity change from 0 to 1764 [ 42.444975][ T4015] syz_tun: entered allmulticast mode [ 42.455824][ T4015] syz_tun (unregistering): left allmulticast mode [ 42.548045][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.611647][ T4025] bond1: entered promiscuous mode [ 42.616760][ T4025] bond1: entered allmulticast mode [ 42.623217][ T4025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.634037][ T4025] bond1 (unregistering): Released all slaves [ 42.657452][ T4032] loop2: detected capacity change from 0 to 1024 [ 42.664239][ T4032] ======================================================= [ 42.664239][ T4032] WARNING: The mand mount option has been deprecated and [ 42.664239][ T4032] and is ignored by this kernel. Remove the mand [ 42.664239][ T4032] option from the mount to silence this warning. [ 42.664239][ T4032] ======================================================= [ 42.699399][ T4032] EXT4-fs: inline encryption not supported [ 42.705309][ T4032] EXT4-fs: Ignoring removed i_version option [ 42.714771][ T4031] loop1: detected capacity change from 0 to 1024 [ 42.729358][ T4032] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.752904][ T4032] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.228: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.773815][ T4032] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.228: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.788569][ T4032] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.228: Failed to acquire dquot type 0 [ 42.801046][ T4031] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.231: Failed to acquire dquot type 0 [ 42.812467][ T4032] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 42.823432][ T4032] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.228: mark_inode_dirty error [ 42.834914][ T4031] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.835124][ T4032] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 42.850980][ T4031] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.231: corrupted inode contents [ 42.860069][ T4032] EXT4-fs (loop2): 1 orphan inode deleted [ 42.872212][ T4031] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.231: mark_inode_dirty error [ 42.877863][ T4032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.888650][ T3399] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.902079][ T4031] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.231: corrupted inode contents [ 42.914783][ T3399] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 42.931317][ T4031] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.231: mark_inode_dirty error [ 42.959249][ T4031] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.231: corrupted inode contents [ 42.984873][ T4031] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 43.011965][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 43.011980][ T29] audit: type=1326 audit(1747182943.330:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6452e969 code=0x7ffc0000 [ 43.041871][ T29] audit: type=1326 audit(1747182943.330:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6452e969 code=0x7ffc0000 [ 43.065380][ T29] audit: type=1326 audit(1747182943.330:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b6452e969 code=0x7ffc0000 [ 43.078731][ T4031] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.231: corrupted inode contents [ 43.088708][ T29] audit: type=1326 audit(1747182943.330:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6452e969 code=0x7ffc0000 [ 43.123864][ T29] audit: type=1326 audit(1747182943.330:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6452e969 code=0x7ffc0000 [ 43.147290][ T29] audit: type=1326 audit(1747182943.330:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b6452e969 code=0x7ffc0000 [ 43.147495][ T332] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm kworker/u8:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.170564][ T29] audit: type=1326 audit(1747182943.330:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6452e969 code=0x7ffc0000 [ 43.208171][ T29] audit: type=1326 audit(1747182943.330:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4042 comm="syz.3.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b6452e969 code=0x7ffc0000 [ 43.208823][ T332] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 43.239641][ T332] EXT4-fs error (device loop2): ext4_write_dquot:6915: comm kworker/u8:5: Failed to commit dquot type 0 [ 43.254924][ T4031] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.231: mark_inode_dirty error [ 43.256373][ T332] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 43.280401][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.291098][ T3313] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 43.304003][ T4031] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 43.306144][ T3313] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 43.323596][ T3313] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 43.336340][ T4031] EXT4-fs (loop1): 1 truncate cleaned up [ 43.342813][ T4031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.405307][ T4031] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 43.431074][ T4054] loop3: detected capacity change from 0 to 1024 [ 43.450967][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.461973][ T4054] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.239: Failed to acquire dquot type 0 [ 43.484105][ T4054] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 43.509393][ T4054] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.239: corrupted inode contents [ 43.524100][ T4054] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.239: mark_inode_dirty error [ 43.545524][ T4054] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.239: corrupted inode contents [ 43.576553][ T4054] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.239: mark_inode_dirty error [ 43.614245][ T4065] __nla_validate_parse: 8 callbacks suppressed [ 43.614259][ T4065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 43.633931][ T4065] loop1: detected capacity change from 0 to 512 [ 43.639028][ T4054] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.239: corrupted inode contents [ 43.640743][ T4065] EXT4-fs: Ignoring removed nobh option [ 43.675163][ T4054] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 43.684157][ T4065] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.698120][ T4054] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.239: corrupted inode contents [ 43.717193][ T4054] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.239: mark_inode_dirty error [ 43.730299][ T4065] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.242: corrupted inode contents [ 43.734173][ T4054] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 43.753051][ T4065] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #3: comm syz.1.242: mark_inode_dirty error [ 43.766461][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 43.775321][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 43.788807][ T4065] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #3: comm syz.1.242: corrupted inode contents [ 43.801952][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 43.811627][ T4054] EXT4-fs (loop3): 1 truncate cleaned up [ 43.817935][ T4054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.833168][ T4065] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.242: mark_inode_dirty error [ 43.844994][ T4065] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.242: Failed to acquire dquot type 0 [ 43.864162][ T4071] loop2: detected capacity change from 0 to 512 [ 43.870723][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 43.879719][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 43.893193][ T4065] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.242: corrupted inode contents [ 43.905460][ T4054] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 43.915168][ T4065] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #16: comm syz.1.242: mark_inode_dirty error [ 43.927273][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 43.948858][ T4071] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.959136][ T4065] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.242: corrupted inode contents [ 43.978506][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 43.986503][ T4065] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.242: mark_inode_dirty error [ 43.987393][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 44.008393][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 44.010498][ T4071] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.020899][ T4065] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.242: corrupted inode contents [ 44.032173][ T4071] EXT4-fs (loop2): 1 truncate cleaned up [ 44.048263][ T4071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.048856][ T4065] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 44.071528][ T4065] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.242: corrupted inode contents [ 44.096829][ T4065] EXT4-fs error (device loop1): ext4_truncate:4255: inode #16: comm syz.1.242: mark_inode_dirty error [ 44.119041][ T4065] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 44.128662][ T4065] EXT4-fs (loop1): 1 truncate cleaned up [ 44.136494][ T4065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.156296][ T4065] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.183399][ T4065] openvswitch: netlink: Message has 6 unknown bytes. [ 44.203933][ T4065] syz.1.242 (4065) used greatest stack depth: 9840 bytes left [ 44.212851][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.258590][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.327902][ T4079] bond1: entered promiscuous mode [ 44.333082][ T4079] bond1: entered allmulticast mode [ 44.348976][ T4079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.361485][ T4079] bond1 (unregistering): Released all slaves [ 44.477856][ T4093] loop4: detected capacity change from 0 to 1024 [ 44.506123][ T4093] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.251: Failed to acquire dquot type 0 [ 44.524336][ T4093] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 44.574728][ T4093] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.251: corrupted inode contents [ 44.586992][ T4093] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.251: mark_inode_dirty error [ 44.600000][ T4093] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.251: corrupted inode contents [ 44.612679][ T4093] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.251: mark_inode_dirty error [ 44.625672][ T4093] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.251: corrupted inode contents [ 44.637860][ T4093] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 44.647870][ T4093] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.251: corrupted inode contents [ 44.661996][ T4093] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.251: mark_inode_dirty error [ 44.673553][ T4093] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 44.685482][ T4093] EXT4-fs (loop4): 1 truncate cleaned up [ 44.692013][ T4093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.707481][ T4093] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 45.036446][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.081923][ T4098] loop3: detected capacity change from 0 to 1024 [ 45.093601][ T4098] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.253: Failed to acquire dquot type 0 [ 45.117483][ T4098] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 45.135279][ T4098] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.253: corrupted inode contents [ 45.148030][ T4098] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.253: mark_inode_dirty error [ 45.160987][ T4098] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.253: corrupted inode contents [ 45.173231][ T4098] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.253: mark_inode_dirty error [ 45.189181][ T4098] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.253: corrupted inode contents [ 45.202621][ T4098] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 45.212285][ T4098] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.253: corrupted inode contents [ 45.225695][ T4098] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.253: mark_inode_dirty error [ 45.237108][ T4098] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 45.248800][ T4098] EXT4-fs (loop3): 1 truncate cleaned up [ 45.255134][ T4098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.278113][ T4098] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 45.302224][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.495339][ T4125] loop3: detected capacity change from 0 to 1024 [ 45.523231][ T4125] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.263: Failed to acquire dquot type 0 [ 45.535966][ T4125] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 45.551796][ T4125] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.263: corrupted inode contents [ 45.563969][ T4125] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.263: mark_inode_dirty error [ 45.576533][ T4125] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.263: corrupted inode contents [ 45.590135][ T4125] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.263: mark_inode_dirty error [ 45.601690][ T4125] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.263: corrupted inode contents [ 45.615197][ T4125] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 45.623968][ T4125] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.263: corrupted inode contents [ 45.637582][ T4125] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.263: mark_inode_dirty error [ 45.649078][ T4125] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 45.658354][ T4125] EXT4-fs (loop3): 1 truncate cleaned up [ 45.665315][ T4125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.682807][ T4125] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 45.764197][ T4124] loop2: detected capacity change from 0 to 2048 [ 45.772756][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.783533][ T4124] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 46.334754][ T4143] loop0: detected capacity change from 0 to 1764 [ 46.508112][ T4156] loop2: detected capacity change from 0 to 1024 [ 46.529999][ T4156] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.274: Failed to acquire dquot type 0 [ 46.543307][ T4156] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 46.560007][ T4156] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.274: corrupted inode contents [ 46.572495][ T4156] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.274: mark_inode_dirty error [ 46.585614][ T4156] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.274: corrupted inode contents [ 46.598376][ T4156] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.274: mark_inode_dirty error [ 46.613381][ T4156] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.274: corrupted inode contents [ 46.663851][ T4156] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 46.682349][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.793318][ T4156] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.274: corrupted inode contents [ 46.875008][ T4156] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.274: mark_inode_dirty error [ 46.927671][ T4156] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 46.978509][ T4156] EXT4-fs (loop2): 1 truncate cleaned up [ 47.020596][ T4156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.223115][ T4156] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 47.344936][ T4167] loop4: detected capacity change from 0 to 2048 [ 47.362238][ T4167] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 47.733806][ T4201] loop3: detected capacity change from 0 to 1024 [ 47.756685][ T4201] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.285: Failed to acquire dquot type 0 [ 47.783365][ T4201] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 47.825499][ T4201] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.285: corrupted inode contents [ 47.840514][ T4201] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.285: mark_inode_dirty error [ 47.869912][ T4201] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.285: corrupted inode contents [ 47.894351][ T4201] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.285: mark_inode_dirty error [ 47.915159][ T4201] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.285: corrupted inode contents [ 47.928213][ T4201] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 47.948619][ T4201] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.285: corrupted inode contents [ 47.962848][ T4201] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.285: mark_inode_dirty error [ 47.975583][ T4201] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 47.985971][ T4201] EXT4-fs (loop3): 1 truncate cleaned up [ 47.992383][ T4201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.007608][ T4201] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 48.085233][ T4219] loop4: detected capacity change from 0 to 1024 [ 48.094649][ T4219] __quota_error: 90 callbacks suppressed [ 48.094700][ T4219] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 48.109651][ T4219] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 48.119240][ T4219] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.293: Failed to acquire dquot type 0 [ 48.132630][ T4219] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 48.147819][ T4219] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.293: corrupted inode contents [ 48.161833][ T4219] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.293: mark_inode_dirty error [ 48.173571][ T4219] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.293: corrupted inode contents [ 48.187260][ T4219] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.293: mark_inode_dirty error [ 48.200271][ T4219] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.293: corrupted inode contents [ 48.212592][ T4219] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 48.223112][ T4219] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.293: corrupted inode contents [ 48.235409][ T4219] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.293: mark_inode_dirty error [ 48.247912][ T4219] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 48.257655][ T4219] EXT4-fs (loop4): 1 truncate cleaned up [ 48.264869][ T4219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.281893][ T4219] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 48.324766][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.347812][ T29] audit: type=1326 audit(1747182948.660:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0daee969 code=0x7ffc0000 [ 48.371127][ T29] audit: type=1326 audit(1747182948.660:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0daee969 code=0x7ffc0000 [ 48.394446][ T29] audit: type=1326 audit(1747182948.660:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0daee969 code=0x7ffc0000 [ 48.417789][ T29] audit: type=1326 audit(1747182948.660:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0daee969 code=0x7ffc0000 [ 48.441126][ T29] audit: type=1326 audit(1747182948.660:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0daee969 code=0x7ffc0000 [ 48.464482][ T29] audit: type=1326 audit(1747182948.660:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0daee969 code=0x7ffc0000 [ 48.487807][ T29] audit: type=1326 audit(1747182948.660:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0daee969 code=0x7ffc0000 [ 48.511208][ T29] audit: type=1326 audit(1747182948.660:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4223 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0daee969 code=0x7ffc0000 [ 48.546843][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.677944][ T4237] random: crng reseeded on system resumption [ 48.766681][ T4244] __nla_validate_parse: 23 callbacks suppressed [ 48.766701][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 48.815055][ T4244] loop0: detected capacity change from 0 to 512 [ 48.829080][ T4244] EXT4-fs: Ignoring removed nobh option [ 48.846471][ T4244] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.302: corrupted inode contents [ 48.876091][ T4244] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #3: comm syz.0.302: mark_inode_dirty error [ 48.889231][ T4244] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #3: comm syz.0.302: corrupted inode contents [ 48.903704][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 48.912634][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 48.923938][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 48.935323][ T4238] loop4: detected capacity change from 0 to 2048 [ 48.942434][ T4244] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.302: mark_inode_dirty error [ 48.942942][ T4238] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 48.964895][ T4253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'. [ 48.978913][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 48.987823][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 49.009287][ T4244] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.302: Failed to acquire dquot type 0 [ 49.023582][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 49.039027][ T4244] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.302: corrupted inode contents [ 49.051144][ T4244] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #16: comm syz.0.302: mark_inode_dirty error [ 49.063055][ T4244] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.302: corrupted inode contents [ 49.081743][ T4244] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.302: mark_inode_dirty error [ 49.086885][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 49.101847][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 49.102724][ T4244] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.302: corrupted inode contents [ 49.122715][ T4244] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 49.131417][ T4244] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #16: comm syz.0.302: corrupted inode contents [ 49.143693][ T4244] EXT4-fs error (device loop0): ext4_truncate:4255: inode #16: comm syz.0.302: mark_inode_dirty error [ 49.162694][ T4244] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 49.172271][ T4244] EXT4-fs (loop0): 1 truncate cleaned up [ 49.178419][ T4244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.191636][ T4244] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.205954][ T4244] openvswitch: netlink: Message has 6 unknown bytes. [ 49.224282][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.322078][ T4261] loop2: detected capacity change from 0 to 32768 [ 49.363610][ T4266] loop0: detected capacity change from 0 to 1024 [ 49.373930][ T4266] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.308: Failed to acquire dquot type 0 [ 49.378877][ T4261] loop2: p1 p2 p3 < > [ 49.392689][ T4266] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 49.411460][ T4266] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.308: corrupted inode contents [ 49.426882][ T4266] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.308: mark_inode_dirty error [ 49.429582][ T4261] loop2: p1 size 242222080 extends beyond EOD, truncated [ 49.446507][ T4266] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.308: corrupted inode contents [ 49.466952][ T4266] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.308: mark_inode_dirty error [ 49.480133][ T4261] loop2: p2 start 4294967295 is beyond EOD, truncated [ 49.496432][ T4266] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.308: corrupted inode contents [ 49.521073][ T4266] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 49.539055][ T4266] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.308: corrupted inode contents [ 49.574013][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.588892][ T4266] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.308: mark_inode_dirty error [ 49.616287][ T4266] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 49.664454][ T4266] EXT4-fs (loop0): 1 truncate cleaned up [ 49.673927][ T4266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.713202][ T4266] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 49.757564][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 49.769570][ T3819] udevd[3819]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 50.008058][ T4303] loop1: detected capacity change from 0 to 1024 [ 50.039044][ T4303] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.321: Failed to acquire dquot type 0 [ 50.092348][ T4303] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 50.137842][ T4299] loop2: detected capacity change from 0 to 32768 [ 50.141096][ T4303] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.321: corrupted inode contents [ 50.175960][ T4303] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.321: mark_inode_dirty error [ 50.189494][ T4303] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.321: corrupted inode contents [ 50.202293][ T4299] loop2: p1 p2 p3 < > [ 50.205399][ T4303] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.321: mark_inode_dirty error [ 50.211188][ T4299] loop2: p1 size 242222080 extends beyond EOD, truncated [ 50.218569][ T4303] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.321: corrupted inode contents [ 50.239171][ T4303] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 50.240945][ T4299] loop2: p2 start 4294967295 is beyond EOD, truncated [ 50.248020][ T4303] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.321: corrupted inode contents [ 50.268897][ T4303] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.321: mark_inode_dirty error [ 50.281933][ T4303] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 50.296411][ T4303] EXT4-fs (loop1): 1 truncate cleaned up [ 50.304947][ T4303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.334111][ T4303] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 50.444359][ T3819] udevd[3819]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 50.445677][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.620587][ T4326] lo: entered allmulticast mode [ 50.627670][ T4325] lo: left allmulticast mode [ 50.724966][ T4331] random: crng reseeded on system resumption [ 50.914273][ T4339] warn_alloc: 1 callbacks suppressed [ 50.914286][ T4339] syz.3.332: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 50.934166][ T4339] CPU: 0 UID: 0 PID: 4339 Comm: syz.3.332 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 50.934222][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.934237][ T4339] Call Trace: [ 50.934246][ T4339] [ 50.934320][ T4339] __dump_stack+0x1d/0x30 [ 50.934347][ T4339] dump_stack_lvl+0xe8/0x140 [ 50.934367][ T4339] dump_stack+0x15/0x1b [ 50.934382][ T4339] warn_alloc+0x12b/0x1a0 [ 50.934435][ T4339] ? schedule+0x5f/0xd0 [ 50.934519][ T4339] ? futex_unqueue+0xb9/0xf0 [ 50.934555][ T4339] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 50.934580][ T4339] ? __pfx_futex_wake_mark+0x10/0x10 [ 50.934666][ T4339] ? __rcu_read_unlock+0x4f/0x70 [ 50.934696][ T4339] ? avc_has_perm_noaudit+0x1b1/0x200 [ 50.934719][ T4339] ? should_fail_ex+0x30/0x280 [ 50.934751][ T4339] ? xskq_create+0x36/0xe0 [ 50.934828][ T4339] ? should_failslab+0x8c/0xb0 [ 50.934865][ T4339] vmalloc_user_noprof+0x59/0x70 [ 50.934928][ T4339] ? xskq_create+0x80/0xe0 [ 50.934978][ T4339] xskq_create+0x80/0xe0 [ 50.935003][ T4339] xsk_init_queue+0x95/0xf0 [ 50.935084][ T4339] xsk_setsockopt+0x35c/0x510 [ 50.935108][ T4339] ? __pfx_xsk_setsockopt+0x10/0x10 [ 50.935176][ T4339] __sys_setsockopt+0x181/0x200 [ 50.935196][ T4339] ? fpregs_restore_userregs+0xbb/0x190 [ 50.935222][ T4339] __x64_sys_setsockopt+0x64/0x80 [ 50.935239][ T4339] x64_sys_call+0x2bd5/0x2fb0 [ 50.935257][ T4339] do_syscall_64+0xd0/0x1a0 [ 50.935277][ T4339] ? clear_bhb_loop+0x40/0x90 [ 50.935368][ T4339] ? clear_bhb_loop+0x40/0x90 [ 50.935388][ T4339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.935405][ T4339] RIP: 0033:0x7f1b6452e969 [ 50.935418][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.935492][ T4339] RSP: 002b:00007f1b62b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.935508][ T4339] RAX: ffffffffffffffda RBX: 00007f1b64755fa0 RCX: 00007f1b6452e969 [ 50.935594][ T4339] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 50.935604][ T4339] RBP: 00007f1b645b0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 50.935614][ T4339] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.935625][ T4339] R13: 0000000000000000 R14: 00007f1b64755fa0 R15: 00007ffe69260e68 [ 50.935642][ T4339] [ 50.935648][ T4339] Mem-Info: [ 51.095468][ T4347] loop4: detected capacity change from 0 to 512 [ 51.098572][ T4339] active_anon:51182 inactive_anon:0 isolated_anon:0 [ 51.098572][ T4339] active_file:5849 inactive_file:2221 isolated_file:0 [ 51.098572][ T4339] unevictable:0 dirty:74 writeback:0 [ 51.098572][ T4339] slab_reclaimable:2965 slab_unreclaimable:13436 [ 51.098572][ T4339] mapped:29116 shmem:20951 pagetables:1390 [ 51.098572][ T4339] sec_pagetables:0 bounce:0 [ 51.098572][ T4339] kernel_misc_reclaimable:0 [ 51.098572][ T4339] free:1862656 free_pcp:2288 free_cma:0 [ 51.121980][ T4347] EXT4-fs: Ignoring removed nobh option [ 51.126777][ T4339] Node 0 active_anon:204728kB inactive_anon:0kB active_file:23396kB inactive_file:8884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116464kB dirty:296kB writeback:0kB shmem:83804kB writeback_tmp:0kB kernel_stack:3104kB pagetables:5560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 51.164393][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #3: comm syz.4.335: corrupted inode contents [ 51.166926][ T4339] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 51.170786][ T4347] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.335: mark_inode_dirty error [ 51.173170][ T4339] lowmem_reserve[]: 0 2884 7863 [ 51.181741][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #3: comm syz.4.335: corrupted inode contents [ 51.224625][ T4339] 7863 [ 51.224645][ T4339] Node 0 DMA32 free:2950032kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953564kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 51.224720][ T4339] lowmem_reserve[]: 0 0 4978 4978 [ 51.224745][ T4339] Node 0 Normal free:4485000kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:204844kB inactive_anon:0kB active_file:23396kB inactive_file:8884kB unevictable:0kB writepending:296kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:5748kB local_pcp:4464kB free_cma:0kB [ 51.232317][ T4347] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.335: mark_inode_dirty error [ 51.259206][ T4339] lowmem_reserve[]: 0 0 0 0 [ 51.275084][ T4347] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.335: Failed to acquire dquot type 0 [ 51.297637][ T4339] [ 51.327353][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.335: corrupted inode contents [ 51.328120][ T4339] Node 0 DMA: [ 51.358515][ T4347] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #16: comm syz.4.335: mark_inode_dirty error [ 51.361625][ T4339] 0*4kB 0*8kB [ 51.396124][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.335: corrupted inode contents [ 51.402613][ T4339] 0*16kB [ 51.407308][ T4347] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.335: mark_inode_dirty error [ 51.418193][ T4339] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB [ 51.423283][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.335: corrupted inode contents [ 51.432356][ T4339] (M) 3*4096kB (M) = 15360kB [ 51.435943][ T4347] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 51.446947][ T4339] Node 0 DMA32: 4*4kB (M) 2*8kB (M) [ 51.452006][ T4347] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.335: corrupted inode contents [ 51.462106][ T4339] 3*16kB [ 51.465299][ T4347] EXT4-fs error (device loop4): ext4_truncate:4255: inode #16: comm syz.4.335: mark_inode_dirty error [ 51.476143][ T4339] (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) [ 51.485488][ T4347] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 51.495437][ T4339] 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) [ 51.504782][ T4347] EXT4-fs (loop4): 1 truncate cleaned up [ 51.508589][ T4339] 717*4096kB (M) = 2950032kB [ 51.514750][ T4347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.525662][ T4339] Node 0 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 0*32kB 6*64kB (UE) 11*128kB [ 51.530242][ T4347] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.539652][ T4339] (UME) [ 51.553852][ T4347] openvswitch: netlink: Message has 6 unknown bytes. [ 51.554053][ T4339] 10*256kB (UE) 7*512kB (U) 4*1024kB (UE) 4*2048kB (UME) 1090*4096kB (UM) = 4484896kB [ 51.622524][ T4339] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 51.631886][ T4339] 29038 total pagecache pages [ 51.636607][ T4339] 0 pages in swap cache [ 51.640777][ T4339] Free swap = 124996kB [ 51.644951][ T4339] Total swap = 124996kB [ 51.649116][ T4339] 2097051 pages RAM [ 51.652923][ T4339] 0 pages HighMem/MovableOnly [ 51.657588][ T4339] 80259 pages reserved [ 51.663155][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.669654][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.798971][ T4363] lo: entered allmulticast mode [ 51.824330][ T4362] lo: left allmulticast mode [ 51.987359][ T4381] loop3: detected capacity change from 0 to 1024 [ 52.013757][ T4375] loop0: detected capacity change from 0 to 512 [ 52.784858][ T4384] loop4: detected capacity change from 0 to 512 [ 52.802786][ T4384] EXT4-fs: Ignoring removed nobh option [ 52.811994][ T4375] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.837731][ T4381] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.346: Failed to acquire dquot type 0 [ 52.858228][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.899832][ T4375] EXT4-fs (loop0): 1 truncate cleaned up [ 52.906664][ T4381] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 52.930624][ T4375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.946671][ T4384] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #3: comm syz.4.348: corrupted inode contents [ 52.976256][ T4381] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.346: corrupted inode contents [ 52.990191][ T4384] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #3: comm syz.4.348: mark_inode_dirty error [ 53.007603][ T4381] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.346: mark_inode_dirty error [ 53.033635][ T4390] random: crng reseeded on system resumption [ 53.040519][ T4384] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #3: comm syz.4.348: corrupted inode contents [ 53.071042][ T4381] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.346: corrupted inode contents [ 53.085906][ T4384] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.348: mark_inode_dirty error [ 53.098499][ T4381] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.346: mark_inode_dirty error [ 53.121547][ T4381] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.346: corrupted inode contents [ 53.138900][ T4384] __quota_error: 28 callbacks suppressed [ 53.138912][ T4384] Quota error (device loop4): write_blk: dquota write failed [ 53.145037][ T4381] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 53.169687][ T4384] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 53.180338][ T4381] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.346: corrupted inode contents [ 53.195298][ T4384] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.348: Failed to acquire dquot type 0 [ 53.208066][ T4404] syz_tun: entered allmulticast mode [ 53.215950][ T4381] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.346: mark_inode_dirty error [ 53.227985][ T29] audit: type=1326 audit(1747182953.530:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158671e969 code=0x7ffc0000 [ 53.251549][ T29] audit: type=1326 audit(1747182953.530:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158671e969 code=0x7ffc0000 [ 53.258304][ T4381] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 53.274995][ T29] audit: type=1326 audit(1747182953.530:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158671e969 code=0x7ffc0000 [ 53.307373][ T29] audit: type=1326 audit(1747182953.530:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158671e969 code=0x7ffc0000 [ 53.310965][ T4381] EXT4-fs (loop3): 1 truncate cleaned up [ 53.330710][ T29] audit: type=1326 audit(1747182953.530:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158671e969 code=0x7ffc0000 [ 53.341052][ T4381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.359473][ T29] audit: type=1326 audit(1747182953.530:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158671e969 code=0x7ffc0000 [ 53.395254][ T29] audit: type=1326 audit(1747182953.530:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158671e969 code=0x7ffc0000 [ 53.400101][ T4384] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.348: corrupted inode contents [ 53.418565][ T29] audit: type=1326 audit(1747182953.530:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4405 comm="syz.2.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f158671e969 code=0x7ffc0000 [ 53.453583][ T4384] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #16: comm syz.4.348: mark_inode_dirty error [ 53.453879][ T4384] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.348: corrupted inode contents [ 53.480945][ T4384] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.348: mark_inode_dirty error [ 53.493759][ T4404] syz_tun (unregistering): left allmulticast mode [ 53.500568][ T4381] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 53.516562][ T4384] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.348: corrupted inode contents [ 53.528747][ T4384] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 53.537707][ T4384] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.348: corrupted inode contents [ 53.549771][ T4384] EXT4-fs error (device loop4): ext4_truncate:4255: inode #16: comm syz.4.348: mark_inode_dirty error [ 53.561090][ T4384] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 53.570471][ T4384] EXT4-fs (loop4): 1 truncate cleaned up [ 53.576598][ T4384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.589879][ T4384] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.606207][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.612151][ T4384] openvswitch: netlink: Message has 6 unknown bytes. [ 53.634373][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.736417][ T4422] loop4: detected capacity change from 0 to 1024 [ 53.752282][ T4422] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.357: Failed to acquire dquot type 0 [ 53.787174][ T4422] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 53.810553][ T4422] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.357: corrupted inode contents [ 53.829304][ T4422] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.357: mark_inode_dirty error [ 53.842244][ T4422] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.357: corrupted inode contents [ 53.855115][ T4422] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.357: mark_inode_dirty error [ 53.867927][ T4422] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.357: corrupted inode contents [ 53.881140][ T4422] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 53.890348][ T4422] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.357: corrupted inode contents [ 53.904982][ T4422] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.357: mark_inode_dirty error [ 53.916148][ T4421] loop0: detected capacity change from 0 to 32768 [ 53.916749][ T4422] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 53.934904][ T4422] EXT4-fs (loop4): 1 truncate cleaned up [ 53.941276][ T4422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.956868][ T4422] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 53.970243][ T4421] loop0: p1 p2 p3 < > [ 53.974791][ T4421] loop0: p1 size 242222080 extends beyond EOD, truncated [ 53.993330][ T4421] loop0: p2 start 4294967295 is beyond EOD, truncated [ 54.007913][ T3005] loop0: p1 p2 p3 < > [ 54.013218][ T3005] loop0: p1 size 242222080 extends beyond EOD, truncated [ 54.021573][ T3005] loop0: p2 start 4294967295 is beyond EOD, truncated [ 54.104408][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.175553][ T3819] udevd[3819]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 54.179279][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 54.260328][ T3819] udevd[3819]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 54.271560][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 54.466893][ T4450] __nla_validate_parse: 40 callbacks suppressed [ 54.466991][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 54.482154][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 54.494453][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 54.514407][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 54.523357][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 54.533641][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 54.547007][ T4452] loop3: detected capacity change from 0 to 512 [ 54.557004][ T4452] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.590106][ T4452] EXT4-fs (loop3): 1 truncate cleaned up [ 54.598429][ T4452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.637006][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 54.645925][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 54.656460][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 54.681130][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.844276][ T4468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 55.400559][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.451832][ T4489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4489 comm=syz.0.381 [ 55.673103][ T4500] loop1: detected capacity change from 0 to 32768 [ 55.729959][ T4500] loop1: p1 p2 p3 < > [ 55.734197][ T4500] loop1: p1 size 242222080 extends beyond EOD, truncated [ 55.743159][ T4500] loop1: p2 start 4294967295 is beyond EOD, truncated [ 55.816942][ T3819] udevd[3819]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 55.828419][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 55.947793][ T4520] loop1: detected capacity change from 0 to 1024 [ 55.975661][ T4520] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.393: Failed to acquire dquot type 0 [ 56.000735][ T4520] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 56.015897][ T4520] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.393: corrupted inode contents [ 56.029462][ T4520] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.393: mark_inode_dirty error [ 56.041958][ T4520] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.393: corrupted inode contents [ 56.054619][ T4520] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.393: mark_inode_dirty error [ 56.071379][ T4520] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.393: corrupted inode contents [ 56.084023][ T4520] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 56.094091][ T4520] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.393: corrupted inode contents [ 56.107140][ T4520] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.393: mark_inode_dirty error [ 56.119857][ T4520] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 56.129792][ T4520] EXT4-fs (loop1): 1 truncate cleaned up [ 56.135889][ T4520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.151669][ T4520] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 56.277385][ T4523] loop2: detected capacity change from 0 to 2048 [ 56.329903][ T4523] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 56.832377][ T4569] syz_tun: entered allmulticast mode [ 56.840613][ T4569] syz_tun (unregistering): left allmulticast mode [ 57.199875][ T4572] loop0: detected capacity change from 0 to 2048 [ 57.206886][ T4572] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 57.248382][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.378507][ T4587] loop1: detected capacity change from 0 to 1024 [ 57.458126][ T4587] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.418: Failed to acquire dquot type 0 [ 57.471149][ T4587] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 57.485762][ T4587] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.418: corrupted inode contents [ 57.508795][ T4587] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.418: mark_inode_dirty error [ 57.532428][ T4587] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.418: corrupted inode contents [ 57.553004][ T4587] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.418: mark_inode_dirty error [ 57.582323][ T4587] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.418: corrupted inode contents [ 57.604684][ T4587] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 57.657651][ T4587] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.418: corrupted inode contents [ 57.691523][ T4587] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.418: mark_inode_dirty error [ 57.748925][ T4587] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 57.786343][ T4587] EXT4-fs (loop1): 1 truncate cleaned up [ 57.802015][ T4587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.835669][ T4587] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 57.841204][ T4618] loop2: detected capacity change from 0 to 1024 [ 57.871995][ T4618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.905030][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.047088][ T4609] loop0: detected capacity change from 0 to 2048 [ 58.054103][ T4609] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 58.294536][ T4633] loop0: detected capacity change from 0 to 1024 [ 58.324080][ T4633] __quota_error: 71 callbacks suppressed [ 58.324098][ T4633] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 58.338995][ T4633] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 58.348394][ T4633] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.437: Failed to acquire dquot type 0 [ 58.360935][ T4633] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 58.375893][ T4633] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.437: corrupted inode contents [ 58.390444][ T4633] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.437: mark_inode_dirty error [ 58.403497][ T4633] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.437: corrupted inode contents [ 58.415901][ T4633] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.437: mark_inode_dirty error [ 58.428493][ T4633] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.437: corrupted inode contents [ 58.441995][ T4633] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 58.450825][ T4633] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.437: corrupted inode contents [ 58.465936][ T4633] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.437: mark_inode_dirty error [ 58.501383][ T4633] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 58.525142][ T4633] EXT4-fs (loop0): 1 truncate cleaned up [ 58.544258][ T4633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.578177][ T4633] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 58.706687][ T4650] loop3: detected capacity change from 0 to 1024 [ 58.721536][ T4650] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 58.730854][ T4650] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 58.740318][ T4650] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.445: Failed to acquire dquot type 0 [ 58.752802][ T4650] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 58.784277][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.784985][ T4650] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.445: corrupted inode contents [ 58.819084][ T4650] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.445: mark_inode_dirty error [ 58.840646][ T4650] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.445: corrupted inode contents [ 58.895045][ T4650] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.445: mark_inode_dirty error [ 58.922074][ T4650] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.445: corrupted inode contents [ 58.934697][ T4650] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 58.944594][ T4650] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.445: corrupted inode contents [ 58.961210][ T4650] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.445: mark_inode_dirty error [ 58.972588][ T4650] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 58.984472][ T4650] EXT4-fs (loop3): 1 truncate cleaned up [ 58.985444][ T29] audit: type=1400 audit(1747182959.300:480): avc: denied { read } for pid=4665 comm="syz.1.450" dev="sockfs" ino=8237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.990721][ T4650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.059335][ T4650] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 59.109864][ T4657] loop4: detected capacity change from 0 to 2048 [ 59.145182][ T4657] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 59.374335][ T4682] loop2: detected capacity change from 0 to 32768 [ 59.419278][ T3304] loop2: p1 p2 p3 < > [ 59.423520][ T3304] loop2: p1 size 242222080 extends beyond EOD, truncated [ 59.431288][ T3304] loop2: p2 start 4294967295 is beyond EOD, truncated [ 59.442443][ T4682] loop2: p1 p2 p3 < > [ 59.446616][ T4682] loop2: p1 size 242222080 extends beyond EOD, truncated [ 59.455169][ T4682] loop2: p2 start 4294967295 is beyond EOD, truncated [ 59.547560][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 59.557771][ T3819] udevd[3819]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 59.574080][ T3819] udevd[3819]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 59.585274][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 59.694219][ T4700] lo: entered allmulticast mode [ 59.701105][ T4699] lo: left allmulticast mode [ 59.815578][ T4712] loop4: detected capacity change from 0 to 1024 [ 59.826693][ T4712] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 59.835899][ T4712] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 59.845406][ T4712] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.469: Failed to acquire dquot type 0 [ 59.857550][ T4712] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 59.872177][ T4712] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.469: corrupted inode contents [ 59.884463][ T4712] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.469: mark_inode_dirty error [ 59.896185][ T4712] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.469: corrupted inode contents [ 59.909272][ T4712] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.469: mark_inode_dirty error [ 59.920681][ T4712] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.469: corrupted inode contents [ 59.932859][ T4712] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 59.941631][ T4712] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.469: corrupted inode contents [ 59.953739][ T4712] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.469: mark_inode_dirty error [ 59.965031][ T4712] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 59.974394][ T4712] EXT4-fs (loop4): 1 truncate cleaned up [ 59.982326][ T4712] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 60.027647][ T29] audit: type=1326 audit(1747182960.340:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 60.051628][ T29] audit: type=1326 audit(1747182960.340:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 60.074998][ T29] audit: type=1326 audit(1747182960.340:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4714 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 60.186830][ T4725] lo: entered allmulticast mode [ 60.195003][ T4724] lo: left allmulticast mode [ 60.262484][ T4737] __nla_validate_parse: 4 callbacks suppressed [ 60.262503][ T4737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 60.283003][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 60.352638][ T4741] loop1: detected capacity change from 0 to 1024 [ 60.405119][ T4741] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.481: Failed to acquire dquot type 0 [ 60.424251][ T4741] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 60.443243][ T4741] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.481: corrupted inode contents [ 60.457714][ T4741] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.481: mark_inode_dirty error [ 60.472034][ T4741] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.481: corrupted inode contents [ 60.490648][ T4741] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.481: mark_inode_dirty error [ 60.520766][ T4741] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.481: corrupted inode contents [ 60.564524][ T4741] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 60.573754][ T4757] syz_tun: entered allmulticast mode [ 60.581321][ T4741] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.481: corrupted inode contents [ 60.598314][ T4754] syz_tun: left allmulticast mode [ 60.610681][ T4741] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.481: mark_inode_dirty error [ 60.636189][ T4741] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 60.646737][ T4741] EXT4-fs (loop1): 1 truncate cleaned up [ 60.686530][ T4741] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 60.736154][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 60.745029][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 60.755810][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 60.777857][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 60.786800][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 60.797721][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 60.809198][ T4771] loop4: detected capacity change from 0 to 512 [ 60.816381][ T4771] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.835945][ T4760] loop3: detected capacity change from 0 to 2048 [ 60.842806][ T4760] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 60.878430][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 60.880958][ T4771] EXT4-fs (loop4): 1 truncate cleaned up [ 60.887337][ T4767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 61.297164][ T4787] sctp: [Deprecated]: syz.0.496 (pid 4787) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.297164][ T4787] Use struct sctp_sack_info instead [ 61.407930][ T4794] syz.3.498: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 61.422563][ T4794] CPU: 1 UID: 0 PID: 4794 Comm: syz.3.498 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 61.422594][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 61.422608][ T4794] Call Trace: [ 61.422617][ T4794] [ 61.422626][ T4794] __dump_stack+0x1d/0x30 [ 61.422697][ T4794] dump_stack_lvl+0xe8/0x140 [ 61.422717][ T4794] dump_stack+0x15/0x1b [ 61.422739][ T4794] warn_alloc+0x12b/0x1a0 [ 61.422835][ T4794] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 61.422866][ T4794] ? __rcu_read_unlock+0x4f/0x70 [ 61.422906][ T4794] ? avc_has_perm_noaudit+0x1b1/0x200 [ 61.422933][ T4794] ? should_fail_ex+0x30/0x280 [ 61.423042][ T4794] ? xskq_create+0x36/0xe0 [ 61.423067][ T4794] ? should_failslab+0x8c/0xb0 [ 61.423103][ T4794] vmalloc_user_noprof+0x59/0x70 [ 61.423177][ T4794] ? xskq_create+0x80/0xe0 [ 61.423242][ T4794] xskq_create+0x80/0xe0 [ 61.423267][ T4794] xsk_init_queue+0x95/0xf0 [ 61.423295][ T4794] xsk_setsockopt+0x35c/0x510 [ 61.423327][ T4794] ? __pfx_xsk_setsockopt+0x10/0x10 [ 61.423390][ T4794] __sys_setsockopt+0x181/0x200 [ 61.423407][ T4794] ? fpregs_restore_userregs+0xbb/0x190 [ 61.423468][ T4794] __x64_sys_setsockopt+0x64/0x80 [ 61.423485][ T4794] x64_sys_call+0x2bd5/0x2fb0 [ 61.423536][ T4794] do_syscall_64+0xd0/0x1a0 [ 61.423594][ T4794] ? clear_bhb_loop+0x40/0x90 [ 61.423620][ T4794] ? clear_bhb_loop+0x40/0x90 [ 61.423717][ T4794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.423737][ T4794] RIP: 0033:0x7f1b6452e969 [ 61.423754][ T4794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.423786][ T4794] RSP: 002b:00007f1b62b97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 61.423808][ T4794] RAX: ffffffffffffffda RBX: 00007f1b64755fa0 RCX: 00007f1b6452e969 [ 61.423822][ T4794] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 61.423893][ T4794] RBP: 00007f1b645b0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 61.423907][ T4794] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.423921][ T4794] R13: 0000000000000000 R14: 00007f1b64755fa0 R15: 00007ffe69260e68 [ 61.423944][ T4794] [ 61.423951][ T4794] Mem-Info: [ 61.648451][ T4794] active_anon:53269 inactive_anon:0 isolated_anon:0 [ 61.648451][ T4794] active_file:5881 inactive_file:2208 isolated_file:0 [ 61.648451][ T4794] unevictable:0 dirty:14 writeback:0 [ 61.648451][ T4794] slab_reclaimable:2983 slab_unreclaimable:13705 [ 61.648451][ T4794] mapped:29136 shmem:22831 pagetables:1371 [ 61.648451][ T4794] sec_pagetables:0 bounce:0 [ 61.648451][ T4794] kernel_misc_reclaimable:0 [ 61.648451][ T4794] free:1859577 free_pcp:2650 free_cma:0 [ 61.693384][ T4794] Node 0 active_anon:213076kB inactive_anon:0kB active_file:23524kB inactive_file:8832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116544kB dirty:56kB writeback:0kB shmem:91324kB writeback_tmp:0kB kernel_stack:3168kB pagetables:5484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 61.722284][ T4794] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.749884][ T4794] lowmem_reserve[]: 0 2884 7863 7863 [ 61.755231][ T4794] Node 0 DMA32 free:2950032kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953564kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 61.784109][ T4794] lowmem_reserve[]: 0 0 4978 4978 [ 61.789208][ T4794] Node 0 Normal free:4472916kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:212960kB inactive_anon:0kB active_file:23524kB inactive_file:8832kB unevictable:0kB writepending:56kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:7228kB local_pcp:5744kB free_cma:0kB [ 61.819226][ T4794] lowmem_reserve[]: 0 0 0 0 [ 61.823752][ T4794] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 61.836500][ T4794] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950032kB [ 61.852775][ T4794] Node 0 Normal: 227*4kB (UME) 155*8kB (UME) 68*16kB (ME) 76*32kB (UME) 56*64kB (UME) 16*128kB (ME) 28*256kB (UME) 16*512kB (UM) 8*1024kB (ME) 5*2048kB (UME) 1081*4096kB (UM) = 4472868kB [ 61.871544][ T4794] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 61.880901][ T4794] 30916 total pagecache pages [ 61.885566][ T4794] 0 pages in swap cache [ 61.889802][ T4794] Free swap = 124996kB [ 61.893976][ T4794] Total swap = 124996kB [ 61.898135][ T4794] 2097051 pages RAM [ 61.901974][ T4794] 0 pages HighMem/MovableOnly [ 61.906710][ T4794] 80259 pages reserved [ 61.941563][ T4801] loop1: detected capacity change from 0 to 1024 [ 61.956046][ T4801] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.499: Failed to acquire dquot type 0 [ 62.003889][ T4808] loop3: detected capacity change from 0 to 1024 [ 62.006405][ T4807] syz_tun: entered allmulticast mode [ 62.010590][ T4801] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 62.030653][ T4801] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.499: corrupted inode contents [ 62.043136][ T4801] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.499: mark_inode_dirty error [ 62.060970][ T4801] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.499: corrupted inode contents [ 62.073970][ T4801] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.499: mark_inode_dirty error [ 62.076423][ T4804] syz_tun: left allmulticast mode [ 62.095189][ T4801] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.499: corrupted inode contents [ 62.113100][ T4801] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 62.126978][ T4801] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.499: corrupted inode contents [ 62.154463][ T4801] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.499: mark_inode_dirty error [ 62.168171][ T4801] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 62.178782][ T4801] EXT4-fs (loop1): 1 truncate cleaned up [ 62.201736][ T4801] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 62.297809][ T4828] loop0: detected capacity change from 0 to 1024 [ 62.311551][ T4828] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.509: Failed to acquire dquot type 0 [ 62.324662][ T4828] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 62.340764][ T4828] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.509: corrupted inode contents [ 62.355529][ T4828] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.509: mark_inode_dirty error [ 62.371201][ T4828] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.509: corrupted inode contents [ 62.393464][ T4828] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.509: mark_inode_dirty error [ 62.418675][ T4828] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.509: corrupted inode contents [ 62.443742][ T4828] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 62.453644][ T4828] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.509: corrupted inode contents [ 62.473057][ T4828] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.509: mark_inode_dirty error [ 62.486081][ T4828] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 62.497058][ T4828] EXT4-fs (loop0): 1 truncate cleaned up [ 62.505220][ T4828] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 62.885002][ T4846] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4846 comm=syz.1.515 [ 63.014703][ T4854] loop4: detected capacity change from 0 to 1024 [ 63.192808][ T4866] loop4: detected capacity change from 0 to 512 [ 63.200419][ T4866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.211914][ T4866] EXT4-fs (loop4): 1 truncate cleaned up [ 63.752151][ T4887] loop0: detected capacity change from 0 to 2048 [ 63.759031][ T4887] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 64.098902][ T4905] random: crng reseeded on system resumption [ 64.294986][ T4921] loop4: detected capacity change from 0 to 1024 [ 64.329872][ T4921] __quota_error: 66 callbacks suppressed [ 64.329891][ T4921] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 64.344766][ T4921] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 64.354350][ T4921] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.538: Failed to acquire dquot type 0 [ 64.367130][ T4921] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 64.385754][ T4921] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.538: corrupted inode contents [ 64.397765][ T4921] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.538: mark_inode_dirty error [ 64.411095][ T4921] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.538: corrupted inode contents [ 64.432991][ T4921] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.538: mark_inode_dirty error [ 64.444453][ T4921] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.538: corrupted inode contents [ 64.477409][ T4921] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 64.491387][ T4921] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.538: corrupted inode contents [ 64.515139][ T4928] loop3: detected capacity change from 0 to 1024 [ 64.527628][ T4921] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.538: mark_inode_dirty error [ 64.557366][ T4928] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 64.566619][ T4928] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 64.576029][ T4928] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.540: Failed to acquire dquot type 0 [ 64.601104][ T4921] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 64.628962][ T29] audit: type=1326 audit(1747182964.930:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 64.652318][ T29] audit: type=1326 audit(1747182964.930:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 64.652645][ T4928] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, [ 64.675621][ T29] audit: type=1326 audit(1747182964.930:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 64.675727][ T29] audit: type=1326 audit(1747182964.930:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 64.675753][ T4928] inode 13: block 144: [ 64.683337][ T29] audit: type=1326 audit(1747182964.930:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 64.683376][ T29] audit: type=1326 audit(1747182964.930:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4932 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99095ae969 code=0x7ffc0000 [ 64.780606][ T4928] freeing already freed block (bit 9); block bitmap corrupt. [ 64.789073][ T4928] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.540: corrupted inode contents [ 64.804590][ T4921] EXT4-fs (loop4): 1 truncate cleaned up [ 64.811932][ T4928] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.540: mark_inode_dirty error [ 64.824453][ T4928] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.540: corrupted inode contents [ 64.837000][ T4928] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.540: mark_inode_dirty error [ 64.858452][ T4928] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.540: corrupted inode contents [ 64.861975][ T4921] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 64.878578][ T4928] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 64.887928][ T4928] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.540: corrupted inode contents [ 64.900199][ T4928] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.540: mark_inode_dirty error [ 64.912967][ T4928] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 64.922340][ T4928] EXT4-fs (loop3): 1 truncate cleaned up [ 64.935886][ T4928] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 64.985725][ T4939] loop1: detected capacity change from 0 to 512 [ 64.998513][ T4939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.022415][ T4939] EXT4-fs (loop1): 1 truncate cleaned up [ 65.317581][ T4968] loop3: detected capacity change from 0 to 1024 [ 65.337417][ T4970] __nla_validate_parse: 26 callbacks suppressed [ 65.337447][ T4970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.557'. [ 65.381098][ T4968] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.556: Failed to acquire dquot type 0 [ 65.412106][ T4968] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 65.431616][ T4968] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.556: corrupted inode contents [ 65.446833][ T4968] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.556: mark_inode_dirty error [ 65.467178][ T4968] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.556: corrupted inode contents [ 65.480801][ T4968] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.556: mark_inode_dirty error [ 65.497383][ T4968] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.556: corrupted inode contents [ 65.509587][ T4968] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 65.519455][ T4968] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.556: corrupted inode contents [ 65.532760][ T4968] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.556: mark_inode_dirty error [ 65.549877][ T4968] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 65.559396][ T4968] EXT4-fs (loop3): 1 truncate cleaned up [ 65.570004][ T4968] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 65.679644][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 65.691442][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 65.728715][ T4978] loop1: detected capacity change from 0 to 2048 [ 65.735728][ T4978] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 66.096135][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 66.105089][ T5008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 66.124528][ T5008] bond1: entered promiscuous mode [ 66.129818][ T5008] bond1: entered allmulticast mode [ 66.135240][ T5008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.219956][ T5015] loop2: detected capacity change from 0 to 1024 [ 66.227518][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 66.240377][ T5015] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.574: Failed to acquire dquot type 0 [ 66.258006][ T5015] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 66.270468][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 66.273124][ T5015] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.574: corrupted inode contents [ 66.300179][ T5015] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.574: mark_inode_dirty error [ 66.320189][ T5015] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.574: corrupted inode contents [ 66.343494][ T5014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5014 comm=syz.4.573 [ 66.345990][ T5019] loop1: detected capacity change from 0 to 1024 [ 66.357665][ T5015] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.574: mark_inode_dirty error [ 66.374027][ T31] ================================================================== [ 66.382142][ T31] BUG: KCSAN: data-race in touch_atime / touch_atime [ 66.388884][ T31] [ 66.391229][ T31] write to 0xffff88810448b258 of 4 bytes by task 55 on cpu 0: [ 66.398713][ T31] touch_atime+0x1e8/0x330 [ 66.403169][ T31] shmem_file_read_iter+0x459/0x520 [ 66.408406][ T31] lo_rw_aio+0x5fa/0x7c0 [ 66.412687][ T31] loop_process_work+0x52d/0xa60 [ 66.417654][ T31] loop_workfn+0x31/0x40 [ 66.421949][ T31] process_scheduled_works+0x4ce/0x9d0 [ 66.427453][ T31] worker_thread+0x582/0x770 [ 66.432083][ T31] kthread+0x489/0x510 [ 66.436174][ T31] ret_from_fork+0x4b/0x60 [ 66.440611][ T31] ret_from_fork_asm+0x1a/0x30 [ 66.445403][ T31] [ 66.447743][ T31] read to 0xffff88810448b258 of 4 bytes by task 31 on cpu 1: [ 66.455132][ T31] touch_atime+0x194/0x330 [ 66.459575][ T31] shmem_file_read_iter+0x459/0x520 [ 66.464802][ T31] lo_rw_aio+0x5fa/0x7c0 [ 66.469065][ T31] loop_process_work+0x52d/0xa60 [ 66.474022][ T31] loop_rootcg_workfn+0x22/0x30 [ 66.478899][ T31] process_scheduled_works+0x4ce/0x9d0 [ 66.484390][ T31] worker_thread+0x582/0x770 [ 66.489015][ T31] kthread+0x489/0x510 [ 66.493113][ T31] ret_from_fork+0x4b/0x60 [ 66.497549][ T31] ret_from_fork_asm+0x1a/0x30 [ 66.502339][ T31] [ 66.504671][ T31] value changed: 0x288d12eb -> 0x2925a96b [ 66.510400][ T31] [ 66.512737][ T31] Reported by Kernel Concurrency Sanitizer on: [ 66.518907][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 66.531344][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.541419][ T31] Workqueue: loop1 loop_rootcg_workfn [ 66.546855][ T31] ================================================================== [ 66.560782][ T5015] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.574: corrupted inode contents [ 66.564893][ T5019] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.575: Failed to acquire dquot type 0 [ 66.572785][ T5015] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 66.592601][ T5015] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.574: corrupted inode contents [ 66.598176][ T5019] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 66.619347][ T5015] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.574: mark_inode_dirty error [ 66.630765][ T5015] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 66.640026][ T5019] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.575: corrupted inode contents [ 66.652231][ T5019] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.575: mark_inode_dirty error [ 66.652264][ T5015] EXT4-fs (loop2): 1 truncate cleaned up [ 66.681178][ T5019] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.575: corrupted inode contents [ 66.693372][ T5019] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.575: mark_inode_dirty error [ 66.705256][ T5015] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 66.705277][ T5019] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.575: corrupted inode contents [ 66.705473][ T5019] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 66.734055][ T5019] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.575: corrupted inode contents [ 66.746090][ T5019] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.575: mark_inode_dirty error [ 66.757285][ T5019] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 66.766680][ T5019] EXT4-fs (loop1): 1 truncate cleaned up [ 66.777224][ T5019] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 69.171440][ T3313] EXT4-fs unmount: 29 callbacks suppressed [ 69.171453][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.