last executing test programs: 2m24.88630657s ago: executing program 1 (id=10194): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2m24.797912137s ago: executing program 1 (id=10196): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff0000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc00"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@gettaction={0x14, 0x32, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4c0000, 0x0) 2m23.936502647s ago: executing program 1 (id=10203): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x104) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="680000004a000b0000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x68}}, 0x4000081) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000480)='locks_get_lock_context\x00', r4, 0x0, 0xb39e}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c}, &(0x7f0000000340), &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xff, 0x7, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @remote, 0xff40, 0x8, 0xfffffffd, 0x61}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0xa, &(0x7f00000002c0)=[{0x8000, 0x0, 0xf, 0x40}, {0x403, 0x0, 0xff, 0x8}, {0x6a03, 0x7, 0x8, 0x9}, {0x2, 0x1, 0x7f, 0x1}, {0x8000, 0x5, 0x7, 0x8}, {0xff3d, 0xda, 0x1, 0x4}, {0x3125, 0x7, 0x18, 0x520}, {0x10, 0x2, 0x7f, 0x4}, {0x4, 0x4, 0xf0, 0x69a}, {0x0, 0x0, 0x42, 0x4}]}) rt_sigpending(0x0, 0x0) 2m23.333413885s ago: executing program 1 (id=10209): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000001f80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"/296, @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000a00)={{r1}, 0x0, 0x4, @unused=[0x917, 0x81, 0x7, 0x9], @name="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"}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0xa020480) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$l2tp6(0xa, 0x2, 0x73) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m22.870891403s ago: executing program 1 (id=10213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_read_part_table(0x60d, &(0x7f0000001f40)="$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") 2m21.856295654s ago: executing program 1 (id=10217): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") 2m21.843560825s ago: executing program 32 (id=10217): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") 4.727380779s ago: executing program 3 (id=11640): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010029bd7000fcdbdf250900020000007a31000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x4040815}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x15}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}]}, 0x30}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000003c0)={0x1d, r6, 0xfffffffffffffffd, {0x0, 0xf0, 0x4}, 0x2}, 0x18) bind$can_j1939(r5, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r7, &(0x7f0000000d40)=""/43, 0x2b) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettfilter={0x2c, 0x2e, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xb}, {0x4, 0xffff}, {0xe, 0xb}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'gre0\x00', r6, 0x700, 0x40, 0xb3db, 0x8001, {{0x27, 0x4, 0x1, 0x1e, 0x9c, 0x66, 0x0, 0x88, 0x29, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0x27, 0xc3, [@multicast2, @private=0xa010100, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010102, @empty, @multicast1, @multicast1]}, @timestamp={0x44, 0x24, 0xc8, 0x0, 0x6, [0xffffffff, 0xbb, 0x9, 0x6, 0x6fc, 0xfff, 0x3, 0x9]}, @timestamp_prespec={0x44, 0x3c, 0xea, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2}, {@loopback, 0x8}, {@loopback, 0x7f}, {@rand_addr=0x64010100, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x5}]}]}}}}}) 4.566511342s ago: executing program 3 (id=11642): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) geteuid() 4.427782014s ago: executing program 3 (id=11645): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc00"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r2, 0x10, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@gettaction={0x14, 0x32, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000003c0)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4c0000, 0x0) 4.394570796s ago: executing program 2 (id=11646): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5}) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110bf000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 3.758317997s ago: executing program 5 (id=11650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a01000000e8ffbfa200000000000007020000f80000000085000000c30000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc28}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES64, @ANYRESDEC, @ANYBLOB="000000200000000000000000000000000000000000000000000200", @ANYBLOB="92bedc19ebf68e026af1d7909ce9149226dbf9545a5cb9d59c8221dcb8e8923f75458fc37e36505660e71a59b190d74d61dcea41b1cbfd111f3abda873046168928b559e4aedd3dd0b1e0cf2b6600669be720b3b7bf5e52449db116504bda67e71e3dc83a75941208b83bd075ca32ad6501124e3e098a592fe617d1749d3d4"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000001, 0x400000aa}, 0x0, 0x18000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0x10, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_usbip_server_init(0x1) write$usbip_server(r5, &(0x7f0000000300)=@ret_unlink={{0x4, 0x6, 0x0, 0x3141456f10587752, 0x7}, {0x1}}, 0x30) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000006c0)=@known='com.apple.FinderInfo\x00') 3.59626178s ago: executing program 0 (id=11651): mq_open(&(0x7f00000000c0)='\xd2/^\\&/\x00', 0x800, 0x4, &(0x7f0000000080)={0xad, 0x9, 0x9, 0x7}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x12) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r2, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='rpcgss_svc_authenticate\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 3.47383438s ago: executing program 3 (id=11652): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="78040000000000000d01000005000000ece538e8b62831eafcd9056be7c8a4f36891e0bd363476ba635f8d61e20221d10831df051097c214cf0e5f4345fa2c1eff6b0f8eedd3687f41fdd27b53aabf690ef80b8953b86b7943136212b1ec5c95809bc5d24c84f1ea4c6a1ff8b0dfc20e9b15115ddad4e233132bb07ee1577ae158a9ec4de6171ac0a7542ea221a3d97d80e7bed34fde3c64661a751d33a6d102ec5e611cee97f445ff21d4d3b360a17a83b7594ad811751ceb59ea8b5cde9525ac5679cf2e35907c0abbb85a25c776a98af56eff37c6627d00c51fd572f6113013d16a54d005b0f833f3c9cde6b897172b7ddc1b063781f822e06890c08ad3025e80b4a550a680e58053a8c33d2e1858f971a40788f6b287baa082a334140c0091f5f2d232ecbc86218a477e468e5be1b48d7787071b5c891cc3efde21a3b0337adeaa6a41ce8fd6edf1b0a47ca0cd6d785cc2c1c3803dde4d9749a10e21d489531efca60760b4ff2061dd7800c4f23c3d1e2bcd694fcc87261a2fdfee6baaa701c7083e9675a75b8d530f09f72d8d3fed4ed848ba18d11635893b52c84a6f0fdc9711b63cba52c9e33ac701261d5459b6ff53be036549b6d0e617d125a6a758370d0671f5f956918db7c4d0afb4f7369bad2a1cf0b7bcf130464bb031b092392a72e8234c1cc1d41190dad660bd1d9283d7d4c7f7410c83f6cfbd25b438097f3e5fd4a23e56c1995179797f03c6dfc5e8be4515fbc72ef9ecbb7cd80d4e71d2ac2f31396081eb9fee4b5d633aee32775a004f7aee9f33d81f9e469a1bef0a995ca8d50c2d853bfb1ebaf301d0c649b74827ae650b6a3bec85e2e9fd45e33bdd8c29cb0692d78a73700daf8eaff8efc06f8c07b3ce384ab1d925cdc440a4b85ace1edb6202df092fe6b37c11e10f3cb3d9e0cc19d55989766aec965403244c8dabfcdcc51c2297131307048ffc88b47d07e821656fa73395dd464d79ee82b3d4f47bd29f42f44f9521efdec7b0e8b5436d496ae046d72d69bc3d35a62829954fdf87fa10330a7864465ee86c540b2e1320e8453701898027ef86ad0d7c31c009f0e5f4c35eeb870ba4caa3708656b38c3797aaadb4b372acf23c05d55d98eb8c1c628e744a6a4439b5a515a2a083f8fbc71a2e6800c3ffec640d21d05a4b1f4548c5541f809e9766cce96b2c53b220361638c4dc43af7d5edb874bb48ca3c8a837fdccff0c8b50bc402da6262c5e3b344f313153fd455e4414f2b0e4a2bcf881b5615e399f8bbe6c3c20a314539b856de845a6e37e5f6925f3d5929eb59243b792834b0de7643077681b9113f5d192c4e96ebea0465901e5aa5da812b0d112089c048e29c523a753f7babe4e3de0bff0f220493bef0e7b76b051cecc325a8fb60a76880155ed33bbbc"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)={0x144, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5}) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110bf000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 3.4673684s ago: executing program 0 (id=11654): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ff"], 0x15) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="a2d018b4be210000000000000000a20800000039de007b8af8ff00000000bf0004000000000000d8df1351c43fc9c700000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x1c6, &(0x7f0000000a40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000f755e2fe3a00fc000008000000000000000000000000ff0200000000000000000000000000010401907800000500608bb91d00001100fe880000000000000000000000000001fe8800000000000000000000000000016200000000000000000100050200020000290001000000000000000103000000009ca17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc433137593009290d0dd4793ce67ea9f8769d3246f9441318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62091716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa305020000008a65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871f000d8b168e4b48529453d91cea4240010100a902fe13869f04c19200000000881896f58aed3522d4a8a2f7cd08843831c217ba18e3db3e3e144cec8b0daeaadbf7f78666edac709f8c7c2ba8c049ac6039ebad0e27f0dba06b815f6a7831bcb7cd26f06487bb0b7b76699acd67293b3f4d8c11a89ee19e479db2cb042bd523345cfdc0ca72824367442704a780a540eae7263720d2b11373f205733983d3f53d209b05bbedc081aa6ed960b6c18c35df785c737901869198c1ab7cf99e8bc22cf42728bde113a84bec4ce02c05d9671db6a4938938dcf3f39f1679758ffff6894ec4f6283e5126f368ee8eef4b00e1155ff7d4a0acd45616e41f6d74ec02fc34576c0cd9bdd46dc93ddaf85f6300f31d329e829a95445af6c8d4f972cf7ff8b4ad297996262e594b57aa36aeafe11c2efd996760ff0248d43868279f651294b5b49c7bfb1c145e1807452f84a4a2e4b488cd6945d2ab6b4136187b0c47b9e90705dff90abfe83027accbcf101f5e0540b4f760cd4d"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x4, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0xfd}]}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT=r7, @ANYRES16=r1, @ANYRES64=r6, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000200)={0x2, 'syz_tun\x00'}, 0x18) socket$isdn_base(0x22, 0x3, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r12, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 3.206087042s ago: executing program 2 (id=11656): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000023"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 2.85835729s ago: executing program 2 (id=11657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f0000000900)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f00000001c0), &(0x7f0000000300)) 2.302567185s ago: executing program 0 (id=11658): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5}) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110bf000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 1.997145319s ago: executing program 5 (id=11660): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x104) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000001000000000000000000", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="02000000050000000200"/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="680000004a000b0000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x68}}, 0x4000081) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5, 0x0, 0xb39e}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c}, &(0x7f0000000340), &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xff, 0x7, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @remote, 0xff40, 0x8, 0xfffffffd, 0x61}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0xa, &(0x7f00000002c0)=[{0x8000, 0x0, 0xf, 0x40}, {0x403, 0x0, 0xff, 0x8}, {0x6a03, 0x7, 0x8, 0x9}, {0x2, 0x1, 0x7f, 0x1}, {0x8000, 0x5, 0x7, 0x8}, {0xff3d, 0xda, 0x1, 0x4}, {0x3125, 0x7, 0x18, 0x520}, {0x10, 0x2, 0x7f, 0x4}, {0x4, 0x4, 0xf0, 0x69a}, {0x0, 0x0, 0x42, 0x4}]}) rt_sigpending(0x0, 0x0) 1.979175811s ago: executing program 2 (id=11661): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="420bb6873bffebb42b", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf157a95c96807936bdc6c70aff7fda23f3ee0ad4319dc3585a11b864ed6dc7dc6c4d39215238c5217b1fdd7c69bb02dfa21de5b35ddb2199c2f2134c9d0e3ec856dfae5e0e52506f183d6ef7d15e6852b88300b766ab705358375209bbe7e3756ba577d82e21dca", 0x6a}, {&(0x7f0000000740)="17b12a16a78691c3f183230cc5904abefd641e5668369e13ee287081481be182e0fbde757cf702f1e99b6db51a0db96eaf7484543d3333dc113fd7dc366eb2125d94c6b04b35444e3f93a571adb8192641e8d8e5c5780e2256dc671da679713dee003e55335a23f4780a66cd179ef6cdd76dd3343757bf9ea2197998490a2e0cc60d749a1074345a9e", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba4406c37b6c2e1662e1d37e5900e41d36d277c3616b73c16d4f56903b31d71bdb5137e8d3c7d31279cff9572da0f9e3fe1507188d69a979779e44d361571bafe5799eb6a677180ac595c871150624abc3c38ce1a4369aa6ea47e23ac6f5d98f55440f96647af83b1df3781ead1c", 0x6f}, {&(0x7f00000008c0)="7066dc66cff6f1d248399b17b5", 0xd}, {&(0x7f0000000900)="9a9e28610f5841d5fad44191e2e9c5cc70dc4301236e1d7903ed6e9b9963fb5d76c53baf500904106dbeebb395f0c6912db21635ae1bc6d062", 0x39}, {&(0x7f0000000940)="db34238ff8c24119302b2ed38d5edb804240484d6e3803875932c00ca77b8a680916c9e01b88f58ca4301fc55eeeee134a3ff0e0888762eb51e08225a15b1aab13dad338d43fcb8651bb7f359c810ded9bc47a11427f09022355425292c41f321b28cee590", 0x65}, {&(0x7f00000009c0)="9190e42e123ee37d19f2a627aec0b3d42e14db4a0954e630a80066086fc2c4f7a3e33e42e0a6d83e3dc38c5edc7741f5e557c64ede71fdf7b721aafa99a009a769092cbb0dd4345178f3b155f1f53d9085595471faa592bbdc3e3f28de545362d4cadcd1b86d3f8c9b8b0bd14e802453e93f", 0x72}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="b37e8d8e2701c513ff18766901d2a16406cbd2bf7405b3b3e3ea25b31806f699", 0x20}, {&(0x7f0000000d00)="987ed064a0f2ad23fbbaa7215ccbfedcd5587c725c02741a2a767b119e0f662893ce028ddac9056398d2236a52d332b4c03c542ff7e2bc0b4e427a168bcf96a84a71857005279c6cf404fa81b2c7e09bc11bcded6c934a346365338296e8ad8b6f0215a4bf190f318c3ea50746cb050db929f2f05e17a619ed12adbd69df1405214c6dd5a781411ba3210685f61b1f3bc306b3167b0bc927bfe0ef1c2ab69943a09bc06a2d0aafdbc82350f00fa6", 0xae}, {&(0x7f0000000dc0)="11b2f23552dbee5fdb5ce9f9ef0f34941be1b8d0cad6145b9ebb1bfe1e01a3694356a88dd4", 0x25}], 0x3}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341aef71a3fe3db7850827c331ac8ab17f3ee859f4a912321efca0c5a34a94dfcb1fb0cf43342e36c7faa7e0245bbb46ef714fc54601e7307b7e760a03dc5f40ae2509f6885fd394b9901a8434ce1084743c0ec70f5bfca1bfdf57aa010f39beefafb6b81805c61b8606d3077452491a22b15c844135f3c11d4", 0xa4}, {&(0x7f0000000fc0)="1435c475ff655bd18d564b6fd912016611af9363c8584d1b54e4a92348e3be2108ca9902ea932c22210b5344584f1b3be7a37b604e4675a6f5098b0e8a950edeb4d8445e534f", 0x46}, {&(0x7f0000001040)="0e85119382927d42bd8eccb5fc985cf2a0f62d61bc81a58e9c88", 0x1a}, {&(0x7f0000001080)="67ffd3610b524767a7760698340e3546bbd84f76794d0394f85a10164293e7e68b30c5ef4ea96e73a9b880d18090c35924611b1284407f1c553ca7207b5ffade1338b85187bc064978a5d9050eedee5f1f08aedb633f387e86545ac22e10716c2e", 0x61}], 0x4}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)="d3e7b4373ba9678b1eccb6697fa110ff29ffcc3ab370d555ea939ec5119563a01696675f867ade147f4009f1921311fd3576492ba947e1d2f9816805492ada848f0f96e70f325d913bde1fbb90049ff27b6e713a2d02a213025de8e06e76a041842cafd04327914a5f788adf419bbaf76c176e3486e526b6c524d8ae7974437268032ac2cc6bff94b8dd11b78ef4b0c31e90eaf8374e8af01d71f015c0705458c3c17cc29d8f7c0a71490a10ba5c41c1e2755095a643012eb6a4fe2bae130a", 0xbf}], 0x1}}], 0x6, 0x400c404) fsmount(r0, 0x0, 0x0) 1.944664343s ago: executing program 4 (id=11662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbeec, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000a40)={[{@fat=@discard}, {@fat=@nocase}, {@nodots}, {@fat=@flush}, {@fat=@nfs}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@dots}, {@fat=@check_normal}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x7fffffff}}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffbac}}, {@fat=@usefree}, {@fat=@check_normal}]}, 0x1, 0x23d, &(0x7f0000000040)="$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") r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1a8f488, &(0x7f00000002c0)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@prjquota}, {@user_xattr}], [{@uid_lt={'uid<', r6}}]}, 0x3, 0x577, &(0x7f0000001280)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x8) socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.820293673s ago: executing program 3 (id=11663): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_mount_image$ext4(&(0x7f0000001240)='ext4\x00', &(0x7f00000012c0)='./bus\x00', 0x404, &(0x7f0000001280)={[{@debug}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001200), 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3ffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x625c2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) io_uring_setup(0x39e1, &(0x7f0000000bc0)={0x0, 0x49fd, 0x12, 0x400, 0x320}) ftruncate(r6, 0x8800000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendfile(r7, r6, 0x0, 0x558410e8) close_range(r0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.389937648s ago: executing program 4 (id=11664): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ff"], 0x15) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="a2d018b4be210000000000000000a20800000039de007b8af8ff00000000bf0004000000000000d8df1351c43fc9c700000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x1c6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x4, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0xfd}]}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="ea49eaf5504242568d49024f1be3b962e2cf28602fd054d4f258a55d5ae7a3d49c4ab39b1bc74f2ac23a16b76c2fc7b3d4d2848134641ddc792fd31a15e8abb5c2c0d62c7f6a369ff62d27b4546cdf70ff20f1d50e5624703ef04dac7db675f3c0b76a7fcafa7868f2fd25daacfe0c99c94302f2df7e7d3ca05021cf371baf28539a2b2bf811d08bf4e863f22858b2eedf2a7105d8a9835f91e631bd056d8349bf6da8a23cea60a5e218bedee9a20f452e5a9ccaf0cef528908acaff07b2bde57e18e423ad70619a57", @ANYRES8, @ANYRESOCT=r7, @ANYRES16=r1, @ANYRES64=r6, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000200)={0x2, 'syz_tun\x00'}, 0x18) socket$isdn_base(0x22, 0x3, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r12, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.272064248s ago: executing program 0 (id=11665): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nodiscard}, {@usrjquota}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") 1.134466789s ago: executing program 5 (id=11666): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.132136649s ago: executing program 0 (id=11667): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000023"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 1.105723991s ago: executing program 5 (id=11668): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ff"], 0x15) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="a2d018b4be210000000000000000a20800000039de007b8af8ff00000000bf0004000000000000d8df1351c43fc9c700000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r4, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x1c6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x4, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0xfd}]}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT=r7, @ANYRES16=r1, @ANYRES64=r6, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000200)={0x2, 'syz_tun\x00'}, 0x18) socket$isdn_base(0x22, 0x3, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r12, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.052394405s ago: executing program 2 (id=11669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f0000000900)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.051756165s ago: executing program 5 (id=11670): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x85401) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) sync() openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x410242, 0x60) 947.949464ms ago: executing program 0 (id=11671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a01000000e8ffbfa200000000000007020000f80000000085000000c30000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc28}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES64, @ANYRESDEC, @ANYBLOB="000000200000000000000000000000000000000000000000000200", @ANYBLOB="92bedc19ebf68e026af1d7909ce9149226dbf9545a5cb9d59c8221dcb8e8923f75458fc37e36505660e71a59b190d74d61dcea41b1cbfd111f3abda873046168928b559e4aedd3dd0b1e0cf2b6600669be720b3b7bf5e52449db116504bda67e71e3dc83a75941208b83bd075ca32ad6501124e3e098a592fe617d1749d3d4"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x80000001, 0x400000aa}, 0x0, 0x18000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0x10, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1d, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_usbip_server_init(0x1) write$usbip_server(r5, &(0x7f0000000300)=@ret_unlink={{0x4, 0x6, 0x0, 0x3141456f10587752, 0x7}, {0x1}}, 0x30) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000006c0)=@known='com.apple.FinderInfo\x00') 891.126658ms ago: executing program 5 (id=11672): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f0000000900)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f00000001c0), &(0x7f0000000300)) 803.927125ms ago: executing program 3 (id=11673): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f00000192c0)={0x144, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='map_files\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r5}) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110bf000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 502.781219ms ago: executing program 4 (id=11674): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf5", 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x40000000015, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r4, 0x0, 0x400000002000000, 0x2) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x36) sendfile(r1, r0, 0x0, 0x3ffff) 258.181769ms ago: executing program 4 (id=11675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 205.211704ms ago: executing program 2 (id=11676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x104) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000001000000000000000000", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="02000000050000000200"/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="680000004a000b0000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x68}}, 0x4000081) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5, 0x0, 0xb39e}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c}, &(0x7f0000000340), &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xff, 0x7, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @remote, 0xff40, 0x8, 0xfffffffd, 0x61}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0xa, &(0x7f00000002c0)=[{0x8000, 0x0, 0xf, 0x40}, {0x403, 0x0, 0xff, 0x8}, {0x6a03, 0x7, 0x8, 0x9}, {0x2, 0x1, 0x7f, 0x1}, {0x8000, 0x5, 0x7, 0x8}, {0xff3d, 0xda, 0x1, 0x4}, {0x3125, 0x7, 0x18, 0x520}, {0x10, 0x2, 0x7f, 0x4}, {0x4, 0x4, 0xf0, 0x69a}, {0x0, 0x0, 0x42, 0x4}]}) rt_sigpending(0x0, 0x0) 165.396307ms ago: executing program 4 (id=11677): lstat(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000400000099050000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x7, 0x10}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%+9llu \x00'}, 0x20) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000b40)={0x0, r6}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2a, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x8, 0x0, 0x0, 0x7, 0x800}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x50, &(0x7f0000000600)=""/80, 0x41100, 0xf76d8021d75f174, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0x2, 0x5, 0xfffff6ae}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[r6, r6, r1, r6, r1, r10, r6, r1, r0], &(0x7f0000000a40)=[{0x1, 0x2, 0x0, 0x3}], 0x10, 0xfffffe3f, @value=r11}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r12, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) 0s ago: executing program 4 (id=11678): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nodiscard}, {@usrjquota}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") kernel console output (not intermixed with test programs): 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 773.360599][ T8276] RSP: 002b:00007f4adc5f7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 773.360701][ T8276] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4addb8d69f [ 773.360719][ T8276] RDX: 0000000000000001 RSI: 00007f4adc5f70a0 RDI: 0000000000000004 [ 773.360736][ T8276] RBP: 00007f4adc5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 773.360788][ T8276] R10: 0000000020004000 R11: 0000000000000293 R12: 0000000000000001 [ 773.360807][ T8276] R13: 00007f4adddb6038 R14: 00007f4adddb5fa0 R15: 00007ffc35147888 [ 773.360836][ T8276] [ 773.417423][ T8278] loop2: detected capacity change from 0 to 2048 [ 773.431894][ T8270] EXT4-fs (loop4): 2 truncates cleaned up [ 773.600233][ T8279] loop3: detected capacity change from 0 to 512 [ 773.607255][ T8279] EXT4-fs (loop3): Invalid log block size: 8 [ 773.620585][ T29] kauditd_printk_skb: 890 callbacks suppressed [ 773.620602][ T29] audit: type=1400 audit(773.589:80511): avc: denied { read write } for pid=8277 comm="syz.2.11174" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 773.649161][ T29] audit: type=1400 audit(773.589:80512): avc: denied { open } for pid=8277 comm="syz.2.11174" path="/347/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 773.678140][ T29] audit: type=1400 audit(773.599:80513): avc: denied { open } for pid=8290 comm="syz.5.11178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 773.697387][ T29] audit: type=1400 audit(773.599:80514): avc: denied { kernel } for pid=8290 comm="syz.5.11178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 773.726761][ T29] audit: type=1400 audit(773.699:80515): avc: denied { read write } for pid=8277 comm="syz.2.11174" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 773.750762][ T29] audit: type=1400 audit(773.699:80516): avc: denied { open } for pid=8277 comm="syz.2.11174" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 773.784232][ T8293] wg2: entered promiscuous mode [ 773.789161][ T8293] wg2: entered allmulticast mode [ 773.807400][ T29] audit: type=1400 audit(773.779:80517): avc: denied { name_connect } for pid=8277 comm="syz.2.11174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 773.834537][T18488] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 773.849497][T18488] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 773.861782][T18488] EXT4-fs (loop2): This should not happen!! Data will be lost [ 773.861782][T18488] [ 773.871561][T18488] EXT4-fs (loop2): Total free blocks count 0 [ 773.877576][T18488] EXT4-fs (loop2): Free/Dirty block details [ 773.883490][T18488] EXT4-fs (loop2): free_blocks=2415919504 [ 773.889278][T18488] EXT4-fs (loop2): dirty_blocks=3648 [ 773.894595][T18488] EXT4-fs (loop2): Block reservation details [ 773.900594][T18488] EXT4-fs (loop2): i_reserved_data_blocks=243 [ 773.910855][T18488] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 773.923506][T18488] EXT4-fs (loop2): This should not happen!! Data will be lost [ 773.923506][T18488] [ 773.981704][ T8303] loop4: detected capacity change from 0 to 512 [ 773.988758][ T8303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 774.016702][ T8303] EXT4-fs (loop4): 1 truncate cleaned up [ 774.307845][ T8325] loop3: detected capacity change from 0 to 512 [ 774.316549][ T29] audit: type=1400 audit(774.179:80518): avc: denied { create } for pid=8310 comm="syz.4.11183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 774.335833][ T29] audit: type=1400 audit(774.179:80519): avc: denied { bind } for pid=8310 comm="syz.4.11183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 774.355000][ T29] audit: type=1400 audit(774.179:80520): avc: denied { listen } for pid=8310 comm="syz.4.11183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 774.393113][ T8325] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 774.447032][ T8323] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 774.453767][ T8323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 774.461360][ T8323] vhci_hcd vhci_hcd.0: Device attached [ 774.547475][ T8325] EXT4-fs (loop3): 1 truncate cleaned up [ 774.703750][ T8389] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 774.889682][ T8326] vhci_hcd: connection reset by peer [ 774.900040][ T3638] vhci_hcd: stop threads [ 774.904503][ T3638] vhci_hcd: release socket [ 774.909012][ T3638] vhci_hcd: disconnect device [ 775.080431][ T8337] loop4: detected capacity change from 0 to 2048 [ 775.140189][ T8339] loop3: detected capacity change from 0 to 2048 [ 775.214150][ T8339] loop3: p1 < > p4 [ 775.219191][ T8339] loop3: p4 size 8388608 extends beyond EOD, truncated [ 775.274618][ T8337] loop4: unable to read partition table [ 775.280473][ T8337] loop4: partition table beyond EOD, truncated [ 775.286715][ T8337] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 775.480168][ T8353] loop4: detected capacity change from 0 to 512 [ 775.495810][ T8353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 775.521194][ T8353] EXT4-fs (loop4): 1 truncate cleaned up [ 775.648226][ T8360] wireguard0: entered promiscuous mode [ 775.653821][ T8360] wireguard0: entered allmulticast mode [ 775.752467][ T8360] loop3: detected capacity change from 0 to 512 [ 775.762416][ T8360] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11197: bg 0: block 393: padding at end of block bitmap is not set [ 775.779240][ T8360] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 775.788413][ T8360] EXT4-fs (loop3): 2 truncates cleaned up [ 775.850690][ T8374] netlink: 312 bytes leftover after parsing attributes in process `syz.0.11200'. [ 776.164816][ T8419] usb usb8: usbfs: process 8419 (syz.4.11206) did not claim interface 0 before use [ 776.425289][ T8422] lo speed is unknown, defaulting to 1000 [ 776.431568][ T8422] lo speed is unknown, defaulting to 1000 [ 776.921729][ T8436] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 776.928376][ T8436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 776.936109][ T8436] vhci_hcd vhci_hcd.0: Device attached [ 776.943919][ T8437] vhci_hcd: cannot find the pending unlink 6 [ 777.028377][ T8440] netlink: 312 bytes leftover after parsing attributes in process `syz.5.11213'. [ 777.069514][ T8442] loop4: detected capacity change from 0 to 512 [ 777.109942][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11213'. [ 777.120030][ T8442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 777.136716][ T8442] EXT4-fs (loop4): 1 truncate cleaned up [ 777.183936][T21730] usb 7-1: new low-speed USB device number 17 using vhci_hcd [ 777.359441][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11215'. [ 777.616349][ T8437] vhci_hcd: connection reset by peer [ 777.640909][ T3638] vhci_hcd: stop threads [ 777.645343][ T3638] vhci_hcd: release socket [ 777.649873][ T3638] vhci_hcd: disconnect device [ 778.106236][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11219'. [ 778.131019][ T8473] wireguard0: entered promiscuous mode [ 778.136725][ T8473] wireguard0: entered allmulticast mode [ 778.556513][ T8489] usb usb8: usbfs: process 8489 (syz.5.11223) did not claim interface 0 before use [ 778.624639][ T29] kauditd_printk_skb: 1008 callbacks suppressed [ 778.624655][ T29] audit: type=1326 audit(778.599:81530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.11220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4addb85ba7 code=0x7ffc0000 [ 778.657113][ T29] audit: type=1326 audit(778.599:81529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.11219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc36b085ba7 code=0x7ffc0000 [ 778.680613][ T29] audit: type=1326 audit(778.629:81531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.11219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc36b02add9 code=0x7ffc0000 [ 778.703587][ T29] audit: type=1326 audit(778.629:81532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.11219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc36b085ba7 code=0x7ffc0000 [ 778.726599][ T29] audit: type=1326 audit(778.629:81533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.11219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc36b02add9 code=0x7ffc0000 [ 778.749506][ T29] audit: type=1326 audit(778.629:81534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.11219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 778.772352][ T29] audit: type=1326 audit(778.629:81535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.11219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc36b085ba7 code=0x7ffc0000 [ 778.795232][ T29] audit: type=1326 audit(778.629:81536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.11219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc36b02add9 code=0x7ffc0000 [ 778.818193][ T29] audit: type=1326 audit(778.629:81537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.4.11219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 778.841313][ T29] audit: type=1326 audit(778.629:81538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.11220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4addb2add9 code=0x7ffc0000 [ 779.043864][ T8511] loop4: detected capacity change from 0 to 512 [ 779.051639][ T8511] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 779.063066][ T8511] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 779.119776][ T8521] loop4: detected capacity change from 0 to 512 [ 779.127210][ T8521] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 779.140601][ T8521] EXT4-fs (loop4): 1 truncate cleaned up [ 779.235507][ T8532] loop4: detected capacity change from 0 to 2048 [ 779.240215][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11231'. [ 779.310598][ T8532] loop4: unable to read partition table [ 779.316871][ T8532] loop4: partition table beyond EOD, truncated [ 779.323097][ T8532] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 779.393698][ T8539] loop4: detected capacity change from 0 to 2048 [ 779.454187][ T8539] loop4: p1 < > p4 [ 779.459115][ T8539] loop4: p4 size 8388608 extends beyond EOD, truncated [ 779.531163][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11235'. [ 779.620245][ T8553] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 779.626898][ T8553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 779.634805][ T8553] vhci_hcd vhci_hcd.0: Device attached [ 779.641507][ T8554] vhci_hcd: cannot find the pending unlink 6 [ 780.282480][ T8554] vhci_hcd: connection closed [ 780.283024][T18488] vhci_hcd: stop threads [ 780.292192][T18488] vhci_hcd: release socket [ 780.296679][T18488] vhci_hcd: disconnect device [ 780.416560][ T8389] usb 11-1: enqueue for inactive port 0 [ 780.419872][ T8571] loop2: detected capacity change from 0 to 512 [ 780.422259][ T8389] usb 11-1: enqueue for inactive port 0 [ 780.496593][ T8571] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 780.535159][ T8578] wireguard0: entered promiscuous mode [ 780.540702][ T8578] wireguard0: entered allmulticast mode [ 780.624274][ T8571] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 780.653483][ T8584] loop4: detected capacity change from 0 to 512 [ 780.665218][ T8585] usb usb8: usbfs: process 8585 (syz.3.11243) did not claim interface 0 before use [ 780.679818][ T8584] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11242: bg 0: block 393: padding at end of block bitmap is not set [ 780.697816][ T8584] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 780.707565][ T8584] EXT4-fs (loop4): 2 truncates cleaned up [ 780.878473][ T8588] wireguard0: entered promiscuous mode [ 780.884059][ T8588] wireguard0: entered allmulticast mode [ 781.122630][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11248'. [ 781.148056][ T8389] vhci_hcd: vhci_device speed not set [ 781.172434][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11249'. [ 781.194600][ T8604] loop2: detected capacity change from 0 to 512 [ 781.205669][ T8604] FAULT_INJECTION: forcing a failure. [ 781.205669][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 781.218370][ T8604] CPU: 1 UID: 0 PID: 8604 Comm: syz.2.11250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 781.218457][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.218470][ T8604] Call Trace: [ 781.218476][ T8604] [ 781.218484][ T8604] __dump_stack+0x1d/0x30 [ 781.218502][ T8604] dump_stack_lvl+0xe8/0x140 [ 781.218571][ T8604] dump_stack+0x15/0x1b [ 781.218585][ T8604] should_fail_ex+0x265/0x280 [ 781.218654][ T8604] should_failslab+0x8c/0xb0 [ 781.218723][ T8604] kmem_cache_alloc_noprof+0x50/0x310 [ 781.218748][ T8604] ? getname_flags+0x80/0x3b0 [ 781.218773][ T8604] getname_flags+0x80/0x3b0 [ 781.218796][ T8604] __se_sys_quotactl+0x16a/0x670 [ 781.218885][ T8604] __x64_sys_quotactl+0x55/0x70 [ 781.219012][ T8604] x64_sys_call+0x15d6/0x2ff0 [ 781.219032][ T8604] do_syscall_64+0xd2/0x200 [ 781.219056][ T8604] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 781.219076][ T8604] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 781.219098][ T8604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.219141][ T8604] RIP: 0033:0x7f4addb8ebe9 [ 781.219154][ T8604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.219176][ T8604] RSP: 002b:00007f4adc5f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 781.219193][ T8604] RAX: ffffffffffffffda RBX: 00007f4adddb5fa0 RCX: 00007f4addb8ebe9 [ 781.219274][ T8604] RDX: 0000000000000000 RSI: 0000200000000800 RDI: ffffffff80000801 [ 781.219285][ T8604] RBP: 00007f4adc5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 781.219295][ T8604] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001 [ 781.219306][ T8604] R13: 00007f4adddb6038 R14: 00007f4adddb5fa0 R15: 00007ffc35147888 [ 781.219323][ T8604] [ 781.413835][T30417] EXT4-fs unmount: 39 callbacks suppressed [ 781.413853][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.470252][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11252'. [ 781.474513][ T8612] loop4: detected capacity change from 0 to 1024 [ 781.486261][T31226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.519830][ T8612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 781.543143][ T8612] System zones: 0-1, 3-36 [ 781.559909][ T8612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.611490][ T8612] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.11251: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 781.676652][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.693745][ T8629] wireguard0: entered promiscuous mode [ 781.699310][ T8629] wireguard0: entered allmulticast mode [ 781.801426][ T8629] loop2: detected capacity change from 0 to 512 [ 781.812503][ T8629] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11256: bg 0: block 393: padding at end of block bitmap is not set [ 781.830024][ T8629] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 781.840425][ T8629] EXT4-fs (loop2): 2 truncates cleaned up [ 781.850507][ T8629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.898447][ T8655] loop4: detected capacity change from 0 to 2048 [ 781.934146][ T8655] loop4: p1 < > p4 [ 781.938553][ T8655] loop4: p4 size 8388608 extends beyond EOD, truncated [ 782.040845][ T8665] wireguard0: entered promiscuous mode [ 782.046452][ T8665] wireguard0: entered allmulticast mode [ 782.107944][ T8672] loop5: detected capacity change from 0 to 512 [ 782.145833][ T8672] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11261: bg 0: block 393: padding at end of block bitmap is not set [ 782.163884][ T8672] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 782.174141][ T8672] EXT4-fs (loop5): 2 truncates cleaned up [ 782.181028][ T8672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.202247][ T8671] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 782.208906][ T8671] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 782.216538][ T8671] vhci_hcd vhci_hcd.0: Device attached [ 782.223868][ T8675] vhci_hcd: cannot find the pending unlink 6 [ 782.297535][T21730] usb 7-1: enqueue for inactive port 0 [ 782.336048][ T2948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.349701][T21730] usb 7-1: enqueue for inactive port 0 [ 782.449230][T21730] vhci_hcd: vhci_device speed not set [ 782.493686][T21728] usb 9-1: new low-speed USB device number 11 using vhci_hcd [ 782.541837][ T8685] FAULT_INJECTION: forcing a failure. [ 782.541837][ T8685] name failslab, interval 1, probability 0, space 0, times 0 [ 782.554563][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.3.11263 Not tainted syzkaller #0 PREEMPT(voluntary) [ 782.554593][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 782.554683][ T8685] Call Trace: [ 782.554690][ T8685] [ 782.554699][ T8685] __dump_stack+0x1d/0x30 [ 782.554787][ T8685] dump_stack_lvl+0xe8/0x140 [ 782.554805][ T8685] dump_stack+0x15/0x1b [ 782.554821][ T8685] should_fail_ex+0x265/0x280 [ 782.554845][ T8685] should_failslab+0x8c/0xb0 [ 782.554876][ T8685] kmem_cache_alloc_noprof+0x50/0x310 [ 782.554963][ T8685] ? getname_flags+0x80/0x3b0 [ 782.554990][ T8685] ? vfs_write+0x7e8/0x960 [ 782.555014][ T8685] getname_flags+0x80/0x3b0 [ 782.555048][ T8685] user_path_at+0x28/0x130 [ 782.555093][ T8685] vfs_open_tree+0xef/0x540 [ 782.555122][ T8685] __x64_sys_open_tree+0x45/0xc0 [ 782.555199][ T8685] x64_sys_call+0x2a87/0x2ff0 [ 782.555245][ T8685] do_syscall_64+0xd2/0x200 [ 782.555275][ T8685] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 782.555312][ T8685] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 782.555354][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.555375][ T8685] RIP: 0033:0x7fb58113ebe9 [ 782.555389][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.555408][ T8685] RSP: 002b:00007fb57fb9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 782.555451][ T8685] RAX: ffffffffffffffda RBX: 00007fb581365fa0 RCX: 00007fb58113ebe9 [ 782.555547][ T8685] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: ffffffffffffff9c [ 782.555561][ T8685] RBP: 00007fb57fb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 782.555591][ T8685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.555607][ T8685] R13: 00007fb581366038 R14: 00007fb581365fa0 R15: 00007ffd9443d5b8 [ 782.555631][ T8685] [ 782.872190][ T8675] vhci_hcd: connection reset by peer [ 782.921640][ T31] vhci_hcd: stop threads [ 782.925978][ T31] vhci_hcd: release socket [ 782.930419][ T31] vhci_hcd: disconnect device [ 783.057473][ T8699] FAULT_INJECTION: forcing a failure. [ 783.057473][ T8699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.070594][ T8699] CPU: 0 UID: 0 PID: 8699 Comm: syz.3.11266 Not tainted syzkaller #0 PREEMPT(voluntary) [ 783.070627][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.070720][ T8699] Call Trace: [ 783.070727][ T8699] [ 783.070736][ T8699] __dump_stack+0x1d/0x30 [ 783.070758][ T8699] dump_stack_lvl+0xe8/0x140 [ 783.070777][ T8699] dump_stack+0x15/0x1b [ 783.070792][ T8699] should_fail_ex+0x265/0x280 [ 783.070814][ T8699] should_fail+0xb/0x20 [ 783.070866][ T8699] should_fail_usercopy+0x1a/0x20 [ 783.070893][ T8699] _copy_from_user+0x1c/0xb0 [ 783.071026][ T8699] ___sys_sendmsg+0xc1/0x1d0 [ 783.071066][ T8699] __x64_sys_sendmsg+0xd4/0x160 [ 783.071100][ T8699] x64_sys_call+0x191e/0x2ff0 [ 783.071127][ T8699] do_syscall_64+0xd2/0x200 [ 783.071157][ T8699] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 783.071266][ T8699] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 783.071298][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.071322][ T8699] RIP: 0033:0x7fb58113ebe9 [ 783.071411][ T8699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.071434][ T8699] RSP: 002b:00007fb57fb9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.071458][ T8699] RAX: ffffffffffffffda RBX: 00007fb581365fa0 RCX: 00007fb58113ebe9 [ 783.071475][ T8699] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000004 [ 783.071490][ T8699] RBP: 00007fb57fb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 783.071505][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.071585][ T8699] R13: 00007fb581366038 R14: 00007fb581365fa0 R15: 00007ffd9443d5b8 [ 783.071609][ T8699] [ 783.293930][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11268'. [ 783.418321][T31226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.576947][ T8713] usb usb8: usbfs: process 8713 (syz.5.11262) did not claim interface 0 before use [ 783.635557][ T29] kauditd_printk_skb: 1619 callbacks suppressed [ 783.635576][ T29] audit: type=1326 audit(783.609:83158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2110b65ba7 code=0x7ffc0000 [ 783.692452][ T29] audit: type=1326 audit(783.639:83159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2110b0add9 code=0x7ffc0000 [ 783.715601][ T29] audit: type=1326 audit(783.639:83160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2110b65ba7 code=0x7ffc0000 [ 783.738605][ T29] audit: type=1326 audit(783.639:83161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2110b0add9 code=0x7ffc0000 [ 783.761758][ T29] audit: type=1326 audit(783.639:83162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2110b6ebe9 code=0x7ffc0000 [ 783.784577][ T29] audit: type=1326 audit(783.649:83163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2110b65ba7 code=0x7ffc0000 [ 783.807833][ T29] audit: type=1326 audit(783.649:83164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2110b0add9 code=0x7ffc0000 [ 783.830958][ T29] audit: type=1326 audit(783.649:83165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2110b6ebe9 code=0x7ffc0000 [ 783.837227][ T8717] loop2: detected capacity change from 0 to 2048 [ 783.853767][ T29] audit: type=1326 audit(783.659:83166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2110b65ba7 code=0x7ffc0000 [ 783.883034][ T29] audit: type=1326 audit(783.659:83167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.0.11268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2110b0add9 code=0x7ffc0000 [ 783.974145][ T8717] loop2: p1 < > p4 [ 783.992784][ T8717] loop2: p4 size 8388608 extends beyond EOD, truncated [ 784.564601][ T8729] loop5: detected capacity change from 0 to 512 [ 784.589841][ T8729] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 784.611014][ T8729] EXT4-fs (loop5): 1 truncate cleaned up [ 784.629149][ T8729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.739552][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11283'. [ 784.766376][ T2948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.779687][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11282'. [ 784.793889][ T8749] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11280'. [ 785.036480][ T8757] netlink: 312 bytes leftover after parsing attributes in process `syz.3.11285'. [ 785.194233][ T8757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11285'. [ 785.336766][ T8778] usb usb8: usbfs: process 8778 (syz.3.11287) did not claim interface 0 before use [ 785.437603][ T8788] loop5: detected capacity change from 0 to 2048 [ 785.503378][ T8790] loop2: detected capacity change from 0 to 2048 [ 785.528170][ T8790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.542176][ T8790] FAULT_INJECTION: forcing a failure. [ 785.542176][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.555408][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.2.11289 Not tainted syzkaller #0 PREEMPT(voluntary) [ 785.555444][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 785.555460][ T8790] Call Trace: [ 785.555469][ T8790] [ 785.555479][ T8790] __dump_stack+0x1d/0x30 [ 785.555509][ T8790] dump_stack_lvl+0xe8/0x140 [ 785.555530][ T8790] dump_stack+0x15/0x1b [ 785.555628][ T8790] should_fail_ex+0x265/0x280 [ 785.555656][ T8790] should_fail+0xb/0x20 [ 785.555675][ T8790] should_fail_usercopy+0x1a/0x20 [ 785.555733][ T8790] _copy_from_user+0x1c/0xb0 [ 785.555832][ T8790] sctp_setsockopt+0x154/0xe30 [ 785.555865][ T8790] sock_common_setsockopt+0x69/0x80 [ 785.555899][ T8790] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 785.556024][ T8790] __sys_setsockopt+0x181/0x200 [ 785.556047][ T8790] __x64_sys_setsockopt+0x64/0x80 [ 785.556081][ T8790] x64_sys_call+0x20ec/0x2ff0 [ 785.556107][ T8790] do_syscall_64+0xd2/0x200 [ 785.556147][ T8790] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 785.556245][ T8790] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 785.556277][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.556360][ T8790] RIP: 0033:0x7f4addb8ebe9 [ 785.556379][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.556403][ T8790] RSP: 002b:00007f4adc5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 785.556427][ T8790] RAX: ffffffffffffffda RBX: 00007f4adddb5fa0 RCX: 00007f4addb8ebe9 [ 785.556443][ T8790] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000004 [ 785.556463][ T8790] RBP: 00007f4adc5f7090 R08: 0000000000000008 R09: 0000000000000000 [ 785.556479][ T8790] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 785.556494][ T8790] R13: 00007f4adddb6038 R14: 00007f4adddb5fa0 R15: 00007ffc35147888 [ 785.556513][ T8790] [ 785.768212][ T8788] loop5: unable to read partition table [ 785.769465][T31226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.776324][ T8788] loop5: partition table beyond EOD, truncated [ 785.789123][ T8788] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 785.838400][ T8798] loop2: detected capacity change from 0 to 128 [ 785.875175][ T8803] loop5: detected capacity change from 0 to 2048 [ 785.888304][ T8803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.896581][ T8810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 785.907762][ T8810] IPv6: NLM_F_CREATE should be set when creating new route [ 785.920002][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11294'. [ 785.933834][ T2948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.140669][ T8837] loop3: detected capacity change from 0 to 512 [ 786.155354][ T8837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 786.170770][ T8837] EXT4-fs (loop3): 1 truncate cleaned up [ 786.193085][ T8837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.212434][ T8844] wireguard0: entered promiscuous mode [ 786.218084][ T8844] wireguard0: entered allmulticast mode [ 786.768467][ T8854] loop2: detected capacity change from 0 to 512 [ 786.802585][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.840256][ T8857] __nla_validate_parse: 3 callbacks suppressed [ 786.840276][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11302'. [ 786.870038][ T8860] loop4: detected capacity change from 0 to 2048 [ 786.944330][ T8854] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11301: bg 0: block 393: padding at end of block bitmap is not set [ 786.970387][ T31] bridge_slave_1: left allmulticast mode [ 786.976157][ T31] bridge_slave_1: left promiscuous mode [ 786.981859][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.998343][ T8854] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 787.008359][ T31] bridge_slave_0: left allmulticast mode [ 787.014138][ T31] bridge_slave_0: left promiscuous mode [ 787.019803][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.027756][ T8854] EXT4-fs (loop2): 2 truncates cleaned up [ 787.034368][ T8854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.062139][ T31] team0: Port device geneve1 removed [ 787.092530][ T8860] loop4: unable to read partition table [ 787.099281][ T8860] loop4: partition table beyond EOD, truncated [ 787.105581][ T8860] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 787.159063][ T8879] FAULT_INJECTION: forcing a failure. [ 787.159063][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 787.171820][ T8879] CPU: 0 UID: 0 PID: 8879 Comm: syz.4.11308 Not tainted syzkaller #0 PREEMPT(voluntary) [ 787.171850][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.171865][ T8879] Call Trace: [ 787.171920][ T8879] [ 787.171928][ T8879] __dump_stack+0x1d/0x30 [ 787.171953][ T8879] dump_stack_lvl+0xe8/0x140 [ 787.171970][ T8879] dump_stack+0x15/0x1b [ 787.172011][ T8879] should_fail_ex+0x265/0x280 [ 787.172030][ T8879] should_failslab+0x8c/0xb0 [ 787.172058][ T8879] kmem_cache_alloc_noprof+0x50/0x310 [ 787.172157][ T8879] ? audit_log_start+0x365/0x6c0 [ 787.172240][ T8879] audit_log_start+0x365/0x6c0 [ 787.172269][ T8879] audit_seccomp+0x48/0x100 [ 787.172294][ T8879] ? __seccomp_filter+0x68c/0x10d0 [ 787.172313][ T8879] __seccomp_filter+0x69d/0x10d0 [ 787.172365][ T8879] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 787.172389][ T8879] ? vfs_write+0x7e8/0x960 [ 787.172408][ T8879] ? __rcu_read_unlock+0x4f/0x70 [ 787.172457][ T8879] ? __fget_files+0x184/0x1c0 [ 787.172541][ T8879] __secure_computing+0x82/0x150 [ 787.172560][ T8879] syscall_trace_enter+0xcf/0x1e0 [ 787.172582][ T8879] do_syscall_64+0xac/0x200 [ 787.172605][ T8879] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 787.172626][ T8879] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 787.172716][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.172743][ T8879] RIP: 0033:0x7fc36b08ebe9 [ 787.172780][ T8879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.172796][ T8879] RSP: 002b:00007fc369af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000061 [ 787.172812][ T8879] RAX: ffffffffffffffda RBX: 00007fc36b2b5fa0 RCX: 00007fc36b08ebe9 [ 787.172845][ T8879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 787.172856][ T8879] RBP: 00007fc369af7090 R08: 0000000000000000 R09: 0000000000000000 [ 787.172866][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.172876][ T8879] R13: 00007fc36b2b6038 R14: 00007fc36b2b5fa0 R15: 00007fffdb220718 [ 787.172962][ T8879] [ 787.391484][ T31]  (unregistering): (slave ªªªªªª): Releasing backup interface [ 787.400627][T31226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.412259][ T31]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.421979][ T31]  (unregistering): Released all slaves [ 787.437575][ T31] bond1 (unregistering): Released all slaves [ 787.452835][ T8867] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 787.460677][ T8868] tipc: New replicast peer: 255.255.255.255 [ 787.466998][ T8868] tipc: Enabled bearer , priority 10 [ 787.526079][ T31] tipc: Left network mode [ 787.532344][ T8889] loop4: detected capacity change from 0 to 2048 [ 787.547016][ T31] hsr_slave_0: left promiscuous mode [ 787.552783][ T31] hsr_slave_1: left promiscuous mode [ 787.560058][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.567775][T21728] usb 9-1: enqueue for inactive port 0 [ 787.573581][T21728] usb 9-1: enqueue for inactive port 0 [ 787.579740][ T8889] loop4: p1 < > p4 [ 787.579775][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.584297][ T8889] loop4: p4 size 8388608 extends beyond EOD, truncated [ 787.643565][ T31] team0 (unregistering): Port device team_slave_1 removed [ 787.654687][T21728] vhci_hcd: vhci_device speed not set [ 787.655784][ T8897] usb usb8: usbfs: process 8897 (syz.3.11311) did not claim interface 0 before use [ 787.669791][ T31] team0 (unregistering): Port device team_slave_0 removed [ 787.793699][ T8906] FAULT_INJECTION: forcing a failure. [ 787.793699][ T8906] name failslab, interval 1, probability 0, space 0, times 0 [ 787.806649][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.2.11317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 787.806674][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.806685][ T8906] Call Trace: [ 787.806692][ T8906] [ 787.806699][ T8906] __dump_stack+0x1d/0x30 [ 787.806719][ T8906] dump_stack_lvl+0xe8/0x140 [ 787.806735][ T8906] dump_stack+0x15/0x1b [ 787.806773][ T8906] should_fail_ex+0x265/0x280 [ 787.806791][ T8906] should_failslab+0x8c/0xb0 [ 787.806842][ T8906] kmem_cache_alloc_noprof+0x50/0x310 [ 787.806874][ T8906] ? security_file_alloc+0x32/0x100 [ 787.806902][ T8906] ? security_file_alloc+0x1c/0x100 [ 787.806950][ T8906] security_file_alloc+0x32/0x100 [ 787.807049][ T8906] init_file+0x5c/0x1d0 [ 787.807080][ T8906] alloc_empty_file+0x8b/0x200 [ 787.807105][ T8906] path_openat+0x68/0x2170 [ 787.807122][ T8906] ? avc_has_perm+0xf7/0x180 [ 787.807146][ T8906] ? selinux_file_open+0x2df/0x330 [ 787.807177][ T8906] ? __rcu_read_unlock+0x4f/0x70 [ 787.807196][ T8906] ? mntput_no_expire+0x6f/0x460 [ 787.807227][ T8906] do_filp_open+0x109/0x230 [ 787.807253][ T8906] do_open_execat+0xd8/0x260 [ 787.807271][ T8906] open_exec+0x3d/0x60 [ 787.807285][ T8906] bm_register_write+0x8e9/0xbf0 [ 787.807321][ T8906] ? __pfx_bm_register_write+0x10/0x10 [ 787.807358][ T8906] vfs_write+0x269/0x960 [ 787.807375][ T8906] ? bpf_get_current_ancestor_cgroup_id+0xd5/0xf0 [ 787.807405][ T8906] ? __rcu_read_unlock+0x4f/0x70 [ 787.807431][ T8906] ? __fget_files+0x184/0x1c0 [ 787.807534][ T8906] ksys_write+0xda/0x1a0 [ 787.807561][ T8906] __x64_sys_write+0x40/0x50 [ 787.807581][ T8906] x64_sys_call+0x27fe/0x2ff0 [ 787.807599][ T8906] do_syscall_64+0xd2/0x200 [ 787.807697][ T8906] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 787.807783][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.807802][ T8906] RIP: 0033:0x7f4addb8ebe9 [ 787.807815][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.807830][ T8906] RSP: 002b:00007f4adc5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 787.807917][ T8906] RAX: ffffffffffffffda RBX: 00007f4adddb5fa0 RCX: 00007f4addb8ebe9 [ 787.807929][ T8906] RDX: 000000000000002f RSI: 00002000000000c0 RDI: 0000000000000003 [ 787.808015][ T8906] RBP: 00007f4adc5f7090 R08: 0000000000000000 R09: 0000000000000000 [ 787.808027][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.808038][ T8906] R13: 00007f4adddb6038 R14: 00007f4adddb5fa0 R15: 00007ffc35147888 [ 787.808061][ T8906] [ 787.808071][ T8906] binfmt_misc: register: failed to install interpreter file ./file1 [ 788.112322][ T8913] loop2: detected capacity change from 0 to 2048 [ 788.144167][ T8913] loop2: p1 < > p4 [ 788.148854][ T8913] loop2: p4 size 8388608 extends beyond EOD, truncated [ 788.212262][ T8922] wireguard0: entered promiscuous mode [ 788.218116][ T8922] wireguard0: entered allmulticast mode [ 788.264851][ T8925] loop5: detected capacity change from 0 to 512 [ 788.273541][ T8925] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11324: bg 0: block 393: padding at end of block bitmap is not set [ 788.288635][ T8925] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 788.298989][ T8925] EXT4-fs (loop5): 2 truncates cleaned up [ 788.305251][ T8925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.335446][ T8928] loop2: detected capacity change from 0 to 2048 [ 788.375734][ T8928] loop2: p1 < > p4 [ 788.389909][ T8928] loop2: p4 size 8388608 extends beyond EOD, truncated [ 788.407277][ T2948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.431439][ T8933] netlink: 312 bytes leftover after parsing attributes in process `syz.5.11327'. [ 788.462861][ T8933] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11327'. [ 788.503886][ T8940] netlink: 312 bytes leftover after parsing attributes in process `syz.2.11329'. [ 788.530094][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11329'. [ 788.582152][ T8948] loop4: detected capacity change from 0 to 2048 [ 788.588679][ T1100] tipc: Node number set to 1973109056 [ 788.615827][ T8948] loop4: p1 < > p4 [ 788.622405][ T8948] loop4: p4 size 8388608 extends beyond EOD, truncated [ 788.645549][ T29] kauditd_printk_skb: 1062 callbacks suppressed [ 788.645593][ T29] audit: type=1326 audit(788.619:84228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb581135ba7 code=0x7ffc0000 [ 788.675067][ T29] audit: type=1326 audit(788.619:84229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5810dadd9 code=0x7ffc0000 [ 788.698202][ T29] audit: type=1326 audit(788.619:84230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 788.735966][ T29] audit: type=1326 audit(788.699:84231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb581135ba7 code=0x7ffc0000 [ 788.759020][ T29] audit: type=1326 audit(788.699:84232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5810dadd9 code=0x7ffc0000 [ 788.782261][ T29] audit: type=1326 audit(788.699:84233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 788.805242][ T29] audit: type=1326 audit(788.699:84234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb581135ba7 code=0x7ffc0000 [ 788.828284][ T29] audit: type=1326 audit(788.699:84235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5810dadd9 code=0x7ffc0000 [ 788.841037][ T8955] usb usb8: usbfs: process 8955 (syz.5.11336) did not claim interface 0 before use [ 788.851368][ T29] audit: type=1326 audit(788.699:84236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 788.871493][ T8960] netdevsim netdevsim4: Direct firmware load for x failed with error -2 [ 788.904077][ T29] audit: type=1326 audit(788.709:84237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.11326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb581135ba7 code=0x7ffc0000 [ 788.953337][ T8962] wireguard0: entered promiscuous mode [ 788.959044][ T8962] wireguard0: entered allmulticast mode [ 788.977535][ T8965] loop4: detected capacity change from 0 to 1024 [ 788.985854][ T8965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 788.997107][ T8965] System zones: 0-1, 3-36 [ 789.006198][ T8969] loop2: detected capacity change from 0 to 512 [ 789.017380][ T8965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.020106][ T8969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11338: bg 0: block 393: padding at end of block bitmap is not set [ 789.046606][ T8973] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 789.057114][ T8973] SELinux: failed to load policy [ 789.057162][ T8969] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 789.080633][ T8969] EXT4-fs (loop2): 2 truncates cleaned up [ 789.088171][ T8969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.103374][ T8975] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 789.113299][ T8975] SELinux: failed to load policy [ 789.189316][T31226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.203142][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11343'. [ 789.291047][ T8986] netlink: 312 bytes leftover after parsing attributes in process `syz.3.11346'. [ 789.309966][ T8986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11346'. [ 789.334476][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.496428][ T9005] smc: net device bond0 applied user defined pnetid SYZ0 [ 789.503814][ T8993] loop4: detected capacity change from 0 to 2048 [ 789.594210][ T8993] loop4: p1 < > p4 [ 789.599498][ T8993] loop4: p4 size 8388608 extends beyond EOD, truncated [ 789.682670][ T9011] netdevsim netdevsim4: Direct firmware load for x failed with error -2 [ 789.773897][ T9008] lo speed is unknown, defaulting to 1000 [ 789.938377][ T9016] usb usb8: usbfs: process 9016 (syz.5.11353) did not claim interface 0 before use [ 789.970678][ T9017] loop4: detected capacity change from 0 to 512 [ 789.977807][ T9017] EXT4-fs (loop4): Invalid log block size: 8 [ 790.093867][ T9021] wireguard0: entered promiscuous mode [ 790.099413][ T9021] wireguard0: entered allmulticast mode [ 790.292988][ T9033] loop3: detected capacity change from 0 to 1024 [ 790.301597][ T9033] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 790.309893][ T9033] System zones: 0-1, 3-36 [ 790.315910][ T9033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.548512][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.622566][ T9042] usb usb8: usbfs: process 9042 (syz.3.11359) did not claim interface 0 before use [ 790.656951][ T9046] loop4: detected capacity change from 0 to 512 [ 790.665573][ T9046] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 790.675112][ T9046] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 790.683108][ T9046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.696435][ T9046] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.735388][ T9049] loop4: detected capacity change from 0 to 2048 [ 790.792826][ T9051] loop5: detected capacity change from 0 to 1024 [ 790.801375][ T9051] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 790.809180][ T9049] loop4: unable to read partition table [ 790.810235][ T9051] System zones: 0-1, 3-36 [ 790.815610][ T9049] loop4: partition table beyond EOD, truncated [ 790.822840][ T9051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.825829][ T9049] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 790.890037][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11364'. [ 790.915236][ T9056] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.11363: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 791.176978][ T2948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.368696][ T9069] wireguard0: entered promiscuous mode [ 791.374290][ T9069] wireguard0: entered allmulticast mode [ 791.555581][ T9073] loop3: detected capacity change from 0 to 512 [ 791.583327][ T9073] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 791.606607][ T9073] EXT4-fs (loop3): 1 truncate cleaned up [ 791.612937][ T9073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.667424][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.691141][ T9080] sctp: [Deprecated]: syz.0.11370 (pid 9080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 791.691141][ T9080] Use struct sctp_sack_info instead [ 791.953021][ T9085] netlink: 312 bytes leftover after parsing attributes in process `syz.4.11372'. [ 791.982551][ T9085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11372'. [ 792.007426][ T9089] loop3: detected capacity change from 0 to 2048 [ 792.023060][ T9090] usb usb8: usbfs: process 9090 (syz.2.11373) did not claim interface 0 before use [ 792.057183][ T9094] loop4: detected capacity change from 0 to 512 [ 792.076912][ T9094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 792.096231][ T9094] EXT4-fs (loop4): 1 truncate cleaned up [ 792.103120][ T9094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.117294][ T9089] loop3: unable to read partition table [ 792.123734][ T9089] loop3: partition table beyond EOD, truncated [ 792.129967][ T9089] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 792.193036][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.259788][ T9106] can0: slcan on ttyS3. [ 792.264497][ T9110] loop5: detected capacity change from 0 to 512 [ 792.270531][ T9113] loop4: detected capacity change from 0 to 1024 [ 792.274335][ T9110] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 792.289718][ T9110] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 792.289768][ T9113] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 792.305737][ T9110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.331124][ T9110] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.340448][ T9106] can0 (unregistered): slcan off ttyS3. [ 792.787294][ T9131] netlink: 312 bytes leftover after parsing attributes in process `syz.0.11387'. [ 792.802830][ T9131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11387'. [ 792.889149][ T9140] loop2: detected capacity change from 0 to 2048 [ 792.941886][ T9143] loop5: detected capacity change from 0 to 2048 [ 792.990017][ T9140] loop2: unable to read partition table [ 792.996286][ T9143] loop5: p1 < > p4 [ 792.997234][ T9140] loop2: partition table beyond EOD, truncated [ 793.000984][ T9143] loop5: p4 size 8388608 extends beyond EOD, [ 793.006429][ T9140] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 793.020605][ T9143] truncated [ 793.200991][ T9149] loop3: detected capacity change from 0 to 2048 [ 793.254192][ T9149] loop3: p1 < > p4 [ 793.259421][ T9149] loop3: p4 size 8388608 extends beyond EOD, truncated [ 793.508782][ T9152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11394'. [ 793.528853][ T9157] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11395'. [ 793.564063][ T9158] netlink: 312 bytes leftover after parsing attributes in process `syz.3.11397'. [ 793.585628][ T9158] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11397'. [ 793.611813][ T9165] usb usb8: usbfs: process 9165 (syz.5.11399) did not claim interface 0 before use [ 793.623787][ T9161] loop2: detected capacity change from 0 to 512 [ 793.633509][ T9168] netlink: 312 bytes leftover after parsing attributes in process `syz.4.11400'. [ 793.643460][ T9161] EXT4-fs: Ignoring removed bh option [ 793.649089][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 793.655128][ T29] kauditd_printk_skb: 1389 callbacks suppressed [ 793.655145][ T29] audit: type=1326 audit(793.629:85627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.730066][ T9161] loop2: detected capacity change from 0 to 512 [ 793.741810][ T9168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11400'. [ 793.743943][ T9161] EXT4-fs: Ignoring removed bh option [ 793.756365][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 793.770344][ T29] audit: type=1326 audit(793.659:85628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.778631][ T9181] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 793.793480][ T29] audit: type=1326 audit(793.719:85629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.826412][ T29] audit: type=1326 audit(793.719:85630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.840769][ T9183] loop4: detected capacity change from 0 to 2048 [ 793.849475][ T29] audit: type=1326 audit(793.719:85631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.878795][ T29] audit: type=1326 audit(793.719:85632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.901894][ T29] audit: type=1326 audit(793.719:85633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.925008][ T29] audit: type=1326 audit(793.719:85634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.948007][ T29] audit: type=1326 audit(793.719:85635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.971071][ T29] audit: type=1326 audit(793.719:85636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 793.998533][ T9161] loop2: detected capacity change from 0 to 512 [ 794.005404][ T9161] EXT4-fs: Ignoring removed bh option [ 794.010842][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.017434][ T9183] loop4: p1 < > p4 [ 794.030367][ T9161] loop2: detected capacity change from 0 to 512 [ 794.036981][ T9161] EXT4-fs: Ignoring removed bh option [ 794.036957][ T9183] loop4: p4 size 8388608 extends beyond EOD, truncated [ 794.042458][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.058558][ T9161] loop2: detected capacity change from 0 to 512 [ 794.069655][ T9161] EXT4-fs: Ignoring removed bh option [ 794.075314][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.086200][ T9161] loop2: detected capacity change from 0 to 512 [ 794.092935][ T9161] EXT4-fs: Ignoring removed bh option [ 794.098388][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.113885][ T9192] IPv6: Can't replace route, no match found [ 794.171434][ T9196] loop4: detected capacity change from 0 to 2048 [ 794.181537][ T9161] loop2: detected capacity change from 0 to 512 [ 794.219568][ T9161] EXT4-fs: Ignoring removed bh option [ 794.225124][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.277363][ T9161] loop2: detected capacity change from 0 to 512 [ 794.303996][ T9161] EXT4-fs: Ignoring removed bh option [ 794.309452][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.333676][ T9196] loop4: unable to read partition table [ 794.339426][ T9196] loop4: partition table beyond EOD, truncated [ 794.345691][ T9196] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 794.375794][ T9161] loop2: detected capacity change from 0 to 512 [ 794.382309][ T9161] EXT4-fs: Ignoring removed bh option [ 794.383184][ T9198] lo speed is unknown, defaulting to 1000 [ 794.387860][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.461985][ T9223] loop4: detected capacity change from 0 to 1024 [ 794.504994][ T9161] loop2: detected capacity change from 0 to 512 [ 794.512531][ T9161] EXT4-fs: Ignoring removed bh option [ 794.518007][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.548840][ T9223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.618596][ T9161] loop2: detected capacity change from 0 to 512 [ 794.650240][ T9161] EXT4-fs: Ignoring removed bh option [ 794.650706][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.655856][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.669618][ T9198] chnl_net:caif_netlink_parms(): no params data found [ 794.730463][ T9161] loop2: detected capacity change from 0 to 512 [ 794.764611][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.771762][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.783874][ T9161] EXT4-fs: Ignoring removed bh option [ 794.789380][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.827390][ T9161] loop2: detected capacity change from 0 to 512 [ 794.855545][ T9198] bridge_slave_0: entered allmulticast mode [ 794.876151][ T9161] EXT4-fs: Ignoring removed bh option [ 794.881652][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 794.887823][ T9198] bridge_slave_0: entered promiscuous mode [ 794.927027][ T9257] usb usb8: usbfs: process 9257 (syz.3.11414) did not claim interface 0 before use [ 794.963162][ T9161] loop2: detected capacity change from 0 to 512 [ 795.112513][ T9161] EXT4-fs: Ignoring removed bh option [ 795.118072][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.261738][ T9161] loop2: detected capacity change from 0 to 512 [ 795.281548][ T9161] EXT4-fs: Ignoring removed bh option [ 795.287110][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.293670][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.300905][ T9161] loop2: detected capacity change from 0 to 512 [ 795.300829][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.311867][ T9198] bridge_slave_1: entered allmulticast mode [ 795.322569][ T9161] EXT4-fs: Ignoring removed bh option [ 795.328109][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.336400][ T9198] bridge_slave_1: entered promiscuous mode [ 795.346836][ T9161] loop2: detected capacity change from 0 to 512 [ 795.369842][ T9198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.382369][ T3638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.395294][ T9161] EXT4-fs: Ignoring removed bh option [ 795.400777][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.411116][ T9198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.428021][ T9161] loop2: detected capacity change from 0 to 512 [ 795.445401][ T9161] EXT4-fs: Ignoring removed bh option [ 795.450864][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.462246][ T3638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.478661][ T9161] loop2: detected capacity change from 0 to 512 [ 795.487220][ T9198] team0: Port device team_slave_0 added [ 795.494508][ T9198] team0: Port device team_slave_1 added [ 795.505847][ T9161] EXT4-fs: Ignoring removed bh option [ 795.511419][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.528922][ T3638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.542965][ T9161] loop2: detected capacity change from 0 to 512 [ 795.550866][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.557929][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.583904][ T9198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.590788][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.601476][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.627613][ T9198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.630141][ T9161] EXT4-fs: Ignoring removed bh option [ 795.643683][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.657577][ T9161] loop2: detected capacity change from 0 to 512 [ 795.671731][ T9161] EXT4-fs: Ignoring removed bh option [ 795.677216][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.686507][ T9161] loop2: detected capacity change from 0 to 512 [ 795.693013][ T9161] EXT4-fs: Ignoring removed bh option [ 795.698514][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.728056][ T9161] loop2: detected capacity change from 0 to 512 [ 795.757617][ T3638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.770275][ T9161] EXT4-fs: Ignoring removed bh option [ 795.775798][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.786134][ T9285] loop3: detected capacity change from 0 to 128 [ 795.803858][ T9161] loop2: detected capacity change from 0 to 512 [ 795.822941][ T9198] hsr_slave_0: entered promiscuous mode [ 795.827032][ T9285] FAT-fs (loop3): Directory bread(block 32) failed [ 795.835917][ T9198] hsr_slave_1: entered promiscuous mode [ 795.846130][ T9161] EXT4-fs: Ignoring removed bh option [ 795.851591][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.861215][ T9285] FAT-fs (loop3): Directory bread(block 33) failed [ 795.862124][ T9198] debugfs: 'hsr0' already exists in 'hsr' [ 795.870623][ T9285] FAT-fs (loop3): Directory bread(block 34) failed [ 795.873666][ T9198] Cannot create hsr debugfs directory [ 795.881565][ T9285] FAT-fs (loop3): Directory bread(block 35) failed [ 795.888820][ T9291] loop4: detected capacity change from 0 to 2048 [ 795.902224][ T9161] loop2: detected capacity change from 0 to 512 [ 795.921002][ T9285] FAT-fs (loop3): Directory bread(block 36) failed [ 795.921923][ T9161] EXT4-fs: Ignoring removed bh option [ 795.931895][ T9285] FAT-fs (loop3): Directory bread(block 37) failed [ 795.933456][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 795.946757][ T9291] loop4: p1 < > p4 [ 795.951252][ T3638] bridge_slave_1: left allmulticast mode [ 795.956980][ T3638] bridge_slave_1: left promiscuous mode [ 795.962735][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.970254][ T9161] loop2: detected capacity change from 0 to 512 [ 795.971134][ T9291] loop4: p4 size 8388608 extends beyond EOD, truncated [ 795.976733][ T9161] EXT4-fs: Ignoring removed bh option [ 795.987220][ T9285] FAT-fs (loop3): Directory bread(block 38) failed [ 795.989068][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.003918][ T3638] bridge_slave_0: left allmulticast mode [ 796.009729][ T3638] bridge_slave_0: left promiscuous mode [ 796.015502][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.022692][ T9161] loop2: detected capacity change from 0 to 512 [ 796.031102][ T9285] FAT-fs (loop3): Directory bread(block 39) failed [ 796.039779][ T9285] FAT-fs (loop3): Directory bread(block 40) failed [ 796.090227][ T9285] FAT-fs (loop3): Directory bread(block 41) failed [ 796.099127][ T9161] EXT4-fs: Ignoring removed bh option [ 796.104657][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.128386][ T9161] loop2: detected capacity change from 0 to 512 [ 796.141815][ T9161] EXT4-fs: Ignoring removed bh option [ 796.147414][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.158891][ T9161] loop2: detected capacity change from 0 to 512 [ 796.166902][ T9161] EXT4-fs: Ignoring removed bh option [ 796.172371][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.181783][ T9285] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 796.190394][ T9285] FAT-fs (loop3): Filesystem has been set read-only [ 796.190665][ T9161] loop2: detected capacity change from 0 to 512 [ 796.206063][ T9161] EXT4-fs: Ignoring removed bh option [ 796.211571][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.217932][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.230321][ T9161] loop2: detected capacity change from 0 to 512 [ 796.230407][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.237810][ T9161] EXT4-fs: Ignoring removed bh option [ 796.250727][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.257753][ T3638] bond0 (unregistering): Released all slaves [ 796.260616][ T9161] loop2: detected capacity change from 0 to 512 [ 796.270207][ T9161] EXT4-fs: Ignoring removed bh option [ 796.275713][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.285210][ T9161] loop2: detected capacity change from 0 to 512 [ 796.291670][ T9161] EXT4-fs: Ignoring removed bh option [ 796.293984][ T9307] usb usb8: usbfs: process 9307 (syz.4.11421) did not claim interface 0 before use [ 796.297237][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.315740][ T9161] loop2: detected capacity change from 0 to 512 [ 796.322240][ T9161] EXT4-fs: Ignoring removed bh option [ 796.327702][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.337346][ T9161] loop2: detected capacity change from 0 to 512 [ 796.345407][ T9161] EXT4-fs: Ignoring removed bh option [ 796.350822][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.362195][ T9161] loop2: detected capacity change from 0 to 512 [ 796.369057][ T9161] EXT4-fs: Ignoring removed bh option [ 796.374533][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.380636][ T3638] tipc: Disabling bearer [ 796.386004][ T3638] tipc: Left network mode [ 796.386298][ T9312] netdevsim netdevsim3: Direct firmware load for x failed with error -2 [ 796.390585][ T9161] loop2: detected capacity change from 0 to 512 [ 796.418080][ T9161] EXT4-fs: Ignoring removed bh option [ 796.423898][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.434396][ T9161] loop2: detected capacity change from 0 to 512 [ 796.440799][ T9161] EXT4-fs: Ignoring removed bh option [ 796.446342][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.456427][ T9161] loop2: detected capacity change from 0 to 512 [ 796.462967][ T9161] EXT4-fs: Ignoring removed bh option [ 796.468513][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.478388][ T9161] loop2: detected capacity change from 0 to 512 [ 796.486361][ T3638] hsr_slave_0: left promiscuous mode [ 796.492135][ T3638] hsr_slave_1: left promiscuous mode [ 796.498158][ T9161] EXT4-fs: Ignoring removed bh option [ 796.503669][ T9161] ext4: Unknown parameter 'nouser_xattr' [ 796.513552][ T3638] veth1_macvtap: left promiscuous mode [ 796.519915][ T3638] veth0_macvtap: left promiscuous mode [ 796.526041][ T3638] veth1_vlan: left promiscuous mode [ 796.531718][ T3638] veth0_vlan: left promiscuous mode [ 796.697466][ T3638] team0 (unregistering): Port device team_slave_1 removed [ 796.736746][ T3638] team0 (unregistering): Port device team_slave_0 removed [ 797.115666][ T9334] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 797.122436][ T9334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 797.130034][ T9334] vhci_hcd vhci_hcd.0: Device attached [ 797.140633][ T9336] vhci_hcd: cannot find the pending unlink 6 [ 797.384184][ T1100] usb 11-1: new low-speed USB device number 4 using vhci_hcd [ 797.902787][ T9336] vhci_hcd: connection reset by peer [ 798.007454][ T31] vhci_hcd: stop threads [ 798.011759][ T31] vhci_hcd: release socket [ 798.016309][ T31] vhci_hcd: disconnect device [ 798.049295][ T9344] usb usb8: usbfs: process 9344 (syz.4.11427) did not claim interface 0 before use [ 798.162291][ T9346] loop3: detected capacity change from 0 to 2048 [ 798.234361][ T9346] loop3: p1 < > p4 [ 798.247121][ T9346] loop3: p4 size 8388608 extends beyond EOD, truncated [ 798.498026][ T9355] netdevsim netdevsim3: Direct firmware load for x failed with error -2 [ 798.512137][ T9198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 798.543221][ T9198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 798.573046][ T9198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 798.600411][ T9198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 798.611032][ T9363] loop3: detected capacity change from 0 to 1024 [ 798.630283][ T9363] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 798.651953][ T9363] System zones: 0-1, 3-36 [ 798.664446][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 798.664464][ T29] audit: type=1326 audit(798.639:86274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4addb85ba7 code=0x7ffc0000 [ 798.708281][ T9363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.732676][ T9198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.742276][ T29] audit: type=1326 audit(798.669:86275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4addb2add9 code=0x7ffc0000 [ 798.765613][ T29] audit: type=1326 audit(798.669:86276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4addb85ba7 code=0x7ffc0000 [ 798.788787][ T29] audit: type=1326 audit(798.669:86277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4addb2add9 code=0x7ffc0000 [ 798.811761][ T29] audit: type=1326 audit(798.669:86278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4addb8ebe9 code=0x7ffc0000 [ 798.834750][ T29] audit: type=1326 audit(798.679:86279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4addb85ba7 code=0x7ffc0000 [ 798.857749][ T29] audit: type=1326 audit(798.679:86280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4addb2add9 code=0x7ffc0000 [ 798.881145][ T29] audit: type=1326 audit(798.679:86281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4addb8ebe9 code=0x7ffc0000 [ 798.903974][ T29] audit: type=1326 audit(798.699:86282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4addb85ba7 code=0x7ffc0000 [ 798.926923][ T29] audit: type=1326 audit(798.699:86283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.2.11431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4addb2add9 code=0x7ffc0000 [ 798.971823][ T9198] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.005424][ T9198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 799.015874][ T9198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 799.126372][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.133487][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.180919][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.188217][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.224390][ T9378] loop2: detected capacity change from 0 to 512 [ 799.234060][ T9380] usb usb8: usbfs: process 9380 (syz.5.11436) did not claim interface 0 before use [ 799.257326][ T9378] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 799.270139][ T9374] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.11434: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 799.283996][ T9378] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 799.327839][ T9378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.350705][ T9198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.359567][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.381776][ T9378] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.388138][ T9387] loop3: detected capacity change from 0 to 512 [ 799.427037][ T9387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 799.455298][ T9393] loop2: detected capacity change from 0 to 512 [ 799.462237][ T9393] EXT4-fs (loop2): Invalid log block size: 8 [ 799.482034][ T9198] veth0_vlan: entered promiscuous mode [ 799.495185][ T9387] EXT4-fs (loop3): 1 truncate cleaned up [ 799.496532][ T9198] veth1_vlan: entered promiscuous mode [ 799.509893][ T9387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.518604][ T9198] veth0_macvtap: entered promiscuous mode [ 799.534159][ T9198] veth1_macvtap: entered promiscuous mode [ 799.545604][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.564649][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.585792][T18494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.614811][T18488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.634075][T18488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.642988][T18488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.665950][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.836387][ T9420] usb usb8: usbfs: process 9420 (syz.0.11443) did not claim interface 0 before use [ 799.908515][ T9424] wireguard0: entered promiscuous mode [ 799.914099][ T9424] wireguard0: entered allmulticast mode [ 800.130106][ T9431] lo speed is unknown, defaulting to 1000 [ 800.298707][ T9431] sd 0:0:1:0: device reset [ 800.325875][ T9440] __nla_validate_parse: 4 callbacks suppressed [ 800.325893][ T9440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11449'. [ 800.406903][ T9444] loop5: detected capacity change from 0 to 512 [ 800.413987][ T9444] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 800.427967][ T9444] EXT4-fs (loop5): 1 truncate cleaned up [ 800.434855][ T9444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.472070][ T2948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.512101][ T9455] loop5: detected capacity change from 0 to 2048 [ 800.554071][ T9455] loop5: p1 < > p4 [ 800.558643][ T9455] loop5: p4 size 8388608 extends beyond EOD, truncated [ 800.678052][ T9462] wireguard0: entered promiscuous mode [ 800.683569][ T9462] wireguard0: entered allmulticast mode [ 800.697510][ T9465] usb usb8: usbfs: process 9465 (syz.5.11458) did not claim interface 0 before use [ 800.707614][ T9466] usb usb8: usbfs: process 9466 (syz.2.11456) did not claim interface 0 before use [ 800.772369][ T9469] loop3: detected capacity change from 0 to 512 [ 800.781306][ T9469] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11457: bg 0: block 393: padding at end of block bitmap is not set [ 800.796972][ T9469] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 800.807112][ T9469] EXT4-fs (loop3): 2 truncates cleaned up [ 800.813235][ T9469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.508135][ T9479] loop2: detected capacity change from 0 to 2048 [ 801.515340][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.545463][ T9482] netlink: 96 bytes leftover after parsing attributes in process `syz.3.11462'. [ 801.566395][ T9479] loop2: p1 < > p4 [ 801.572494][ T9479] loop2: p4 size 8388608 extends beyond EOD, truncated [ 801.658730][ T9486] wireguard0: entered promiscuous mode [ 801.664426][ T9486] wireguard0: entered allmulticast mode [ 801.712410][ T9493] FAULT_INJECTION: forcing a failure. [ 801.712410][ T9493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.725667][ T9493] CPU: 1 UID: 0 PID: 9493 Comm: syz.5.11463 Not tainted syzkaller #0 PREEMPT(voluntary) [ 801.725701][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 801.725718][ T9493] Call Trace: [ 801.725728][ T9493] [ 801.725789][ T9493] __dump_stack+0x1d/0x30 [ 801.725891][ T9493] dump_stack_lvl+0xe8/0x140 [ 801.725912][ T9493] dump_stack+0x15/0x1b [ 801.725928][ T9493] should_fail_ex+0x265/0x280 [ 801.725970][ T9493] should_fail+0xb/0x20 [ 801.725992][ T9493] should_fail_usercopy+0x1a/0x20 [ 801.726017][ T9493] _copy_from_user+0x1c/0xb0 [ 801.726046][ T9493] ___sys_sendmsg+0xc1/0x1d0 [ 801.726166][ T9493] __x64_sys_sendmsg+0xd4/0x160 [ 801.726230][ T9493] x64_sys_call+0x191e/0x2ff0 [ 801.726257][ T9493] do_syscall_64+0xd2/0x200 [ 801.726291][ T9493] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 801.726389][ T9493] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 801.726462][ T9493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.726484][ T9493] RIP: 0033:0x7f8ade61ebe9 [ 801.726550][ T9493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.726569][ T9493] RSP: 002b:00007f8add05e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.726588][ T9493] RAX: ffffffffffffffda RBX: 00007f8ade846090 RCX: 00007f8ade61ebe9 [ 801.726604][ T9493] RDX: 0000000000000800 RSI: 00002000000003c0 RDI: 0000000000000004 [ 801.726620][ T9493] RBP: 00007f8add05e090 R08: 0000000000000000 R09: 0000000000000000 [ 801.726632][ T9493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.726716][ T9493] R13: 00007f8ade846128 R14: 00007f8ade846090 R15: 00007fff3209dd68 [ 801.726740][ T9493] [ 802.151402][ T9499] netlink: 312 bytes leftover after parsing attributes in process `syz.4.11467'. [ 802.170775][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11467'. [ 802.521616][ T9507] FAULT_INJECTION: forcing a failure. [ 802.521616][ T9507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.534932][ T9507] CPU: 0 UID: 0 PID: 9507 Comm: syz.3.11470 Not tainted syzkaller #0 PREEMPT(voluntary) [ 802.534963][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 802.534976][ T9507] Call Trace: [ 802.534982][ T9507] [ 802.534992][ T9507] __dump_stack+0x1d/0x30 [ 802.535014][ T9507] dump_stack_lvl+0xe8/0x140 [ 802.535056][ T9507] dump_stack+0x15/0x1b [ 802.535077][ T9507] should_fail_ex+0x265/0x280 [ 802.535101][ T9507] should_fail+0xb/0x20 [ 802.535124][ T9507] should_fail_usercopy+0x1a/0x20 [ 802.535152][ T9507] _copy_from_user+0x1c/0xb0 [ 802.535267][ T9507] __sys_bpf+0x178/0x7b0 [ 802.535312][ T9507] __x64_sys_bpf+0x41/0x50 [ 802.535336][ T9507] x64_sys_call+0x2aea/0x2ff0 [ 802.535358][ T9507] do_syscall_64+0xd2/0x200 [ 802.535469][ T9507] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 802.535511][ T9507] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 802.535603][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.535630][ T9507] RIP: 0033:0x7fb58113ebe9 [ 802.535648][ T9507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.535671][ T9507] RSP: 002b:00007fb57fb9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 802.535690][ T9507] RAX: ffffffffffffffda RBX: 00007fb581365fa0 RCX: 00007fb58113ebe9 [ 802.535774][ T9507] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 000000000000001c [ 802.535789][ T9507] RBP: 00007fb57fb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 802.535805][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.535820][ T9507] R13: 00007fb581366038 R14: 00007fb581365fa0 R15: 00007ffd9443d5b8 [ 802.535845][ T9507] [ 802.621514][ T1100] usb 11-1: enqueue for inactive port 0 [ 802.644763][ T9505] loop4: detected capacity change from 0 to 2048 [ 802.728203][ T1100] usb 11-1: enqueue for inactive port 0 [ 802.803180][ T9514] usb usb8: usbfs: process 9514 (syz.3.11472) did not claim interface 0 before use [ 802.814958][ T1100] vhci_hcd: vhci_device speed not set [ 802.845487][ T9505] loop4: unable to read partition table [ 802.851288][ T9505] loop4: partition table beyond EOD, truncated [ 802.857498][ T9505] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 802.865695][ T9517] wireguard0: entered promiscuous mode [ 802.871316][ T9517] wireguard0: entered allmulticast mode [ 802.956479][ T9524] loop2: detected capacity change from 0 to 128 [ 802.956487][ T9522] usb usb8: usbfs: process 9522 (syz.4.11474) did not claim interface 0 before use [ 802.972486][ T9525] loop5: detected capacity change from 0 to 512 [ 802.973850][ T9524] FAT-fs (loop2): Directory bread(block 162) failed [ 802.986367][ T9524] FAT-fs (loop2): Directory bread(block 163) failed [ 802.993223][ T9524] FAT-fs (loop2): Directory bread(block 164) failed [ 803.000060][ T9524] FAT-fs (loop2): Directory bread(block 165) failed [ 803.002145][ T9525] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11473: bg 0: block 393: padding at end of block bitmap is not set [ 803.006901][ T9524] FAT-fs (loop2): Directory bread(block 166) failed [ 803.024098][ T9525] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 803.028170][ T9524] FAT-fs (loop2): Directory bread(block 167) failed [ 803.043891][ T9525] EXT4-fs (loop5): 2 truncates cleaned up [ 803.045762][ T9524] FAT-fs (loop2): Directory bread(block 168) failed [ 803.050027][ T9525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.056806][ T9524] FAT-fs (loop2): Directory bread(block 169) failed [ 803.077714][ T9524] FAT-fs (loop2): Directory bread(block 162) failed [ 803.084585][ T9524] FAT-fs (loop2): Directory bread(block 163) failed [ 803.091590][ T9524] bio_check_eod: 6 callbacks suppressed [ 803.091602][ T9524] syz.2.11475: attempt to access beyond end of device [ 803.091602][ T9524] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 803.110929][ T9524] syz.2.11475: attempt to access beyond end of device [ 803.110929][ T9524] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 803.442981][ T9539] netlink: 'syz.0.11477': attribute type 1 has an invalid length. [ 803.610665][ T9541] wireguard0: entered promiscuous mode [ 803.616365][ T9541] wireguard0: entered allmulticast mode [ 803.660822][ T9543] loop3: detected capacity change from 0 to 512 [ 803.669439][ T9543] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11478: bg 0: block 393: padding at end of block bitmap is not set [ 803.676487][ T29] kauditd_printk_skb: 1336 callbacks suppressed [ 803.676516][ T29] audit: type=1326 audit(803.649:87620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4addb85ba7 code=0x7ffc0000 [ 803.715544][ T29] audit: type=1326 audit(803.649:87621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4addb2add9 code=0x7ffc0000 [ 803.738573][ T29] audit: type=1326 audit(803.649:87622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4addb8ebe9 code=0x7ffc0000 [ 803.795376][ T9543] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 803.806794][ T9543] EXT4-fs (loop3): 2 truncates cleaned up [ 803.812859][ T2948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.816105][ T9546] loop4: detected capacity change from 0 to 2048 [ 803.823540][ T9543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.841631][ T29] audit: type=1326 audit(803.739:87623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4addb85ba7 code=0x7ffc0000 [ 803.864666][ T29] audit: type=1326 audit(803.739:87624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4addb2add9 code=0x7ffc0000 [ 803.887891][ T29] audit: type=1326 audit(803.739:87625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4addb8ebe9 code=0x7ffc0000 [ 803.910995][ T29] audit: type=1326 audit(803.749:87626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4addb85ba7 code=0x7ffc0000 [ 803.934049][ T29] audit: type=1326 audit(803.749:87627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4addb2add9 code=0x7ffc0000 [ 803.957017][ T29] audit: type=1326 audit(803.749:87628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4addb8ebe9 code=0x7ffc0000 [ 803.980069][ T29] audit: type=1326 audit(803.759:87629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.2.11476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4addb85ba7 code=0x7ffc0000 [ 804.037942][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.054052][ T9546] loop4: p1 < > p4 [ 804.062028][ T9546] loop4: p4 size 8388608 extends beyond EOD, truncated [ 804.107190][ T9557] loop4: detected capacity change from 0 to 2048 [ 804.457611][ T9557] loop4: unable to read partition table [ 804.503350][ T9557] loop4: partition table beyond EOD, truncated [ 804.509592][ T9557] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 804.767028][ T9585] netdevsim netdevsim4: Direct firmware load for x failed with error -2 [ 804.828825][ T9583] loop3: detected capacity change from 0 to 1024 [ 804.841510][ T9583] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 804.856731][ T9583] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 804.858411][ T9588] usb usb8: usbfs: process 9588 (syz.4.11488) did not claim interface 0 before use [ 804.903846][ T9583] JBD2: no valid journal superblock found [ 804.910309][ T9583] EXT4-fs (loop3): Could not load journal inode [ 804.964562][ T9583] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 805.076076][ T9593] netdevsim netdevsim5: Direct firmware load for x failed with error -2 [ 805.265834][ T9583] lo speed is unknown, defaulting to 1000 [ 805.287696][ T9608] loop2: detected capacity change from 0 to 2048 [ 805.298368][ T9605] Process accounting resumed [ 805.335483][ T9608] loop2: p1 < > p4 [ 805.341158][ T9610] loop5: detected capacity change from 0 to 2048 [ 805.348189][ T9608] loop2: p4 size 8388608 extends beyond EOD, truncated [ 805.447642][ T9610] loop5: unable to read partition table [ 805.461407][ T9610] loop5: partition table beyond EOD, truncated [ 805.467684][ T9610] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 805.499847][ T9612] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11499'. [ 805.572534][ T9616] loop5: detected capacity change from 0 to 2048 [ 805.634448][ T9616] loop5: p1 < > p4 [ 805.647664][ T9616] loop5: p4 size 8388608 extends beyond EOD, truncated [ 806.312383][ T9622] loop5: detected capacity change from 0 to 2048 [ 806.354678][ T9622] loop5: p1 < > p4 [ 806.363666][ T9622] loop5: p4 size 8388608 extends beyond EOD, truncated [ 806.371210][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11504'. [ 806.422702][ T9629] loop2: detected capacity change from 0 to 512 [ 806.449641][ T9629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.493898][T31226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.594015][ T9643] loop4: detected capacity change from 0 to 2048 [ 806.627181][ T9643] loop4: p1 < > p4 [ 806.636908][ T9643] loop4: p4 size 8388608 extends beyond EOD, truncated [ 806.675263][ T9651] wireguard0: entered promiscuous mode [ 806.680900][ T9651] wireguard0: entered allmulticast mode [ 806.730160][ T9656] wireguard0: entered promiscuous mode [ 806.735940][ T9656] wireguard0: entered allmulticast mode [ 806.776607][ T9662] loop4: detected capacity change from 0 to 512 [ 806.793422][ T9662] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11512: bg 0: block 393: padding at end of block bitmap is not set [ 806.810972][ T9662] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 806.820898][ T9662] EXT4-fs (loop4): 2 truncates cleaned up [ 806.827867][ T9666] loop5: detected capacity change from 0 to 512 [ 806.834796][ T9662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.835654][ T9669] netdevsim netdevsim0: Direct firmware load for x failed with error -2 [ 806.860224][ T9666] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11511: bg 0: block 393: padding at end of block bitmap is not set [ 806.875699][ T9666] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 806.885048][ T9666] EXT4-fs (loop5): 2 truncates cleaned up [ 806.891710][ T9666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.929449][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.958538][ T9681] loop4: detected capacity change from 0 to 512 [ 806.966222][ T9681] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 806.989635][ T9681] EXT4-fs (loop4): 1 truncate cleaned up [ 807.001164][ T9681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.059574][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.101004][ T9696] loop4: detected capacity change from 0 to 512 [ 807.110226][ T9696] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 807.137790][ T9696] EXT4-fs (loop4): 1 truncate cleaned up [ 807.149157][ T9696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.173465][ T9705] wireguard0: entered promiscuous mode [ 807.179400][ T9705] wireguard0: entered allmulticast mode [ 807.201491][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.209555][ T9709] usb usb8: usbfs: process 9709 (syz.0.11526) did not claim interface 0 before use [ 807.225314][ T9710] loop2: detected capacity change from 0 to 512 [ 807.234374][ T9710] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11525: bg 0: block 393: padding at end of block bitmap is not set [ 807.249134][ T9710] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 807.260297][ T9710] EXT4-fs (loop2): 2 truncates cleaned up [ 807.267072][ T9710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.303084][T31226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.353082][ T9723] loop3: detected capacity change from 0 to 512 [ 807.361535][ T9723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 807.397215][ T9723] EXT4-fs (loop3): 1 truncate cleaned up [ 807.407405][ T9723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.553856][ T9732] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 807.560598][ T9732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 807.568217][ T9732] vhci_hcd vhci_hcd.0: Device attached [ 807.577154][ T9733] vhci_hcd: cannot find the pending unlink 6 [ 807.668503][ T9737] loop4: detected capacity change from 0 to 512 [ 807.684610][ T9737] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 807.697034][ T9737] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 807.833673][T21728] usb 5-1: new low-speed USB device number 19 using vhci_hcd [ 808.194239][ T9733] vhci_hcd: connection reset by peer [ 808.201277][ T3432] vhci_hcd: stop threads [ 808.205581][ T3432] vhci_hcd: release socket [ 808.210093][ T3432] vhci_hcd: disconnect device [ 808.399766][ T9745] loop3: detected capacity change from 0 to 2048 [ 808.469582][ T9742] netlink: 'syz.0.11537': attribute type 27 has an invalid length. [ 808.511841][ T9745] loop3: unable to read partition table [ 808.529226][ T9745] loop3: partition table beyond EOD, truncated [ 808.535666][ T9745] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 808.559173][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.566529][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.701060][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 808.701095][ T29] audit: type=1400 audit(808.669:87919): avc: denied { mount } for pid=9747 comm="syz.3.11538" name="/" dev="ramfs" ino=125339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 808.763151][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.806898][ T9742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.885839][ T29] audit: type=1326 audit(808.859:87920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.11537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56109bebe9 code=0x7ffc0000 [ 808.922447][T18474] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.943331][T18474] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.962617][ T29] audit: type=1326 audit(808.889:87921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9741 comm="syz.0.11537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56109bebe9 code=0x7ffc0000 [ 808.987656][T18474] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.006954][T18474] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.227581][ T9755] wg2: entered promiscuous mode [ 809.232516][ T9755] wg2: entered allmulticast mode [ 809.355535][ T29] audit: type=1400 audit(809.329:87922): avc: denied { watch watch_reads } for pid=9761 comm="syz.2.11542" path="/417" dev="tmpfs" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 809.378271][ T29] audit: type=1400 audit(809.329:87923): avc: denied { ioctl } for pid=9761 comm="syz.2.11542" path="socket:[125372]" dev="sockfs" ino=125372 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 809.406219][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11542'. [ 809.410560][ T29] audit: type=1400 audit(809.339:87924): avc: denied { create } for pid=9762 comm="syz.4.11541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 809.434522][ T29] audit: type=1400 audit(809.339:87925): avc: denied { write } for pid=9762 comm="syz.4.11541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 809.453741][ T29] audit: type=1400 audit(809.379:87926): avc: denied { sys_module } for pid=9761 comm="syz.2.11542" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 809.557891][ T29] audit: type=1400 audit(809.519:87927): avc: denied { tracepoint } for pid=9786 comm="syz.0.11544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 809.641220][ T9799] usb usb8: usbfs: process 9799 (syz.2.11546) did not claim interface 0 before use [ 809.676173][ T29] audit: type=1326 audit(809.649:87928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.3.11547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 810.217048][ T9878] loop5: detected capacity change from 0 to 2048 [ 810.254173][ T9878] loop5: p1 < > p4 [ 810.259102][ T9878] loop5: p4 size 8388608 extends beyond EOD, truncated [ 810.554593][ T9904] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 810.561250][ T9904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.568850][ T9904] vhci_hcd vhci_hcd.0: Device attached [ 810.577011][ T9908] vhci_hcd: cannot find the pending unlink 6 [ 810.813630][ T23] usb 11-1: new low-speed USB device number 5 using vhci_hcd [ 810.839959][ T9916] loop2: detected capacity change from 0 to 512 [ 810.916086][ T9916] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 811.023261][ T9916] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 811.104828][ T9927] wg2: entered promiscuous mode [ 811.109793][ T9927] wg2: entered allmulticast mode [ 811.201370][ T9908] vhci_hcd: connection reset by peer [ 811.230893][T18474] vhci_hcd: stop threads [ 811.235365][T18474] vhci_hcd: release socket [ 811.239845][T18474] vhci_hcd: disconnect device [ 812.429995][ T9947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 812.436664][ T9947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 812.444723][ T9947] vhci_hcd vhci_hcd.0: Device attached [ 812.484845][ T9953] loop5: detected capacity change from 0 to 2048 [ 812.521447][ T9956] loop4: detected capacity change from 0 to 512 [ 812.529966][ T9956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 812.542941][ T9956] EXT4-fs (loop4): 1 truncate cleaned up [ 812.549622][ T9956] EXT4-fs mount: 6 callbacks suppressed [ 812.549635][ T9956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.592281][ T9953] loop5: unable to read partition table [ 812.606446][ T9953] loop5: partition table beyond EOD, truncated [ 812.612701][ T9953] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 812.622826][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.663492][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11561'. [ 812.676748][ T9959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.684273][ T9959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.692870][ T9959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.700313][ T9959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.806542][ T9974] wireguard0: entered promiscuous mode [ 812.812087][ T9974] wireguard0: entered allmulticast mode [ 812.819417][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11564'. [ 812.867834][ T9982] loop4: detected capacity change from 0 to 512 [ 812.875871][ T9982] EXT4-fs (loop4): Invalid log block size: 8 [ 812.912251][ T9993] loop5: detected capacity change from 0 to 512 [ 812.922048][ T9993] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11565: bg 0: block 393: padding at end of block bitmap is not set [ 812.937603][ T9993] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 812.947541][ T9991] loop4: detected capacity change from 0 to 2048 [ 812.947649][ T9993] EXT4-fs (loop5): 2 truncates cleaned up [ 812.972928][ T9993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.024331][ T9991] loop4: p1 < > p4 [ 813.029216][ T9991] loop4: p4 size 8388608 extends beyond EOD, truncated [ 813.101982][ T9948] vhci_hcd: connection reset by peer [ 813.108490][ T3638] vhci_hcd: stop threads [ 813.112791][ T3638] vhci_hcd: release socket [ 813.117284][ T3638] vhci_hcd: disconnect device [ 813.122012][T21728] usb 5-1: enqueue for inactive port 0 [ 813.127637][T21728] usb 5-1: enqueue for inactive port 0 [ 813.203959][T21728] vhci_hcd: vhci_device speed not set [ 813.595984][T10008] loop4: detected capacity change from 0 to 2048 [ 813.639396][T10008] loop4: p1 < > p4 [ 813.647085][ T2948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.650743][T10008] loop4: p4 size 8388608 extends beyond EOD, truncated [ 813.679006][T10013] loop5: detected capacity change from 0 to 512 [ 813.694097][T10013] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 813.703648][ T29] kauditd_printk_skb: 806 callbacks suppressed [ 813.703724][ T29] audit: type=1326 audit(813.669:88735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9997 comm="syz.3.11568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb581135ba7 code=0x7ffc0000 [ 813.721844][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11573'. [ 813.733324][ T29] audit: type=1326 audit(813.679:88737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.4.11573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 813.764916][ T29] audit: type=1326 audit(813.679:88738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.4.11573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 813.765585][T10016] wireguard0: entered promiscuous mode [ 813.788094][ T29] audit: type=1326 audit(813.679:88739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.4.11573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 813.788133][ T29] audit: type=1326 audit(813.679:88740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.4.11573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 813.788163][ T29] audit: type=1326 audit(813.679:88741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.4.11573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 813.793760][T10016] wireguard0: entered allmulticast mode [ 813.817418][ T29] audit: type=1326 audit(813.679:88742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.4.11573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 813.845545][T10013] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 813.863610][ T29] audit: type=1326 audit(813.679:88743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.4.11573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 813.874610][T10013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.892480][ T29] audit: type=1326 audit(813.679:88744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.4.11573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 813.953528][T10013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.958851][ T29] audit: type=1326 audit(813.679:88745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.4.11573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36b08ebe9 code=0x7ffc0000 [ 814.620287][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11576'. [ 814.733124][T10100] loop2: detected capacity change from 0 to 2048 [ 814.797853][T10100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.178847][T10150] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 815.185415][T10150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 815.193039][T10150] vhci_hcd vhci_hcd.0: Device attached [ 815.326081][T10170] loop4: detected capacity change from 0 to 2048 [ 815.384190][T10170] loop4: p1 < > p4 [ 815.397434][T10170] loop4: p4 size 8388608 extends beyond EOD, truncated [ 815.480705][T10195] loop4: detected capacity change from 0 to 512 [ 815.489324][T10195] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 815.500285][T10195] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 815.509473][T10195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.525695][T10195] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.597654][ T37] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 815.626040][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 815.638525][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 815.638525][ T37] [ 815.648237][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 815.654268][ T37] EXT4-fs (loop2): Free/Dirty block details [ 815.660172][ T37] EXT4-fs (loop2): free_blocks=2415919504 [ 815.665938][ T37] EXT4-fs (loop2): dirty_blocks=6528 [ 815.671282][ T37] EXT4-fs (loop2): Block reservation details [ 815.677351][ T37] EXT4-fs (loop2): i_reserved_data_blocks=408 [ 815.728816][ T3638] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 815.931575][T10153] vhci_hcd: connection closed [ 815.931839][ T9577] vhci_hcd: stop threads [ 815.941117][ T9577] vhci_hcd: release socket [ 815.945586][ T9577] vhci_hcd: disconnect device [ 815.950326][ T23] usb 11-1: enqueue for inactive port 0 [ 815.956039][ T23] usb 11-1: enqueue for inactive port 0 [ 816.023673][ T23] vhci_hcd: vhci_device speed not set [ 816.053964][T10239] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 816.060615][T10239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 816.068245][T10239] vhci_hcd vhci_hcd.0: Device attached [ 816.076504][T10240] vhci_hcd: cannot find the pending unlink 6 [ 816.313647][ T8389] usb 5-1: new low-speed USB device number 20 using vhci_hcd [ 816.382388][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11590'. [ 816.509035][T10249] wg2: left promiscuous mode [ 816.513864][T10249] wg2: left allmulticast mode [ 816.823474][T10240] vhci_hcd: connection reset by peer [ 816.851570][ T9577] vhci_hcd: stop threads [ 816.855941][ T9577] vhci_hcd: release socket [ 816.860478][ T9577] vhci_hcd: disconnect device [ 816.901252][T10255] loop4: detected capacity change from 0 to 512 [ 816.942956][T10255] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 817.015925][T10255] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 817.076469][T10255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.178483][T10255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.443307][T10260] loop5: detected capacity change from 0 to 512 [ 817.460432][T10260] EXT4-fs (loop5): Invalid log block size: 8 [ 817.888075][T10267] usb usb8: usbfs: process 10267 (syz.5.11599) did not claim interface 0 before use [ 817.899710][T10268] loop4: detected capacity change from 0 to 2048 [ 817.984014][T10268] loop4: p1 < > p4 [ 817.988335][T10268] loop4: p4 size 8388608 extends beyond EOD, truncated [ 818.099094][T10293] loop3: detected capacity change from 0 to 2048 [ 818.110527][T10291] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 818.117156][T10291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 818.124783][T10291] vhci_hcd vhci_hcd.0: Device attached [ 818.188271][T10293] loop3: unable to read partition table [ 818.194395][T10293] loop3: partition table beyond EOD, truncated [ 818.200724][T10293] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 818.249867][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11604'. [ 818.259286][T10316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.266773][T10316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.275669][T10316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.283091][T10316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.365474][ T8382] usb 9-1: new low-speed USB device number 12 using vhci_hcd [ 818.412438][T10337] loop3: detected capacity change from 0 to 512 [ 818.421895][T10337] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 818.432745][T10337] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 818.441388][T10337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.455842][T10337] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.487889][T10347] netdevsim netdevsim3: Direct firmware load for x failed with error -2 [ 818.520874][T10353] loop3: detected capacity change from 0 to 512 [ 818.528621][T10353] EXT4-fs (loop3): Invalid log block size: 8 [ 818.560496][T10358] wireguard0: entered promiscuous mode [ 818.566121][T10358] wireguard0: entered allmulticast mode [ 818.671525][T10358] loop3: detected capacity change from 0 to 512 [ 818.682495][T10358] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11608: bg 0: block 393: padding at end of block bitmap is not set [ 818.701803][T10358] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 818.710947][T10358] EXT4-fs (loop3): 2 truncates cleaned up [ 818.719169][T10358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.746135][T10384] loop2: detected capacity change from 0 to 512 [ 818.758556][T10384] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 818.769975][T10384] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 818.778352][T10384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.792401][T10384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.861387][T10298] vhci_hcd: connection reset by peer [ 818.870873][ T3638] vhci_hcd: stop threads [ 818.875245][ T3638] vhci_hcd: release socket [ 818.879787][ T3638] vhci_hcd: disconnect device [ 819.102105][T10434] loop5: detected capacity change from 0 to 2048 [ 819.213437][T10434] loop5: unable to read partition table [ 819.221389][T10434] loop5: partition table beyond EOD, truncated [ 819.227650][T10434] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 819.242784][ T29] kauditd_printk_skb: 720 callbacks suppressed [ 819.242800][ T29] audit: type=1326 audit(819.209:89465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ade61ebe9 code=0x7ffc0000 [ 819.275482][ T29] audit: type=1326 audit(819.209:89466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ade61ebe9 code=0x7ffc0000 [ 819.298915][ T29] audit: type=1326 audit(819.249:89467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ade61ebe9 code=0x7ffc0000 [ 819.322152][ T29] audit: type=1326 audit(819.249:89468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ade61ebe9 code=0x7ffc0000 [ 819.345480][ T29] audit: type=1326 audit(819.249:89469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ade61ebe9 code=0x7ffc0000 [ 819.368587][ T29] audit: type=1326 audit(819.249:89470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8ade61ebe9 code=0x7ffc0000 [ 819.391705][ T29] audit: type=1326 audit(819.249:89471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ade61ec23 code=0x7ffc0000 [ 819.414789][ T29] audit: type=1326 audit(819.249:89472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ade61ec23 code=0x7ffc0000 [ 819.437780][ T29] audit: type=1326 audit(819.249:89473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ade61ebe9 code=0x7ffc0000 [ 819.460963][ T29] audit: type=1326 audit(819.249:89474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10433 comm="syz.5.11614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ade61ebe9 code=0x7ffc0000 [ 819.498797][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.055391][T10490] loop4: detected capacity change from 0 to 2048 [ 820.136869][T10490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.522708][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11621'. [ 820.551516][T10508] loop2: detected capacity change from 0 to 512 [ 820.561766][T10508] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 820.572217][T10508] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 820.581960][T10508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.616589][T10508] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.703215][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.780366][T10538] loop2: detected capacity change from 0 to 2048 [ 820.797320][T10538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.825469][T31226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.894675][T10556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11628'. [ 821.060967][T10564] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 821.067608][T10564] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.075179][T10564] vhci_hcd vhci_hcd.0: Device attached [ 821.083719][T10569] vhci_hcd: cannot find the pending unlink 6 [ 821.111382][T10571] usb usb8: usbfs: process 10571 (syz.4.11632) did not claim interface 0 before use [ 821.718484][T10569] vhci_hcd: connection closed [ 821.721507][ T3638] vhci_hcd: stop threads [ 821.730550][ T3638] vhci_hcd: release socket [ 821.735078][ T3638] vhci_hcd: disconnect device [ 821.851004][ T8389] usb 5-1: enqueue for inactive port 0 [ 821.856619][ T8389] usb 5-1: enqueue for inactive port 0 [ 822.178156][T10625] usb usb8: usbfs: process 10625 (syz.4.11636) did not claim interface 0 before use [ 822.500152][T10633] netdevsim netdevsim3: Direct firmware load for x failed with error -2 [ 822.753826][ T8389] vhci_hcd: vhci_device speed not set [ 822.876079][T10652] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11640'. [ 823.142820][T10668] wireguard0: entered promiscuous mode [ 823.148535][T10668] wireguard0: entered allmulticast mode [ 823.293847][T10676] loop3: detected capacity change from 0 to 512 [ 823.308186][T10678] usb usb8: usbfs: process 10678 (syz.4.11644) did not claim interface 0 before use [ 823.365516][T10676] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11645: bg 0: block 393: padding at end of block bitmap is not set [ 823.434173][T10676] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 823.455042][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11647'. [ 823.489649][T10676] EXT4-fs (loop3): 2 truncates cleaned up [ 823.517949][T10676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.588783][ T8382] usb 9-1: enqueue for inactive port 0 [ 823.594363][ T8382] usb 9-1: enqueue for inactive port 0 [ 823.658535][T10692] loop5: detected capacity change from 0 to 2048 [ 823.663649][ T8382] vhci_hcd: vhci_device speed not set [ 823.747275][T10692] loop5: unable to read partition table [ 823.753063][T10692] loop5: partition table beyond EOD, truncated [ 823.759440][T10692] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 823.919060][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11651'. [ 824.005355][T10696] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 824.011993][T10696] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 824.019525][T10696] vhci_hcd vhci_hcd.0: Device attached [ 824.026512][T10700] vhci_hcd: cannot find the pending unlink 6 [ 824.049513][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.138606][T10705] usb usb8: usbfs: process 10705 (syz.0.11654) did not claim interface 0 before use [ 824.198853][T10707] loop4: detected capacity change from 0 to 1024 [ 824.210497][T10707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 824.219185][T10707] System zones: 0-1, 3-36 [ 824.225360][T10707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.273672][T22038] usb 11-1: new low-speed USB device number 6 using vhci_hcd [ 824.340794][T10710] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.11655: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 824.445471][ T29] kauditd_printk_skb: 686 callbacks suppressed [ 824.445490][ T29] audit: type=1400 audit(824.419:90161): avc: denied { sqpoll } for pid=10706 comm="syz.4.11655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 824.664944][T10700] vhci_hcd: connection reset by peer [ 824.689640][ T3638] vhci_hcd: stop threads [ 824.693977][ T3638] vhci_hcd: release socket [ 824.698499][ T3638] vhci_hcd: disconnect device [ 824.866045][ T29] audit: type=1326 audit(824.829:90162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.3.11652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 824.889188][ T29] audit: type=1326 audit(824.829:90163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.3.11652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 824.912252][ T29] audit: type=1326 audit(824.829:90164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.3.11652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 824.935326][ T29] audit: type=1326 audit(824.829:90165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.3.11652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 824.958595][ T29] audit: type=1326 audit(824.829:90166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.3.11652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 824.981662][ T29] audit: type=1326 audit(824.829:90167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.3.11652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 825.004812][ T29] audit: type=1326 audit(824.829:90168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.3.11652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 825.027877][ T29] audit: type=1326 audit(824.829:90169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.3.11652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 825.050937][ T29] audit: type=1326 audit(824.829:90170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10719 comm="syz.3.11652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58113ebe9 code=0x7ffc0000 [ 825.113968][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11652'. [ 825.294185][T30417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.589659][T10734] loop5: detected capacity change from 0 to 2048 [ 825.733304][T10742] loop4: detected capacity change from 0 to 512 [ 825.740208][T10742] msdos: Bad value for 'time_offset' [ 825.971857][T10739] sctp: [Deprecated]: syz.4.11662 (pid 10739) Use of struct sctp_assoc_value in delayed_ack socket option. [ 825.971857][T10739] Use struct sctp_sack_info instead [ 825.995275][T10739] loop4: detected capacity change from 0 to 1024 [ 826.183991][T10734] loop5: unable to read partition table [ 826.199371][T10734] loop5: partition table beyond EOD, truncated [ 826.205644][T10734] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 826.248621][T10741] loop3: detected capacity change from 0 to 1024 [ 826.284576][T10748] usb usb8: usbfs: process 10748 (syz.4.11664) did not claim interface 0 before use [ 826.302318][T10741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 826.358429][T10741] System zones: 0-1, 3-36 [ 826.395673][T10741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.462209][T10757] usb usb8: usbfs: process 10757 (syz.5.11668) did not claim interface 0 before use [ 826.526520][T10763] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.11663: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 826.738603][T28179] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.766295][T10773] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 826.772939][T10773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 826.780484][T10773] vhci_hcd vhci_hcd.0: Device attached [ 826.788271][T10774] vhci_hcd: cannot find the pending unlink 6 [ 826.833368][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11673'. [ 827.057726][T10783] loop4: detected capacity change from 0 to 256 [ 827.478058][T10774] vhci_hcd: connection closed [ 827.478898][T18474] vhci_hcd: stop threads [ 827.487995][T18474] vhci_hcd: release socket [ 827.492436][T18474] vhci_hcd: disconnect device [ 827.507990][T10789] loop2: detected capacity change from 0 to 2048 [ 827.565053][T10794] loop4: detected capacity change from 0 to 512 [ 827.575617][T10794] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 827.602712][ T23] ================================================================== [ 827.606297][T10794] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 827.610849][ T23] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 827.626376][ T23] [ 827.628718][ T23] read-write to 0xffff888100481838 of 8 bytes by task 10789 on cpu 0: [ 827.636206][T10789] loop2: unable to read partition table [ 827.636890][ T23] __filemap_add_folio+0x5b9/0x7d0 [ 827.643197][T10794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.647734][ T23] filemap_add_folio+0x98/0x1b0 [ 827.647777][ T23] do_read_cache_folio+0xd4/0x5b0 [ 827.663621][T10789] loop2: partition table beyond EOD, [ 827.665075][ T23] read_cache_folio+0x3c/0x50 [ 827.670106][T10789] truncated [ 827.670115][T10789] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 827.675503][ T23] read_part_sector+0x6f/0x150 [ 827.675545][ T23] read_lba+0x100/0x1e0 [ 827.675561][ T23] alloc_read_gpt_entries+0x7b/0xd0 [ 827.675584][ T23] is_gpt_valid+0x33f/0x3e0 [ 827.710075][ T23] efi_partition+0x132/0x1400 [ 827.714769][ T23] bdev_disk_changed+0x4b6/0xcb0 [ 827.719729][ T23] loop_set_status+0x541/0x5f0 [ 827.724589][ T23] lo_ioctl+0x68f/0x1350 [ 827.728856][ T23] blkdev_ioctl+0x34f/0x440 [ 827.733383][ T23] __se_sys_ioctl+0xce/0x140 [ 827.737996][ T23] __x64_sys_ioctl+0x43/0x50 [ 827.742611][ T23] x64_sys_call+0x1816/0x2ff0 [ 827.747303][ T23] do_syscall_64+0xd2/0x200 [ 827.751825][ T23] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.757816][ T23] [ 827.760143][ T23] read to 0xffff888100481838 of 8 bytes by task 23 on cpu 1: [ 827.767704][ T23] nr_blockdev_pages+0x7e/0xd0 [ 827.772625][ T23] si_meminfo+0x87/0xd0 [ 827.776798][ T23] update_defense_level+0x47/0x5c0 [ 827.781942][ T23] defense_work_handler+0x1f/0x80 [ 827.786992][ T23] process_scheduled_works+0x4ce/0x9d0 [ 827.792483][ T23] worker_thread+0x582/0x770 [ 827.797100][ T23] kthread+0x486/0x510 [ 827.801181][ T23] ret_from_fork+0xda/0x150 [ 827.805696][ T23] ret_from_fork_asm+0x1a/0x30 [ 827.810482][ T23] [ 827.812810][ T23] value changed: 0x0000000000000059 -> 0x000000000000005a [ 827.819920][ T23] [ 827.822243][ T23] Reported by Kernel Concurrency Sanitizer on: [ 827.828398][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(voluntary) [ 827.838042][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.848221][ T23] Workqueue: events_long defense_work_handler [ 827.854312][ T23] ================================================================== [ 828.094470][T10794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.323685][T22038] usb 11-1: enqueue for inactive port 0 [ 829.329450][T22038] usb 11-1: enqueue for inactive port 0 [ 829.413682][T22038] vhci_hcd: vhci_device speed not set