last executing test programs: 2m20.864556332s ago: executing program 2 (id=83): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) rt_sigpending(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_clone3(&(0x7f0000000280)={0x200, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mq_unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000001000180000001000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000070085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000540)=""/236, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) memfd_create(&(0x7f0000000000)='[\x00', 0x2) 2m20.686426224s ago: executing program 2 (id=86): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2m20.579480085s ago: executing program 2 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x204) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r1, 0x0, 0x3ffff) sendfile(r4, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x36, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x100, 0xfffffefe, 0xb9}) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0}]}, 0x4, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 2m19.118340665s ago: executing program 2 (id=92): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200080, &(0x7f0000000100)={[{@jqfmt_vfsv1}]}, 0xfe, 0x57c, &(0x7f0000001440)="$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") close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r7 = syz_pidfd_open(r3, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m17.163495731s ago: executing program 2 (id=104): unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r0 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000680)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000400)) (async) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) (async) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getpid() (async) write$cgroup_int(r6, &(0x7f0000000340)=0x4, 0x12) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6_vti0\x00', 0x1000}, 0x18) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x0, 0x140, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x2}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) (async) splice(r3, 0x0, r2, 0x0, 0x3, 0x0) (async) syz_io_uring_setup(0x44f, 0x0, &(0x7f00000000c0), 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) fchmod(r8, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdc, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) (async) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r4, @ANYRES16=r9, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000028000c00"], 0x28}}, 0x0) (async) epoll_create1(0x80000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000080000001000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000008000000009dc2162a4ca5f8097349"], 0x48) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000000000000950000002a879e93bd5f6756238d1000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000c068fa7d9e549b8795edc3defc909a0000adfb4c447264cf8282d01e9bf73dd0e8339a50e42927ea2b697992a2028cf22df7733561ec0940000000ef3f42514fd93fb47f21bc0f48e1ad689ca9ae390cb36d699e032272b0f3f811630f3d2d9b5040a423ceb7dc82bf130bfd215e070d956ea537c7f1abca650825159ff0617e10472be20eb58fa5449bedf8e843ad284a2a9632f9216519a9cd4fe831fb9f21287772ddf3810080de", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2m16.115192305s ago: executing program 2 (id=112): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xffffffff) connect$pppl2tp(r2, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x4, {0xa, 0x4e20, 0x3, @private1, 0x2}}}, 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x800408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101042, 0x1) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000b00)='./file0\x00') sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 2m16.114995405s ago: executing program 32 (id=112): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0xffffffff) connect$pppl2tp(r2, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x4, {0xa, 0x4e20, 0x3, @private1, 0x2}}}, 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x800408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101042, 0x1) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000b00)='./file0\x00') sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 7.774676006s ago: executing program 4 (id=1071): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000400), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) 7.671261287s ago: executing program 0 (id=1072): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = dup(0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000180)=@nfc={0x27, r4, 0x0, 0x5}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000280)="abe0d2abb43ce78785836c81d2a66b5625af9b802ef1e5e4c03bd6d303d485ccd249eb7a7fcb83c2637645ca8894e1eb4b60b6d3239c0d95869a1fe1012129836e9deb4855cddb3ac915ee7167e914ee30f0d2154baadd30c2c57087e1336e274b92f8e86d2ba61b553a3b0cc9a544c1c7c80f18ed98746705aab1d002660114a4d1bbe98ff18cc905565bd6564dcf792f4f9de4f4fd54526caac10a4be4c66d4acbeb6e1764d4ba2e0ce7f652cfa81444f000ba9a07a1e61cd1b284114cac7b957cc74a020629c32b9e503ae04e2b50b2f9", 0xd2}, {&(0x7f0000000380)="5577c843656910c6f38062dac66005ce5414223cbaf32e53d427b9407b0dcdcaf0668a86a7950b475b6ac649a187aff2f95da93b85b9c4f87440f03fa9b6ed5ef7fc7bfa33d2e4bb8f94323be31358317b8605ad32f02aca258d09607c8dd699684bb67adaffbc721d9ad6208f54466da5341c79a5d2bcc340463774acb4b7cad293463f80e6c5907aa5b3154301a94139508147f855217795c39aa852", 0x9d}, {&(0x7f00000004c0)="72c3b43722da3e7a40c209c7f3034fb953fc7908b8ec9fdf603f00952fc24a225ee6b297464768f24da287b8e019a17012af5c975e5ea76c707094ea8031505e844e6c617a741841caa586af236a824d5bc767c19c957d3d6382bbfc6836a807a2203eb5ab99c2f3f5e9abbeed876dfe7ed6d4afd01ff7f5b27485ecd26baa5e510880e30cede08df73a89b5f654c106a01b22ee0a", 0x95}, {&(0x7f0000000680)="40d27a6e1c6bf17ddda52a8564af156ef7d0a506a503982891f8b90b24bb6f9a31ce376ef5479260be3ce1d00d89620a5ad4a8866ee5f8cd354a0e12bfcb0bcf7eb2c4e9a69579f6f546ed2fe8ec3ba1da12f118475768f4b15a18caab02b96bfbd0cb62b1c42f9a271d11bc1ecc58f5fc6296e494cda4d71835262b7cec62d25b2c0e697ec727ebc7e983142799edc109e4ae9d81771818fe99b0c785b8ae", 0x9f}, {&(0x7f0000000080)="d3788af6654c4d43712108e63fdbda97bb27e3689f7b049fa4a79c863ebe858c6c4ebf3b571ac2c2cc11726d98e33f77268db751c69a936c259411", 0x3b}, {&(0x7f0000000200)="c26e19fa5bd27c6b53d0437e70db6a", 0xf}, {&(0x7f00000005c0)="bf51d740830f320b378dcb0340af350c7f79b5b0eec8a88737f3a18fa6454b", 0x1f}, {&(0x7f0000000740)="35676df8a7a1d0c9d69f90639947839ef357a0eda0593b1f753482631b93a8fecffa16e774e1799cc43bdd3631141423943cb0e834bfd1b6a7cb13673945fb6570568773549e8272e8ace4b0e1ca529acf34b660f12d544c9d90bd48ff2e0cae7609f6aa202dca43ad48967e8305c212716b660d22ceb0002b385e7f6c324c9dbec534cd20e36228e6e45d2d0741585a523942eaab44d830ae4b4928f7ba50167934379e9dce8b6a77295dd49f75400e4ceffd113eb8d6c682db017e818f535f520ef4ab173bca84fd114cf8233f0c55500274248145046cdb79743db24a26f914fd428f1aaf68a1dc1847db4b500a3f82279e075d9f6c", 0xf7}, {&(0x7f0000000840)="440a55bcbba2e338fe498f0f49d4891ecc09c707b7d02dde6e1018e5577c639892854c4405712660561ec474090c3e6c2934d8a1807a6a795867eff4c5868aa5c9d471bac90a775543510356aedc4ba06a543ab4b318d162d465187e23e622fd1bdb8087d1f79d675d4858aa3878070c2bef16379c01f60869b5e702fed7cd0f53f0522c8c30f769399c5831e06fcc3607dd32311cf33238bc29130d124a1422853740f8599fb2bb2df444c40e843267b744f9c21d02daa9ce5fbcae8ba937d01f59363559d5dbf1c7164665e353b3e4ad5caa90f8d22679fabc949a50f21dead256dc", 0xe3}], 0x9}, 0x40001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x58}}, 0x0) 7.547361009s ago: executing program 0 (id=1073): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pselect6(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) signalfd4(r0, &(0x7f0000000080)={[0xd5]}, 0x8, 0x80000) 6.833626668s ago: executing program 4 (id=1078): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket(0x6, 0x4, 0x0) r0 = open(0x0, 0x145142, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 6.67082488s ago: executing program 0 (id=1080): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getdents(r0, &(0x7f0000000380)=""/107, 0x6b) 6.305795835s ago: executing program 4 (id=1083): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) r3 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x100, 0xfffffefe, 0xb9}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0}]}, 0x4, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1) 6.147084987s ago: executing program 4 (id=1085): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) unshare(0x62040200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioperm(0x0, 0xab49, 0x7) socket$unix(0x1, 0x5, 0x0) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)=@newtaction={0x10dc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x10c8, 0x1, [@m_skbedit={0x1038, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x7}}]}, {0x689, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x48, 0x1a, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0xffffffffffffffff, 0x2d2f45bb, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 4.568382789s ago: executing program 0 (id=1087): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="6400000000010104000000000000000302000007240001801400018008000100e0000001080002007f0000010c0002800500010000000000240002801400018008000100e0000001080002007f0000010c0002800500010000020000080007"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioperm(0x0, 0xab49, 0x7) socket$unix(0x1, 0x5, 0x0) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)=@newtaction={0x10dc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x10c8, 0x1, [@m_skbedit={0x1038, 0x0, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x7}}]}, {0x689, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x48, 0x1a, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0xffffffffffffffff, 0x2d2f45bb, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 3.921123578s ago: executing program 4 (id=1093): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") socket(0x6, 0x4, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(0x0, 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 2.97618422s ago: executing program 4 (id=1098): mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140), 0x3200841, &(0x7f0000000380)={[{@nr_blocks={'nr_blocks', 0x3d, [0x74]}}]}) socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x4ab}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7, 0x7, 0xff, 0x7ffc1ffb}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) 2.653565025s ago: executing program 0 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x2, &(0x7f00000004c0)=""/162, 0xa2) 2.379493068s ago: executing program 5 (id=1103): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) r3 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x100, 0xfffffefe, 0xb9}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0}]}, 0x4, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1) 2.378916638s ago: executing program 5 (id=1104): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r2, &(0x7f0000000700)=""/147) 2.352231179s ago: executing program 5 (id=1105): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x24004801) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYRES16], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="21000000000000000000000000001000000400", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000002"], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) sendmsg$tipc(r6, &(0x7f0000002400)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, &(0x7f00000013c0), 0x0, &(0x7f0000001400)="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", 0xf80, 0x8181}, 0x40801) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010009fbb5c56d2ac3530000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r7}, 0x10) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.322922089s ago: executing program 5 (id=1106): r0 = socket(0x23, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x89ee, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.009012313s ago: executing program 3 (id=1108): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket(0x6, 0x4, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(0x0, 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 1.625745598s ago: executing program 0 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0xf, 0x0, 0x2, 0x0}) 1.079267326s ago: executing program 3 (id=1110): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0x24, 0x60000000}, 0x50) socket$packet(0x11, 0x3, 0x300) 1.036804436s ago: executing program 1 (id=1111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) eventfd(0x9ec2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530"], 0x15) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) 946.888537ms ago: executing program 3 (id=1112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) eventfd(0x9ec2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530"], 0x15) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) 525.737674ms ago: executing program 3 (id=1113): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") syz_open_dev$evdev(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstatfs(r2, &(0x7f0000000700)=""/147) 384.034005ms ago: executing program 3 (id=1114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r5}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 354.915676ms ago: executing program 5 (id=1115): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) r2 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x100, 0xfffffefe, 0xb9}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0}]}, 0x4, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1) 328.326736ms ago: executing program 1 (id=1116): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x18) r6 = io_uring_setup(0x6b3, &(0x7f0000000000)={0x0, 0xf324, 0x100, 0xfffffefe, 0xb9}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}, {0x0}]}, 0x4, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x1}, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 285.769606ms ago: executing program 5 (id=1117): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0xf, 0x0, 0x2, 0x0}) 285.070726ms ago: executing program 3 (id=1118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 228.762967ms ago: executing program 1 (id=1119): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) getrandom(0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7) recvmmsg(r2, &(0x7f0000000080)=[{{&(0x7f00000001c0)=@ieee802154, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/210, 0xd2}, {0x0}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f00000007c0)=""/252, 0xfc}, {&(0x7f00000004c0)=""/92, 0x5c}], 0x6, &(0x7f0000000000)=""/13, 0xd}, 0x4}], 0x1, 0x10042, &(0x7f0000000540)={0x77359400}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xa26}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/253, 0xfd}], 0x1) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000002000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe41) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6_vti0\x00'}) getsockopt$inet6_int(r6, 0x29, 0x1a, 0x0, &(0x7f0000000380)) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x81, 0x0, 0x2, 0x0, 0x7e150a0b, 0xffff, 0x5, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x1007, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e982638, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd2d1, 0x0, 0x1, 0x4000b2e, 0x52f7, 0x0, 0x0, 0xfffffffe, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x26, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x3, 0x8, 0x0, 0x14, 0x1e, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x100, 0x7f0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0xff, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x153, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0x101, 0x0, 0x0, 0xffffffff}, 0x9, 0xf, 0x2000000}}]}}]}, 0x45c}}, 0x0) 199.163038ms ago: executing program 1 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 179.156298ms ago: executing program 1 (id=1121): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket(0x6, 0x4, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(0x0, 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 0s ago: executing program 1 (id=1122): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) fallocate(r2, 0x8, 0x0, 0x10000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) kernel console output (not intermixed with test programs): 9543][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 107.309592][ T29] audit: type=1326 audit(1747811597.510:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.3.547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x0 [ 107.358486][ T29] audit: type=1326 audit(1747811597.550:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 107.381901][ T29] audit: type=1326 audit(1747811597.550:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 107.405385][ T29] audit: type=1326 audit(1747811597.550:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 107.428923][ T29] audit: type=1326 audit(1747811597.550:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 107.452754][ T29] audit: type=1326 audit(1747811597.550:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 107.476212][ T29] audit: type=1326 audit(1747811597.550:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 107.499586][ T29] audit: type=1326 audit(1747811597.560:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5983 comm="syz.3.547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x0 [ 107.649951][ T29] audit: type=1326 audit(1747811597.570:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 107.673654][ T29] audit: type=1326 audit(1747811597.570:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 107.796510][ T5997] loop0: detected capacity change from 0 to 8192 [ 108.361573][ T6004] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 108.368277][ T6004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.375989][ T6004] vhci_hcd vhci_hcd.0: Device attached [ 108.431127][ T6008] loop5: detected capacity change from 0 to 512 [ 108.623175][ T6008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.633915][ T6013] loop4: detected capacity change from 0 to 164 [ 108.635973][ T3392] usb 3-1: new low-speed USB device number 9 using vhci_hcd [ 108.651642][ T6013] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 108.710182][ T6008] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.812984][ T6016] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 109.003485][ T6005] vhci_hcd: connection reset by peer [ 109.009166][ T3704] vhci_hcd: stop threads [ 109.013460][ T3704] vhci_hcd: release socket [ 109.017909][ T3704] vhci_hcd: disconnect device [ 109.266984][ T4805] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 109.281527][ T4805] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 109.294332][ T4805] EXT4-fs (loop5): This should not happen!! Data will be lost [ 109.294332][ T4805] [ 109.304027][ T4805] EXT4-fs (loop5): Total free blocks count 0 [ 109.310119][ T4805] EXT4-fs (loop5): Free/Dirty block details [ 109.316075][ T4805] EXT4-fs (loop5): free_blocks=65280 [ 109.321514][ T4805] EXT4-fs (loop5): dirty_blocks=1 [ 109.326534][ T4805] EXT4-fs (loop5): Block reservation details [ 109.332554][ T4805] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 109.339415][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.397803][ T6018] loop5: detected capacity change from 0 to 512 [ 109.418342][ T6018] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 109.433552][ T6018] EXT4-fs (loop5): 1 truncate cleaned up [ 109.442689][ T6018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.623311][ T6028] loop1: detected capacity change from 0 to 512 [ 109.631823][ T6028] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.654931][ T6028] EXT4-fs (loop1): 1 truncate cleaned up [ 109.660983][ T6028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.681040][ T6030] loop4: detected capacity change from 0 to 4096 [ 109.686821][ T6028] SELinux: syz.1.560 (6028) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 109.715487][ T6030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.729503][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.750767][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.099075][ T6046] ip6t_rpfilter: unknown options [ 110.146936][ T6044] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 110.153500][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.161070][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 110.253049][ T6051] loop3: detected capacity change from 0 to 512 [ 110.282546][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.316193][ T6051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.402083][ T6051] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.543846][ T6056] loop5: detected capacity change from 0 to 164 [ 110.557001][ T6056] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 110.596668][ T6047] net_ratelimit: 2413 callbacks suppressed [ 110.596688][ T6047] netlink: zone id is out of range [ 110.607809][ T6047] netlink: zone id is out of range [ 110.612944][ T6047] netlink: zone id is out of range [ 110.618127][ T6047] netlink: zone id is out of range [ 110.623420][ T6047] netlink: zone id is out of range [ 110.625571][ T6057] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 110.628547][ T6047] netlink: zone id is out of range [ 110.628557][ T6047] netlink: zone id is out of range [ 110.628564][ T6047] netlink: zone id is out of range [ 110.628572][ T6047] netlink: zone id is out of range [ 110.657285][ T6047] netlink: zone id is out of range [ 110.663236][ T6048] vhci_hcd: connection closed [ 110.664853][ T4805] vhci_hcd: stop threads [ 110.673914][ T4805] vhci_hcd: release socket [ 110.678350][ T4805] vhci_hcd: disconnect device [ 110.746396][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 111.072251][ T4805] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 111.076122][ T6062] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 111.087091][ T4805] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 111.097989][ T6062] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 111.109756][ T4805] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.109756][ T4805] [ 111.109800][ T4805] EXT4-fs (loop3): Total free blocks count 0 [ 111.133048][ T4805] EXT4-fs (loop3): Free/Dirty block details [ 111.139050][ T4805] EXT4-fs (loop3): free_blocks=65280 [ 111.143441][ T6062] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 111.144437][ T4805] EXT4-fs (loop3): dirty_blocks=1 [ 111.156801][ T4805] EXT4-fs (loop3): Block reservation details [ 111.162895][ T4805] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 111.170676][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.292281][ T6071] loop4: detected capacity change from 0 to 4096 [ 111.309990][ T6071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.333851][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.438623][ T6083] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 111.445195][ T6083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.452809][ T6083] vhci_hcd vhci_hcd.0: Device attached [ 111.461652][ T6086] loop5: detected capacity change from 0 to 1024 [ 111.504140][ T6086] EXT4-fs: Ignoring removed bh option [ 111.545771][ T6086] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 111.550540][ T6089] loop4: detected capacity change from 0 to 512 [ 111.588521][ T6086] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 111.613037][ T6089] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.634440][ T6086] EXT4-fs (loop5): invalid journal inode [ 111.649494][ T6089] EXT4-fs (loop4): 1 truncate cleaned up [ 111.658251][ T6086] EXT4-fs (loop5): can't get journal size [ 111.677330][ T6089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.696886][ T6086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.751173][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.770714][ T3393] usb 1-1: enqueue for inactive port 0 [ 111.790163][ T3393] usb 1-1: enqueue for inactive port 0 [ 111.817272][ T6096] siw: device registration error -23 [ 111.878470][ T3393] vhci_hcd: vhci_device speed not set [ 111.894121][ T6100] loop5: detected capacity change from 0 to 512 [ 111.940772][ T6100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.976621][ T6100] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.044389][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.087804][ T6085] vhci_hcd: connection closed [ 112.088360][ T179] vhci_hcd: stop threads [ 112.097538][ T179] vhci_hcd: release socket [ 112.102138][ T179] vhci_hcd: disconnect device [ 112.151736][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 112.165233][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 112.175565][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 112.572844][ T6115] ip6t_rpfilter: unknown options [ 112.585661][ T6112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 112.592270][ T6112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.599829][ T6112] vhci_hcd vhci_hcd.0: Device attached [ 112.736133][ T6091] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 112.819830][ T3704] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 112.832502][ T3704] EXT4-fs (loop5): This should not happen!! Data will be lost [ 112.832502][ T3704] [ 112.842212][ T3704] EXT4-fs (loop5): Total free blocks count 0 [ 112.848208][ T3704] EXT4-fs (loop5): Free/Dirty block details [ 112.854147][ T3704] EXT4-fs (loop5): free_blocks=65280 [ 112.859493][ T3704] EXT4-fs (loop5): dirty_blocks=1 [ 112.864574][ T3704] EXT4-fs (loop5): Block reservation details [ 112.870595][ T3704] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 112.876700][ T3394] usb 9-1: new low-speed USB device number 7 using vhci_hcd [ 112.919931][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.057761][ T6113] vhci_hcd: connection reset by peer [ 113.075655][ T12] vhci_hcd: stop threads [ 113.080056][ T12] vhci_hcd: release socket [ 113.084506][ T12] vhci_hcd: disconnect device [ 113.209068][ T6119] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 113.215632][ T6119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.223302][ T6119] vhci_hcd vhci_hcd.0: Device attached [ 113.230219][ T6119] ip6t_rpfilter: unknown options [ 113.468476][ T3499] usb 11-1: new low-speed USB device number 7 using vhci_hcd [ 113.780836][ T6120] vhci_hcd: connection reset by peer [ 113.781935][ T3392] usb 3-1: enqueue for inactive port 0 [ 113.788127][ T3704] vhci_hcd: stop threads [ 113.792302][ T3392] usb 3-1: enqueue for inactive port 0 [ 113.796085][ T3704] vhci_hcd: release socket [ 113.796099][ T3704] vhci_hcd: disconnect device [ 113.816416][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 113.816454][ T29] audit: type=1326 audit(1747811604.020:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 113.846132][ T29] audit: type=1326 audit(1747811604.020:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 113.897363][ T3392] vhci_hcd: vhci_device speed not set [ 114.028440][ T6132] ip6t_rpfilter: unknown options [ 114.048917][ T6134] loop0: detected capacity change from 0 to 164 [ 114.060457][ T6130] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 114.067358][ T6130] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.075146][ T6130] vhci_hcd vhci_hcd.0: Device attached [ 114.159370][ T6134] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 114.266695][ T6136] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 114.386172][ T29] audit: type=1326 audit(1747811604.090:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 114.410124][ T29] audit: type=1326 audit(1747811604.090:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 114.433542][ T29] audit: type=1326 audit(1747811604.090:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 114.457756][ T29] audit: type=1326 audit(1747811604.090:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 114.481227][ T29] audit: type=1326 audit(1747811604.090:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 114.504576][ T29] audit: type=1326 audit(1747811604.090:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 114.522917][ T6131] vhci_hcd: connection closed [ 114.527918][ T29] audit: type=1326 audit(1747811604.090:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 114.534269][ T12] vhci_hcd: stop threads [ 114.556355][ T29] audit: type=1326 audit(1747811604.090:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6128 comm="syz.0.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa359a8e969 code=0x7ffc0000 [ 114.560831][ T12] vhci_hcd: release socket [ 114.588717][ T12] vhci_hcd: disconnect device [ 114.657821][ T6143] loop1: detected capacity change from 0 to 164 [ 114.698098][ T6143] siw: device registration error -23 [ 114.808841][ T6145] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 114.815501][ T6145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.823087][ T6145] vhci_hcd vhci_hcd.0: Device attached [ 115.728548][ T6146] vhci_hcd: connection closed [ 115.759042][ T31] vhci_hcd: stop threads [ 115.768025][ T31] vhci_hcd: release socket [ 115.772601][ T31] vhci_hcd: disconnect device [ 115.787675][ T6155] vhci_hcd: invalid port number 15 [ 115.792950][ T6155] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 116.018934][ T6158] loop3: detected capacity change from 0 to 1024 [ 116.030948][ T6158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.086375][ T6158] EXT4-fs: Mount option(s) incompatible with ext2 [ 116.136412][ T6161] loop4: detected capacity change from 0 to 4096 [ 116.174198][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 116.191510][ T6161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.297422][ T6161] 9pnet_fd: Insufficient options for proto=fd [ 116.409576][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.433036][ T6166] loop3: detected capacity change from 0 to 512 [ 116.483090][ T6166] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 116.504289][ T6177] loop4: detected capacity change from 0 to 512 [ 116.595299][ T6179] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 116.601988][ T6179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.609655][ T6179] vhci_hcd vhci_hcd.0: Device attached [ 116.616797][ T6179] ip6t_rpfilter: unknown options [ 116.737658][ T6166] EXT4-fs (loop3): 1 truncate cleaned up [ 116.768359][ T6177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.919674][ T6177] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.932424][ T6166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.033025][ T6188] loop1: detected capacity change from 0 to 1024 [ 117.081532][ T6188] EXT4-fs: Ignoring removed bh option [ 117.121837][ T6180] vhci_hcd: connection closed [ 117.123442][ T179] vhci_hcd: stop threads [ 117.132607][ T179] vhci_hcd: release socket [ 117.137239][ T179] vhci_hcd: disconnect device [ 117.142442][ T6188] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 117.168726][ T6188] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 117.200739][ T6188] EXT4-fs (loop1): invalid journal inode [ 117.214988][ T6188] EXT4-fs (loop1): can't get journal size [ 117.229538][ T6188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.299418][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.340615][ T179] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 117.359257][ T179] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 117.371908][ T179] EXT4-fs (loop4): This should not happen!! Data will be lost [ 117.371908][ T179] [ 117.381857][ T179] EXT4-fs (loop4): Total free blocks count 0 [ 117.387973][ T179] EXT4-fs (loop4): Free/Dirty block details [ 117.393936][ T179] EXT4-fs (loop4): free_blocks=65280 [ 117.399371][ T179] EXT4-fs (loop4): dirty_blocks=1 [ 117.404427][ T179] EXT4-fs (loop4): Block reservation details [ 117.410510][ T179] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 117.418317][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.420020][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.528904][ T6207] netlink: 696 bytes leftover after parsing attributes in process `syz.4.605'. [ 117.615817][ T6214] loop4: detected capacity change from 0 to 4096 [ 117.718152][ T6214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.830484][ T6217] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 117.837051][ T6217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.844694][ T6217] vhci_hcd vhci_hcd.0: Device attached [ 118.031083][ T6214] 9pnet_fd: Insufficient options for proto=fd [ 118.041788][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'. [ 118.108593][ T3393] usb 3-1: new low-speed USB device number 10 using vhci_hcd [ 118.135277][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.203174][ T3394] usb 9-1: enqueue for inactive port 0 [ 118.208859][ T3394] usb 9-1: enqueue for inactive port 0 [ 118.270675][ T6178] net_ratelimit: 1385 callbacks suppressed [ 118.270694][ T6178] netlink: zone id is out of range [ 118.281784][ T6178] netlink: zone id is out of range [ 118.286992][ T6178] netlink: zone id is out of range [ 118.292225][ T6178] netlink: zone id is out of range [ 118.297412][ T6178] netlink: zone id is out of range [ 118.302707][ T6178] netlink: zone id is out of range [ 118.307859][ T6178] netlink: zone id is out of range [ 118.313127][ T6178] netlink: zone id is out of range [ 118.314169][ T6218] vhci_hcd: connection reset by peer [ 118.318260][ T6178] netlink: zone id is out of range [ 118.318269][ T6178] netlink: zone id is out of range [ 118.328018][ T3704] vhci_hcd: stop threads [ 118.330274][ T3394] vhci_hcd: vhci_device speed not set [ 118.333886][ T3704] vhci_hcd: release socket [ 118.348145][ T3704] vhci_hcd: disconnect device [ 118.578464][ T3499] usb 11-1: enqueue for inactive port 0 [ 118.584121][ T3499] usb 11-1: enqueue for inactive port 0 [ 118.800615][ T3499] vhci_hcd: vhci_device speed not set [ 119.061342][ T6234] loop5: detected capacity change from 0 to 512 [ 119.078754][ T6242] loop1: detected capacity change from 0 to 512 [ 119.195131][ T6242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.466450][ T6234] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.498576][ T6242] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.633370][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 119.633389][ T29] audit: type=1326 audit(1747811609.840:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.677420][ T6252] loop0: detected capacity change from 0 to 1024 [ 119.697242][ T6234] EXT4-fs (loop5): 1 truncate cleaned up [ 119.736436][ T29] audit: type=1326 audit(1747811609.870:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.760003][ T29] audit: type=1326 audit(1747811609.870:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.783549][ T29] audit: type=1326 audit(1747811609.870:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.807060][ T29] audit: type=1326 audit(1747811609.870:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.830400][ T29] audit: type=1326 audit(1747811609.870:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.853866][ T29] audit: type=1326 audit(1747811609.870:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.877406][ T29] audit: type=1326 audit(1747811609.870:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.900978][ T29] audit: type=1326 audit(1747811609.870:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.912671][ T6256] loop3: detected capacity change from 0 to 164 [ 119.924494][ T29] audit: type=1326 audit(1747811609.870:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6249 comm="syz.3.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 119.955229][ T6234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.956405][ T31] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 119.984309][ T6252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.994459][ T6252] EXT4-fs: Mount option(s) incompatible with ext2 [ 120.008198][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 120.021105][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.021105][ T31] [ 120.030885][ T31] EXT4-fs (loop1): Total free blocks count 0 [ 120.036898][ T31] EXT4-fs (loop1): Free/Dirty block details [ 120.042951][ T31] EXT4-fs (loop1): free_blocks=65280 [ 120.048561][ T31] EXT4-fs (loop1): dirty_blocks=1 [ 120.053652][ T31] EXT4-fs (loop1): Block reservation details [ 120.059713][ T31] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 120.101794][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.621'. [ 120.130662][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.154233][ T6256] siw: device registration error -23 [ 120.273885][ T6260] loop0: detected capacity change from 0 to 4096 [ 120.313485][ T6260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.451870][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.482225][ T6260] 9pnet_fd: Insufficient options for proto=fd [ 120.501254][ T6270] ip6t_rpfilter: unknown options [ 120.529190][ T6268] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 120.535793][ T6268] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.543373][ T6268] vhci_hcd vhci_hcd.0: Device attached [ 120.773587][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 120.948710][ T6278] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 120.975674][ T6278] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 121.019031][ T6269] vhci_hcd: connection closed [ 121.059294][ T6287] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 121.111374][ T3729] vhci_hcd: stop threads [ 121.115680][ T3729] vhci_hcd: release socket [ 121.120170][ T3729] vhci_hcd: disconnect device [ 121.160879][ T6292] vhci_hcd: invalid port number 15 [ 121.166068][ T6292] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 121.476936][ T6288] loop4: detected capacity change from 0 to 512 [ 121.524002][ T6290] loop5: detected capacity change from 0 to 512 [ 122.042635][ T6300] loop1: detected capacity change from 0 to 1024 [ 122.072648][ T6300] EXT4-fs: Ignoring removed bh option [ 122.130840][ T6300] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 122.140783][ T6290] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.179442][ T6288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.199085][ T6300] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 122.273186][ T6290] EXT4-fs (loop5): 1 truncate cleaned up [ 122.284980][ T6300] EXT4-fs (loop1): invalid journal inode [ 122.306990][ T6300] EXT4-fs (loop1): can't get journal size [ 122.324334][ T6288] EXT4-fs (loop4): 1 truncate cleaned up [ 122.698466][ T6321] ip6t_rpfilter: unknown options [ 122.736183][ T6317] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 122.742842][ T6317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.750456][ T6317] vhci_hcd vhci_hcd.0: Device attached [ 123.076464][ T6327] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 123.083030][ T6327] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 123.090642][ T6327] vhci_hcd vhci_hcd.0: Device attached [ 123.202480][ T6328] vhci_hcd: connection closed [ 123.203831][ T12] vhci_hcd: stop threads [ 123.212947][ T12] vhci_hcd: release socket [ 123.217415][ T12] vhci_hcd: disconnect device [ 123.226983][ T6318] vhci_hcd: connection reset by peer [ 123.233853][ T6331] loop5: detected capacity change from 0 to 164 [ 123.244003][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 123.269130][ T3394] vhci_hcd: vhci_device speed not set [ 123.297359][ T6331] netlink: 32 bytes leftover after parsing attributes in process `syz.5.639'. [ 123.309076][ T12] vhci_hcd: stop threads [ 123.313447][ T12] vhci_hcd: release socket [ 123.317907][ T12] vhci_hcd: disconnect device [ 123.328116][ T6331] siw: device registration error -23 [ 123.439867][ T6339] loop0: detected capacity change from 0 to 164 [ 123.453754][ T6339] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.504153][ T6341] loop4: detected capacity change from 0 to 4096 [ 123.533520][ T6343] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.542247][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.639'. [ 123.726303][ T6350] loop4: detected capacity change from 0 to 4096 [ 123.749237][ T6348] loop5: detected capacity change from 0 to 8192 [ 123.826214][ T6350] 9pnet_fd: Insufficient options for proto=fd [ 123.911367][ T6359] vhci_hcd: invalid port number 15 [ 123.916546][ T6359] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 124.230611][ T6374] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 124.237366][ T6374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.244987][ T6374] vhci_hcd vhci_hcd.0: Device attached [ 124.348607][ T6379] loop3: detected capacity change from 0 to 1024 [ 124.406651][ T6379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.432122][ T6379] EXT4-fs: Mount option(s) incompatible with ext2 [ 124.496472][ T6381] loop4: detected capacity change from 0 to 164 [ 124.575043][ T6381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.656'. [ 124.697072][ T6381] siw: device registration error -23 [ 125.334894][ T6375] vhci_hcd: connection reset by peer [ 125.353399][ T3704] vhci_hcd: stop threads [ 125.357698][ T3704] vhci_hcd: release socket [ 125.362173][ T3704] vhci_hcd: disconnect device [ 125.775811][ T6385] loop0: detected capacity change from 0 to 512 [ 125.940759][ T6385] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.958244][ T6394] loop5: detected capacity change from 0 to 8192 [ 126.031604][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 126.099932][ T6385] EXT4-fs (loop0): 1 truncate cleaned up [ 126.148089][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 126.148108][ T29] audit: type=1326 audit(1747811616.330:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.178280][ T29] audit: type=1326 audit(1747811616.330:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.201822][ T29] audit: type=1326 audit(1747811616.330:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.225178][ T29] audit: type=1326 audit(1747811616.330:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.248796][ T29] audit: type=1326 audit(1747811616.330:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.272324][ T29] audit: type=1326 audit(1747811616.330:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.295738][ T29] audit: type=1326 audit(1747811616.330:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.319096][ T29] audit: type=1326 audit(1747811616.330:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.342401][ T29] audit: type=1326 audit(1747811616.330:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.365824][ T29] audit: type=1326 audit(1747811616.330:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6399 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f651e5fe969 code=0x7ffc0000 [ 126.445185][ T6412] loop4: detected capacity change from 0 to 2048 [ 126.662929][ T6420] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 126.669484][ T6420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.677039][ T6420] vhci_hcd vhci_hcd.0: Device attached [ 126.918656][ T3392] usb 11-1: new low-speed USB device number 8 using vhci_hcd [ 126.949938][ T6421] vhci_hcd: connection reset by peer [ 126.970531][ T3704] vhci_hcd: stop threads [ 126.975042][ T3704] vhci_hcd: release socket [ 126.979661][ T3704] vhci_hcd: disconnect device [ 127.089876][ T6443] loop0: detected capacity change from 0 to 164 [ 127.098806][ T6443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.675'. [ 127.150348][ T6440] siw: device registration error -23 [ 127.211137][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 127.666661][ T6446] loop1: detected capacity change from 0 to 2048 [ 128.072966][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 128.154370][ T6451] loop5: detected capacity change from 0 to 512 [ 128.226595][ T6451] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.281868][ T6451] EXT4-fs (loop5): 1 truncate cleaned up [ 128.330605][ T3393] usb 3-1: enqueue for inactive port 0 [ 128.410902][ T3393] vhci_hcd: vhci_device speed not set [ 128.429838][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 128.508604][ T6478] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 128.515246][ T6478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.522825][ T6478] vhci_hcd vhci_hcd.0: Device attached [ 129.050652][ T6497] loop5: detected capacity change from 0 to 764 [ 129.247026][ T6499] loop4: detected capacity change from 0 to 2048 [ 129.378503][ T6479] vhci_hcd: connection reset by peer [ 129.418762][ T12] vhci_hcd: stop threads [ 129.423134][ T12] vhci_hcd: release socket [ 129.427639][ T12] vhci_hcd: disconnect device [ 129.446181][ T6505] loop4: detected capacity change from 0 to 164 [ 129.732366][ T6505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.692'. [ 129.824255][ T6505] siw: device registration error -23 [ 129.952833][ T6511] loop0: detected capacity change from 0 to 1024 [ 130.017222][ T6511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.109442][ T6511] EXT4-fs: Mount option(s) incompatible with ext2 [ 130.323148][ T6515] loop3: detected capacity change from 0 to 512 [ 130.424748][ T6515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.469106][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 130.597012][ T6515] EXT4-fs (loop3): 1 truncate cleaned up [ 130.622939][ T6515] EXT4-fs mount: 21 callbacks suppressed [ 130.623050][ T6515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.735968][ T6528] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 130.742546][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.750392][ T6528] vhci_hcd vhci_hcd.0: Device attached [ 130.756614][ T6528] ip6t_rpfilter: unknown options [ 130.852769][ T6537] loop5: detected capacity change from 0 to 4096 [ 130.864618][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.882576][ T6537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.929324][ T6537] 9pnet_fd: Insufficient options for proto=fd [ 130.939357][ T6540] loop3: detected capacity change from 0 to 1024 [ 130.947788][ T6540] EXT4-fs: Ignoring removed bh option [ 130.953929][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.973634][ T6540] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 130.990243][ T6540] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 131.025307][ T6540] EXT4-fs (loop3): invalid journal inode [ 131.031132][ T3491] usb 1-1: new low-speed USB device number 8 using vhci_hcd [ 131.042553][ T6543] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 131.049159][ T6543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.056715][ T6543] vhci_hcd vhci_hcd.0: Device attached [ 131.058435][ T6540] EXT4-fs (loop3): can't get journal size [ 131.075611][ T6540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.149554][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 131.166655][ T6555] loop5: detected capacity change from 0 to 512 [ 131.176751][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.298532][ T3499] usb 9-1: new low-speed USB device number 8 using vhci_hcd [ 131.312314][ T6555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.327400][ T6555] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.374559][ T6531] vhci_hcd: connection reset by peer [ 131.428669][ T6561] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 131.435352][ T6561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.442929][ T6561] vhci_hcd vhci_hcd.0: Device attached [ 131.559425][ T4805] vhci_hcd: stop threads [ 131.563809][ T4805] vhci_hcd: release socket [ 131.568254][ T4805] vhci_hcd: disconnect device [ 131.718504][ T9] usb 7-1: new low-speed USB device number 7 using vhci_hcd [ 131.998468][ T3392] usb 11-1: enqueue for inactive port 0 [ 132.004224][ T3392] usb 11-1: enqueue for inactive port 0 [ 132.033804][ T6562] vhci_hcd: connection reset by peer [ 132.039697][ T3729] vhci_hcd: stop threads [ 132.043968][ T3729] vhci_hcd: release socket [ 132.048474][ T3729] vhci_hcd: disconnect device [ 132.061157][ T3704] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 132.087589][ T3704] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 132.100189][ T3392] vhci_hcd: vhci_device speed not set [ 132.105770][ T3704] EXT4-fs (loop5): This should not happen!! Data will be lost [ 132.105770][ T3704] [ 132.115539][ T3704] EXT4-fs (loop5): Total free blocks count 0 [ 132.120104][ T6575] loop1: detected capacity change from 0 to 4096 [ 132.121595][ T3704] EXT4-fs (loop5): Free/Dirty block details [ 132.133833][ T3704] EXT4-fs (loop5): free_blocks=65280 [ 132.139174][ T3704] EXT4-fs (loop5): dirty_blocks=1 [ 132.144399][ T3704] EXT4-fs (loop5): Block reservation details [ 132.145834][ T6573] loop0: detected capacity change from 0 to 512 [ 132.150431][ T3704] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 132.187719][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.203525][ T6544] vhci_hcd: connection reset by peer [ 132.209952][ T6575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.224639][ T12] vhci_hcd: stop threads [ 132.228949][ T12] vhci_hcd: release socket [ 132.233410][ T12] vhci_hcd: disconnect device [ 132.240858][ T6573] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.274952][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.310475][ T6578] loop5: detected capacity change from 0 to 764 [ 132.343981][ T6580] loop1: detected capacity change from 0 to 4096 [ 132.378252][ T6573] EXT4-fs (loop0): 1 truncate cleaned up [ 132.428865][ T6580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.444346][ T6580] 9pnet_fd: Insufficient options for proto=fd [ 132.462876][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.476370][ T6573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.230998][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.451310][ T6606] loop4: detected capacity change from 0 to 1024 [ 133.512129][ T6606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.538653][ T6606] EXT4-fs: Mount option(s) incompatible with ext2 [ 133.568738][ T6610] loop1: detected capacity change from 0 to 512 [ 133.625250][ T6610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.708496][ T6610] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.735861][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 133.819408][ T6617] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.726'. [ 133.830193][ T6616] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.726'. [ 133.920581][ T6619] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 133.923117][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 133.923136][ T29] audit: type=1326 audit(1747811624.130:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa359a8e969 code=0x0 [ 133.927240][ T6619] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.963657][ T6619] vhci_hcd vhci_hcd.0: Device attached [ 133.972920][ T29] audit: type=1326 audit(1747811624.180:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.0.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa359a8e969 code=0x0 [ 134.002864][ T6596] net_ratelimit: 691 callbacks suppressed [ 134.002885][ T6596] netlink: zone id is out of range [ 134.013842][ T6596] netlink: zone id is out of range [ 134.018990][ T6596] netlink: zone id is out of range [ 134.024197][ T6596] netlink: zone id is out of range [ 134.029444][ T6596] netlink: zone id is out of range [ 134.034582][ T6596] netlink: zone id is out of range [ 134.039791][ T6596] netlink: zone id is out of range [ 134.044988][ T6596] netlink: zone id is out of range [ 134.050275][ T6596] netlink: zone id is out of range [ 134.055401][ T6596] netlink: zone id is out of range [ 134.168560][ T3393] usb 3-1: enqueue for inactive port 0 [ 134.175252][ T3393] usb 3-1: enqueue for inactive port 0 [ 134.258453][ T3393] vhci_hcd: vhci_device speed not set [ 134.376007][ T4805] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 134.428537][ T4805] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 134.441518][ T4805] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.441518][ T4805] [ 134.451278][ T4805] EXT4-fs (loop1): Total free blocks count 0 [ 134.457345][ T4805] EXT4-fs (loop1): Free/Dirty block details [ 134.463679][ T4805] EXT4-fs (loop1): free_blocks=65280 [ 134.469026][ T4805] EXT4-fs (loop1): dirty_blocks=1 [ 134.474152][ T4805] EXT4-fs (loop1): Block reservation details [ 134.480262][ T4805] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 134.621483][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.665955][ T29] audit: type=1326 audit(1747811624.870:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 134.759731][ T6628] loop1: detected capacity change from 0 to 4096 [ 134.792430][ T29] audit: type=1326 audit(1747811624.870:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 134.815928][ T29] audit: type=1326 audit(1747811624.870:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 134.839260][ T29] audit: type=1326 audit(1747811624.870:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 134.878376][ T6628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.913542][ T6620] vhci_hcd: connection closed [ 134.913851][ T41] vhci_hcd: stop threads [ 134.922904][ T41] vhci_hcd: release socket [ 134.927455][ T41] vhci_hcd: disconnect device [ 134.943503][ T6628] 9pnet_fd: Insufficient options for proto=fd [ 134.995022][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.174731][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 135.348646][ T6633] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 135.355291][ T6633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.362828][ T6633] vhci_hcd vhci_hcd.0: Device attached [ 135.618487][ T3393] usb 3-1: new low-speed USB device number 11 using vhci_hcd [ 135.924506][ T6634] vhci_hcd: connection reset by peer [ 135.968352][ T41] vhci_hcd: stop threads [ 135.972677][ T41] vhci_hcd: release socket [ 135.977125][ T41] vhci_hcd: disconnect device [ 135.988700][ T6639] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 135.995265][ T6639] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.002888][ T6639] vhci_hcd vhci_hcd.0: Device attached [ 136.009697][ T6639] ip6t_rpfilter: unknown options [ 136.102614][ T3491] usb 1-1: enqueue for inactive port 0 [ 136.108162][ T3491] usb 1-1: enqueue for inactive port 0 [ 136.198537][ T3491] vhci_hcd: vhci_device speed not set [ 136.203440][ T6649] siw: device registration error -23 [ 136.248445][ T3391] usb 11-1: new low-speed USB device number 9 using vhci_hcd [ 136.339415][ T3499] usb 9-1: enqueue for inactive port 0 [ 136.344954][ T3499] usb 9-1: enqueue for inactive port 0 [ 136.455567][ T3499] vhci_hcd: vhci_device speed not set [ 136.476891][ T6657] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 136.483457][ T6657] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.491059][ T6657] vhci_hcd vhci_hcd.0: Device attached [ 136.586194][ T6640] vhci_hcd: connection reset by peer [ 136.619516][ T4805] vhci_hcd: stop threads [ 136.623862][ T4805] vhci_hcd: release socket [ 136.628345][ T4805] vhci_hcd: disconnect device [ 136.636903][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 136.884312][ T9] usb 7-1: enqueue for inactive port 0 [ 136.906817][ T9] usb 7-1: enqueue for inactive port 0 [ 137.214341][ T9] vhci_hcd: vhci_device speed not set [ 137.450283][ T6673] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 137.456847][ T6673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.464412][ T6673] vhci_hcd vhci_hcd.0: Device attached [ 137.470438][ T6673] ip6t_rpfilter: unknown options [ 137.526621][ T6679] loop1: detected capacity change from 0 to 512 [ 137.533898][ T6679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 137.536481][ T6658] vhci_hcd: connection reset by peer [ 137.551210][ T6679] EXT4-fs (loop1): 1 truncate cleaned up [ 137.559346][ T6679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.628992][ T48] vhci_hcd: stop threads [ 137.633345][ T48] vhci_hcd: release socket [ 137.637846][ T48] vhci_hcd: disconnect device [ 137.739933][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.767669][ T6690] loop5: detected capacity change from 0 to 512 [ 137.799523][ T3491] usb 1-1: new low-speed USB device number 9 using vhci_hcd [ 137.812867][ T6690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.833187][ T6690] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.966903][ T6700] loop3: detected capacity change from 0 to 1024 [ 137.974355][ T6674] vhci_hcd: connection reset by peer [ 137.982108][ T3729] vhci_hcd: stop threads [ 137.986482][ T3729] vhci_hcd: release socket [ 137.991013][ T3729] vhci_hcd: disconnect device [ 138.016050][ T6700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.029256][ T6700] EXT4-fs: Mount option(s) incompatible with ext2 [ 138.178937][ T6702] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 138.185512][ T6702] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.193214][ T6702] vhci_hcd vhci_hcd.0: Device attached [ 138.269728][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 138.402522][ T6708] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.750'. [ 138.419084][ T6709] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.750'. [ 138.607957][ T29] audit: type=1326 audit(1747811628.810:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.3.750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x0 [ 138.677581][ T29] audit: type=1326 audit(1747811628.870:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6707 comm="syz.3.750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x0 [ 138.708143][ T6703] vhci_hcd: connection closed [ 138.709741][ T48] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 138.733919][ T48] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 138.743612][ T31] vhci_hcd: stop threads [ 138.746496][ T48] EXT4-fs (loop5): This should not happen!! Data will be lost [ 138.746496][ T48] [ 138.750731][ T31] vhci_hcd: release socket [ 138.750746][ T31] vhci_hcd: disconnect device [ 138.760374][ T48] EXT4-fs (loop5): Total free blocks count 0 [ 138.760391][ T48] EXT4-fs (loop5): Free/Dirty block details [ 138.760405][ T48] EXT4-fs (loop5): free_blocks=65280 [ 138.786777][ T48] EXT4-fs (loop5): dirty_blocks=1 [ 138.791932][ T48] EXT4-fs (loop5): Block reservation details [ 138.797995][ T48] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 138.805914][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.347115][ T6729] FAULT_INJECTION: forcing a failure. [ 140.347115][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 140.359990][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.0.755 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 140.360044][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.360059][ T6729] Call Trace: [ 140.360066][ T6729] [ 140.360074][ T6729] __dump_stack+0x1d/0x30 [ 140.360095][ T6729] dump_stack_lvl+0xe8/0x140 [ 140.360115][ T6729] dump_stack+0x15/0x1b [ 140.360176][ T6729] should_fail_ex+0x265/0x280 [ 140.360212][ T6729] should_failslab+0x8c/0xb0 [ 140.360296][ T6729] kmem_cache_alloc_noprof+0x50/0x310 [ 140.360323][ T6729] ? skb_clone+0x151/0x1f0 [ 140.360348][ T6729] skb_clone+0x151/0x1f0 [ 140.360374][ T6729] __netlink_deliver_tap+0x2c9/0x500 [ 140.360402][ T6729] netlink_unicast+0x64c/0x670 [ 140.360510][ T6729] netlink_sendmsg+0x58b/0x6b0 [ 140.360532][ T6729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.360556][ T6729] __sock_sendmsg+0x145/0x180 [ 140.360589][ T6729] ____sys_sendmsg+0x31e/0x4e0 [ 140.360657][ T6729] ___sys_sendmsg+0x17b/0x1d0 [ 140.360688][ T6729] __x64_sys_sendmsg+0xd4/0x160 [ 140.360758][ T6729] x64_sys_call+0x2999/0x2fb0 [ 140.360814][ T6729] do_syscall_64+0xd0/0x1a0 [ 140.360840][ T6729] ? clear_bhb_loop+0x40/0x90 [ 140.360889][ T6729] ? clear_bhb_loop+0x40/0x90 [ 140.360912][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.360933][ T6729] RIP: 0033:0x7fa359a8e969 [ 140.360998][ T6729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.361018][ T6729] RSP: 002b:00007fa3580f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.361041][ T6729] RAX: ffffffffffffffda RBX: 00007fa359cb5fa0 RCX: 00007fa359a8e969 [ 140.361055][ T6729] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 140.361067][ T6729] RBP: 00007fa3580f7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.361080][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.361114][ T6729] R13: 0000000000000000 R14: 00007fa359cb5fa0 R15: 00007ffe658ed3c8 [ 140.361135][ T6729] [ 140.361367][ T6721] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 140.573530][ T6721] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.581162][ T6721] vhci_hcd vhci_hcd.0: Device attached [ 140.590992][ T6721] ip6t_rpfilter: unknown options [ 140.593423][ T6729] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 140.617285][ T6736] loop4: detected capacity change from 0 to 164 [ 140.624561][ T29] audit: type=1326 audit(1747811630.820:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.648982][ T29] audit: type=1326 audit(1747811630.820:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.672779][ T29] audit: type=1326 audit(1747811630.820:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.696754][ T29] audit: type=1326 audit(1747811630.820:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.720573][ T29] audit: type=1326 audit(1747811630.820:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.744023][ T29] audit: type=1326 audit(1747811630.820:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.767762][ T29] audit: type=1326 audit(1747811630.820:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.791232][ T29] audit: type=1326 audit(1747811630.820:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.814616][ T29] audit: type=1326 audit(1747811630.820:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.820861][ T6730] vhci_hcd: connection closed [ 140.838076][ T29] audit: type=1326 audit(1747811630.820:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6734 comm="syz.1.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 140.883512][ T3393] usb 3-1: enqueue for inactive port 0 [ 140.889111][ T3393] usb 3-1: enqueue for inactive port 0 [ 140.892557][ T6736] netlink: 32 bytes leftover after parsing attributes in process `syz.4.759'. [ 140.903822][ T3729] vhci_hcd: stop threads [ 140.908079][ T3729] vhci_hcd: release socket [ 140.912687][ T3729] vhci_hcd: disconnect device [ 140.954368][ T6736] siw: device registration error -23 [ 141.050453][ T3393] vhci_hcd: vhci_device speed not set [ 141.307956][ T3391] usb 11-1: enqueue for inactive port 0 [ 141.324529][ T3391] usb 11-1: enqueue for inactive port 0 [ 141.488609][ T3391] vhci_hcd: vhci_device speed not set [ 142.483806][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 142.495671][ T3499] usb 9-1: enqueue for inactive port 0 [ 142.502308][ T3499] usb 9-1: enqueue for inactive port 0 [ 142.594993][ T3499] vhci_hcd: vhci_device speed not set [ 142.755009][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 142.918504][ T6774] loop5: detected capacity change from 0 to 4096 [ 142.959289][ T3491] usb 1-1: enqueue for inactive port 0 [ 142.965471][ T3491] usb 1-1: enqueue for inactive port 0 [ 142.986631][ T6774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.063505][ T3491] vhci_hcd: vhci_device speed not set [ 143.258158][ T6782] loop4: detected capacity change from 0 to 512 [ 143.335912][ T6785] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 143.342532][ T6785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.350183][ T6785] vhci_hcd vhci_hcd.0: Device attached [ 143.496840][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.525176][ T6782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.588492][ T3391] usb 3-1: new low-speed USB device number 12 using vhci_hcd [ 143.628993][ T6782] EXT4-fs (loop4): 1 truncate cleaned up [ 143.657957][ T6782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.774148][ T6788] vhci_hcd: connection reset by peer [ 143.790558][ T6793] siw: device registration error -23 [ 143.809855][ T48] vhci_hcd: stop threads [ 143.814167][ T48] vhci_hcd: release socket [ 143.818639][ T48] vhci_hcd: disconnect device [ 143.976887][ T6798] loop0: detected capacity change from 0 to 4096 [ 143.997529][ T6798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.042283][ T6805] loop5: detected capacity change from 0 to 4096 [ 144.049565][ T6805] ext4: Unknown parameter 'obj_type' [ 144.137309][ T6805] netlink: 'syz.5.775': attribute type 21 has an invalid length. [ 144.156346][ T6805] netlink: 164 bytes leftover after parsing attributes in process `syz.5.775'. [ 144.156498][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.182926][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.412541][ T6816] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 144.419110][ T6816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.426995][ T6816] vhci_hcd vhci_hcd.0: Device attached [ 144.433976][ T6816] ip6t_rpfilter: unknown options [ 144.688685][ T3491] usb 9-1: new low-speed USB device number 9 using vhci_hcd [ 144.777149][ T6828] loop0: detected capacity change from 0 to 764 [ 145.052341][ T6821] vhci_hcd: connection reset by peer [ 145.094539][ T31] vhci_hcd: stop threads [ 145.098923][ T31] vhci_hcd: release socket [ 145.103378][ T31] vhci_hcd: disconnect device [ 145.410262][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 145.520040][ T6841] loop0: detected capacity change from 0 to 512 [ 145.531483][ T6846] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.788'. [ 145.541915][ T6844] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.788'. [ 145.582517][ T6841] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.745102][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 145.745119][ T29] audit: type=1326 audit(1747811635.950:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x0 [ 145.774203][ T29] audit: type=1326 audit(1747811635.950:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=273 compat=0 ip=0x7f651e5b5667 code=0x0 [ 145.785423][ T6841] EXT4-fs (loop0): 1 truncate cleaned up [ 145.821467][ T6841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.845069][ T29] audit: type=1326 audit(1747811636.050:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 145.890028][ T29] audit: type=1326 audit(1747811636.050:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6836 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 145.996969][ T6856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 146.003548][ T6856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.011192][ T6856] vhci_hcd vhci_hcd.0: Device attached [ 146.232076][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.255186][ T6865] loop5: detected capacity change from 0 to 764 [ 146.319412][ T29] audit: type=1326 audit(1747811636.530:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.3.788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x0 [ 146.427885][ T6872] loop0: detected capacity change from 0 to 1024 [ 146.453978][ T6857] vhci_hcd: connection closed [ 146.454366][ T175] vhci_hcd: stop threads [ 146.459991][ T6872] EXT4-fs: Ignoring removed bh option [ 146.463412][ T175] vhci_hcd: release socket [ 146.473797][ T175] vhci_hcd: disconnect device [ 146.490923][ T6872] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 146.496751][ T6878] loop5: detected capacity change from 0 to 164 [ 146.507122][ T6872] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 146.519549][ T6878] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 146.522350][ T6876] loop1: detected capacity change from 0 to 764 [ 146.535390][ T6872] EXT4-fs (loop0): invalid journal inode [ 146.542076][ T6872] EXT4-fs (loop0): can't get journal size [ 146.552494][ T6872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.585553][ T6880] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 146.599206][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.696506][ T29] audit: type=1326 audit(1747811636.900:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 146.724029][ T29] audit: type=1326 audit(1747811636.930:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 146.747414][ T29] audit: type=1326 audit(1747811636.930:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 146.770793][ T29] audit: type=1326 audit(1747811636.930:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 146.794239][ T29] audit: type=1326 audit(1747811636.930:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6892 comm="syz.1.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 147.111192][ T6899] siw: device registration error -23 [ 147.171950][ T6903] loop0: detected capacity change from 0 to 764 [ 147.379437][ T6905] loop4: detected capacity change from 0 to 8192 [ 148.025949][ T3386] Process accounting resumed [ 148.038180][ T6922] loop5: detected capacity change from 0 to 4096 [ 148.045847][ T6925] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 148.121712][ T6931] siw: device registration error -23 [ 148.157446][ T6922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.221371][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.257457][ T6936] loop4: detected capacity change from 0 to 512 [ 148.367161][ T6936] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.395301][ T6943] ip6t_rpfilter: unknown options [ 148.420874][ T6939] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 148.427435][ T6939] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.435022][ T6939] vhci_hcd vhci_hcd.0: Device attached [ 148.585270][ T6936] EXT4-fs (loop4): 1 truncate cleaned up [ 148.646307][ T6936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.793063][ T6953] loop5: detected capacity change from 0 to 512 [ 148.832582][ T6953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.849674][ T6953] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.918552][ T6940] vhci_hcd: connection reset by peer [ 148.984637][ T6958] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 148.991196][ T6958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.998900][ T6958] vhci_hcd vhci_hcd.0: Device attached [ 149.005584][ T6958] ip6t_rpfilter: unknown options [ 149.027192][ T12] vhci_hcd: stop threads [ 149.031581][ T12] vhci_hcd: release socket [ 149.036079][ T12] vhci_hcd: disconnect device [ 149.224961][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.234030][ T3391] usb 3-1: enqueue for inactive port 0 [ 149.234059][ T3391] usb 3-1: enqueue for inactive port 0 [ 149.494242][ T5367] usb 7-1: new low-speed USB device number 8 using vhci_hcd [ 149.536272][ T6959] vhci_hcd: connection closed [ 149.656921][ T3397] vhci_hcd: stop threads [ 149.665926][ T3397] vhci_hcd: release socket [ 149.670406][ T3397] vhci_hcd: disconnect device [ 149.685807][ T3391] vhci_hcd: vhci_device speed not set [ 149.727249][ T6967] vhci_hcd: invalid port number 15 [ 149.732575][ T6967] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 149.773173][ T3397] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 149.796808][ T3491] usb 9-1: enqueue for inactive port 0 [ 149.824533][ T3491] usb 9-1: enqueue for inactive port 0 [ 149.986270][ T5367] usb 7-1: enqueue for inactive port 0 [ 149.992201][ T5367] usb 7-1: enqueue for inactive port 0 [ 149.997765][ T5367] usb 7-1: enqueue for inactive port 0 [ 150.016786][ T3397] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 150.029439][ T3397] EXT4-fs (loop5): This should not happen!! Data will be lost [ 150.029439][ T3397] [ 150.039294][ T3397] EXT4-fs (loop5): Total free blocks count 0 [ 150.045555][ T3397] EXT4-fs (loop5): Free/Dirty block details [ 150.051512][ T3397] EXT4-fs (loop5): free_blocks=65280 [ 150.056860][ T3397] EXT4-fs (loop5): dirty_blocks=1 [ 150.061942][ T3397] EXT4-fs (loop5): Block reservation details [ 150.068103][ T3397] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 150.126106][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.155334][ T6976] loop0: detected capacity change from 0 to 164 [ 150.158746][ T6972] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 150.168313][ T6972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.175889][ T6972] vhci_hcd vhci_hcd.0: Device attached [ 150.181890][ T6978] ip6t_rpfilter: unknown options [ 150.182344][ T5367] vhci_hcd: vhci_device speed not set [ 150.278790][ T3491] vhci_hcd: vhci_device speed not set [ 150.281354][ T6976] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.324531][ T6983] siw: device registration error -23 [ 150.499131][ T6989] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.705140][ T6973] vhci_hcd: connection closed [ 150.770141][ T85] vhci_hcd: stop threads [ 150.779206][ T85] vhci_hcd: release socket [ 150.783641][ T85] vhci_hcd: disconnect device [ 150.789438][ T3391] usb 3-1: enqueue for inactive port 0 [ 150.807415][ T3391] usb 3-1: enqueue for inactive port 0 [ 150.852366][ T3391] usb 3-1: enqueue for inactive port 0 [ 150.961424][ T3391] vhci_hcd: vhci_device speed not set [ 151.106379][ T7006] loop0: detected capacity change from 0 to 512 [ 151.136133][ T7008] siw: device registration error -23 [ 151.143872][ T7006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.169453][ T7006] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.293378][ T7017] loop1: detected capacity change from 0 to 764 [ 151.321020][ T7017] Symlink component flag not implemented [ 151.328957][ T7017] Symlink component flag not implemented (7) [ 151.337222][ T7017] Symlink component flag not implemented (7) [ 151.354073][ T7017] bond1: entered promiscuous mode [ 151.359377][ T7017] bond1: entered allmulticast mode [ 151.367787][ T7017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.398224][ T7017] bond1 (unregistering): Released all slaves [ 151.649199][ T7020] net_ratelimit: 688 callbacks suppressed [ 151.649217][ T7020] netlink: zone id is out of range [ 151.660191][ T7020] netlink: zone id is out of range [ 151.665362][ T7020] netlink: zone id is out of range [ 151.670513][ T7020] netlink: zone id is out of range [ 151.675638][ T7020] netlink: zone id is out of range [ 151.680907][ T7020] netlink: zone id is out of range [ 151.686194][ T7020] netlink: zone id is out of range [ 151.691393][ T7020] netlink: zone id is out of range [ 151.696531][ T7020] netlink: zone id is out of range [ 151.701787][ T7020] netlink: zone id is out of range [ 151.750860][ T7034] loop1: detected capacity change from 0 to 8192 [ 151.926188][ T7040] loop5: detected capacity change from 0 to 164 [ 151.952076][ T85] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 151.972965][ T7040] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 151.994794][ T85] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 152.007485][ T85] EXT4-fs (loop0): This should not happen!! Data will be lost [ 152.007485][ T85] [ 152.018462][ T85] EXT4-fs (loop0): Total free blocks count 0 [ 152.024570][ T85] EXT4-fs (loop0): Free/Dirty block details [ 152.031261][ T85] EXT4-fs (loop0): free_blocks=65280 [ 152.036581][ T85] EXT4-fs (loop0): dirty_blocks=1 [ 152.041666][ T85] EXT4-fs (loop0): Block reservation details [ 152.047669][ T85] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 152.053679][ T7043] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.189985][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.345231][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.838'. [ 152.441308][ T7053] loop3: detected capacity change from 0 to 512 [ 152.490843][ T7058] loop1: detected capacity change from 0 to 8192 [ 152.503159][ T7053] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.660390][ T7053] EXT4-fs (loop3): 1 truncate cleaned up [ 152.708105][ T7053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.722308][ T7065] loop0: detected capacity change from 0 to 8192 [ 152.795750][ T7069] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 152.802328][ T7069] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.809931][ T7069] vhci_hcd vhci_hcd.0: Device attached [ 152.936608][ T7083] FAULT_INJECTION: forcing a failure. [ 152.936608][ T7083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.949753][ T7083] CPU: 0 UID: 0 PID: 7083 Comm: syz.5.859 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 152.949802][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.949817][ T7083] Call Trace: [ 152.949824][ T7083] [ 152.949833][ T7083] __dump_stack+0x1d/0x30 [ 152.949857][ T7083] dump_stack_lvl+0xe8/0x140 [ 152.949876][ T7083] dump_stack+0x15/0x1b [ 152.949938][ T7083] should_fail_ex+0x265/0x280 [ 152.949979][ T7083] should_fail+0xb/0x20 [ 152.950015][ T7083] should_fail_usercopy+0x1a/0x20 [ 152.950039][ T7083] _copy_from_iter+0xcf/0xdd0 [ 152.950103][ T7083] ? __build_skb_around+0x1a0/0x200 [ 152.950152][ T7083] ? __alloc_skb+0x223/0x320 [ 152.950186][ T7083] netlink_sendmsg+0x471/0x6b0 [ 152.950235][ T7083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.950261][ T7083] __sock_sendmsg+0x145/0x180 [ 152.950301][ T7083] ____sys_sendmsg+0x31e/0x4e0 [ 152.950324][ T7083] ___sys_sendmsg+0x17b/0x1d0 [ 152.950423][ T7083] __x64_sys_sendmsg+0xd4/0x160 [ 152.950447][ T7083] x64_sys_call+0x2999/0x2fb0 [ 152.950503][ T7083] do_syscall_64+0xd0/0x1a0 [ 152.950595][ T7083] ? clear_bhb_loop+0x40/0x90 [ 152.950618][ T7083] ? clear_bhb_loop+0x40/0x90 [ 152.950641][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.950668][ T7083] RIP: 0033:0x7f0ae22be969 [ 152.950684][ T7083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.950734][ T7083] RSP: 002b:00007f0ae0927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.950759][ T7083] RAX: ffffffffffffffda RBX: 00007f0ae24e5fa0 RCX: 00007f0ae22be969 [ 152.950775][ T7083] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 152.950791][ T7083] RBP: 00007f0ae0927090 R08: 0000000000000000 R09: 0000000000000000 [ 152.950807][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.950821][ T7083] R13: 0000000000000000 R14: 00007f0ae24e5fa0 R15: 00007fff34ebd2e8 [ 152.950843][ T7083] [ 153.248467][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 153.248487][ T29] audit: type=1326 audit(1747811643.420:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.278103][ T29] audit: type=1326 audit(1747811643.420:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.282488][ T3491] usb 3-1: new low-speed USB device number 13 using vhci_hcd [ 153.301623][ T29] audit: type=1326 audit(1747811643.420:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.332280][ T29] audit: type=1326 audit(1747811643.420:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.355740][ T29] audit: type=1326 audit(1747811643.420:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.379649][ T29] audit: type=1326 audit(1747811643.420:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.403191][ T29] audit: type=1326 audit(1747811643.420:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.426533][ T29] audit: type=1326 audit(1747811643.420:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.450043][ T29] audit: type=1326 audit(1747811643.420:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.473605][ T29] audit: type=1326 audit(1747811643.420:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.5.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ae22be969 code=0x7ffc0000 [ 153.486731][ T7070] vhci_hcd: connection reset by peer [ 153.523694][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.590757][ T12] vhci_hcd: stop threads [ 153.595060][ T12] vhci_hcd: release socket [ 153.599580][ T12] vhci_hcd: disconnect device [ 153.729588][ T7093] loop0: detected capacity change from 0 to 512 [ 153.821621][ T7100] siw: device registration error -23 [ 153.835996][ T7093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.918904][ T7093] EXT4-fs (loop0): 1 truncate cleaned up [ 153.963499][ T7093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.036433][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.868'. [ 154.109258][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.110824][ T7120] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.868'. [ 154.142847][ T7123] loop5: detected capacity change from 0 to 164 [ 154.160317][ T7123] netlink: 32 bytes leftover after parsing attributes in process `syz.5.871'. [ 154.172278][ T7123] siw: device registration error -23 [ 154.196298][ T7114] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.868'. [ 154.274729][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.876'. [ 154.309427][ T7138] loop0: detected capacity change from 0 to 1024 [ 154.324511][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.871'. [ 154.326443][ T7138] EXT4-fs: Ignoring removed bh option [ 154.341786][ T7138] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 154.352623][ T7138] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 154.354856][ T7141] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.876'. [ 154.373496][ T7138] EXT4-fs (loop0): invalid journal inode [ 154.387299][ T7138] EXT4-fs (loop0): can't get journal size [ 154.398016][ T7138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.418607][ T7136] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.876'. [ 154.428566][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.498760][ T7144] siw: device registration error -23 [ 154.734796][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.879'. [ 154.767706][ T7159] SELinux: Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped). [ 154.891179][ T7165] SELinux: +}[@ (7165) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 155.093016][ T7172] loop3: detected capacity change from 0 to 512 [ 155.099947][ T7172] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 155.291971][ T3394] IPVS: starting estimator thread 0... [ 155.378761][ T7184] IPVS: using max 3312 ests per chain, 165600 per kthread [ 155.453295][ T7188] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 155.464105][ T7188] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 155.473333][ T7188] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 155.495780][ T7192] loop3: detected capacity change from 0 to 164 [ 155.503613][ T7192] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.515684][ T7192] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.540362][ T7194] loop3: detected capacity change from 0 to 164 [ 155.548940][ T7194] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.645169][ T7198] loop0: detected capacity change from 0 to 512 [ 155.663026][ T7198] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.692446][ T7198] EXT4-fs (loop0): 1 truncate cleaned up [ 155.716396][ T7198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.972441][ T7208] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 156.162043][ T7210] loop5: detected capacity change from 0 to 512 [ 156.231971][ T7210] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.297391][ T7210] EXT4-fs (loop5): 1 truncate cleaned up [ 156.328061][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.343425][ T7210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.619799][ T7220] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 156.639178][ T7220] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 156.677089][ T7220] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 156.739927][ T7225] loop0: detected capacity change from 0 to 164 [ 156.782836][ T7225] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.806173][ T7225] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.845787][ T7227] loop0: detected capacity change from 0 to 164 [ 156.888654][ T7227] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.930469][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.942968][ T7229] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 157.020165][ T7231] loop5: detected capacity change from 0 to 8192 [ 157.103199][ T7239] vhci_hcd: invalid port number 15 [ 157.108421][ T7239] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 157.390765][ T7253] ip6t_rpfilter: unknown options [ 157.414318][ T7250] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 157.420964][ T7250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.428560][ T7250] vhci_hcd vhci_hcd.0: Device attached [ 157.946180][ T7251] vhci_hcd: connection closed [ 157.947431][ T3704] vhci_hcd: stop threads [ 157.957112][ T3704] vhci_hcd: release socket [ 157.961679][ T3704] vhci_hcd: disconnect device [ 157.966521][ T7257] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 157.973146][ T7257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.980904][ T7257] vhci_hcd vhci_hcd.0: Device attached [ 157.993410][ T7257] ip6t_rpfilter: unknown options [ 158.161036][ T3392] usb 1-1: new low-speed USB device number 10 using vhci_hcd [ 158.167854][ T7258] vhci_hcd: connection closed [ 158.168566][ T3392] usb 1-1: enqueue for inactive port 0 [ 158.169362][ T3704] vhci_hcd: stop threads [ 158.173261][ T3392] usb 1-1: enqueue for inactive port 0 [ 158.178752][ T3704] vhci_hcd: release socket [ 158.178767][ T3704] vhci_hcd: disconnect device [ 158.197851][ T3392] usb 1-1: enqueue for inactive port 0 [ 158.278463][ T3392] vhci_hcd: vhci_device speed not set [ 158.328497][ T3491] usb 3-1: enqueue for inactive port 0 [ 158.334029][ T3491] usb 3-1: enqueue for inactive port 0 [ 158.412155][ T7223] __nla_validate_parse: 2 callbacks suppressed [ 158.412174][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 158.428456][ T3491] vhci_hcd: vhci_device speed not set [ 158.738195][ T7265] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 158.744815][ T7265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.752356][ T7265] vhci_hcd vhci_hcd.0: Device attached [ 159.628517][ T7266] vhci_hcd: connection closed [ 159.635473][ T179] vhci_hcd: stop threads [ 159.644547][ T179] vhci_hcd: release socket [ 159.649120][ T179] vhci_hcd: disconnect device [ 159.788479][ T3392] usb 1-1: enqueue for inactive port 0 [ 159.795246][ T3392] usb 1-1: enqueue for inactive port 0 [ 159.841289][ T3392] usb 1-1: enqueue for inactive port 0 [ 159.998471][ T3392] vhci_hcd: vhci_device speed not set [ 160.171265][ T7286] audit_log_start: 182 callbacks suppressed [ 160.171282][ T7286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.183301][ T7287] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.183744][ T7286] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 160.190262][ T7287] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 160.197839][ T7286] audit: backlog limit exceeded [ 160.199927][ T29] audit: type=1404 audit(1747811650.370:3254): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 160.206169][ T7287] audit: backlog limit exceeded [ 160.211002][ T29] audit: type=1400 audit(1747811650.370:3255): avc: denied { create } for pid=7282 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 160.248413][ T3314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.250280][ T29] audit: type=1400 audit(1747811650.370:3256): avc: denied { create } for pid=7282 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 160.330610][ T7297] loop4: detected capacity change from 0 to 512 [ 160.362611][ T7297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.411133][ T7297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.429010][ T7305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.438586][ T7297] ext4 filesystem being mounted at /170/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.454856][ T7305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.473583][ T7309] loop3: detected capacity change from 0 to 1024 [ 160.480548][ T7309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.488010][ T7309] EXT4-fs: Mount option(s) incompatible with ext2 [ 160.514489][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.542293][ T7316] loop4: detected capacity change from 0 to 512 [ 160.571484][ T7316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.592895][ T7316] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.603663][ T7317] net_ratelimit: 2097 callbacks suppressed [ 160.603676][ T7317] netlink: zone id is out of range [ 160.614726][ T7317] netlink: zone id is out of range [ 160.619875][ T7317] netlink: zone id is out of range [ 160.625082][ T7317] netlink: zone id is out of range [ 160.630234][ T7317] netlink: zone id is out of range [ 160.635370][ T7317] netlink: zone id is out of range [ 160.640744][ T7317] netlink: zone id is out of range [ 160.645908][ T7317] netlink: zone id is out of range [ 160.651250][ T7317] netlink: zone id is out of range [ 160.656475][ T7317] netlink: zone id is out of range [ 160.662096][ T3394] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 60 sec [ 160.681943][ T7316] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 160.736190][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.930'. [ 160.783254][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.901031][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 161.052543][ T7344] loop1: detected capacity change from 0 to 164 [ 161.064381][ T7346] loop4: detected capacity change from 0 to 1024 [ 161.080056][ T7346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.118454][ T7346] EXT4-fs: Mount option(s) incompatible with ext2 [ 161.202885][ T7352] siw: device registration error -23 [ 161.223145][ T7344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.942'. [ 161.278474][ T7344] siw: device registration error -23 [ 161.390823][ T7357] ip6t_rpfilter: unknown options [ 161.435798][ T7355] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 161.442467][ T7355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.450282][ T7355] vhci_hcd vhci_hcd.0: Device attached [ 161.688487][ T5367] usb 1-1: new low-speed USB device number 11 using vhci_hcd [ 161.831658][ T7365] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 161.860785][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 161.871100][ T7365] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 161.928939][ T7356] vhci_hcd: connection reset by peer [ 161.951548][ T179] vhci_hcd: stop threads [ 161.955892][ T179] vhci_hcd: release socket [ 161.960374][ T179] vhci_hcd: disconnect device [ 161.968884][ T7365] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 162.206048][ T7387] FAULT_INJECTION: forcing a failure. [ 162.206048][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 162.218760][ T7387] CPU: 1 UID: 0 PID: 7387 Comm: syz.5.956 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 162.218836][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.218845][ T7387] Call Trace: [ 162.218851][ T7387] [ 162.218860][ T7387] __dump_stack+0x1d/0x30 [ 162.218901][ T7387] dump_stack_lvl+0xe8/0x140 [ 162.218923][ T7387] dump_stack+0x15/0x1b [ 162.218943][ T7387] should_fail_ex+0x265/0x280 [ 162.218986][ T7387] should_failslab+0x8c/0xb0 [ 162.219130][ T7387] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 162.219152][ T7387] ? __d_alloc+0x3d/0x350 [ 162.219173][ T7387] __d_alloc+0x3d/0x350 [ 162.219191][ T7387] ? ramfs_init_fs_context+0x31/0x90 [ 162.219226][ T7387] d_alloc_pseudo+0x1e/0x80 [ 162.219257][ T7387] alloc_file_pseudo+0x71/0x160 [ 162.219281][ T7387] anon_inode_getfd+0xc1/0x150 [ 162.219311][ T7387] __se_sys_fsopen+0x193/0x1e0 [ 162.219338][ T7387] __x64_sys_fsopen+0x31/0x40 [ 162.219392][ T7387] x64_sys_call+0x2a54/0x2fb0 [ 162.219412][ T7387] do_syscall_64+0xd0/0x1a0 [ 162.219437][ T7387] ? clear_bhb_loop+0x40/0x90 [ 162.219462][ T7387] ? clear_bhb_loop+0x40/0x90 [ 162.219504][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.219529][ T7387] RIP: 0033:0x7f0ae22be969 [ 162.219546][ T7387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.219564][ T7387] RSP: 002b:00007f0ae0927038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 162.219585][ T7387] RAX: ffffffffffffffda RBX: 00007f0ae24e5fa0 RCX: 00007f0ae22be969 [ 162.219599][ T7387] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 162.219635][ T7387] RBP: 00007f0ae0927090 R08: 0000000000000000 R09: 0000000000000000 [ 162.219647][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.219659][ T7387] R13: 0000000000000001 R14: 00007f0ae24e5fa0 R15: 00007fff34ebd2e8 [ 162.219724][ T7387] [ 163.485643][ T7398] loop4: detected capacity change from 0 to 164 [ 163.563885][ T7398] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 163.667489][ T7394] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 163.674160][ T7394] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.681726][ T7394] vhci_hcd vhci_hcd.0: Device attached [ 164.096433][ T7395] vhci_hcd: connection closed [ 164.100074][ T175] vhci_hcd: stop threads [ 164.109454][ T175] vhci_hcd: release socket [ 164.113942][ T175] vhci_hcd: disconnect device [ 164.167680][ T3394] vhci_hcd: vhci_device speed not set [ 164.226541][ T7410] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 164.237905][ T7410] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 164.247509][ T7410] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 164.314271][ T7415] loop1: detected capacity change from 0 to 164 [ 164.350704][ T7415] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 164.369556][ T7422] loop0: detected capacity change from 0 to 164 [ 164.392027][ T7422] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 164.444970][ T7422] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 164.465453][ T7427] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 164.589521][ T7432] loop4: detected capacity change from 0 to 512 [ 164.614333][ T7432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.673362][ T7435] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 164.680011][ T7435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.687665][ T7435] vhci_hcd vhci_hcd.0: Device attached [ 164.694390][ T7435] ip6t_rpfilter: unknown options [ 164.721332][ T7432] EXT4-fs (loop4): 1 truncate cleaned up [ 164.742056][ T7432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.051293][ T7442] siw: device registration error -23 [ 165.110139][ T7447] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 165.119293][ T7447] loop0: detected capacity change from 0 to 256 [ 165.167270][ T7449] loop1: detected capacity change from 0 to 164 [ 165.177078][ T7449] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 165.198689][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 165.198703][ T29] audit: type=1400 audit(1747811655.410:3564): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 165.239006][ T7436] vhci_hcd: connection closed [ 165.240871][ T179] vhci_hcd: stop threads [ 165.249912][ T179] vhci_hcd: release socket [ 165.254372][ T179] vhci_hcd: disconnect device [ 165.298468][ T3394] usb 11-1: new low-speed USB device number 10 using vhci_hcd [ 165.306081][ T3394] usb 11-1: enqueue for inactive port 0 [ 165.311865][ T3394] usb 11-1: enqueue for inactive port 0 [ 165.317577][ T3394] usb 11-1: enqueue for inactive port 0 [ 165.401223][ T3394] vhci_hcd: vhci_device speed not set [ 165.408823][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.431059][ T29] audit: type=1400 audit(1747811655.630:3565): avc: denied { read } for pid=7461 comm="syz.0.984" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 165.464231][ T29] audit: type=1400 audit(1747811655.660:3566): avc: denied { open } for pid=7461 comm="syz.0.984" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 165.487560][ T29] audit: type=1400 audit(1747811655.660:3567): avc: denied { kexec_image_load } for pid=7461 comm="syz.0.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 165.507623][ T29] audit: type=1400 audit(1747811655.670:3568): avc: denied { create } for pid=7461 comm="syz.0.984" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 165.528932][ T29] audit: type=1400 audit(1747811655.670:3569): avc: denied { write } for pid=7461 comm="syz.0.984" name="file0" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 165.546276][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 165.551341][ T29] audit: type=1400 audit(1747811655.670:3570): avc: denied { open } for pid=7461 comm="syz.0.984" path="/221/file0" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 165.605285][ T29] audit: type=1326 audit(1747811655.810:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f20b2e969 code=0x7ffc0000 [ 165.630467][ T29] audit: type=1326 audit(1747811655.810:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f20b2e969 code=0x7ffc0000 [ 165.654013][ T29] audit: type=1326 audit(1747811655.810:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7470 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f7f20b2e969 code=0x7ffc0000 [ 165.900734][ T7478] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 165.910587][ T7478] SELinux: failed to load policy [ 165.916909][ T7478] xt_hashlimit: max too large, truncated to 1048576 [ 166.139590][ T7480] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 166.146148][ T7480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.153761][ T7480] vhci_hcd vhci_hcd.0: Device attached [ 166.162845][ T7480] ip6t_rpfilter: unknown options [ 166.386149][ T7481] loop5: detected capacity change from 0 to 4096 [ 166.456497][ T7481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.535204][ T7481] 9pnet_fd: Insufficient options for proto=fd [ 166.554120][ T7493] loop4: detected capacity change from 0 to 164 [ 166.563589][ T7493] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 166.578406][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.624131][ T7482] vhci_hcd: connection closed [ 166.628830][ T3729] vhci_hcd: stop threads [ 166.637830][ T3729] vhci_hcd: release socket [ 166.642406][ T3729] vhci_hcd: disconnect device [ 166.718892][ T7509] loop4: detected capacity change from 0 to 164 [ 166.728491][ T5367] usb 1-1: enqueue for inactive port 0 [ 166.734019][ T5367] usb 1-1: enqueue for inactive port 0 [ 166.742867][ T7509] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 166.774595][ T7511] loop5: detected capacity change from 0 to 8192 [ 166.810304][ T5367] vhci_hcd: vhci_device speed not set [ 166.870292][ T7519] loop5: detected capacity change from 0 to 8192 [ 166.906415][ T7521] loop5: detected capacity change from 0 to 164 [ 166.914496][ T7521] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 166.945552][ T7523] loop5: detected capacity change from 0 to 512 [ 166.954360][ T7523] EXT4-fs: Ignoring removed nobh option [ 166.962152][ T7523] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1007: invalid indirect mapped block 256 (level 2) [ 166.976352][ T7523] EXT4-fs (loop5): 2 truncates cleaned up [ 166.984172][ T7523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.005193][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.244821][ T7538] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1013'. [ 167.255873][ T7537] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1013'. [ 167.593055][ T7547] loop1: detected capacity change from 0 to 164 [ 167.613033][ T7547] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 167.625040][ T7547] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 167.706658][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'. [ 167.732735][ T7555] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1019'. [ 167.742566][ T7551] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1019'. [ 169.363937][ T7568] loop3: detected capacity change from 0 to 512 [ 169.492128][ T7568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.508771][ T7568] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.587320][ T7576] net_ratelimit: 690 callbacks suppressed [ 169.587336][ T7576] netlink: zone id is out of range [ 169.598653][ T7576] netlink: zone id is out of range [ 169.603830][ T7576] netlink: zone id is out of range [ 169.609127][ T7576] netlink: zone id is out of range [ 169.614254][ T7576] netlink: zone id is out of range [ 169.619411][ T7576] netlink: zone id is out of range [ 169.624661][ T7576] netlink: zone id is out of range [ 169.629814][ T7576] netlink: zone id is out of range [ 169.635211][ T7576] netlink: zone id is out of range [ 169.640387][ T7576] netlink: zone id is out of range [ 169.772934][ T7578] loop5: detected capacity change from 0 to 4096 [ 169.786820][ T7578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.823002][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.851445][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 170.217245][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.266423][ T7589] siw: device registration error -23 [ 170.379072][ T7596] loop0: detected capacity change from 0 to 512 [ 170.413774][ T7596] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.475180][ T7596] EXT4-fs (loop0): 1 truncate cleaned up [ 170.477366][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 170.505952][ T7596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.647853][ T7603] loop3: detected capacity change from 0 to 8192 [ 170.718829][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.926624][ T7616] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1037'. [ 171.888502][ T7612] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1037'. [ 172.256795][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 172.256822][ T29] audit: type=1326 audit(1747811662.280:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.1.1037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x0 [ 172.692521][ T7632] ip6t_rpfilter: unknown options [ 172.862912][ T7634] loop4: detected capacity change from 0 to 512 [ 172.946138][ T7630] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 172.952747][ T7630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.960299][ T7630] vhci_hcd vhci_hcd.0: Device attached [ 172.967430][ T7631] vhci_hcd: connection closed [ 172.969585][ T12] vhci_hcd: stop threads [ 172.978666][ T12] vhci_hcd: release socket [ 172.983131][ T12] vhci_hcd: disconnect device [ 173.012884][ T7634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.069275][ T29] audit: type=1326 audit(1747811662.500:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.1.1037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x0 [ 173.118508][ T7634] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.276449][ T7646] loop0: detected capacity change from 0 to 512 [ 173.307725][ T7646] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.341394][ T7646] EXT4-fs (loop0): 1 truncate cleaned up [ 173.363234][ T7646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.435651][ T7652] loop5: detected capacity change from 0 to 512 [ 173.465177][ T7655] loop3: detected capacity change from 0 to 4096 [ 173.490280][ T7652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.512402][ T7652] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.524389][ T7655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.546778][ T7652] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 173.586426][ T7655] 9pnet_fd: Insufficient options for proto=fd [ 173.608025][ T29] audit: type=1400 audit(1747811663.810:3647): avc: denied { connect } for pid=7645 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.630881][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.643331][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.685815][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.696487][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.741504][ T7670] loop3: detected capacity change from 0 to 512 [ 173.761390][ T7670] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.777649][ T7670] EXT4-fs (loop3): 1 truncate cleaned up [ 173.780947][ T7677] vhci_hcd: invalid port number 15 [ 173.786176][ T7670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.788582][ T7677] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 173.829568][ T29] audit: type=1400 audit(1747811664.040:3648): avc: denied { execmod } for pid=7679 comm="syz.0.1052" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 173.855846][ T29] audit: type=1400 audit(1747811664.040:3649): avc: denied { execute } for pid=7679 comm="syz.0.1052" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 173.865740][ T7674] loop4: detected capacity change from 0 to 512 [ 173.911039][ T7674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.996729][ T7674] EXT4-fs (loop4): 1 truncate cleaned up [ 174.011504][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.026710][ T7674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.275076][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.343087][ T7704] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 174.349971][ T7704] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.357571][ T7704] vhci_hcd vhci_hcd.0: Device attached [ 174.452251][ T29] audit: type=1400 audit(1747811664.650:3650): avc: denied { ioctl } for pid=7708 comm="syz.4.1057" path="socket:[17388]" dev="sockfs" ino=17388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.568863][ T7712] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 174.575431][ T7712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.583138][ T7712] vhci_hcd vhci_hcd.0: Device attached [ 174.609310][ T9] usb 7-1: new low-speed USB device number 9 using vhci_hcd [ 175.058038][ T7705] vhci_hcd: connection reset by peer [ 175.064346][ T3397] vhci_hcd: stop threads [ 175.068682][ T3397] vhci_hcd: release socket [ 175.073185][ T3397] vhci_hcd: disconnect device [ 175.108458][ T3386] usb 3-1: new low-speed USB device number 14 using vhci_hcd [ 175.177596][ T7725] vhci_hcd: invalid port number 15 [ 175.183159][ T7725] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 175.426403][ T7712] ip6t_rpfilter: unknown options [ 175.542013][ T7727] loop0: detected capacity change from 0 to 512 [ 175.574592][ T7727] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.589381][ T29] audit: type=1400 audit(1747811665.770:3651): avc: denied { write } for pid=7728 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.608953][ T29] audit: type=1400 audit(1747811665.770:3652): avc: denied { name_connect } for pid=7728 comm="syz.4.1064" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 175.686697][ T7729] sctp: [Deprecated]: §.*c [ 175.686697][ T7729] õ‚é2O (pid 7729) Use of int in max_burst socket option. [ 175.686697][ T7729] Use struct sctp_assoc_value instead [ 175.755876][ T7727] EXT4-fs (loop0): 1 truncate cleaned up [ 175.767837][ T7736] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1065'. [ 175.793995][ T7727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.828033][ T7713] vhci_hcd: connection reset by peer [ 175.833851][ T3704] vhci_hcd: stop threads [ 175.838216][ T3704] vhci_hcd: release socket [ 175.840451][ T29] audit: type=1400 audit(1747811665.890:3653): avc: denied { shutdown } for pid=7728 comm=A72E2A630AF582E9324F laddr=::1 lport=49170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.842788][ T3704] vhci_hcd: disconnect device [ 175.843286][ T7731] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1065'. [ 175.932119][ T29] audit: type=1326 audit(1747811666.110:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f651e5fe969 code=0x0 [ 175.965505][ T7741] loop4: detected capacity change from 0 to 512 [ 176.020800][ T7741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.090624][ T7741] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.136166][ T7751] loop5: detected capacity change from 0 to 164 [ 176.168034][ T7741] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 176.198545][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.210183][ T7751] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1070'. [ 176.243746][ T7751] siw: device registration error -23 [ 176.307095][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.449585][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 176.543204][ T7763] loop5: detected capacity change from 0 to 164 [ 176.570800][ T7763] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.585001][ T7763] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 176.671068][ T7769] loop5: detected capacity change from 0 to 164 [ 176.685626][ T7769] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1077'. [ 176.697339][ T7769] siw: device registration error -23 [ 176.783501][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1077'. [ 176.985431][ T7772] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 176.992040][ T7772] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.999706][ T7772] vhci_hcd vhci_hcd.0: Device attached [ 177.203628][ T7778] loop5: detected capacity change from 0 to 512 [ 177.296113][ T7778] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 177.324107][ T7780] loop0: detected capacity change from 0 to 164 [ 177.401820][ T7780] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 177.419566][ T7778] EXT4-fs (loop5): 1 truncate cleaned up [ 177.439109][ T7778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.440238][ T7773] vhci_hcd: connection closed [ 177.455116][ T7776] loop4: detected capacity change from 0 to 512 [ 177.464803][ T12] vhci_hcd: stop threads [ 177.472982][ T12] vhci_hcd: release socket [ 177.477462][ T12] vhci_hcd: disconnect device [ 177.488385][ T7776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.515824][ T7784] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 177.516547][ T7776] EXT4-fs (loop4): 1 truncate cleaned up [ 177.561572][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.577119][ T3948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.630967][ T7788] loop5: detected capacity change from 0 to 1024 [ 177.639112][ T7788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.646364][ T7788] EXT4-fs: Mount option(s) incompatible with ext2 [ 177.676374][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.758450][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 178.758476][ T29] audit: type=1326 audit(1747811668.940:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 178.788074][ T29] audit: type=1326 audit(1747811668.940:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 178.810618][ T7797] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 178.811731][ T29] audit: type=1326 audit(1747811668.940:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 178.818254][ T7797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.841602][ T29] audit: type=1326 audit(1747811668.940:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 178.849161][ T7797] vhci_hcd vhci_hcd.0: Device attached [ 178.872662][ T29] audit: type=1326 audit(1747811668.940:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 178.901569][ T29] audit: type=1326 audit(1747811668.940:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 178.925326][ T29] audit: type=1326 audit(1747811668.940:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 178.949066][ T29] audit: type=1326 audit(1747811668.940:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 178.972480][ T29] audit: type=1326 audit(1747811668.940:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 178.995909][ T29] audit: type=1326 audit(1747811668.950:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7802 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a7a20e969 code=0x7ffc0000 [ 179.357148][ T7800] ip6t_rpfilter: unknown options [ 179.362816][ T7798] vhci_hcd: connection closed [ 179.371928][ T7807] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 179.373355][ T3729] vhci_hcd: stop threads [ 179.377589][ T7807] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 179.387030][ T3729] vhci_hcd: release socket [ 179.387054][ T3729] vhci_hcd: disconnect device [ 179.409005][ T7801] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 179.415591][ T7801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.423171][ T7801] vhci_hcd vhci_hcd.0: Device attached [ 179.428742][ T3391] vhci_hcd: vhci_device speed not set [ 179.441378][ T7813] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 179.470385][ T7806] vhci_hcd: connection closed [ 179.552686][ T85] vhci_hcd: stop threads [ 179.561724][ T85] vhci_hcd: release socket [ 179.566326][ T85] vhci_hcd: disconnect device [ 179.690362][ T3491] vhci_hcd: vhci_device speed not set [ 179.866129][ T9] usb 7-1: enqueue for inactive port 0 [ 179.874093][ T9] usb 7-1: enqueue for inactive port 0 [ 179.892048][ T7826] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 179.898625][ T7826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.906349][ T7826] vhci_hcd vhci_hcd.0: Device attached [ 180.151820][ T9] vhci_hcd: vhci_device speed not set [ 180.169488][ T3386] usb 3-1: enqueue for inactive port 0 [ 180.213522][ T3386] usb 3-1: enqueue for inactive port 0 [ 180.255225][ T7835] siw: device registration error -23 [ 180.266459][ T7826] ip6t_rpfilter: unknown options [ 180.295823][ T3393] usb 1-1: new low-speed USB device number 12 using vhci_hcd [ 180.319528][ T3386] vhci_hcd: vhci_device speed not set [ 180.506431][ T7837] loop4: detected capacity change from 0 to 512 [ 180.527488][ T7837] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.544074][ T7829] vhci_hcd: connection reset by peer [ 180.574461][ T12] vhci_hcd: stop threads [ 180.578849][ T12] vhci_hcd: release socket [ 180.583285][ T12] vhci_hcd: disconnect device [ 180.680431][ T7837] EXT4-fs (loop4): 1 truncate cleaned up [ 180.722900][ T7846] loop3: detected capacity change from 0 to 1024 [ 180.729469][ T7844] loop1: detected capacity change from 0 to 1024 [ 180.731974][ T7850] tmpfs: Bad value for 'mpol' [ 180.752383][ T7846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.760599][ T7844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.768557][ T7846] xt_connbytes: Forcing CT accounting to be enabled [ 180.778989][ T7846] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 180.818326][ T7846] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1095: Allocating blocks 497-513 which overlap fs metadata [ 180.835987][ T7844] EXT4-fs: Mount option(s) incompatible with ext2 [ 180.835967][ T7837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.846680][ T7846] tipc: Started in network mode [ 180.863238][ T7846] tipc: Node identity ac1414aa, cluster identity 4711 [ 180.882991][ T7846] net_ratelimit: 691 callbacks suppressed [ 180.883010][ T7846] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.895726][ T7846] tipc: Enabled bearer , priority 10 [ 180.937674][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.999769][ T7846] tipc: Disabling bearer [ 181.021837][ T7845] EXT4-fs (loop3): pa ffff888107203a80: logic 16, phys. 145, len 23 [ 181.030120][ T7845] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 181.065781][ T7860] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1098'. [ 181.076087][ T7859] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1098'. [ 181.102488][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.598302][ T7872] loop5: detected capacity change from 0 to 8192 [ 182.336331][ T7883] loop3: detected capacity change from 0 to 512 [ 182.426030][ T7883] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.609145][ T7883] EXT4-fs (loop3): 1 truncate cleaned up [ 182.670319][ T7883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.901240][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.521082][ T7905] loop3: detected capacity change from 0 to 8192 [ 183.737713][ T7917] bond0: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 183.751025][ T7917] bond0: (slave ip6_vti0): Error -95 calling set_mac_address [ 183.760502][ T7917] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 183.856223][ T7924] loop1: detected capacity change from 0 to 512 [ 183.887862][ T7924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.934514][ T7924] EXT4-fs (loop1): 1 truncate cleaned up [ 183.943027][ T7924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.977496][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.989892][ T3005] ================================================================== [ 183.998023][ T3005] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 184.004814][ T3005] [ 184.007161][ T3005] write to 0xffff888100890220 of 8 bytes by task 3315 on cpu 1: [ 184.014820][ T3005] inc_diskseq+0x2d/0x40 [ 184.019205][ T3005] disk_force_media_change+0x9e/0xe0 [ 184.024508][ T3005] lo_release+0x2cb/0x400 [ 184.028879][ T3005] bdev_release+0x370/0x3d0 [ 184.033406][ T3005] blkdev_release+0x15/0x20 [ 184.037935][ T3005] __fput+0x298/0x650 [ 184.041933][ T3005] fput_close_sync+0x6e/0x120 [ 184.046614][ T3005] __x64_sys_close+0x56/0xf0 [ 184.051223][ T3005] x64_sys_call+0x2747/0x2fb0 [ 184.056084][ T3005] do_syscall_64+0xd0/0x1a0 [ 184.060604][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.066599][ T3005] [ 184.068939][ T3005] read to 0xffff888100890220 of 8 bytes by task 3005 on cpu 0: [ 184.076494][ T3005] block_uevent+0x31/0x50 [ 184.080848][ T3005] dev_uevent+0x349/0x3d0 [ 184.085241][ T3005] uevent_show+0x117/0x200 [ 184.089687][ T3005] dev_attr_show+0x3c/0xa0 [ 184.094138][ T3005] sysfs_kf_seq_show+0x1a0/0x280 [ 184.099098][ T3005] kernfs_seq_show+0x7f/0xa0 [ 184.103808][ T3005] seq_read_iter+0x316/0x940 [ 184.108440][ T3005] kernfs_fop_read_iter+0xc4/0x300 [ 184.113584][ T3005] vfs_read+0x5cd/0x6f0 [ 184.117762][ T3005] ksys_read+0xda/0x1a0 [ 184.121947][ T3005] __x64_sys_read+0x40/0x50 [ 184.126499][ T3005] x64_sys_call+0x2d77/0x2fb0 [ 184.131193][ T3005] do_syscall_64+0xd0/0x1a0 [ 184.135710][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.141616][ T3005] [ 184.143944][ T3005] value changed: 0x000000000000025d -> 0x000000000000025e [ 184.151054][ T3005] [ 184.153382][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 184.159537][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 184.171617][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.181683][ T3005] ================================================================== [ 184.246245][ T7928] loop1: detected capacity change from 0 to 512 [ 184.263947][ T7928] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.279858][ T7928] EXT4-fs (loop1): 1 truncate cleaned up [ 184.287973][ T7928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.407532][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.369065][ T3393] usb 1-1: enqueue for inactive port 0 [ 185.374641][ T3393] usb 1-1: enqueue for inactive port 0 [ 185.448459][ T3393] vhci_hcd: vhci_device speed not set