last executing test programs: 1m6.204931705s ago: executing program 4 (id=3559): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000080, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1'}, 0xb) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000005c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) socket$kcm(0xa, 0x3, 0x73) syz_usbip_server_init(0xaa7f3cec63cbb9d) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) dup3(r3, r2, 0x0) 1m5.401105717s ago: executing program 4 (id=3572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000c002b87190000002000000018187953b3eb903e990f15f30f0000d6e41e8ac98ce91f68811116f09b4ce56292c9e3285e370c68c1d325c90caac73b200507e46dcdd81954fb8d46bfdb5fe5f50a31fd2a3b06dd2b56ef9d56a67173012b34356310ab44558c4640b62cbbb08657b31b8b0b764ac432f470d26761d701d92d69082f90a48c7bd1c38f1b7abc9ff5608f0329ab98de7ed6e04a24eab40e976fc62cdc735ded585afbc60977409eb10214f97477f9cb718883", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000680)='sched_switch\x00', r2, 0x0, 0x2000000000010000}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x80100, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000080000000000000000000000000000000000000000000000002289a681d0311efe38da2de87b77af200000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r7, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m5.269684639s ago: executing program 4 (id=3576): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @rand_addr=0x640100ff, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x2e, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) getpgid(0x0) cachestat(0xffffffffffffffff, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) 1m5.141357201s ago: executing program 4 (id=3577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000001a6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(&(0x7f0000000200)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) brk(0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x24, 0x1e, 0x1, 0xfffffffc, 0xffffffff, {0xa}, [@NDA_NH_ID={0x8, 0xd, 0x5c1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044010) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x1, 0x4) r7 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 1m5.020852033s ago: executing program 3 (id=3581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000c002b87190000002000000018187953b3eb903e990f15f30f0000d6e41e8ac98ce91f68811116f09b4ce56292c9e3285e370c68c1d325c90caac73b200507e46dcdd81954fb8d46bfdb5fe5f50a31fd2a3b06dd2b56ef9d56a67173012b34356310ab44558c4640b62cbbb08657b31b8b0b764ac432f470d26761d701d92d69082f90a48c7bd1c38f1b7abc9ff5608f0329ab98de7ed6e04a24eab40e976fc62cdc735ded585afbc60977409eb10214f97477f9cb718883", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000680)='sched_switch\x00', r2, 0x0, 0x2000000000010000}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x80100, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000080000000000000000000000000000000000000000000000002289a681d0311efe38da2de87b77af200000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r10, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000007c0)={0x144, r11, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x19fc}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xca6d}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x32ab}, {0x8, 0x15, 0x10}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x80000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x8}}]}, 0x144}}, 0x480d4) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000180) 1m4.904916005s ago: executing program 4 (id=3582): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x1, 0x800, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000000d0a010100000000000000000a0000050900010073797a30000000000900010073797a31000000000900010073797a30000000000900020073797a3200000000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x2404c054) unshare(0x2040400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="87fa1c7dae4dfa8cb785ec82679022e7d50180b5db83e06604871525214ebdaa99b3674eb49fb3ffc0eab1067d392e38a55d5b22e8fffda43200"/73, @ANYRES32=r3, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x20}, 0x18) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x400, @private2, 0xa910}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0x5, @private1, 0x6}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x7}, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x3}, @in={0x2, 0x4e22, @multicast2}], 0xcc) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r8 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x28, &(0x7f0000000040), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r9, 0x0, 0x31, 0x0, 0x100000000) recvmsg(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x14, r11, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r13 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r13, @ANYBLOB="04012abd7000fddbdf250000000008000100", @ANYRES32=r12, @ANYBLOB="2c01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="08000700000000003800010024000100616374697665706f72740000000000000000000000000000000000bf00000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff0700003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x2000c040) 1m4.864774445s ago: executing program 3 (id=3585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.779927807s ago: executing program 3 (id=3590): socket$inet_udplite(0x2, 0x2, 0x88) socket(0x1, 0x800, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000000d0a010100000000000000000a0000050900010073797a30000000000900010073797a31000000000900010073797a30000000000900020073797a3200000000"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x2404c054) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x400, @private2, 0xa910}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0x5, @private1, 0x6}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x7}, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x3}, @in={0x2, 0x4e22, @multicast2}], 0xcc) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x100000000) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2) 1m4.54203862s ago: executing program 3 (id=3595): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 1m4.411037672s ago: executing program 3 (id=3599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 1m4.192601616s ago: executing program 3 (id=3605): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @rand_addr=0x640100ff, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x2e, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 1m4.168154166s ago: executing program 32 (id=3605): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @rand_addr=0x640100ff, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x2e, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 1m4.112198797s ago: executing program 4 (id=3607): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f0000000140)={[{@fat=@check_strict}, {@nodots}, {@nodots}, {@fat=@debug}, {@dots}, {@fat=@errors_continue}]}, 0x1, 0x11f9, &(0x7f0000001240)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000640)={0x0, 0x0, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, {0x202}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m4.080228627s ago: executing program 33 (id=3607): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f0000000140)={[{@fat=@check_strict}, {@nodots}, {@nodots}, {@fat=@debug}, {@dots}, {@fat=@errors_continue}]}, 0x1, 0x11f9, &(0x7f0000001240)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000640)={0x0, 0x0, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, {0x202}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.909045321s ago: executing program 0 (id=4650): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xb, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x8}, @var={0x8, 0x0, 0x0, 0xe, 0x2, 0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x9, [{0xd, 0x2, 0x4}, {0x7, 0x0, 0x225dac02}, {0x0, 0x0, 0x9}, {0xc, 0x2, 0xa}, {0x10, 0x4}, {0x9, 0x1}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x30, 0x61, 0x61, 0x30, 0x5f, 0x0, 0x0, 0x5f, 0x61]}}, &(0x7f0000000900)=""/208, 0xb3, 0xd0, 0x0, 0xd898}, 0x28) 1.713043134s ago: executing program 0 (id=4653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) unshare(0x6a040000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) unshare(0x20060400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x5, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18804, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174"], 0x25c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r8}, 0x18) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.704479144s ago: executing program 6 (id=4655): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x380}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='btrfs_inode_mod_outstanding_extents\x00', r4, 0x0, 0xb}, 0x17) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/29, 0x1d}], 0x1}, 0x2}], 0x2, 0x40000001, 0x0) 1.384960439s ago: executing program 5 (id=4657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}, 0xffffff00, 0xff, 'geneve1\x00', 'vlan0\x00', {0xff}, {0xff}, 0xff, 0x2, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x101, 0x9, [0x33, 0x13, 0x2c, 0x26, 0x4, 0x2b, 0x17, 0x2, 0x11, 0x39, 0x35, 0x19, 0x3d, 0x5, 0x1e, 0x3c], 0x0, 0xfffffffb, 0x3}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0xd550, 0x8, 0x6450, '\x00', 'syz0\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 1.31840316s ago: executing program 5 (id=4658): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfc, 0x7fff7ffc}]}) msync(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x2) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 1.298433011s ago: executing program 2 (id=4659): creat(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 1.251423091s ago: executing program 2 (id=4660): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000001c0)="3130c11ec19afbbfe766a190052af2eb8ca709fde092c77f6df4427538b49967f5ca79c3d4a4b029f33d13b6ceb8375ca1a53475b62aba71b7ac2c352a55434bbcca753cd09636f1297775093af253a891d5a78fa9f90f493694f54f83b39de1f106906ff936de9baba18a8c3099e9fbb3dd5a44718a321dc44f02f38ba2459de9b5c92abfb445bbf283d5cd836cfb73b6ee820d9864", 0x96}], 0x2, &(0x7f0000001340)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x88, 0xa, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x3, 0x0, [0x6, 0x4, 0x3, 0x24000000000, 0x9, 0x0, 0xd21]}}, @padn={0x1, 0x1, [0x0]}, @pad1, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x890f}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0xff, 0x5, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x90e4}, @jumbo={0xc2, 0x4, 0x2fc}, @pad1]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@pad1]}}}], 0x108}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x1, @empty, 0x800}, 0x1c, &(0x7f0000003680)=[{&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="f8c2916444b220bb5a7116d066d2afdbdeb784bccbd42baa93e38f193d4cbf8ec8c1f17f181579cbe2c71d6a845b8991f4381dd649246dd660e2995d81f4c2f19f9aead24717a4d0cb157075d488b0798139802977078fab4982d050860dae0153dc16ea939dff625d73a33251cebb7a7f8c1c96222cf5c3c2ac91d96e532c71", 0x80}, {&(0x7f0000002500)="bf480bdc3b4b4e5a2087273573c7fdcb12485d09090b701fdf70b85055ffc34fef9ed14cda3c370325a124d27399a71643452e1077e7c83702707bc9b189a3189fce1db5b55eecbbeb8bbb4484cb9657dfdc0f525686a0cb3fde4c7263c7cded9cc0023fd91340314e8f62694bca0a217a895fa115ef4501e29c9178f8d1eef0681b9923c699adf3334acb8ba267a48d603324b27dc0fe8755342aec63a00831f8d6ed8ae7aee89748ee044b1a61f38e329e38c3981eb8", 0xb7}, {&(0x7f00000025c0)="201b5f1b9eaf589e096822f28d8247006e97d88139c5e9b9", 0x18}, {&(0x7f0000002600)="e4e4e75c171c2a923a6c67cf2459c264bf3971ae9264f86e7c7b408e025f470c3498a8ff7971afd4916647553e6dc3f39444e5432c57013d59f6c539c50e961d14394e8d147072d007283432f4d28ef97e0a21281fb07c11b0d0a2a1578be0d3f257f208b090724693a46479ae5d0f8dd6685cd95b8e37277b1980ab6ff6c4967c0d58e5907a68f7b3237671163de0d14a10c35f76a73948033ffce74250db5e6571932dd699ff195875a5a70d949db96af270de6fdd204945b849393851da6528ff06a35b56c75ee97b52ee1832b5cde61cd3e5863d262aa984cc88eb40f328a1cd38cbe0bd713790c6b1fb421027c6ecc7a235dca869cb83e48830f97554fc7273a8626912ee909a129e0a9bda154a45fab54e2fc6f7084abe2833a3500455484f53affb51f2c0306dfb58a37b2b29d452032c5a0203a40cae3c9079ac4324d62ea26638ee49a0d743c90d5169de623285af2315c5e9f3098751ac3a847dd87c4e5ba836ceb2cfedc7ba363e56ee3e46968943d76b0af2d3b03a87a6a421d2396742ca2c88ff32b533d9c9b74b310fe4d62ddf0cc6ed30f47e35bfce1f47eb4269f03417c6fc390c532e9bb98f2b189568973451a90c98c06eb8ead61d0b8481a1f5e059398ea9ed5e571756ee063851e3ea925f9fda93f4415b2ffd6a893b6eb15cb131f8a1edf796208d8b2a190668d31bc72d49093b41b2403b5ae426170beda93ec754a13aba744ca4c91d3ceea965a6f22df5b555352873d22e4e57d548cd50e9781b2a98107cb7ff202e38b23edf9741b3466c53b4bea09991671449e1ea2c1c4d76621e43bb07db9ae1ce36b15876a3d4cfc6cbda9d2d8267413ec3471ae2c7404058245f71577606fde83d11eefded0c2e3d2e4b2e55bd95866322d7ee9503b587409c591a0579f56a97b5171eab6e222dc559287a6d9ed74d694649336442507e96f45929b129925d19c5f5639210e493d7ad09aef485269a621d6f887147c5c4f0a03d25e86748e6aae1eddd7a516f91600ac26d09c70e1a848346aac87b0dc7978eb66bb2716ddd3cd34c3210d2586b41a42cf37e63dd67897f78fb00f2602d6362b1e6594ecff79d91097ccb191ce79ee6f203ad84f5a48264edb0090149f5539ed187168b05e31b3df21bb2d6279f45d41cdd05a23f1356d97f76ab77ff257efc1a66b9e2aab82d0011842009c4b641e502cbec0151eede41a95abae0b6c26061dd79a7c85c7d8b83bdfc69118e3848a2e288a4fac60a53318c649df83efeef6d9c4686f939c1af3774da1bef05b82b4c4b96aa7f26398e6de4b985e35c6bce9c9cf188be08b6af9ccbf8577a083a729f7cabd5ebad10359614510cc8de9663c574c4e433dc14d8a8b3f8cc49b3cfb6c35078ac8f0b69b8e44930a7a7d96ec3153d9b36c013402a6959748ad541faf88c0deb2b8091b4c97e3d3d66289854a44df85b8f38f2097f1fe80f30519c6dc624d16ad1306bdb7c1e33fe5c2452ab908b444a1a0372fcddd347d84268a1248948df2cb714f68e1f89ee4ecde4cfc88c3d6a3d6b90cd591abfac9b3ed9c10860bfae5ba114c6d1d039edbbc3e75e66f1fb594e6fb61e8ddd88a7504de8d56b18958a514bd517b353d3510ee6e22db8d0591e9a87c529febc911024a6513fab52a42c3ce017614e0a9122a1f6686667d76e0852714561f46f3fc65a5c59b32336a939ca74efff4779f6b7adbf98ba605ed210d321dbe9964e4784113e18f71bc5aef3ca827ab93f37af9649fb81d0f36c10dd56f1a1f9a21fcf02f59ec9d59fc7ec90aa3a0e0d7c86739dbeb6da54d8ef51b5be15bddeab79bfe2cf4d4bbb7002aefcede0b5d25526eea75a57f6158c0d0349b9d11a1616bd6afbae4fccb6b3b553f94e11291df77f247e1054503038b240b4929e24f232626bbcff21254f106db931e9a049f756d993bbad8e9f06246a11a608a9710c6463d9b5b9d5dfcefc4ce4ff07d3655aa1f2ca38b05196de280ae91da0dd51b932f045ef03e40d81738ced37233cc7d980d83c08bc9ba576bda86d0ae51f8bd08f4f1c1642aabb1fa74dd93af454c3333f361899803a121c13851423e192d06d8bcb37f321bf4dd00302415ab5cde8e63cc7daac210a7d17e68961f57ac4bb3b6877ac8ab239013afb40b7a688d517da8710048888d9fb35a43b64dd196943c5bd19526bf538be14c6776bfc8ba9c3cd14418e10ee982ce21f367672e020bdcaabfddae773a30bc6cc505e7bf649dc84cefb079aa356293a79c8f3ef2f0e24694761d99808e6964a29c4bf2cdf122fd8bbb0a0a82227b97af45e6514c02192527675c1a3ecfe2a0ccc483b7b7839154d888296d812dd278b5f88912e190a456138753aa37b19f3bb6771ea16d4b4d3e0d8bcdf94bce8b4d60eb0f72aa2b40a21f33f85d847955cadd67d56c8abf9e55ca1c83dd8d92a082110a3a728aaaa735010c7dd69e668107e34a90f656fb6aa84c05e1c46da03ec05a15d21dbe27af7e6a3cdd8ff52724a286a8ab59dd592250a46fa994d811a9f69116a490a17cd360c4ac7d65fe5e18c1f6b4d752e5208698b3eb4d1ff2a8df21e7298883e1e6792591b5cc5a04e078f47a7cd2941f45bd9fc025b9424e2f473ff32dc2eb46d98427fa39efdfc396d2bc80266599d2a3e1ca1efbbfe974ee23a6e397a7a7e419cf1da527a9370f66de32a7da25b52f576f3e878641d1bfae214b619d092f54d924f2c0af37e4428de94da40b281df3f43273de15cf34af7cb4a2b6ea8257cb4f8a606424478dfb5e238c543c8e1e0caebab60fa87fb3266e69c8118e8245f721c054ac07a7ef6adb9f8056ef4a2aefb0f051442db008dbb7d4739881ec6b043c070dc75054d202ae7855f928e944518aa5377bfdfd6949af7e907d0d7959abc6063b4596210dcf83d3947b6eba43e5edb01754263615699f7fda0a4807056c12376f45676a7f2bf775df521b3f33e0c064dcf20f608e7aacb1e76d009c2a405b0964274aee5465de42f6e3fe983b6898473ca8fa82786d535a2cf04664472076d03daba4126f3cf0df701e6a5770528046a051be08a810822500260f4143b72b2419ee5534b90be06a8e107774b893f2a161e27128e219a51190ea333a2b1ee64ac6f9ebaf4fb318e1673ef2ed4048fe4d062b6e3ed9b066f5d2c23a8dda2015d3e22d6bc2ae83190f369c953649c9887698ecc565291d4d444578dff22bcb841703e897c7f7ca7ae38aeaa72359b6417a04999559a0a08dfbd930f89b837f922cc47b744b71d2af7a5c08427a04094a2bd047d963aea06015e4aeb5e134ee9d12b123d1fcc47bfa9753249b4e5df0d6ba7365272bc82f5ab7dff53438fd6b803edf09cf8f65b5af4f4880185a698362bbadc3d0efb6761fc4d40d889f39b84c091bd9266070c6762540e1d7a95967b70f8428e8b415180c22c699a6fe3966cbb5e8661e180d988976af7d08a3509974caf43fa7a772e853205dbbe352cb82281a9babc250fc88fc61a1b74fcd1ccef0b069b2a9c5243de6cfc50ed69ac16a180be23dc4a53e409ea99dace7efad218f545b686f3d725ca45470c395c49b12ee8b374824b9b7b6f68af850a0edf62ffe07e519a7cc77648f1d9a657cfefe9930b1de38e123450ec40a4005bf1698323a583c6ceb2771d03c678bda8a987125d9aed7d7efc8ce7a4ff06cd3e8e0c0e5deee66eee3ead87c506e2fd50106429a07e481d3ca092e7697a0b0f8de788a7800c7aacd0738d905343fcc460962063f89ae0133f4deaf3a49b44042c7dc752768636d420f3bda1036502f98e8ed157b9f1644fb9367e00c8deb84d1d8eadf09cba8a7e7d6ac82ba4a70e3b00932e3bb92d8f23f1dfc1d512b4a044c441ebb53d964c3962e3abe5fd31961e82b86fd83af2e6c0dd51902250d56de2f5656fd41b0c86da0467cb5c0659ecfacee3ba6d8559942b0ad284962b73274e8485e688db4406db87116c36cc897652b8acbfcec7ac501c0c8f78f8045e64c9d42cd47ecd646ed4c67bad3bbf496cc8a939936be061c75982f99aa8aef63042110d452099c729b9d4d18d60bce85793cd614ac550ce2d6feb6dba5535feb58d7085abc94040c7e172d6ab9bc6270e1b98461f82c94c5432f18890b787f80381ec00d6b506b69e5ea97937f1f402e52f623fcbb023a29973f3ed3b7d4b79984cad746edec26027b7c176b973ac46dd0b90ac6466f389ab277773c62220982f0fc1a72c6567730acc32ec4623d160f579ceb7dc7076ce53de9f69f01347513fb398184eea493335754c1fa211e47c3e0851d9fbdb8f7992e8bb854054f47150bd8503ed51ba349d8ea5820109c8304ee583b13e080a85ffc30096d9fbfce7a5eb4f8a78afdacd487bb95fd2566401ae5233814276ff8c884a1e1a60b62559243b47a40bac6026184e4d5a1f65edf5036a9f5bbf73084d3cac046f4dfdc96b6d61a2adc34aa5ce20c7ecb3e402460ea40d5d5f6f3fd55d2355f3a62697dc6b286a0c02c942284c1322e468a6947e00b5ab2a73123450f3341d5a3661dbf1fbd023bd6f4e299f091087b2a17400842e77e95d129d0e5c0b7e6358545e22eeb7556bf31953e5726e367b9a040319651c5d90a5e20b24ff478749191de0eabe166521f7950a52f6aca374d15c0af3784a4bce426a6f07dbad82eeacca1f6bef9cca5c96fec9989519f8105384b0e5fb02ac5151b43fa67f49588e6d675714be697513276f677b9e56be61a7ab7cd72d920527a3be62b2a2c18e25cc4981232bd2e4a4b8a2555e8285678cb2ea77670f1254f21f02129105f5512321d2f14ad9154488f085e39bb80f28c3bd71a519863fbe260e627b8af7f5eb2d5664ace960aad8793932dd3da44332ead1a1e1e6e14833d1a3a06eaaa4f0a6961c7f10558baf42c7b96f93acfb79ad08efe8961ec4488e9d8408349ef7cc79fcf46cf6a9fe39bbe76e09dcde4f24ecf03a03f0244afcd2eeb2129c1c32c6a128042bbc8b11699e4a917c9712db9ea630c3510ed5eda446c761c2452df48f2096610cd9556d1097f842b049326803654464653ecbb1cda85b08fb65bd224141708319a6d17e2b116df97d19a61a89158a7bb48a2974b3e343cb03e0dd4af2355ecb97bec3286d469e40f2a8ace6d736db446e5a659f6ada357eb47ee5d8156e2211f23e6bd860cfd9f60c53ccc5a283f7a522dbb97b28fac7392e8eee20b7d2285a976da1012c2b0db0871156583f70a48c29bb10ea0ffd0bfa7ca8ddca2c8e50053157073f05847a76af4ccfd0bc3ff4f03be5fe4a8f19e12278e39cfa3825b2773ce6608932aa314a4853d96d189365afd96e3db8a3471847de49b13b7379e097619bcc907266dff17c55c46945e98690abbf3a8bc715c8bda3b0e7050fbb0067252dffd0bdc70436b0ece4370517d238d60d5e83e4f9f40bdfbfa63de767be98c2882c8306399b745ce0d72c59bcdb7587320ceddcbcb64f04a219eea1d22ea85b9f493fd9d5dad9d556d689ed6706bbd58b370e743b8808affa845968c5e2a664d94a0269c77134484c14ffd025c1a6c2d83a6e85b2218d35b3d3151e31f15efd369923f13c2237a1a92c45df187ad4d66e9a340653cfcb133ab317e6643dee0d4ce7e3cfb4b5ae50da2a6231b9403a7c98671994f8a47c884052c421df60c6e186bf138e18096606139bab22fce3241c566ca04759b893c6d34acf5845eaca5bc2cfe8911d804a251cedf56e5e4a8179477c14c344097f5f26fab40fdc0506a0004be9ce8ece375150ac61b317abe9fe43", 0x1000}, {&(0x7f0000003600)="5b4c0d6a4fe4b1b0010c3f2f7f0c983fcb68fde8bd0eca2ad7a1c188e7d22856f5ebae1079139ecd81c106321343758b264d32e7177db894d29680b6308ded86a1379d1e034b66aa84c913952bf848a56d7d3952e16388bfac2a48e4308a18", 0x5f}], 0x6, &(0x7f0000003700)=[@hopopts_2292={{0xa0, 0x29, 0x36, {0x3a, 0x10, '\x00', [@generic={0x7, 0x80, "f2ab9ea7dccd5c2aa9aca5e926ab4d07340725177ef41f7a3ee411939a97087aa593c174bf208a4ec1a9ab4973ec51be0432692d35b240d154ca3379e870c7e96deeb0d05406f447198583a29b01e80e565237f4f534537e4b577a91be5798cb550940a41c2b8940fdd114856caddfe59c18fcf302e61a83be637bd980878299"}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x4, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x87, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @enc_lim={0x4, 0x1, 0x7}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x1d, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @loopback}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x55d95de2e3be61e5, 0x8, 0x1, 0xf9, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x1e}]}}}], 0x188}}], 0x2, 0x90) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x4438, 0x80, 0x2, 0x8f6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r3 = open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x184) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() r5 = gettid() tkill(r4, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x10) tkill(r5, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000001100)={0x0, 0x2, 0x5}, 0xc) io_uring_enter(r0, 0x4ca0, 0xdd61, 0x0, &(0x7f0000003940)={[0x8]}, 0x8) 1.028927625s ago: executing program 5 (id=4662): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000f00)=""/286, 0x11e}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f0000000880)=""/126, 0x7e}, {&(0x7f0000000c00)=""/120, 0x78}, {&(0x7f00000009c0)=""/234, 0xea}, {&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f00000012c0)=""/57, 0x39}], 0x9}, 0x1005}], 0x1, 0x102, 0x0) 973.025666ms ago: executing program 1 (id=4663): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5b00000000000000000006000000400000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @rand_addr=0x640100ff, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x2e, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) getpgid(0x0) cachestat(0xffffffffffffffff, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) 938.436146ms ago: executing program 1 (id=4664): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x5508, &(0x7f00000000c0)={0x0, 0xfad6, 0x80, 0xfffffffe, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11e8}, 0x0, 0x8000, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000181100306934525c9c264dd98bf114afa529b7a46533cf852419084e4ca566d290322e5c2934a6e3029bfa5e33b69b8be000cb22314f381c886c949c56a2f9aa8ff65bd377b193b9af0000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r5 = inotify_init() r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000080), 0x20) getpeername$qrtr(r6, 0x0, &(0x7f0000000180)) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r8 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x69) close(r7) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) fallocate(r11, 0x0, 0xa20, 0x8000c64) pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 927.401156ms ago: executing program 5 (id=4665): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000180) 852.494977ms ago: executing program 5 (id=4666): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000400), 0x1, 0x5a2, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000300000"], 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 713.041879ms ago: executing program 6 (id=4667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000006d00)=[{{&(0x7f0000000000)={0xa, 0xa0ec, 0xfffffe01, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc2}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001080)="4aa1646b5adb", 0x6}], 0x1}}, {{&(0x7f00000022c0)={0xa, 0x4e20, 0x401, @private0, 0x7fffffff}, 0x1c, &(0x7f0000003300)=[{&(0x7f0000002300)="ce", 0x1}], 0x1, &(0x7f0000006f00)=ANY=[@ANYBLOB="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"], 0x1178}}], 0x2, 0x8000) shutdown(r2, 0x1) 700.421579ms ago: executing program 6 (id=4668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}, 0xffffff00, 0xff, 'geneve1\x00', 'vlan0\x00', {0xff}, {0xff}, 0xff, 0x2, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x101, 0x9, [0x33, 0x13, 0x2c, 0x26, 0x4, 0x2b, 0x17, 0x2, 0x11, 0x39, 0x35, 0x19, 0x3d, 0x5, 0x1e, 0x3c], 0x0, 0xfffffffb, 0x3}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0xd550, 0x8, 0x6450, '\x00', 'syz0\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 672.84592ms ago: executing program 1 (id=4669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x141140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'sit0\x00'}}, 0x1e) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000007a88644500030000000057000690780a010100ac1414aa00004e220000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405000090780000"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='net_dev_start_xmit\x00', 0xffffffffffffffff, 0x0, 0x8000000000000001}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 659.5001ms ago: executing program 2 (id=4670): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 642.57689ms ago: executing program 5 (id=4671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) unshare(0x6a040000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) unshare(0x20060400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x5, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18804, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174"], 0x25c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 636.130231ms ago: executing program 0 (id=4672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000240)='./file1\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500), 0x0, 0x1}}, 0x40) 622.573791ms ago: executing program 6 (id=4673): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000640)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xb, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x8}, @var={0x8, 0x0, 0x0, 0xe, 0x2, 0x3}, @restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x9, [{0xd, 0x2, 0x4}, {0x7, 0x0, 0x225dac02}, {0x0, 0x0, 0x9}, {0xc, 0x2, 0xa}, {0x10, 0x4}, {0x9, 0x1}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x30, 0x61, 0x61, 0x30, 0x5f, 0x0, 0x0, 0x5f, 0x61]}}, &(0x7f0000000900)=""/208, 0xb3, 0xd0, 0x0, 0xd898}, 0x28) 604.409331ms ago: executing program 2 (id=4674): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) timer_create(0x7, &(0x7f0000000200)={0x0, 0x15, 0x4, @thr={&(0x7f0000000040)="59ee6b2d12ec155c95a51e662ba6fc32b4071d0646d91a", &(0x7f0000000100)="88694e3f740ee6227b2e8e8a6fd90d4b1667a6a348d799fc62e86e81d7f4415d0475a4822dca0be8a6c0261743bcc3f41f8879dd62bd07fe5cdc9d79bc3932b89ee2fb8ca80c5a190ecf73807ac90d482e09eb62f88b25cecc87c45ab87ace28c67eeac9ebb3efe818a3839f08ee00e05d89a43d419eef3cca340117695836829ab83513bf6ec59cd314709bb6b02325e00fc13f45e176197bc23c1136a804e6f2f99b3ac53554d505f2504a39fca02057639c7b98130dad0d268569a173d369149a09f7e97aff2da6fb4870183574b667ec98e6a5"}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5414, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES8, @ANYRES8=0x0, @ANYRES32=0x0], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) 514.261132ms ago: executing program 6 (id=4675): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket(0x10, 0x3, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000640), 0xfb, 0x4dd, &(0x7f0000001e80)="$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") ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000"/20, @ANYRES32=0x0, @ANYBLOB="2b0300000000000010001280080001006774700004000280"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) close(r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r8 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0xa3d, 0x0, 0x0, 0x0, 0xff39) write$vga_arbiter(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='locK io+mem\x00'], 0xc) io_setup(0x6, &(0x7f0000001380)=0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r11, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, r12}]) 512.886292ms ago: executing program 2 (id=4676): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400", @ANYRES32, @ANYBLOB="0008000007500500400012800b000100627269646765000030000280050019000200000005001709000000000800140081000000050016000a0014000180c20000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) 494.079343ms ago: executing program 0 (id=4677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0xff}}, 0x14) close(r0) 444.752623ms ago: executing program 1 (id=4678): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) 439.559513ms ago: executing program 2 (id=4679): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="ca", 0x1}], 0x1, 0x0, 0x0, 0x414}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x8}, &(0x7f0000000140)=0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_cancel(0x0, 0x0, 0x0) 304.848425ms ago: executing program 0 (id=4680): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x5508, &(0x7f00000000c0)={0x0, 0xfad6, 0x80, 0xfffffffe, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11e8}, 0x0, 0x8000, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000181100306934525c9c264dd98bf114afa529b7a46533cf852419084e4ca566d290322e5c2934a6e3029bfa5e33b69b8be000cb22314f381c886c949c56a2f9aa8ff65bd377b193b9af0000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r5 = inotify_init() r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000080), 0x20) getpeername$qrtr(r6, 0x0, &(0x7f0000000180)) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r8 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x69) close(r7) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) write$binfmt_elf64(r11, 0x0, 0x478) pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 253.544446ms ago: executing program 0 (id=4681): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x5508, &(0x7f00000000c0)={0x0, 0xfad6, 0x80, 0xfffffffe, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11e8}, 0x0, 0x8000, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000181100306934525c9c264dd98bf114afa529b7a46533cf852419084e4ca566d290322e5c2934a6e3029bfa5e33b69b8be000cb22314f381c886c949c56a2f9aa8ff65bd377b193b9af0000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r5 = inotify_init() r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000080), 0x20) getpeername$qrtr(r6, 0x0, &(0x7f0000000180)) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r8 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x69) close(r7) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) fallocate(r11, 0x0, 0xa20, 0x8000c64) pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 216.113917ms ago: executing program 1 (id=4682): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000400), 0x1, 0x5a2, &(0x7f0000000cc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000300000"], 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 201.312537ms ago: executing program 6 (id=4683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x17) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x200080, &(0x7f0000000180), 0x1, 0x783, &(0x7f0000001000)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 0s ago: executing program 1 (id=4684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}, 0xffffff00, 0xff, 'geneve1\x00', 'vlan0\x00', {0xff}, {0xff}, 0xff, 0x2, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x101, 0x9, [0x33, 0x13, 0x2c, 0x26, 0x4, 0x2b, 0x17, 0x2, 0x11, 0x39, 0x35, 0x19, 0x3d, 0x5, 0x1e, 0x3c], 0x0, 0xfffffffb, 0x3}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0xd550, 0x8, 0x6450, '\x00', 'syz0\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) kernel console output (not intermixed with test programs): entered promiscuous mode [ 249.362442][T15424] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.437296][T15411] lo speed is unknown, defaulting to 1000 [ 249.530973][T15435] loop2: detected capacity change from 0 to 2048 [ 249.560471][T15435] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 249.822382][T15453] loop5: detected capacity change from 0 to 512 [ 249.844595][T15454] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3886'. [ 249.854623][T15453] EXT4-fs: Ignoring removed nobh option [ 249.869730][T15453] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3884: corrupted inode contents [ 249.869874][T15456] loop1: detected capacity change from 0 to 512 [ 249.914667][T15453] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.3884: mark_inode_dirty error [ 249.932377][T15456] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.952999][T15453] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3884: corrupted inode contents [ 249.968406][T15456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.983553][T15456] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3887: bg 0: block 346: padding at end of block bitmap is not set [ 249.998403][T15453] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3884: mark_inode_dirty error [ 250.017183][T15456] EXT4-fs (loop1): 1 truncate cleaned up [ 250.023569][T15453] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3884: Failed to acquire dquot type 0 [ 250.050831][T15460] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3888'. [ 250.090179][T15453] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3884: corrupted inode contents [ 250.135369][T15453] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.3884: mark_inode_dirty error [ 250.189314][T15453] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3884: corrupted inode contents [ 250.242311][T15453] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3884: mark_inode_dirty error [ 250.263355][T15453] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3884: corrupted inode contents [ 250.279299][T15453] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 250.292615][T15453] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3884: corrupted inode contents [ 250.318743][T15453] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.3884: mark_inode_dirty error [ 250.330796][T15453] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 250.340540][T15453] EXT4-fs (loop5): 1 truncate cleaned up [ 250.346704][T15453] EXT4-fs mount: 60 callbacks suppressed [ 250.346733][T15453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.407151][T15471] loop2: detected capacity change from 0 to 2048 [ 250.424856][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.438293][T15475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3894'. [ 250.486927][T15471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.510228][T15484] loop6: detected capacity change from 0 to 512 [ 250.517483][T15484] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 250.557147][T15471] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 250.581436][T15484] EXT4-fs (loop6): 1 truncate cleaned up [ 250.596577][T15484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.631427][T15484] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 250.638395][T15484] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 250.646350][T15484] vhci_hcd vhci_hcd.0: Device attached [ 250.657532][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.663075][ T9] hid (null): invalid report_count 516339849 [ 250.671846][T15496] loop0: detected capacity change from 0 to 1024 [ 250.711826][ T9] hid-generic 0001:0005:FFFFFFF7.0001: unexpected long global item [ 250.725767][T15492] vhci_hcd: connection closed [ 250.726009][T15183] vhci_hcd: stop threads [ 250.727925][T15499] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3902'. [ 250.730792][T15183] vhci_hcd: release socket [ 250.748679][T15183] vhci_hcd: disconnect device [ 250.762092][ T9] hid-generic 0001:0005:FFFFFFF7.0001: probe with driver hid-generic failed with error -22 [ 250.808365][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3900'. [ 250.943208][T15512] loop1: detected capacity change from 0 to 512 [ 250.951931][T15512] EXT4-fs: Ignoring removed nobh option [ 250.965790][T15512] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3906: corrupted inode contents [ 251.008959][T15512] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.3906: mark_inode_dirty error [ 251.033166][T15512] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3906: corrupted inode contents [ 251.079365][T15512] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3906: mark_inode_dirty error [ 251.097250][T15512] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3906: Failed to acquire dquot type 0 [ 251.144883][T15512] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3906: corrupted inode contents [ 251.275385][T15512] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.3906: mark_inode_dirty error [ 251.346616][T15512] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3906: corrupted inode contents [ 251.365538][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.380059][T15512] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3906: mark_inode_dirty error [ 251.442292][T15512] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3906: corrupted inode contents [ 251.446703][T15524] x_tables: duplicate underflow at hook 3 [ 251.483254][T15512] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 251.493602][T15512] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3906: corrupted inode contents [ 251.562198][T15512] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.3906: mark_inode_dirty error [ 251.630312][T15512] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 251.658763][T15512] EXT4-fs (loop1): 1 truncate cleaned up [ 251.699872][T15512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.820825][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.935129][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3917'. [ 251.984068][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 251.984085][ T29] audit: type=1326 audit(524539.381:10601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.0.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 252.013669][ T29] audit: type=1326 audit(524539.381:10602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.0.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 252.043588][T15545] loop1: detected capacity change from 0 to 1024 [ 252.062367][T15545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.120964][T15545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.127859][ T29] audit: type=1326 audit(524539.391:10603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.0.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 252.156490][ T29] audit: type=1326 audit(524539.498:10604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.0.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 252.180004][ T29] audit: type=1326 audit(524539.508:10605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.0.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 252.203628][ T29] audit: type=1326 audit(524539.557:10606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.0.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 252.209254][T15545] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.3917: Abort forced by user [ 252.227020][ T29] audit: type=1326 audit(524539.557:10607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.0.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 252.227112][ T29] audit: type=1326 audit(524539.557:10608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.0.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 252.227146][ T29] audit: type=1326 audit(524539.557:10609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.0.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 252.317472][T15545] EXT4-fs (loop1): Remounting filesystem read-only [ 252.324086][T15545] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 252.349984][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'. [ 252.402083][ T29] audit: type=1400 audit(524539.703:10610): avc: denied { validate_trans } for pid=15544 comm="syz.1.3917" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 252.425910][T15559] x_tables: duplicate underflow at hook 3 [ 252.433823][T15562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3923'. [ 252.446350][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.576576][T15572] loop5: detected capacity change from 0 to 512 [ 252.585335][T15572] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.616959][T15572] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.678085][T15572] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3927: bg 0: block 346: padding at end of block bitmap is not set [ 252.695147][T15572] EXT4-fs (loop5): 1 truncate cleaned up [ 252.710023][T15572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.778756][T15541] lo speed is unknown, defaulting to 1000 [ 252.867220][T15550] lo speed is unknown, defaulting to 1000 [ 252.878252][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.055106][T15585] lo speed is unknown, defaulting to 1000 [ 253.185322][ T3413] vhci_hcd: vhci_device speed not set [ 253.508432][T15603] loop2: detected capacity change from 0 to 512 [ 253.547481][T15606] loop5: detected capacity change from 0 to 128 [ 253.782814][T15618] pim6reg1: entered promiscuous mode [ 254.135219][T15650] loop6: detected capacity change from 0 to 256 [ 254.151436][T15650] FAT-fs (loop6): Directory bread(block 64) failed [ 254.158292][T15650] FAT-fs (loop6): Directory bread(block 65) failed [ 254.164961][T15650] FAT-fs (loop6): Directory bread(block 66) failed [ 254.172002][T15650] FAT-fs (loop6): Directory bread(block 67) failed [ 254.178918][T15650] FAT-fs (loop6): Directory bread(block 68) failed [ 254.185508][T15650] FAT-fs (loop6): Directory bread(block 69) failed [ 254.192206][T15650] FAT-fs (loop6): Directory bread(block 70) failed [ 254.198787][T15650] FAT-fs (loop6): Directory bread(block 71) failed [ 254.205422][T15650] FAT-fs (loop6): Directory bread(block 72) failed [ 254.212159][T15650] FAT-fs (loop6): Directory bread(block 73) failed [ 254.544791][T15672] __nla_validate_parse: 5 callbacks suppressed [ 254.544808][T15672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3965'. [ 254.545504][T15674] x_tables: duplicate underflow at hook 3 [ 254.565546][T15670] pim6reg1: entered promiscuous mode [ 254.614829][T15678] loop0: detected capacity change from 0 to 512 [ 254.631869][T15678] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.645336][T15678] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 254.658866][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3971'. [ 254.680498][T15678] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3968: bg 0: block 346: padding at end of block bitmap is not set [ 254.704254][T15678] EXT4-fs (loop0): 1 truncate cleaned up [ 254.710749][T15678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.741375][T12889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.848177][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3973'. [ 254.886682][T15696] loop5: detected capacity change from 0 to 512 [ 254.952803][T15704] x_tables: duplicate underflow at hook 3 [ 254.991890][T15706] loop5: detected capacity change from 0 to 512 [ 255.000473][T15706] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 255.029050][T15706] EXT4-fs (loop5): 1 truncate cleaned up [ 255.039524][T15706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.056129][T15706] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 255.062860][T15706] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 255.070940][T15706] vhci_hcd vhci_hcd.0: Device attached [ 255.252227][T15717] pim6reg1: entered promiscuous mode [ 255.281073][T15686] lo speed is unknown, defaulting to 1000 [ 255.325834][ T9] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 255.365746][T15719] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3985'. [ 255.479623][T15724] loop1: detected capacity change from 0 to 512 [ 255.486271][T15724] EXT4-fs: Ignoring removed nobh option [ 255.500475][T15724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3987: corrupted inode contents [ 255.519643][T15724] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.3987: mark_inode_dirty error [ 255.543172][T15724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3987: corrupted inode contents [ 255.556089][T15724] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3987: mark_inode_dirty error [ 255.573309][T15724] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3987: Failed to acquire dquot type 0 [ 255.585098][T15730] loop2: detected capacity change from 0 to 512 [ 255.585501][T15724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3987: corrupted inode contents [ 255.593056][T15730] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.604260][T15724] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.3987: mark_inode_dirty error [ 255.622018][T15724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3987: corrupted inode contents [ 255.632215][T15730] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.637846][T15724] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3987: mark_inode_dirty error [ 255.648670][T15730] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3989: bg 0: block 346: padding at end of block bitmap is not set [ 255.657716][T15724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3987: corrupted inode contents [ 255.683408][T15730] EXT4-fs (loop2): 1 truncate cleaned up [ 255.689576][T15730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.693038][T15724] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 255.712506][T15710] vhci_hcd: connection reset by peer [ 255.718618][T15149] vhci_hcd: stop threads [ 255.719023][T15724] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3987: corrupted inode contents [ 255.722938][T15149] vhci_hcd: release socket [ 255.739527][T15149] vhci_hcd: disconnect device [ 255.756130][T15724] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.3987: mark_inode_dirty error [ 255.762759][T15733] x_tables: duplicate underflow at hook 3 [ 255.775962][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.786836][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.802313][T15724] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 255.810246][T15735] loop5: detected capacity change from 0 to 512 [ 255.813301][T15724] EXT4-fs (loop1): 1 truncate cleaned up [ 255.824206][T15724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.838695][T15735] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.852033][T15735] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 255.870687][T15738] loop0: detected capacity change from 0 to 1024 [ 255.882016][T15739] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3991'. [ 255.884360][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.902818][T15735] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3992: bg 0: block 346: padding at end of block bitmap is not set [ 255.922669][T15735] EXT4-fs (loop5): 1 truncate cleaned up [ 255.937372][T15738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.942937][T15735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.957400][T15738] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 255.974687][T15738] EXT4-fs (loop0): This should not happen!! Data will be lost [ 255.974687][T15738] [ 255.984489][T15738] EXT4-fs (loop0): Total free blocks count 0 [ 255.990763][T15738] EXT4-fs (loop0): Free/Dirty block details [ 255.996697][T15738] EXT4-fs (loop0): free_blocks=0 [ 256.001488][T15742] pim6reg1: entered promiscuous mode [ 256.001867][T15738] EXT4-fs (loop0): dirty_blocks=0 [ 256.012236][T15738] EXT4-fs (loop0): Block reservation details [ 256.018304][T15738] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 256.050290][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.058256][T15738] 9pnet_fd: Insufficient options for proto=fd [ 256.110004][T15752] loop5: detected capacity change from 0 to 512 [ 256.117053][T15754] loop1: detected capacity change from 0 to 512 [ 256.126500][T15754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 256.137696][T15752] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 256.166109][T15754] EXT4-fs (loop1): 1 truncate cleaned up [ 256.173258][T15752] EXT4-fs (loop5): 1 truncate cleaned up [ 256.179597][T15752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.179922][T12889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.192634][T15754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.226784][T15754] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 256.233466][T15754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 256.241133][T15754] vhci_hcd vhci_hcd.0: Device attached [ 256.252878][T15759] vhci_hcd: connection closed [ 256.253679][T15144] vhci_hcd: stop threads [ 256.261606][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4000'. [ 256.262643][T15144] vhci_hcd: release socket [ 256.262655][T15144] vhci_hcd: disconnect device [ 256.283756][T15752] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 256.290503][T15752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 256.298243][T15752] vhci_hcd vhci_hcd.0: Device attached [ 256.302978][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4002'. [ 256.324016][T15765] vhci_hcd: connection closed [ 256.324838][T15132] vhci_hcd: stop threads [ 256.333889][T15132] vhci_hcd: release socket [ 256.338501][T15132] vhci_hcd: disconnect device [ 256.349606][T15771] x_tables: duplicate underflow at hook 3 [ 256.431505][T15781] loop6: detected capacity change from 0 to 512 [ 256.439545][T15781] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 256.460558][T15781] EXT4-fs (loop6): 1 truncate cleaned up [ 256.467019][T15781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.482884][T15781] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 256.489540][T15781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 256.495482][T15784] pim6reg1: entered promiscuous mode [ 256.497299][T15781] vhci_hcd vhci_hcd.0: Device attached [ 256.753522][ T3386] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 256.788837][T15795] loop2: detected capacity change from 0 to 512 [ 256.795768][T15795] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.802876][T15795] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 256.816094][T15795] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4012: bg 0: block 346: padding at end of block bitmap is not set [ 256.831044][T15795] EXT4-fs (loop2): 1 truncate cleaned up [ 256.837467][T15795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.862925][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.902226][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4014'. [ 256.912636][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.935728][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4015'. [ 256.946972][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.110427][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 257.110446][ T29] audit: type=1326 audit(524544.395:10775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.140239][ T29] audit: type=1326 audit(524544.395:10776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.163850][ T29] audit: type=1326 audit(524544.395:10777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.223735][ T29] audit: type=1326 audit(524544.424:10778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.247074][ T29] audit: type=1326 audit(524544.424:10779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.270736][ T29] audit: type=1326 audit(524544.424:10780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.294176][ T29] audit: type=1326 audit(524544.424:10781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.317988][ T29] audit: type=1326 audit(524544.424:10782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.341576][ T29] audit: type=1326 audit(524544.424:10783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.364959][ T29] audit: type=1326 audit(524544.424:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15810 comm="syz.1.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 257.398683][T15785] vhci_hcd: connection reset by peer [ 257.404322][T15132] vhci_hcd: stop threads [ 257.408821][T15132] vhci_hcd: release socket [ 257.413495][T15132] vhci_hcd: disconnect device [ 257.440386][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.515281][T15827] loop6: detected capacity change from 0 to 1024 [ 257.542721][T15829] loop0: detected capacity change from 0 to 512 [ 257.550186][T15827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.586451][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.650288][T15835] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4029'. [ 257.713715][T15839] loop6: detected capacity change from 0 to 1024 [ 257.745343][T15839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.835080][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.912263][T15809] lo speed is unknown, defaulting to 1000 [ 258.017685][T15811] lo speed is unknown, defaulting to 1000 [ 258.090414][T15874] x_tables: duplicate underflow at hook 3 [ 258.383761][T15880] lo speed is unknown, defaulting to 1000 [ 259.073487][T15905] mmap: syz.5.4056 (15905) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 259.288921][T15903] lo speed is unknown, defaulting to 1000 [ 259.520172][T15928] loop2: detected capacity change from 0 to 512 [ 259.527363][T15926] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.559099][T15928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.755883][T15939] loop6: detected capacity change from 0 to 512 [ 259.775779][T15939] EXT4-fs: Ignoring removed nobh option [ 259.793800][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.4067: corrupted inode contents [ 259.797049][T15941] loop5: detected capacity change from 0 to 512 [ 259.809680][T15939] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.4067: mark_inode_dirty error [ 259.842658][T15941] EXT4-fs: Ignoring removed nobh option [ 259.858552][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.4067: corrupted inode contents [ 259.914777][T15939] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.4067: mark_inode_dirty error [ 259.935871][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.4069: corrupted inode contents [ 259.953654][T15939] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4067: Failed to acquire dquot type 0 [ 259.965387][T15941] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.4069: mark_inode_dirty error [ 259.979065][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.4069: corrupted inode contents [ 259.984963][T15907] lo speed is unknown, defaulting to 1000 [ 260.089327][T15941] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.4069: mark_inode_dirty error [ 260.101705][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.4067: corrupted inode contents [ 260.192381][T15941] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4069: Failed to acquire dquot type 0 [ 260.214466][T15939] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.4067: mark_inode_dirty error [ 260.284059][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.4067: corrupted inode contents [ 260.308198][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4069: corrupted inode contents [ 260.393866][T15939] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.4067: mark_inode_dirty error [ 260.411150][T15941] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.4069: mark_inode_dirty error [ 260.422739][T15953] loop1: detected capacity change from 0 to 1024 [ 260.432746][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4069: corrupted inode contents [ 260.433516][T15953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.444772][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.4067: corrupted inode contents [ 260.456432][T15941] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.4069: mark_inode_dirty error [ 260.463771][T15939] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 260.476210][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4069: corrupted inode contents [ 260.483843][T15939] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.4067: corrupted inode contents [ 260.496350][T15941] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 260.507543][T15939] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.4067: mark_inode_dirty error [ 260.529899][T15953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.532476][T15949] lo speed is unknown, defaulting to 1000 [ 260.543217][ T9] vhci_hcd: vhci_device speed not set [ 260.559933][T15941] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4069: corrupted inode contents [ 260.564306][T15939] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 260.583626][T15941] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.4069: mark_inode_dirty error [ 260.584491][T15939] EXT4-fs (loop6): 1 truncate cleaned up [ 260.595365][T15928] lo speed is unknown, defaulting to 1000 [ 260.601054][T15939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.619719][T15953] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4071: Abort forced by user [ 260.619895][T15941] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 260.648318][T15941] EXT4-fs (loop5): 1 truncate cleaned up [ 260.679521][T15953] EXT4-fs (loop1): Remounting filesystem read-only [ 260.686144][T15953] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 260.701552][T15958] x_tables: duplicate underflow at hook 3 [ 260.702727][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.719627][T15941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.746531][T15960] __nla_validate_parse: 6 callbacks suppressed [ 260.746548][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4074'. [ 260.796858][T15962] loop0: detected capacity change from 0 to 512 [ 260.822230][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.857975][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.889979][T15970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4076'. [ 260.991801][T15977] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4080'. [ 261.010669][T15977] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4080'. [ 261.127876][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.427639][T15991] loop5: detected capacity change from 0 to 1024 [ 261.441411][T15991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.528574][T15991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.718429][T15991] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.4087: Abort forced by user [ 261.780719][T15991] EXT4-fs (loop5): Remounting filesystem read-only [ 261.787334][T15991] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 261.821248][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.861742][T15966] lo speed is unknown, defaulting to 1000 [ 261.887418][T15993] lo speed is unknown, defaulting to 1000 [ 261.981548][ T3386] vhci_hcd: vhci_device speed not set [ 262.199086][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4097'. [ 262.305771][T16023] loop6: detected capacity change from 0 to 512 [ 262.426922][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 262.426941][ T29] audit: type=1326 audit(524549.627:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.6.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2116445967 code=0x7ffc0000 [ 262.465513][ T29] audit: type=1326 audit(524549.627:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.6.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21163eab89 code=0x7ffc0000 [ 262.488746][ T29] audit: type=1326 audit(524549.627:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.6.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2116445967 code=0x7ffc0000 [ 262.511996][ T29] audit: type=1326 audit(524549.627:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.6.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21163eab89 code=0x7ffc0000 [ 262.535286][ T29] audit: type=1326 audit(524549.627:11046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.6.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211644e9a9 code=0x7ffc0000 [ 262.558783][ T29] audit: type=1326 audit(524549.627:11047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.6.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211644e9a9 code=0x7ffc0000 [ 262.582044][ T29] audit: type=1326 audit(524549.637:11048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.6.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f211644e9a9 code=0x7ffc0000 [ 262.605575][ T29] audit: type=1326 audit(524549.637:11049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16031 comm="syz.6.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211644e9a9 code=0x7ffc0000 [ 262.997023][ T29] audit: type=1326 audit(524550.160:11050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.5.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46812e9a9 code=0x7ffc0000 [ 263.020404][ T29] audit: type=1326 audit(524550.160:11051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16040 comm="syz.5.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46812e9a9 code=0x7ffc0000 [ 263.165058][T16060] loop1: detected capacity change from 0 to 1024 [ 263.207843][T16060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.221151][T16071] Cannot find del_set index 0 as target [ 263.271262][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.294492][T16078] FAULT_INJECTION: forcing a failure. [ 263.294492][T16078] name failslab, interval 1, probability 0, space 0, times 0 [ 263.307391][T16078] CPU: 1 UID: 0 PID: 16078 Comm: syz.0.4119 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 263.307423][T16078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.307447][T16078] Call Trace: [ 263.307455][T16078] [ 263.307485][T16078] __dump_stack+0x1d/0x30 [ 263.307509][T16078] dump_stack_lvl+0xe8/0x140 [ 263.307573][T16078] dump_stack+0x15/0x1b [ 263.307589][T16078] should_fail_ex+0x265/0x280 [ 263.307688][T16078] should_failslab+0x8c/0xb0 [ 263.307718][T16078] __kmalloc_noprof+0xa5/0x3e0 [ 263.307747][T16078] ? alloc_pipe_info+0x1c9/0x350 [ 263.307861][T16078] alloc_pipe_info+0x1c9/0x350 [ 263.307904][T16078] splice_direct_to_actor+0x592/0x680 [ 263.308019][T16078] ? kstrtouint_from_user+0x9f/0xf0 [ 263.308058][T16078] ? __pfx_direct_splice_actor+0x10/0x10 [ 263.308094][T16078] ? __rcu_read_unlock+0x4f/0x70 [ 263.308157][T16078] ? get_pid_task+0x96/0xd0 [ 263.308182][T16078] ? avc_policy_seqno+0x15/0x30 [ 263.308289][T16078] ? selinux_file_permission+0x1e4/0x320 [ 263.308318][T16078] do_splice_direct+0xda/0x150 [ 263.308351][T16078] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 263.308426][T16078] do_sendfile+0x380/0x650 [ 263.308458][T16078] __x64_sys_sendfile64+0x105/0x150 [ 263.308488][T16078] x64_sys_call+0xb39/0x2fb0 [ 263.308550][T16078] do_syscall_64+0xd2/0x200 [ 263.308575][T16078] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 263.308610][T16078] ? clear_bhb_loop+0x40/0x90 [ 263.308644][T16078] ? clear_bhb_loop+0x40/0x90 [ 263.308738][T16078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.308806][T16078] RIP: 0033:0x7f3d472ee9a9 [ 263.308825][T16078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.308847][T16078] RSP: 002b:00007f3d4594f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 263.308872][T16078] RAX: ffffffffffffffda RBX: 00007f3d47515fa0 RCX: 00007f3d472ee9a9 [ 263.308917][T16078] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 263.308934][T16078] RBP: 00007f3d4594f090 R08: 0000000000000000 R09: 0000000000000000 [ 263.308953][T16078] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 263.308970][T16078] R13: 0000000000000000 R14: 00007f3d47515fa0 R15: 00007fffb305fac8 [ 263.309003][T16078] [ 263.636487][T16087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4124'. [ 263.717888][T16092] loop6: detected capacity change from 0 to 1024 [ 263.770566][T16092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.802072][T16099] x_tables: duplicate underflow at hook 3 [ 263.834883][T16041] lo speed is unknown, defaulting to 1000 [ 264.012142][T16107] netlink: zone id is out of range [ 264.019810][T16101] loop0: detected capacity change from 0 to 1024 [ 264.026588][T16107] netlink: zone id is out of range [ 264.040216][T16107] netlink: zone id is out of range [ 264.053050][T16107] program syz.5.4132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.093050][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.139542][T16109] loop2: detected capacity change from 0 to 1024 [ 264.249191][T16101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.274579][T16109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.290731][T16118] FAULT_INJECTION: forcing a failure. [ 264.290731][T16118] name failslab, interval 1, probability 0, space 0, times 0 [ 264.303521][T16118] CPU: 1 UID: 0 PID: 16118 Comm: syz.6.4130 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 264.303561][T16118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.303578][T16118] Call Trace: [ 264.303587][T16118] [ 264.303673][T16118] __dump_stack+0x1d/0x30 [ 264.303700][T16118] dump_stack_lvl+0xe8/0x140 [ 264.303796][T16118] dump_stack+0x15/0x1b [ 264.303897][T16118] should_fail_ex+0x265/0x280 [ 264.303938][T16118] should_failslab+0x8c/0xb0 [ 264.303968][T16118] kmem_cache_alloc_node_noprof+0x57/0x320 [ 264.304060][T16118] ? __alloc_skb+0x101/0x320 [ 264.304130][T16118] __alloc_skb+0x101/0x320 [ 264.304166][T16118] ? audit_log_start+0x365/0x6c0 [ 264.304225][T16118] audit_log_start+0x380/0x6c0 [ 264.304268][T16118] audit_seccomp+0x48/0x100 [ 264.304302][T16118] ? __seccomp_filter+0x68c/0x10d0 [ 264.304359][T16118] __seccomp_filter+0x69d/0x10d0 [ 264.304428][T16118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 264.304466][T16118] ? vfs_write+0x75e/0x8e0 [ 264.304510][T16118] __secure_computing+0x82/0x150 [ 264.304596][T16118] syscall_trace_enter+0xcf/0x1e0 [ 264.304627][T16118] do_syscall_64+0xac/0x200 [ 264.304730][T16118] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 264.304771][T16118] ? clear_bhb_loop+0x40/0x90 [ 264.304796][T16118] ? clear_bhb_loop+0x40/0x90 [ 264.304893][T16118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.304919][T16118] RIP: 0033:0x7f211644e9a9 [ 264.304935][T16118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.304953][T16118] RSP: 002b:00007f2114aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 264.304971][T16118] RAX: ffffffffffffffda RBX: 00007f2116675fa0 RCX: 00007f211644e9a9 [ 264.305063][T16118] RDX: 0000000000001000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 264.305078][T16118] RBP: 00007f2114aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 264.305091][T16118] R10: 000000000000070d R11: 0000000000000246 R12: 0000000000000001 [ 264.305102][T16118] R13: 0000000000000000 R14: 00007f2116675fa0 R15: 00007ffc13a6f8b8 [ 264.305121][T16118] [ 264.533554][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4133'. [ 264.608451][T12889] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.627847][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.637836][T16128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4138'. [ 264.886062][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4147'. [ 265.402511][T16160] FAULT_INJECTION: forcing a failure. [ 265.402511][T16160] name failslab, interval 1, probability 0, space 0, times 0 [ 265.415525][T16160] CPU: 1 UID: 0 PID: 16160 Comm: syz.0.4149 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 265.415595][T16160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.415612][T16160] Call Trace: [ 265.415622][T16160] [ 265.415632][T16160] __dump_stack+0x1d/0x30 [ 265.415704][T16160] dump_stack_lvl+0xe8/0x140 [ 265.415729][T16160] dump_stack+0x15/0x1b [ 265.415751][T16160] should_fail_ex+0x265/0x280 [ 265.415844][T16160] should_failslab+0x8c/0xb0 [ 265.415901][T16160] kmem_cache_alloc_node_noprof+0x57/0x320 [ 265.416008][T16160] ? __alloc_skb+0x101/0x320 [ 265.416041][T16160] __alloc_skb+0x101/0x320 [ 265.416125][T16160] ? audit_log_start+0x365/0x6c0 [ 265.416230][T16160] audit_log_start+0x380/0x6c0 [ 265.416301][T16160] audit_seccomp+0x48/0x100 [ 265.416364][T16160] ? __seccomp_filter+0x68c/0x10d0 [ 265.416394][T16160] __seccomp_filter+0x69d/0x10d0 [ 265.416427][T16160] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 265.416499][T16160] ? vfs_write+0x75e/0x8e0 [ 265.416541][T16160] __secure_computing+0x82/0x150 [ 265.416563][T16160] syscall_trace_enter+0xcf/0x1e0 [ 265.416637][T16160] do_syscall_64+0xac/0x200 [ 265.416671][T16160] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.416712][T16160] ? clear_bhb_loop+0x40/0x90 [ 265.416739][T16160] ? clear_bhb_loop+0x40/0x90 [ 265.416766][T16160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.416976][T16160] RIP: 0033:0x7f3d472ee9a9 [ 265.416996][T16160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.417145][T16160] RSP: 002b:00007f3d4594f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d2 [ 265.417168][T16160] RAX: ffffffffffffffda RBX: 00007f3d47515fa0 RCX: 00007f3d472ee9a9 [ 265.417183][T16160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 265.417200][T16160] RBP: 00007f3d4594f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.417216][T16160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.417230][T16160] R13: 0000000000000000 R14: 00007f3d47515fa0 R15: 00007fffb305fac8 [ 265.417253][T16160] [ 265.724401][T16136] lo speed is unknown, defaulting to 1000 [ 265.732113][T16166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4152'. [ 265.866652][T16177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4158'. [ 265.873690][T16181] netlink: 300 bytes leftover after parsing attributes in process `syz.5.4159'. [ 265.951344][T16189] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 265.958023][T16189] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.965836][T16189] vhci_hcd vhci_hcd.0: Device attached [ 265.974755][T16191] vhci_hcd: connection closed [ 265.974988][T15181] vhci_hcd: stop threads [ 265.984330][T15181] vhci_hcd: release socket [ 265.988796][T15181] vhci_hcd: disconnect device [ 265.996440][T16195] program syz.5.4163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.170699][T16203] loop1: detected capacity change from 0 to 512 [ 266.197773][T16205] loop5: detected capacity change from 0 to 512 [ 266.208623][T16205] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 266.230422][T16205] EXT4-fs (loop5): 1 truncate cleaned up [ 266.244928][T16205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.257448][T16208] loop1: detected capacity change from 0 to 2048 [ 266.271399][T16205] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 266.278098][T16205] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 266.285872][T16205] vhci_hcd vhci_hcd.0: Device attached [ 266.289882][T16208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.307711][T16208] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 266.339921][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.387192][T16214] pim6reg1: entered promiscuous mode [ 266.520281][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'. [ 266.538251][ T23] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 266.576681][T16224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4174'. [ 266.596059][T16226] pim6reg1: entered promiscuous mode [ 266.727037][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4178'. [ 266.805542][T16239] pim6reg1: entered promiscuous mode [ 266.889851][T16209] vhci_hcd: connection reset by peer [ 266.895649][T15165] vhci_hcd: stop threads [ 266.899964][T15165] vhci_hcd: release socket [ 266.904486][T15165] vhci_hcd: disconnect device [ 266.912511][T16243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4183'. [ 266.942809][T16245] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 266.949503][T16245] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 266.957216][T16245] vhci_hcd vhci_hcd.0: Device attached [ 266.963583][T16246] vhci_hcd: connection closed [ 266.963760][T15165] vhci_hcd: stop threads [ 266.963747][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.968635][T15165] vhci_hcd: release socket [ 266.986643][T15165] vhci_hcd: disconnect device [ 267.010648][T16249] loop5: detected capacity change from 0 to 2048 [ 267.025369][T16249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.038741][T16249] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 267.063704][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.454924][T16259] loop2: detected capacity change from 0 to 1024 [ 267.475419][T16259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.512803][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.672859][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 267.672883][ T29] audit: type=1400 audit(524554.815:11224): avc: denied { mounton } for pid=16273 comm="syz.0.4193" path="/198/file0" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 267.691338][T16274] 9pnet: Could not find request transport: 0xffffffffffffffff [ 267.778945][T16274] netlink: 'syz.0.4193': attribute type 11 has an invalid length. [ 267.786927][T16274] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4193'. [ 267.910013][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4194'. [ 267.934314][T16276] bridge: RTM_NEWNEIGH with invalid ether address [ 268.035383][ T29] audit: type=1326 audit(524555.171:11225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16280 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2116445967 code=0x7ffc0000 [ 268.035497][ T29] audit: type=1326 audit(524555.171:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16280 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21163eab89 code=0x7ffc0000 [ 268.035527][ T29] audit: type=1326 audit(524555.171:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16280 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2116445967 code=0x7ffc0000 [ 268.060165][ T29] audit: type=1326 audit(524555.171:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16280 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f21163eab89 code=0x7ffc0000 [ 268.060202][ T29] audit: type=1326 audit(524555.171:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16280 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211644e9a9 code=0x7ffc0000 [ 268.060260][ T29] audit: type=1326 audit(524555.171:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16280 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211644e9a9 code=0x7ffc0000 [ 268.060286][ T29] audit: type=1326 audit(524555.171:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16280 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211644e9a9 code=0x7ffc0000 [ 268.060321][ T29] audit: type=1326 audit(524555.171:11232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16280 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211644e9a9 code=0x7ffc0000 [ 268.060360][ T29] audit: type=1326 audit(524555.171:11233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16280 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2116445967 code=0x7ffc0000 [ 268.067320][T16283] loop5: detected capacity change from 0 to 2048 [ 268.128817][T16283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.130416][T16283] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 268.180860][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.232685][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4197'. [ 268.577586][T16305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4203'. [ 268.670964][T16308] loop2: detected capacity change from 0 to 128 [ 268.829248][T16281] lo speed is unknown, defaulting to 1000 [ 268.934911][T16315] loop6: detected capacity change from 0 to 2048 [ 268.956538][T16315] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 269.054557][T16321] loop6: detected capacity change from 0 to 1024 [ 269.061640][T16321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.092647][T16321] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.4209: Abort forced by user [ 269.105936][T16321] EXT4-fs (loop6): Remounting filesystem read-only [ 269.112597][T16321] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 269.577556][T16335] loop2: detected capacity change from 0 to 512 [ 269.624911][T16335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 269.631778][T16339] x_tables: duplicate underflow at hook 3 [ 269.698330][T16341] pim6reg1: entered promiscuous mode [ 269.712523][T16335] EXT4-fs (loop2): 1 truncate cleaned up [ 269.733985][T16344] loop6: detected capacity change from 0 to 1024 [ 269.742840][T16335] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 269.749551][T16335] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 269.757258][T16335] vhci_hcd vhci_hcd.0: Device attached [ 269.789999][T16345] vhci_hcd: connection closed [ 269.790574][ T31] vhci_hcd: stop threads [ 269.800087][ T31] vhci_hcd: release socket [ 269.804624][ T31] vhci_hcd: disconnect device [ 269.945591][T16357] hub 6-0:1.0: USB hub found [ 269.960360][T16357] hub 6-0:1.0: 8 ports detected [ 270.192294][T16383] program syz.6.4233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.329077][T16392] loop6: detected capacity change from 0 to 512 [ 270.355997][T16392] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 270.403851][T16392] EXT4-fs (loop6): 1 truncate cleaned up [ 270.429206][T16392] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 270.435871][T16392] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 270.443599][T16392] vhci_hcd vhci_hcd.0: Device attached [ 270.480593][T16394] vhci_hcd: connection closed [ 270.480755][T15193] vhci_hcd: stop threads [ 270.489874][T15193] vhci_hcd: release socket [ 270.494320][T15193] vhci_hcd: disconnect device [ 270.784806][T16406] loop2: detected capacity change from 0 to 1024 [ 270.864210][T16363] lo speed is unknown, defaulting to 1000 [ 271.067979][T16416] __nla_validate_parse: 3 callbacks suppressed [ 271.068009][T16416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4245'. [ 271.280456][T16435] loop2: detected capacity change from 0 to 512 [ 271.292093][T16437] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4254'. [ 271.304638][T16435] EXT4-fs: Ignoring removed nobh option [ 271.427750][T16439] lo speed is unknown, defaulting to 1000 [ 271.531195][T16435] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.4253: corrupted inode contents [ 271.719759][T16435] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.4253: mark_inode_dirty error [ 271.733875][T16435] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.4253: corrupted inode contents [ 271.750836][T16435] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.4253: mark_inode_dirty error [ 271.765366][T16435] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4253: Failed to acquire dquot type 0 [ 271.781313][T16435] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4253: corrupted inode contents [ 271.793551][T16435] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.4253: mark_inode_dirty error [ 271.806255][T16435] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4253: corrupted inode contents [ 271.818561][T16435] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.4253: mark_inode_dirty error [ 271.827212][ T23] vhci_hcd: vhci_device speed not set [ 271.833684][T16435] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4253: corrupted inode contents [ 271.847744][T16435] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 271.856568][T16435] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.4253: corrupted inode contents [ 271.868973][T16435] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.4253: mark_inode_dirty error [ 271.880454][T16435] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 271.890169][T16435] EXT4-fs (loop2): 1 truncate cleaned up [ 271.937851][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4258'. [ 271.949957][T16453] loop5: detected capacity change from 0 to 512 [ 271.960328][T16453] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 271.978196][T16453] EXT4-fs (loop5): 1 truncate cleaned up [ 271.988676][T16453] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 271.995327][T16453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 272.003135][T16453] vhci_hcd vhci_hcd.0: Device attached [ 272.012750][T16455] vhci_hcd: connection closed [ 272.013039][T15140] vhci_hcd: stop threads [ 272.022073][T15140] vhci_hcd: release socket [ 272.026517][T15140] vhci_hcd: disconnect device [ 272.721196][T16468] loop5: detected capacity change from 0 to 512 [ 272.741817][T16470] loop1: detected capacity change from 0 to 128 [ 272.745306][T16468] EXT4-fs: Ignoring removed nobh option [ 272.810332][T16468] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.4263: corrupted inode contents [ 272.859745][T16468] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.4263: mark_inode_dirty error [ 272.893669][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4266'. [ 272.917443][T16468] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.4263: corrupted inode contents [ 272.935602][T16468] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.4263: mark_inode_dirty error [ 272.954121][T16468] __quota_error: 114 callbacks suppressed [ 272.954140][T16468] Quota error (device loop5): write_blk: dquota write failed [ 272.964489][T16480] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 272.967917][T16468] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 272.974002][T16480] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 272.974133][T16480] vhci_hcd vhci_hcd.0: Device attached [ 272.993152][T16468] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4263: Failed to acquire dquot type 0 [ 273.009813][T16481] vhci_hcd: connection closed [ 273.010011][T15149] vhci_hcd: stop threads [ 273.010497][T16468] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4263: corrupted inode contents [ 273.014800][T15149] vhci_hcd: release socket [ 273.019583][T16468] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.4263: mark_inode_dirty error [ 273.030937][T15149] vhci_hcd: disconnect device [ 273.036643][T16468] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4263: corrupted inode contents [ 273.064687][T16468] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.4263: mark_inode_dirty error [ 273.076332][T16468] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4263: corrupted inode contents [ 273.088721][T16468] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 273.097667][T16468] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.4263: corrupted inode contents [ 273.109912][T16468] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.4263: mark_inode_dirty error [ 273.121412][T16468] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 273.131623][T16468] EXT4-fs (loop5): 1 truncate cleaned up [ 273.232736][T16490] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.271381][T16490] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.331739][T16490] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.391719][T16490] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.445883][T16490] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.457982][T16490] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.470483][T16490] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.483304][T16490] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.574784][T16501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=16501 comm=syz.6.4271 [ 273.603438][T16503] loop2: detected capacity change from 0 to 1024 [ 273.649147][T16509] netlink: 300 bytes leftover after parsing attributes in process `syz.6.4276'. [ 273.683021][ T29] audit: type=1326 audit(524560.774:11346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16511 comm="syz.5.4277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc46812e9a9 code=0x0 [ 273.727787][T16512] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 273.734598][T16512] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 273.742262][T16512] vhci_hcd vhci_hcd.0: Device attached [ 273.756233][T16518] vhci_hcd: connection closed [ 273.756483][T15176] vhci_hcd: stop threads [ 273.765810][T15176] vhci_hcd: release socket [ 273.770311][T15176] vhci_hcd: disconnect device [ 273.827230][T16528] loop1: detected capacity change from 0 to 1024 [ 273.836872][T16528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.866558][T16528] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4284: Abort forced by user [ 273.877025][T16528] EXT4-fs (loop1): Remounting filesystem read-only [ 273.881200][T16534] x_tables: duplicate underflow at hook 3 [ 273.883672][T16528] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 273.885468][T16530] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4286'. [ 273.977119][T16542] loop6: detected capacity change from 0 to 512 [ 273.987694][T16542] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 274.013996][T16542] EXT4-fs (loop6): 1 truncate cleaned up [ 274.025646][T16542] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 274.032309][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 274.040006][T16542] vhci_hcd vhci_hcd.0: Device attached [ 274.049443][T16547] vhci_hcd: connection closed [ 274.049718][T15194] vhci_hcd: stop threads [ 274.058859][T15194] vhci_hcd: release socket [ 274.063303][T15194] vhci_hcd: disconnect device [ 274.065605][T16550] loop1: detected capacity change from 0 to 1024 [ 274.075218][T16550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.105516][T16550] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4292: Abort forced by user [ 274.115989][T16550] EXT4-fs (loop1): Remounting filesystem read-only [ 274.122702][T16550] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 274.171899][ T29] audit: type=1326 audit(524561.251:11347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68586ae9a9 code=0x7ffc0000 [ 274.195338][ T29] audit: type=1326 audit(524561.251:11348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68586ae9a9 code=0x7ffc0000 [ 274.223622][ T29] audit: type=1326 audit(524561.251:11349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68586ae9a9 code=0x7ffc0000 [ 274.247132][ T29] audit: type=1326 audit(524561.251:11350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68586ae9a9 code=0x7ffc0000 [ 274.270439][ T29] audit: type=1326 audit(524561.251:11351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68586ae9a9 code=0x7ffc0000 [ 274.293964][ T29] audit: type=1326 audit(524561.251:11352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68586ae9a9 code=0x7ffc0000 [ 274.317498][ T29] audit: type=1326 audit(524561.251:11353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.2.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68586ae9a9 code=0x7ffc0000 [ 274.465753][T16566] x_tables: duplicate underflow at hook 3 [ 274.492506][T16568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4299'. [ 274.621736][T16580] loop5: detected capacity change from 0 to 1024 [ 274.640583][T16580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.707004][T16580] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.4305: Abort forced by user [ 274.746161][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4309'. [ 274.768280][T16580] EXT4-fs (loop5): Remounting filesystem read-only [ 274.774865][T16580] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 274.851258][T16598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4311'. [ 274.959751][T16552] lo speed is unknown, defaulting to 1000 [ 275.063246][T16609] loop5: detected capacity change from 0 to 1024 [ 275.142213][T16615] loop2: detected capacity change from 0 to 512 [ 275.151643][T16615] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.176958][T16617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=16617 comm=syz.5.4318 [ 275.203466][T16615] EXT4-fs (loop2): 1 truncate cleaned up [ 275.223528][T16615] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 275.230380][T16615] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 275.238339][T16615] vhci_hcd vhci_hcd.0: Device attached [ 275.245720][T16621] vhci_hcd: connection closed [ 275.246534][T10723] vhci_hcd: stop threads [ 275.255728][T10723] vhci_hcd: release socket [ 275.260258][T10723] vhci_hcd: disconnect device [ 275.319658][T16632] x_tables: duplicate underflow at hook 3 [ 275.357949][T16634] loop5: detected capacity change from 0 to 512 [ 275.366808][T16634] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 275.379042][T16634] EXT4-fs (loop5): 1 truncate cleaned up [ 275.395796][T16634] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 275.402537][T16634] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 275.410376][T16634] vhci_hcd vhci_hcd.0: Device attached [ 275.417883][T16636] vhci_hcd: connection closed [ 275.418405][T15191] vhci_hcd: stop threads [ 275.427521][T15191] vhci_hcd: release socket [ 275.432008][T15191] vhci_hcd: disconnect device [ 275.491518][T16640] loop6: detected capacity change from 0 to 512 [ 275.499184][T16640] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 275.512424][T16640] EXT4-fs (loop6): 1 truncate cleaned up [ 275.521219][T16640] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 275.527906][T16640] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 275.535659][T16640] vhci_hcd vhci_hcd.0: Device attached [ 275.777187][T16650] pim6reg1: entered promiscuous mode [ 275.785214][ T10] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 275.894120][T16652] loop2: detected capacity change from 0 to 1024 [ 275.953756][T16658] loop1: detected capacity change from 0 to 512 [ 275.962865][T16658] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 275.985349][T16658] EXT4-fs (loop1): 1 truncate cleaned up [ 275.987416][T16661] loop2: detected capacity change from 0 to 2048 [ 276.022651][T16661] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 276.050254][T16658] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 276.056980][T16658] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 276.064776][T16658] vhci_hcd vhci_hcd.0: Device attached [ 276.073435][T16666] program syz.5.4332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.087440][T16664] vhci_hcd: connection closed [ 276.094107][T15179] vhci_hcd: stop threads [ 276.103160][T15179] vhci_hcd: release socket [ 276.107663][T15179] vhci_hcd: disconnect device [ 276.143271][T16642] vhci_hcd: connection reset by peer [ 276.157867][T15176] vhci_hcd: stop threads [ 276.162171][T15176] vhci_hcd: release socket [ 276.166649][T15176] vhci_hcd: disconnect device [ 276.200383][T16645] lo speed is unknown, defaulting to 1000 [ 276.470595][T16689] pim6reg1: entered promiscuous mode [ 276.540960][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4334'. [ 276.970766][T16704] loop2: detected capacity change from 0 to 512 [ 276.980922][T16704] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 277.103352][T16715] lo speed is unknown, defaulting to 1000 [ 277.149652][T16704] EXT4-fs (loop2): 1 truncate cleaned up [ 277.220752][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4347'. [ 277.229878][T16710] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4347'. [ 277.274906][T16705] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 277.281570][T16705] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 277.289284][T16705] vhci_hcd vhci_hcd.0: Device attached [ 277.653559][ T3413] usb 5-1: new high-speed USB device number 15 using vhci_hcd [ 277.709506][T16723] program syz.1.4350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.768915][T16735] pim6reg1: entered promiscuous mode [ 277.993194][T16750] loop1: detected capacity change from 0 to 1024 [ 278.003587][T16750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.033743][T16750] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4359: Abort forced by user [ 278.045610][T16750] EXT4-fs (loop1): Remounting filesystem read-only [ 278.052349][T16750] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 278.206990][T16769] program syz.1.4365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.246393][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 278.246407][ T29] audit: type=1326 audit(524565.306:11490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 278.294473][T16774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4366'. [ 278.305563][T16718] vhci_hcd: connection reset by peer [ 278.317009][T15194] vhci_hcd: stop threads [ 278.321369][T15194] vhci_hcd: release socket [ 278.325887][T15194] vhci_hcd: disconnect device [ 278.335497][T16778] loop2: detected capacity change from 0 to 1024 [ 278.347025][ T29] audit: type=1326 audit(524565.336:11491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 278.370125][ T29] audit: type=1326 audit(524565.336:11492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 278.393190][ T29] audit: type=1326 audit(524565.346:11493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 278.416294][ T29] audit: type=1326 audit(524565.346:11494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 278.439090][ T29] audit: type=1326 audit(524565.346:11495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 278.462236][ T29] audit: type=1326 audit(524565.406:11496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 278.485208][ T29] audit: type=1326 audit(524565.406:11497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16758 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 278.542247][T16789] loop1: detected capacity change from 0 to 1024 [ 278.551213][T16789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.609379][T16789] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.4372: Abort forced by user [ 278.630549][T16789] EXT4-fs (loop1): Remounting filesystem read-only [ 278.637254][T16789] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 278.665425][T16799] netlink: 'syz.2.4373': attribute type 1 has an invalid length. [ 278.687300][T16799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.797257][T16799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 278.808253][T16799] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 278.820866][T16799] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 278.916538][T16801] lo speed is unknown, defaulting to 1000 [ 278.954006][T16802] ip6erspan0: entered promiscuous mode [ 278.965636][ T29] audit: type=1326 audit(524566.012:11498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 278.988789][ T29] audit: type=1326 audit(524566.012:11499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16803 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 279.029552][T16802] bond2: (slave ip6erspan0): making interface the new active one [ 279.059275][T16802] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 279.157855][T16810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4376'. [ 279.208302][T16813] loop2: detected capacity change from 0 to 1024 [ 279.233666][T16813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.288774][T16813] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4377: Abort forced by user [ 279.295783][T16817] loop1: detected capacity change from 0 to 512 [ 279.338863][T16817] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 279.349278][T16813] EXT4-fs (loop2): Remounting filesystem read-only [ 279.355873][T16813] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 279.396808][T16817] EXT4-fs (loop1): 1 truncate cleaned up [ 279.414194][T16817] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 279.421054][T16817] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 279.428816][T16817] vhci_hcd vhci_hcd.0: Device attached [ 279.441814][T16825] vhci_hcd: connection closed [ 279.443322][T15179] vhci_hcd: stop threads [ 279.452433][T15179] vhci_hcd: release socket [ 279.456922][T15179] vhci_hcd: disconnect device [ 279.470845][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4378'. [ 279.527457][T16831] pim6reg1: entered promiscuous mode [ 279.572150][T16835] loop6: detected capacity change from 0 to 512 [ 279.586969][T16820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4378'. [ 279.599762][T16835] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 279.713100][T16839] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 279.719774][T16839] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 279.727524][T16839] vhci_hcd vhci_hcd.0: Device attached [ 279.748514][T16840] vhci_hcd: connection closed [ 279.748792][T15194] vhci_hcd: stop threads [ 279.758035][T15194] vhci_hcd: release socket [ 279.762501][T15194] vhci_hcd: disconnect device [ 279.859577][T16844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4386'. [ 279.888448][T16846] program syz.0.4387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.944126][T16815] lo speed is unknown, defaulting to 1000 [ 280.083280][T16859] program syz.0.4393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.086818][T16861] serio: Serial port ptm0 [ 280.159722][T16867] loop5: detected capacity change from 0 to 1024 [ 280.198289][T16863] pim6reg1: entered promiscuous mode [ 280.237856][T16855] lo speed is unknown, defaulting to 1000 [ 280.250709][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4397'. [ 280.273920][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4398'. [ 280.403491][T16890] loop2: detected capacity change from 0 to 1024 [ 280.467551][T16897] program syz.5.4406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.615756][T16912] FAULT_INJECTION: forcing a failure. [ 280.615756][T16912] name failslab, interval 1, probability 0, space 0, times 0 [ 280.628709][T16912] CPU: 1 UID: 0 PID: 16912 Comm: syz.0.4413 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 280.628740][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.628829][T16912] Call Trace: [ 280.628837][T16912] [ 280.628847][T16912] __dump_stack+0x1d/0x30 [ 280.628873][T16912] dump_stack_lvl+0xe8/0x140 [ 280.628897][T16912] dump_stack+0x15/0x1b [ 280.628974][T16912] should_fail_ex+0x265/0x280 [ 280.629061][T16912] should_failslab+0x8c/0xb0 [ 280.629084][T16912] kmem_cache_alloc_node_noprof+0x57/0x320 [ 280.629113][T16912] ? __alloc_skb+0x101/0x320 [ 280.629193][T16912] __alloc_skb+0x101/0x320 [ 280.629222][T16912] ? audit_log_start+0x365/0x6c0 [ 280.629255][T16912] audit_log_start+0x380/0x6c0 [ 280.629396][T16912] audit_seccomp+0x48/0x100 [ 280.629424][T16912] ? __seccomp_filter+0x68c/0x10d0 [ 280.629447][T16912] __seccomp_filter+0x69d/0x10d0 [ 280.629470][T16912] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 280.629547][T16912] ? vfs_write+0x75e/0x8e0 [ 280.629603][T16912] ? __rcu_read_unlock+0x4f/0x70 [ 280.629625][T16912] ? __fget_files+0x184/0x1c0 [ 280.629646][T16912] __secure_computing+0x82/0x150 [ 280.629674][T16912] syscall_trace_enter+0xcf/0x1e0 [ 280.629706][T16912] do_syscall_64+0xac/0x200 [ 280.629803][T16912] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.629831][T16912] ? clear_bhb_loop+0x40/0x90 [ 280.629903][T16912] ? clear_bhb_loop+0x40/0x90 [ 280.629928][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.629950][T16912] RIP: 0033:0x7f3d472ee9a9 [ 280.629997][T16912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.630015][T16912] RSP: 002b:00007f3d4594f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 280.630034][T16912] RAX: ffffffffffffffda RBX: 00007f3d47515fa0 RCX: 00007f3d472ee9a9 [ 280.630108][T16912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.630121][T16912] RBP: 00007f3d4594f090 R08: 0000000000000000 R09: 0000000000000000 [ 280.630133][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.630145][T16912] R13: 0000000000000000 R14: 00007f3d47515fa0 R15: 00007fffb305fac8 [ 280.630164][T16912] [ 280.926642][T16919] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 280.933536][T16919] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 280.941277][T16919] vhci_hcd vhci_hcd.0: Device attached [ 280.952717][ T10] vhci_hcd: vhci_device speed not set [ 280.998079][T16920] vhci_hcd: connection closed [ 280.998508][T15179] vhci_hcd: stop threads [ 281.007582][T15179] vhci_hcd: release socket [ 281.012063][T15179] vhci_hcd: disconnect device [ 281.263243][T16933] loop5: detected capacity change from 0 to 512 [ 281.275678][T16892] lo speed is unknown, defaulting to 1000 [ 281.307090][T16933] EXT4-fs: Ignoring removed bh option [ 281.312734][T16933] EXT4-fs: Ignoring removed i_version option [ 281.337391][T16933] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a840c018, mo2=0002] [ 281.347394][T16933] System zones: 0-7 [ 281.351925][T16933] EXT4-fs mount: 58 callbacks suppressed [ 281.351945][T16933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.407280][T16941] FAULT_INJECTION: forcing a failure. [ 281.407280][T16941] name failslab, interval 1, probability 0, space 0, times 0 [ 281.420187][T16941] CPU: 0 UID: 0 PID: 16941 Comm: syz.1.4424 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 281.420338][T16941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.420354][T16941] Call Trace: [ 281.420361][T16941] [ 281.420370][T16941] __dump_stack+0x1d/0x30 [ 281.420397][T16941] dump_stack_lvl+0xe8/0x140 [ 281.420485][T16941] dump_stack+0x15/0x1b [ 281.420505][T16941] should_fail_ex+0x265/0x280 [ 281.420543][T16941] should_failslab+0x8c/0xb0 [ 281.420570][T16941] kmem_cache_alloc_noprof+0x50/0x310 [ 281.420663][T16941] ? skb_clone+0x151/0x1f0 [ 281.420688][T16941] skb_clone+0x151/0x1f0 [ 281.420714][T16941] __netlink_deliver_tap+0x2c9/0x500 [ 281.420785][T16941] netlink_unicast+0x653/0x680 [ 281.420822][T16941] netlink_sendmsg+0x58b/0x6b0 [ 281.420873][T16941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.420898][T16941] __sock_sendmsg+0x145/0x180 [ 281.420968][T16941] ____sys_sendmsg+0x31e/0x4e0 [ 281.421014][T16941] ___sys_sendmsg+0x17b/0x1d0 [ 281.421089][T16941] __x64_sys_sendmsg+0xd4/0x160 [ 281.421113][T16941] x64_sys_call+0x2999/0x2fb0 [ 281.421140][T16941] do_syscall_64+0xd2/0x200 [ 281.421164][T16941] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.421196][T16941] ? clear_bhb_loop+0x40/0x90 [ 281.421272][T16941] ? clear_bhb_loop+0x40/0x90 [ 281.421297][T16941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.421386][T16941] RIP: 0033:0x7f0d3c08e9a9 [ 281.421404][T16941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.421426][T16941] RSP: 002b:00007f0d3a6ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.421451][T16941] RAX: ffffffffffffffda RBX: 00007f0d3c2b5fa0 RCX: 00007f0d3c08e9a9 [ 281.421465][T16941] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 281.421478][T16941] RBP: 00007f0d3a6ef090 R08: 0000000000000000 R09: 0000000000000000 [ 281.421542][T16941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.421555][T16941] R13: 0000000000000000 R14: 00007f0d3c2b5fa0 R15: 00007ffe0655e508 [ 281.421573][T16941] [ 281.421742][T16941] netlink: 'syz.1.4424': attribute type 8 has an invalid length. [ 281.688681][T16950] netlink: 'syz.1.4427': attribute type 1 has an invalid length. [ 281.721240][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.781643][T16950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.838252][T16956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.845423][T16956] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 281.857879][T16956] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 281.870749][T16917] lo speed is unknown, defaulting to 1000 [ 281.890864][T16955] loop5: detected capacity change from 0 to 512 [ 281.935172][T16955] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 281.969444][T16955] EXT4-fs (loop5): 1 truncate cleaned up [ 281.975302][T16961] __nla_validate_parse: 4 callbacks suppressed [ 281.975318][T16961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4431'. [ 281.983862][T16955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.990760][T16961] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4431'. [ 282.034541][T16955] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 282.041228][T16955] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 282.048950][T16955] vhci_hcd vhci_hcd.0: Device attached [ 282.135315][T16966] vhci_hcd: connection closed [ 282.135578][T10723] vhci_hcd: stop threads [ 282.144879][T10723] vhci_hcd: release socket [ 282.149381][T10723] vhci_hcd: disconnect device [ 282.247453][T16975] pim6reg1: entered promiscuous mode [ 282.263572][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4433'. [ 282.282374][T16982] loop6: detected capacity change from 0 to 512 [ 282.299660][T16982] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 282.319918][T16982] EXT4-fs (loop6): orphan cleanup on readonly fs [ 282.326478][T16982] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4439: Block bitmap for bg 0 marked uninitialized [ 282.399061][T16982] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 282.419058][T16982] EXT4-fs (loop6): 1 orphan inode deleted [ 282.425313][T16982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 282.493378][T16977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4437'. [ 282.508672][T16982] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 282.532232][T16982] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 282.544427][T16982] siw: device registration error -23 [ 282.568451][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.614993][T16988] loop2: detected capacity change from 0 to 1024 [ 282.634275][T16988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.662985][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.737550][T16992] IPv6: sit1: Disabled Multicast RS [ 282.778768][T16998] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 282.789761][ T3413] vhci_hcd: vhci_device speed not set [ 282.841462][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.946766][T17010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4449'. [ 282.955278][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4443'. [ 283.036415][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4443'. [ 283.161047][T17017] netlink: 'syz.5.4452': attribute type 1 has an invalid length. [ 283.208754][T17017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.277515][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 283.277533][ T29] audit: type=1400 audit(524570.313:11818): avc: denied { ioctl } for pid=17022 comm="syz.0.4454" path="socket:[53754]" dev="sockfs" ino=53754 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 283.320799][T17023] netlink: 'syz.0.4454': attribute type 39 has an invalid length. [ 283.339182][T17021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.354509][T17021] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 283.378574][T17021] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 283.572795][T16994] lo speed is unknown, defaulting to 1000 [ 283.645859][T17029] pim6reg1: entered promiscuous mode [ 283.660169][ T29] audit: type=1400 audit(524570.691:11819): avc: denied { create } for pid=17001 comm="syz.6.4446" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 283.840448][T17044] pim6reg1: entered promiscuous mode [ 283.922263][T17048] loop6: detected capacity change from 0 to 2048 [ 283.940188][T17048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.960549][ T29] audit: type=1400 audit(524570.990:11820): avc: denied { read append open } for pid=17047 comm="syz.6.4464" path="/148/bus/cpu.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 283.984901][T17048] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 284.015145][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.015536][ T29] audit: type=1400 audit(524570.990:11821): avc: denied { module_request } for pid=17051 comm="syz.2.4465" kmod="netdev-pim6reg0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 284.046461][ T29] audit: type=1400 audit(524570.990:11822): avc: denied { sys_module } for pid=17051 comm="syz.2.4465" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 284.067642][ T29] audit: type=1400 audit(524571.020:11823): avc: denied { ioctl } for pid=17047 comm="syz.6.4464" path="/148/bus/cpu.stat" dev="loop6" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 284.091916][ T29] audit: type=1400 audit(524571.020:11824): avc: denied { name_bind } for pid=17051 comm="syz.2.4465" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 284.113820][ T29] audit: type=1400 audit(524571.020:11825): avc: denied { node_bind } for pid=17051 comm="syz.2.4465" saddr=::ffff:127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 284.136444][ T29] audit: type=1400 audit(524571.020:11826): avc: denied { mounton } for pid=17051 comm="syz.2.4465" path="/340/file0" dev="tmpfs" ino=1865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 284.159406][ T29] audit: type=1400 audit(524571.020:11827): avc: denied { mount } for pid=17051 comm="syz.2.4465" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 284.247015][T17062] pim6reg1: entered promiscuous mode [ 284.442882][T17077] loop6: detected capacity change from 0 to 512 [ 284.465484][T17077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.521942][T17077] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.4474: corrupted inode contents [ 284.555067][T17077] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.4474: mark_inode_dirty error [ 284.602012][T17077] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.4474: corrupted inode contents [ 284.667160][T17077] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.4474: mark_inode_dirty error [ 284.686563][T17094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 284.693140][T17094] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.700831][T17094] vhci_hcd vhci_hcd.0: Device attached [ 284.724201][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.770530][T17099] program syz.2.4481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.898045][T17106] loop2: detected capacity change from 0 to 512 [ 284.907663][T17106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 284.923105][T17106] EXT4-fs (loop2): 1 truncate cleaned up [ 284.937253][T17106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.949944][ T36] usb 1-1: new high-speed USB device number 17 using vhci_hcd [ 284.974647][T17106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 284.981384][T17106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 284.986313][T17109] pim6reg1: entered promiscuous mode [ 284.989191][T17106] vhci_hcd vhci_hcd.0: Device attached [ 285.041217][T17110] vhci_hcd: connection closed [ 285.041560][ T31] vhci_hcd: stop threads [ 285.050893][ T31] vhci_hcd: release socket [ 285.055506][ T31] vhci_hcd: disconnect device [ 285.149725][T17117] loop1: detected capacity change from 0 to 1024 [ 285.171370][T17117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.185021][T17124] loop5: detected capacity change from 0 to 512 [ 285.195475][T17117] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 285.207879][T17117] EXT4-fs (loop1): This should not happen!! Data will be lost [ 285.207879][T17117] [ 285.217635][T17117] EXT4-fs (loop1): Total free blocks count 0 [ 285.223804][T17117] EXT4-fs (loop1): Free/Dirty block details [ 285.229741][T17117] EXT4-fs (loop1): free_blocks=0 [ 285.234779][T17117] EXT4-fs (loop1): dirty_blocks=0 [ 285.239929][T17117] EXT4-fs (loop1): Block reservation details [ 285.245968][T17117] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 285.252237][T17096] vhci_hcd: connection reset by peer [ 285.258149][T15136] vhci_hcd: stop threads [ 285.259458][T17124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.262516][T15136] vhci_hcd: release socket [ 285.262531][T15136] vhci_hcd: disconnect device [ 285.312580][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.339865][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.534503][T17157] loop1: detected capacity change from 0 to 512 [ 285.553867][T17157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.580602][T17157] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.4501: corrupted inode contents [ 285.605613][T17157] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.4501: mark_inode_dirty error [ 285.624819][T17157] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.4501: corrupted inode contents [ 285.637850][T17163] loop5: detected capacity change from 0 to 1024 [ 285.643360][T17157] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4501: mark_inode_dirty error [ 285.647221][T17163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.673605][T17157] xt_hashlimit: max too large, truncated to 1048576 [ 285.692618][T17163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.708381][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.724723][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.728153][T17163] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.4503: Abort forced by user [ 285.750595][T17163] EXT4-fs (loop5): Remounting filesystem read-only [ 285.757476][T17163] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 285.796580][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.809578][T17172] loop2: detected capacity change from 0 to 512 [ 285.811852][T17174] netlink: 'syz.1.4506': attribute type 1 has an invalid length. [ 285.817284][T17169] loop6: detected capacity change from 0 to 512 [ 285.830841][T17172] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 285.861366][T17169] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 285.869047][T17174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.881913][T17172] EXT4-fs (loop2): 1 truncate cleaned up [ 285.890541][T17172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.908072][T17169] EXT4-fs (loop6): 1 truncate cleaned up [ 285.910451][T17174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.921226][T17169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.922499][T17174] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 285.947690][T17174] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 285.948917][T17169] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 285.957367][T17172] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 285.961524][T17169] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 285.968221][T17172] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 285.976334][T17169] vhci_hcd vhci_hcd.0: Device attached [ 285.983878][T17172] vhci_hcd vhci_hcd.0: Device attached [ 286.096263][T17188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.208302][T17200] loop5: detected capacity change from 0 to 512 [ 286.219018][T17200] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 286.229077][ T23] usb 13-1: new high-speed USB device number 4 using vhci_hcd [ 286.243534][ T7013] usb 5-1: new high-speed USB device number 16 using vhci_hcd [ 286.254408][T17200] EXT4-fs (loop5): 1 truncate cleaned up [ 286.260661][T17200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.273092][T17204] loop1: detected capacity change from 0 to 512 [ 286.303409][T17200] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 286.310181][T17200] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 286.317973][T17200] vhci_hcd vhci_hcd.0: Device attached [ 286.324859][T17204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.327910][T17210] vhci_hcd: connection closed [ 286.340373][ T31] vhci_hcd: stop threads [ 286.349570][ T31] vhci_hcd: release socket [ 286.354062][ T31] vhci_hcd: disconnect device [ 286.362545][T17204] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.4517: corrupted inode contents [ 286.374782][T17204] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.4517: mark_inode_dirty error [ 286.387290][T17204] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.4517: corrupted inode contents [ 286.400669][T17204] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.4517: mark_inode_dirty error [ 286.413621][T17204] xt_hashlimit: max too large, truncated to 1048576 [ 286.433591][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.586634][T17232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4526'. [ 286.596033][T17232] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 286.605636][T17232] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 286.616140][T17181] vhci_hcd: connection reset by peer [ 286.623230][ T31] vhci_hcd: stop threads [ 286.627695][ T31] vhci_hcd: release socket [ 286.627759][ T31] vhci_hcd: disconnect device [ 286.681303][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.724550][T17238] loop2: detected capacity change from 0 to 1024 [ 286.741453][T17182] vhci_hcd: connection reset by peer [ 286.747327][ T31] vhci_hcd: stop threads [ 286.751661][ T31] vhci_hcd: release socket [ 286.756192][ T31] vhci_hcd: disconnect device [ 286.764432][T17238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.783920][T17238] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 286.796418][T17238] EXT4-fs (loop2): This should not happen!! Data will be lost [ 286.796418][T17238] [ 286.806256][T17238] EXT4-fs (loop2): Total free blocks count 0 [ 286.812290][T17238] EXT4-fs (loop2): Free/Dirty block details [ 286.818310][T17238] EXT4-fs (loop2): free_blocks=0 [ 286.823412][T17238] EXT4-fs (loop2): dirty_blocks=0 [ 286.828523][T17238] EXT4-fs (loop2): Block reservation details [ 286.834555][T17238] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 286.858674][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.867465][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.926240][T17245] loop2: detected capacity change from 0 to 1024 [ 286.998234][T17245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.016803][T17245] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 287.029278][T17245] EXT4-fs (loop2): This should not happen!! Data will be lost [ 287.029278][T17245] [ 287.039128][T17245] EXT4-fs (loop2): Total free blocks count 0 [ 287.045152][T17245] EXT4-fs (loop2): Free/Dirty block details [ 287.051192][T17245] EXT4-fs (loop2): free_blocks=0 [ 287.056252][T17245] EXT4-fs (loop2): dirty_blocks=0 [ 287.061376][T17245] EXT4-fs (loop2): Block reservation details [ 287.067562][T17245] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 287.079919][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.107814][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.253327][T17258] loop2: detected capacity change from 0 to 8192 [ 287.271254][T17258] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.499932][T17264] lo speed is unknown, defaulting to 1000 [ 287.967021][T17273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4537'. [ 287.996122][T17270] loop2: detected capacity change from 0 to 2048 [ 288.153457][T17270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.183246][T17281] loop1: detected capacity change from 0 to 1024 [ 288.241925][T17281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.271567][T17270] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 288.324377][T17281] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 288.336814][T17281] EXT4-fs (loop1): This should not happen!! Data will be lost [ 288.336814][T17281] [ 288.346724][T17281] EXT4-fs (loop1): Total free blocks count 0 [ 288.352796][T17281] EXT4-fs (loop1): Free/Dirty block details [ 288.358829][T17281] EXT4-fs (loop1): free_blocks=0 [ 288.363832][T17281] EXT4-fs (loop1): dirty_blocks=0 [ 288.368931][T17281] EXT4-fs (loop1): Block reservation details [ 288.375017][T17281] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 288.383075][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.436416][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.467595][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 288.467615][ T29] audit: type=1326 audit(524575.484:12161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 288.571099][ T29] audit: type=1326 audit(524575.484:12162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 288.586639][T17289] lo speed is unknown, defaulting to 1000 [ 288.594540][ T29] audit: type=1326 audit(524575.484:12163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 288.623596][ T29] audit: type=1326 audit(524575.484:12164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 288.647008][ T29] audit: type=1326 audit(524575.484:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 288.670572][ T29] audit: type=1326 audit(524575.484:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 288.694009][ T29] audit: type=1326 audit(524575.484:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 288.717444][ T29] audit: type=1326 audit(524575.484:12168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 288.741277][ T29] audit: type=1326 audit(524575.484:12169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 288.764680][ T29] audit: type=1326 audit(524575.484:12170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17296 comm="syz.1.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3c08e9a9 code=0x7ffc0000 [ 289.015837][T17283] lo speed is unknown, defaulting to 1000 [ 289.143790][T17318] lo speed is unknown, defaulting to 1000 [ 289.513577][T17325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.526775][T17301] lo speed is unknown, defaulting to 1000 [ 289.559484][T17295] lo speed is unknown, defaulting to 1000 [ 289.666578][T17338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 289.673522][T17338] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 289.681357][T17338] vhci_hcd vhci_hcd.0: Device attached [ 289.705646][T17339] vhci_hcd: connection closed [ 289.712490][ T31] vhci_hcd: stop threads [ 289.721713][ T31] vhci_hcd: release socket [ 289.726203][ T31] vhci_hcd: disconnect device [ 289.729236][T17344] loop2: detected capacity change from 0 to 1024 [ 289.739461][T17344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.760455][T17344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.828320][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4560'. [ 289.838001][T17347] netlink: 'syz.2.4560': attribute type 2 has an invalid length. [ 289.845877][T17347] netlink: 'syz.2.4560': attribute type 2 has an invalid length. [ 289.853702][T17347] netlink: 'syz.2.4560': attribute type 1 has an invalid length. [ 289.861506][T17347] netlink: 'syz.2.4560': attribute type 1 has an invalid length. [ 290.019466][T17356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4564'. [ 290.085395][ T36] vhci_hcd: vhci_device speed not set [ 290.217800][T17364] xt_hashlimit: max too large, truncated to 1048576 [ 290.243523][T17366] netlink: 'syz.1.4568': attribute type 1 has an invalid length. [ 290.256821][T17366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.270161][T17366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 290.277471][T17366] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 290.291060][T17366] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 290.320201][T17370] ip6erspan0: entered promiscuous mode [ 290.328436][T17370] bond4: (slave ip6erspan0): making interface the new active one [ 290.336632][T17370] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 290.583638][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.655124][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 290.676687][T17389] loop2: detected capacity change from 0 to 512 [ 290.685355][T17389] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 290.696761][T17389] EXT4-fs (loop2): 1 truncate cleaned up [ 290.703328][T17389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.721963][T17389] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 290.728721][T17389] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 290.736486][T17389] vhci_hcd vhci_hcd.0: Device attached [ 290.828348][T17369] lo speed is unknown, defaulting to 1000 [ 291.172402][T17415] loop5: detected capacity change from 0 to 1024 [ 291.190154][T17415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.195056][T17413] xt_hashlimit: max too large, truncated to 1048576 [ 291.231777][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.243965][T17419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4589'. [ 291.267947][T17421] netlink: 'syz.5.4590': attribute type 1 has an invalid length. [ 291.283788][T17421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.335736][T17428] netlink: 'syz.6.4592': attribute type 1 has an invalid length. [ 291.337700][T17421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.351282][T17421] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 291.363412][T17421] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 291.368766][ T23] vhci_hcd: vhci_device speed not set [ 291.380170][T17391] vhci_hcd: connection reset by peer [ 291.385722][T15186] vhci_hcd: stop threads [ 291.390251][T15186] vhci_hcd: release socket [ 291.394768][T15186] vhci_hcd: disconnect device [ 291.407294][T17428] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.419376][T17433] ip6erspan0: entered promiscuous mode [ 291.432791][T17434] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.440180][T17434] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 291.452495][T17434] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 291.468992][ T7013] vhci_hcd: vhci_device speed not set [ 291.481013][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.513509][T17428] ip6erspan0: entered promiscuous mode [ 291.554765][T17445] loop2: detected capacity change from 0 to 1024 [ 291.585091][T17445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.601918][T17449] loop5: detected capacity change from 0 to 1024 [ 291.646564][T17456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4602'. [ 291.658958][T17461] netlink: 'syz.6.4605': attribute type 1 has an invalid length. [ 291.688275][T17461] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.699448][T17449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.737009][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4607'. [ 291.754930][T17472] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.762185][T17472] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 291.777501][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.789836][T17472] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 291.816011][T17476] netlink: 'syz.5.4608': attribute type 1 has an invalid length. [ 291.843748][T11908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.859220][T17476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.901176][T17479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.908760][T17479] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 291.921359][T17479] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 291.957824][T17482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.975866][T17484] x_tables: duplicate underflow at hook 3 [ 292.036568][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4614'. [ 292.038301][T17490] loop5: detected capacity change from 0 to 1024 [ 292.053064][T17490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.084011][T17490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.120219][T17490] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.4613: Abort forced by user [ 292.134471][T17490] EXT4-fs (loop5): Remounting filesystem read-only [ 292.141154][T17490] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 292.172975][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.182736][T17499] loop6: detected capacity change from 0 to 1024 [ 292.208643][T17499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.256446][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.325036][T17509] loop5: detected capacity change from 0 to 2048 [ 292.351270][T17509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.365805][T17509] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 292.402511][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.639800][T17466] lo speed is unknown, defaulting to 1000 [ 292.671841][T17525] netlink: 'syz.0.4627': attribute type 10 has an invalid length. [ 292.684048][T17525] ipvlan0: entered allmulticast mode [ 292.689551][T17525] veth0_vlan: entered allmulticast mode [ 292.705229][T17525] team0: Device ipvlan0 failed to register rx_handler [ 293.005930][T17551] loop1: detected capacity change from 0 to 1024 [ 293.048114][T17551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.131568][T17551] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 293.144190][T17551] EXT4-fs (loop1): This should not happen!! Data will be lost [ 293.144190][T17551] [ 293.153890][T17551] EXT4-fs (loop1): Total free blocks count 0 [ 293.159903][T17551] EXT4-fs (loop1): Free/Dirty block details [ 293.165916][T17551] EXT4-fs (loop1): free_blocks=0 [ 293.170890][T17551] EXT4-fs (loop1): dirty_blocks=0 [ 293.176098][T17551] EXT4-fs (loop1): Block reservation details [ 293.182257][T17551] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 293.265100][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.318729][T17569] loop1: detected capacity change from 0 to 1024 [ 293.354365][T17569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.372073][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4646'. [ 293.399389][T17518] lo speed is unknown, defaulting to 1000 [ 293.421710][T17579] FAULT_INJECTION: forcing a failure. [ 293.421710][T17579] name failslab, interval 1, probability 0, space 0, times 0 [ 293.434485][T17579] CPU: 1 UID: 0 PID: 17579 Comm: syz.0.4648 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 293.434515][T17579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.434527][T17579] Call Trace: [ 293.434556][T17579] [ 293.434562][T17579] __dump_stack+0x1d/0x30 [ 293.434587][T17579] dump_stack_lvl+0xe8/0x140 [ 293.434627][T17579] dump_stack+0x15/0x1b [ 293.434643][T17579] should_fail_ex+0x265/0x280 [ 293.434728][T17579] should_failslab+0x8c/0xb0 [ 293.434789][T17579] kmem_cache_alloc_noprof+0x50/0x310 [ 293.434821][T17579] ? security_inode_alloc+0x37/0x100 [ 293.434851][T17579] security_inode_alloc+0x37/0x100 [ 293.434942][T17579] inode_init_always_gfp+0x4b7/0x500 [ 293.434983][T17579] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 293.435022][T17579] alloc_inode+0x58/0x170 [ 293.435066][T17579] new_inode+0x1d/0xe0 [ 293.435163][T17579] shmem_get_inode+0x244/0x750 [ 293.435197][T17579] __shmem_file_setup+0x113/0x210 [ 293.435229][T17579] shmem_file_setup+0x3b/0x50 [ 293.435265][T17579] __se_sys_memfd_create+0x2c3/0x590 [ 293.435322][T17579] __x64_sys_memfd_create+0x31/0x40 [ 293.435355][T17579] x64_sys_call+0x122f/0x2fb0 [ 293.435379][T17579] do_syscall_64+0xd2/0x200 [ 293.435403][T17579] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 293.435442][T17579] ? clear_bhb_loop+0x40/0x90 [ 293.435501][T17579] ? clear_bhb_loop+0x40/0x90 [ 293.435523][T17579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.435550][T17579] RIP: 0033:0x7f3d472ee9a9 [ 293.435571][T17579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.435594][T17579] RSP: 002b:00007f3d4594ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 293.435618][T17579] RAX: ffffffffffffffda RBX: 0000000000000518 RCX: 00007f3d472ee9a9 [ 293.435635][T17579] RDX: 00007f3d4594eef0 RSI: 0000000000000000 RDI: 00007f3d473716fc [ 293.435651][T17579] RBP: 0000200000000680 R08: 00007f3d4594ebb7 R09: 00007f3d4594ee40 [ 293.435745][T17579] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 293.435757][T17579] R13: 00007f3d4594eef0 R14: 00007f3d4594eeb0 R15: 0000200000000240 [ 293.435775][T17579] [ 293.462961][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4647'. [ 293.559533][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.590987][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 293.591007][ T29] audit: type=1400 audit(524580.601:12511): avc: denied { read } for pid=17552 comm="syz.2.4639" path="socket:[55727]" dev="sockfs" ino=55727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.769389][ T29] audit: type=1400 audit(524580.711:12512): avc: denied { create } for pid=17584 comm="syz.5.4651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 293.789849][ T29] audit: type=1400 audit(524580.711:12513): avc: denied { write } for pid=17552 comm="syz.2.4639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.809170][ T29] audit: type=1400 audit(524580.750:12514): avc: denied { read } for pid=17584 comm="syz.5.4651" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 293.832682][ T29] audit: type=1400 audit(524580.750:12515): avc: denied { open } for pid=17584 comm="syz.5.4651" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 293.856466][ T29] audit: type=1400 audit(524580.750:12516): avc: denied { ioctl } for pid=17584 comm="syz.5.4651" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 293.900931][ T29] audit: type=1326 audit(524580.900:12517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 293.924475][ T29] audit: type=1326 audit(524580.900:12518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 293.948023][ T29] audit: type=1326 audit(524580.900:12519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 294.056466][ T29] audit: type=1326 audit(524580.900:12520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17590 comm="syz.0.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d472ee9a9 code=0x7ffc0000 [ 294.095467][T17608] x_tables: duplicate underflow at hook 3 [ 294.162631][T17611] netlink: 'syz.5.4658': attribute type 1 has an invalid length. [ 294.202298][T17611] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.230028][T17617] loop2: detected capacity change from 0 to 128 [ 294.241964][T17611] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.250306][T17617] vfat: Unknown parameter 'eíõjŸ[¿sM<¬oMýÉkma¢­ÃJ¥Î Çì³äF¤]_o?Õ]#Uó¦&—Ük(j ÉB(L"äh¦”~' [ 294.261844][T17611] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.301733][T17611] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 294.624075][T17631] loop1: detected capacity change from 0 to 1024 [ 294.639024][T17633] loop5: detected capacity change from 0 to 1024 [ 294.669933][T17631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.683163][T17591] lo speed is unknown, defaulting to 1000 [ 294.718578][T17633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.795503][T17641] x_tables: duplicate underflow at hook 3 [ 294.808232][T11600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.827382][T14232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.933062][T17655] loop6: detected capacity change from 0 to 512 [ 294.959136][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4676'. [ 294.974150][T17655] EXT4-fs (loop6): 1 truncate cleaned up [ 294.983626][T17655] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.062828][T17655] EXT4-fs error (device loop6): __ext4_iget:5379: inode #12: block 2: comm syz.6.4675: invalid block [ 295.100140][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4671'. [ 295.131759][T17663] pim6reg1: entered promiscuous mode [ 295.252384][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4671'. [ 295.264333][T14246] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.264313][T17674] loop1: detected capacity change from 0 to 1024 [ 295.352310][T17676] loop6: detected capacity change from 0 to 2048 [ 295.422548][T17676] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 295.467399][T11600] ================================================================== [ 295.475583][T11600] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 295.483187][T11600] [ 295.485541][T11600] read-write to 0xffff888237c25e68 of 1 bytes by task 17672 on cpu 0: [ 295.493727][T11600] folio_add_lru+0xa5/0x1f0 [ 295.498286][T11600] shmem_get_folio_gfp+0x7ab/0xd60 [ 295.503445][T11600] shmem_fallocate+0x57c/0x840 [ 295.508330][T11600] vfs_fallocate+0x413/0x450 [ 295.513044][T11600] __x64_sys_fallocate+0x7a/0xd0 [ 295.518017][T11600] x64_sys_call+0x2b88/0x2fb0 [ 295.522733][T11600] do_syscall_64+0xd2/0x200 [ 295.527268][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.533285][T11600] [ 295.535634][T11600] read to 0xffff888237c25e68 of 1 bytes by task 11600 on cpu 1: [ 295.543382][T11600] __lru_add_drain_all+0x12b/0x3f0 [ 295.548546][T11600] lru_add_drain_all+0x10/0x20 [ 295.553370][T11600] invalidate_bdev+0x47/0x70 [ 295.558002][T11600] ext4_put_super+0x624/0x7d0 [ 295.562723][T11600] generic_shutdown_super+0xe6/0x210 [ 295.568043][T11600] kill_block_super+0x2a/0x70 [ 295.572763][T11600] ext4_kill_sb+0x42/0x80 [ 295.577128][T11600] deactivate_locked_super+0x75/0x1c0 [ 295.582543][T11600] deactivate_super+0x97/0xa0 [ 295.587263][T11600] cleanup_mnt+0x269/0x2e0 [ 295.591714][T11600] __cleanup_mnt+0x19/0x20 [ 295.596165][T11600] task_work_run+0x131/0x1a0 [ 295.600877][T11600] exit_to_user_mode_loop+0xe4/0x100 [ 295.606303][T11600] do_syscall_64+0x1d6/0x200 [ 295.610944][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.616884][T11600] [ 295.619230][T11600] value changed: 0x13 -> 0x16 [ 295.623928][T11600] [ 295.626265][T11600] Reported by Kernel Concurrency Sanitizer on: [ 295.632440][T11600] CPU: 1 UID: 0 PID: 11600 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 295.645243][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.655419][T11600] ================================================================== [ 295.814927][T17652] lo speed is unknown, defaulting to 1000 [ 295.878369][T17683] x_tables: duplicate underflow at hook 3