last executing test programs: 1m31.286077704s ago: executing program 3 (id=97): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7098}, 0x18) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="9454b83847a5c639dccc1cc3aa288229ee8a8a45ab78b6638fd2636c7547f7afcc1711878b54b4a8bc9eda3358a5cafd58dbb8a9f638354fbf2e6ab22b8558896f959a8579d9a05c6dde4a9dcc1779d407440e34d6e555f793ec7c2979d1f4b82e4122ce3f815e2e5322b7e74e3439af393c3adad4bab28934e91efd14ebc482d56ce8cedb094afc27d5c1e6cc050411de76f5731640796ba1e233fa6da1bb14cd30662898a0595bf34af8eebc3d12716e62ae66fbb6cf070bef47415d593769c361fc054ea962c9d09ed46aecba2af20e0a40204d4d795d019895bc0d52d8cc032ee13ae832fb1f989b70ab35596dfe28c239d45c99016cadd05b87af7bd13d37c5efae45046d0e5f9860e35c2f08ef9f67c80c47b870e353c089bab87b74c588183c64b20b7ccbdb068390e4c59a848d9695f46fc8bdbde97a4400f2e8b7379a62c57fd4ef8bd4f8e3a4bf141e87156efc1b86e15f34591489db7112fcae399f83f9e4ee56a923ea3123b3fbff37ccdf92284137a1500cad979bc0331524168b5f1a5da3e2d6643b6b0f28eb15869ba7f609c4fc9e4aecca1183de7b6427e7564714ffe154c2e4db0042ada0561c58a4003191033a4fdbf0d09c9c49e802e325da5bc2bcbe5b7a64c411a780ae8d0902118894f5f63fe989623f25a7e201e135e8f25b5365c3a615a4727144109cc4b88660728445ce841940d20e87069cb74f63fbfb5dd7992dc4ccde1484aeec05630a440ed9481d03267585eed156484d23b07280cc045ff023abd628d43f7d3b7bc5a9e8e6445f94271d508e5bb17b12216dba8a5f1a02aef9126389dcf725197440404b29b95e71d45b9dad8f3fdf1c6a2734632ca7991026304d869a94259cc32ac8a45da5ba38f54e9d98faf2af04e3f11ab495eb490daa88cbf465fe127cf144081196d8319692a51d3bae449ff531427c829d9cfab8cb15ae4ff6f4392e2c657beae5364b55d05729bc7f950e4b99c7ce71136168a3fda8b7ead182973c1f5fb52f7c6f488f6383c1259345306375ebe0639e40f367be4a480c2babf3e0572a5c089cccd06588489fdf12ff256af41faef912dea1c1cf122e8e4b99770b19fdc9f6b12cdfa51d0b0d3b6dbc18af665f0f92b83b12eda1fae071a9fb49575763d1bfce45616089b868e37bad0c806a5cff911ae163f82f98c885e7c9afa4d55a4117246086b07e55991205ad345dde63ef855097c7be09343ff9dd982e7e8332337c1b9c8aedd1afeb06010e59aeb5008f7bb0d971963f79df825d94773c9b79e6897c53a83388ef89bddd1d35addfb6c3dc0121ac2a7936643159365a0ef14dc95de2d1f60f41a687c04ba42ed9b225496a418e593587f40a25bbb761eeddc2080512646d163a9968ea00f599239b3abd581253d383fb72abad3b19e0d85a7eafdc02e92cbe784129c37152934a286c2a3d5c5eb1ac65caf63f352e58c96a26b0b13462b992926bae78774d7d9de575bf86b50da743692fb38ee9fbc51ac0eff40589f7259b50e1208753abdd7e404abe252592ec7605fb2aacf41771c506cbcf84d7e8657d3801a64f8b8480ff07", 0x461}], 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 1m31.285002355s ago: executing program 3 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@nobh}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = socket$tipc(0x1e, 0x5, 0x0) listen(r6, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c72666eb80000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)={0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r9, 0xe0, 0xfffffffffffffffe}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003180)={0x0, r7, "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", "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x100000, 0x1000, 0x6, 0x1}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r12], 0x68}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r11, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file0\x00'}) 1m31.103289843s ago: executing program 3 (id=102): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x363942, 0x25) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="9b5c69d23da2dda22be5bab7f7fe626ce8f6169051224b53acd52bc02a73dea6954aa343669a5d72c5d0a013523ce42d0800a7d50086586facbf1866b9895e858da5656b209494ea4be1af22deefeab1350163cda7b00ccc1cae78c04d2074a4a1cdc5c3c7e84b553fbf5a850393feedb050031e17665620aca621e37b02c6584f0c5a8b29f71af9620c7b551eb0bc031586c5859d3b3d1a881c4374772dc04e6879be893485706a5a9f25bee037cd57e12768d64eab285ab27430f40da3679008b616026297be2fc82460771b2b9fa8d5c068a715961aa543a39bbb9a67b0008f"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="00000000000000000000000000000000000000000000000079000011fa00800aec2fd3433ce6dd50da98d3c9a1493b1f2b82193e309318e4074b2630498b8e9286c3e1955dcf6ccb8d55215506e5638d04b8aed1115d0f678ffc002c9e011e34b4e296ad8273cefbac9b1a874d710550fe20005b5483bc3e3e499591cb0356af"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000071a5b02fc76c23b7559afd9738a4759dfe24730500000024c56cb7976329ac42990c167b6900bb660d3189e165c4553a5f7aa5e2aca43b8d3737b50614c362b93bb696a41bb2539108967056d0de7a68fc3e48427b5310ca678208798665555fe2819ff5eecb7b0d1a428b18546e6f811766550b3d2fb2e5b355c080a950", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1m30.712836341s ago: executing program 3 (id=110): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x84, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x12}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x84}}, 0x804) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)}, {0x0}], 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r5, 0x8, 0xffffffffffffffff) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x7a47f62a, 0x7fffffff, 0x1, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000ac0)={0x9, 0x0, 0x0, 'queue0\x00', 0x62ff3ba6}) close(r6) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000680)=0x5, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 1m30.280634284s ago: executing program 3 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x4002, &(0x7f0000000600)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x214, &(0x7f0000000840)="$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") 1m30.01982435s ago: executing program 3 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) r4 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000340)=""/245, 0xf5}], 0x1, 0x404, 0xc) 1m30.01927726s ago: executing program 32 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) r4 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000340)=""/245, 0xf5}], 0x1, 0x404, 0xc) 2.495382484s ago: executing program 2 (id=1161): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = socket$tipc(0x1e, 0x5, 0x0) listen(r6, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c72666eb80000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, 0xfffffffffffffffe}, 0x10) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16=r8, @ANYRESDEC=r9, @ANYRESHEX=r10, @ANYRES8=r11, @ANYRES32=r8, @ANYRES8=r7, @ANYRES64=r7, @ANYRES8=0x0, @ANYRES64, @ANYRES8=r10], 0x0, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003180)={0x0, r7, "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", "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x100000, 0x1000, 0x6, 0x1}, 0x20) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r14], 0x68}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file0\x00'}) 2.385855945s ago: executing program 5 (id=1166): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000001b518190000f0438d341895", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r8 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r9, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r9, r0, 0x0, 0x3ffff) sendfile(r9, r0, 0x0, 0x7ffffffffffffffd) 2.352281238s ago: executing program 2 (id=1168): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0xe, 0x0, 0x4, 0x80000001, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x10, 0x7, 0x3a3, 0x3}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) 2.318976482s ago: executing program 2 (id=1169): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000001b518190000f0438d341895", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r5, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r5, r0, 0x0, 0x3ffff) sendfile(r5, r0, 0x0, 0x7ffffffffffffffd) 1.650498638s ago: executing program 2 (id=1174): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b0b1c000000000001090224"], 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[], 0x70}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40c4) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = memfd_create(0x0, 0x3) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x17c1, 0x2000, [0x2], [0x3, 0x7]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_misc(r4, &(0x7f0000000740), 0xff67) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000fc0)={0x0, "d3e50b6d2ed943907a058a0a6f71d5a2"}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000), 0xfffb) fcntl$addseals(r4, 0x409, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/233, 0xe9}], 0x3}, 0x9}], 0x1, 0x2060, &(0x7f0000000900)) lseek(r4, 0x100000, 0x3) syz_usb_control_io(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x11}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8006, 0x8c}, 0x0) 1.51776352s ago: executing program 0 (id=1175): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) 1.403207902s ago: executing program 0 (id=1178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = socket$tipc(0x1e, 0x5, 0x0) listen(r6, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c72666eb80000", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, 0xfffffffffffffffe}, 0x10) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16=r8, @ANYRESDEC=r9, @ANYRESHEX=r10, @ANYRES8=r11, @ANYRES32=r8, @ANYRES8=r7, @ANYRES64=r7, @ANYRES8=0x0, @ANYRES64, @ANYRES8=r10], 0x0, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003180)={0x0, r7, "97b923b9b0fef8c53726161a87c9c813fc1a0c0439084f029dfead614d3e9f0540f7f376a90cb69b8d353bbb26ee4ca9db6b62c95ab387388c596d079712a0f2de12fe4c832cc8c239524f21fdea039fc5099ad30d48e561e80b0e601a5f2f2f399762dea0da38139d85dcfee29c7936758761dbbab00302441c83f9841fd8b89424630d8ac77c61a1bc51a1e279bbcf7539caab00a7af25b7304e709da8f2ec34b09b931b5bd44978bd32dcfe50abfcfd6a57380ef32a98efbe3d2e0b0673e09143b4b447f6556e745d27c8cea39aa43f37f4747dd1346c1996ec695dc3893897fd963981bf7b5273d6aca21c23a567dde974309e3c919095387dd8226be604", "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x100000, 0x1000, 0x6, 0x1}, 0x20) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r14], 0x68}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file0\x00'}) 1.357399167s ago: executing program 0 (id=1179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0xff}, 0x18) epoll_create1(0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xf8, 0x582, &(0x7f0000001f80)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000001050000000000000000000a0000003c0001802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) dup3(r2, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x7, 0x2000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e22, 0x4, @loopback, 0x7196}, {0xa, 0x4, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, r4, 0x9}}, 0x65) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x10007ffffffff}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r8]) 1.314041531s ago: executing program 5 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xff}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) epoll_create1(0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xf8, 0x582, &(0x7f0000001f80)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000001050000000000000000000a0000003c0001802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) dup3(r3, r2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x7, 0x2000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x3}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e22, 0x4, @loopback, 0x7196}, {0xa, 0x4, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, r5, 0x9}}, 0x65) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x10007ffffffff}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f00000000c0)=ANY=[]) 1.005968871s ago: executing program 0 (id=1182): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 805.663951ms ago: executing program 2 (id=1185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b70300000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getpriority(0x0, 0x0) 656.911445ms ago: executing program 2 (id=1186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500001a6e05970018110000e3b474b233090d4bd9a4de1bac32b271fec152f4d5987b39f8a807d40b6e149f534d057bb03dbb1979f2d10fe1979ce96188ea92f32535c01e5d00eb005512c0c4a6ebaf6e98e22b08b87e0fa08d8971442f5b17442a8291dc2de2667ea8e12308", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000030101010000000000000000020000000c001980080002000d08000044000280140001800800010000000000080002007f0000010c000280050001003a0000000c00029bd4e74eb23c63"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) r5 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 560.293715ms ago: executing program 5 (id=1187): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) syz_read_part_table(0x59a, &(0x7f0000000b80)="$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") 489.091782ms ago: executing program 0 (id=1190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) syz_read_part_table(0x59a, &(0x7f0000000b80)="$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") 456.357495ms ago: executing program 4 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x6266, &(0x7f00000001c0)={0x0, 0xca2, 0x20, 0x3, 0x0, 0x0, r1}) 431.763908ms ago: executing program 5 (id=1192): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x363942, 0x25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="9b5c69d23da2dda22be5bab7f7fe626ce8f6169051224b53acd52bc02a73dea6954aa343669a5d72c5d0a013523ce42d0800a7d50086586facbf1866b9895e858da5656b209494ea4be1af22deefeab1350163cda7b00ccc1cae78c04d2074a4a1cdc5c3c7e84b553fbf5a850393feedb050031e17665620aca621e37b02c6584f0c5a8b29f71af9620c7b551eb0bc031586c5859d3b3d1a881c4374772dc04e6879be893485706a5a9f25bee037cd57e12768d64eab285ab27430f40da3679008b616026297be2fc82460771b2b9fa8d5c068a715961aa543a39bbb9a67b0008f"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="00000000000000000000000000000000000000000000000079000011fa00800aec2fd3433ce6dd50da98d3c9a1493b1f2b82193e309318e4074b2630498b8e9286c3e1955dcf6ccb8d55215506e5638d04b8aed1115d0f678ffc002c9e011e34b4e296ad8273cefbac9b1a874d710550fe20005b5483bc3e3e499591cb0356af"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000071a5b02fc76c23b7559afd9738a4759dfe24730500000024c56cb7976329ac42990c167b6900bb660d3189e165c4553a5f7aa5e2aca43b8d3737b50614c362b93bb696a41bb2539108967056d0de7a68fc3e48427b5310ca678208798665555fe2819ff5eecb7b0d1a428b18546e6f811766550b3d2fb2e5b355c080a950", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 388.949792ms ago: executing program 4 (id=1194): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x1be, 0x4) sendmmsg(r1, &(0x7f0000001fc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00') 356.058995ms ago: executing program 0 (id=1195): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r2, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mm_lru_insertion\x00'}, 0x18) 304.78152ms ago: executing program 4 (id=1196): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@nobh}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r5, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c72666eb80000", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)={0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r10, 0xe0, 0xfffffffffffffffe}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003180)={0x0, r8, "97b923b9b0fef8c53726161a87c9c813fc1a0c0439084f029dfead614d3e9f0540f7f376a90cb69b8d353bbb26ee4ca9db6b62c95ab387388c596d079712a0f2de12fe4c832cc8c239524f21fdea039fc5099ad30d48e561e80b0e601a5f2f2f399762dea0da38139d85dcfee29c7936758761dbbab00302441c83f9841fd8b89424630d8ac77c61a1bc51a1e279bbcf7539caab00a7af25b7304e709da8f2ec34b09b931b5bd44978bd32dcfe50abfcfd6a57380ef32a98efbe3d2e0b0673e09143b4b447f6556e745d27c8cea39aa43f37f4747dd1346c1996ec695dc3893897fd963981bf7b5273d6aca21c23a567dde974309e3c919095387dd8226be604", "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x100000, 0x1000, 0x6, 0x1}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r13], 0x68}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file0\x00'}) 304.50414ms ago: executing program 1 (id=1197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) readv(r2, 0x0, 0x0) 290.860102ms ago: executing program 5 (id=1198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xff}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) epoll_create1(0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xf8, 0x582, &(0x7f0000001f80)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000001050000000000000000000a0000003c0001802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) dup3(r3, r2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x7, 0x2000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x3}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e22, 0x4, @loopback, 0x7196}, {0xa, 0x4, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, r5, 0x9}}, 0x65) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x10007ffffffff}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f00000000c0)=ANY=[]) 289.492152ms ago: executing program 1 (id=1199): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) io_uring_setup(0x6266, &(0x7f00000001c0)={0x0, 0xca2, 0x20, 0x3}) 240.825827ms ago: executing program 1 (id=1200): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 221.365659ms ago: executing program 4 (id=1201): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 182.539302ms ago: executing program 1 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000840)=ANY=[]) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x40000) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r6, 0x209}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 113.3303ms ago: executing program 1 (id=1203): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) syz_read_part_table(0x59a, &(0x7f0000000b80)="$eJzs0r9La2cYB/A3B26z9BK5XLiDHQSDU1SIgw7JIBJDFiNixcFZcNBBcHCQSHT2xz+g+AvERdwzihFEIU6SUZwLikumlNZTKE6VotLy+SyH93mecx5evifwnxaF39rtdiKE0E6+/e1fTwqjpa7x4YnJEBJhJoRQ+OXnPzuJeOKvr57F53J8LiWzjb2rkaeTjuvu23r6IIr7tSiE1RDC/P1h6t/ejf+/0/xFam19sbixnJ+7K648DMz2Fjo3Cwvbg/u5ytSP3HT8Y9Wij9mfbgwd3bTLjztf+77UG63sZTyXSbzPfj7X6/x3v1eb1dZYz/FSf+Zb87yyFef+LH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCdneYvUmvri8WN5fzcXXHlYWC2t9C5WVjYHtzPVaZ+5Kajl7la9DH7042ho5t2+XHna9+XeqOVvYznMon32c/nep3/7vdqs9oa6zle6s98a55XtuLcn+UPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxDhdFS1/jwxGQIiTATQhiJOg7/qLeTL/1EPHcWP8txvZTMNvauRp5OOq67b+vpg/G4XotCWA0hzN8fpv6+5/anj7oRb/F7AAAA//9TtIgj") 78.087442ms ago: executing program 5 (id=1204): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000001b518190000f0438d341895", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r5, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r5, r0, 0x0, 0x3ffff) sendfile(r5, r0, 0x0, 0x7ffffffffffffffd) 67.357654ms ago: executing program 4 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x6266, &(0x7f00000001c0)={0x0, 0xca2, 0x20, 0x3, 0x0, 0x0, r1}) 37.236037ms ago: executing program 4 (id=1206): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) syz_read_part_table(0x59a, &(0x7f0000000b80)="$eJzs0r9La2cYB/A3B26z9BK5XLiDHQSDU1SIgw7JIBJDFiNixcFZcNBBcHCQSHT2xz+g+AvERdwzihFEIU6SUZwLikumlNZTKE6VotLy+SyH93mecx5evifwnxaF39rtdiKE0E6+/e1fTwqjpa7x4YnJEBJhJoRQ+OXnPzuJeOKvr57F53J8LiWzjb2rkaeTjuvu23r6IIr7tSiE1RDC/P1h6t/ejf+/0/xFam19sbixnJ+7K648DMz2Fjo3Cwvbg/u5ytSP3HT8Y9Wij9mfbgwd3bTLjztf+77UG63sZTyXSbzPfj7X6/x3v1eb1dZYz/FSf+Zb87yyFef+LH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCdneYvUmvri8WN5fzcXXHlYWC2t9C5WVjYHtzPVaZ+5Kajl7la9DH7042ho5t2+XHna9+XeqOVvYznMon32c/nep3/7vdqs9oa6zle6s98a55XtuLcn+UPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxDhdFS1/jwxGQIiTATQhiJOg7/qLeTL/1EPHcWP8txvZTMNvauRp5OOq67b+vpg/G4XotCWA0hzN8fpv6+5/anj7oRb/F7AAAA//9TtIgj") 0s ago: executing program 1 (id=1207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000001380)={0x4c6854a9fb47281d, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x40}, &(0x7f0000000280)=""/83, 0x53, &(0x7f0000000380)=""/4096, &(0x7f0000000180)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES16=r2], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket(0x2c, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) r6 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000001500)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = socket$key(0xf, 0x3, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) unshare(0x62040200) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x18c, 0x203, 0x1b8, 0x19030000, 0x2a8, 0x2e0, 0x2e0, 0x2a8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x170, 0x1b8, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0x0, 0xf9d3f6f97fa296be, 0xffffffff], @ipv4=@private=0xa010101, [0x0, 0xff000000, 0x0, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}, [0x0, 0xff000000, 0xff000000, 0xff000000], @ipv4=@loopback, [0x0, 0xff000000, 0xffffffff, 0xff000000], 0x9, 0x9, 0x6, 0x4e24, 0x4e24, 0x4e22, 0x4e20, 0x2000, 0xaa9}, 0x181, 0x13, 0x4e22, 0x4e21, 0x4e23, 0x4e22}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, 'tunl0\x00', {0x40}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001400)='ext4_begin_ordered_truncate\x00', r8, 0x0, 0x3}, 0x18) sendmsg$key(r7, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4) sendmsg$inet(r14, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) kernel console output (not intermixed with test programs): YSCALL_64_after_hwframe+0x77/0x7f [ 98.351519][ T5748] RIP: 0033:0x7fd7e4a7efc9 [ 98.351534][ T5748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.351591][ T5748] RSP: 002b:00007fd7e34dee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 98.351607][ T5748] RAX: ffffffffffffffda RBX: 000000000000060a RCX: 00007fd7e4a7efc9 [ 98.351617][ T5748] RDX: 00007fd7e34deef0 RSI: 0000000000000000 RDI: 00007fd7e4b02960 [ 98.351628][ T5748] RBP: 0000200000000600 R08: 00007fd7e34debb7 R09: 00007fd7e34dee40 [ 98.351639][ T5748] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 98.351652][ T5748] R13: 00007fd7e34deef0 R14: 00007fd7e34deeb0 R15: 0000200000001340 [ 98.351724][ T5748] [ 98.555060][ T4920] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.578909][ T5746] syz.0.691: attempt to access beyond end of device [ 98.578909][ T5746] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 98.592290][ T5746] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 98.601157][ T5745] syz.0.691: attempt to access beyond end of device [ 98.601157][ T5745] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 98.614549][ T5745] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 98.623838][ T5745] syz.0.691: attempt to access beyond end of device [ 98.623838][ T5745] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 98.637279][ T5745] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 98.664050][ T5754] loop1: detected capacity change from 0 to 2048 [ 98.693344][ T5758] loop0: detected capacity change from 0 to 128 [ 98.734567][ T3518] loop1: p2 p3 p7 [ 98.769226][ T5754] loop1: p2 p3 p7 [ 98.846403][ T5766] __nla_validate_parse: 12 callbacks suppressed [ 98.846420][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 98.861687][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 98.873356][ T5773] netlink: 'syz.5.699': attribute type 10 has an invalid length. [ 98.881189][ T5773] netlink: 40 bytes leftover after parsing attributes in process `syz.5.699'. [ 98.918139][ T5763] bond1: entered promiscuous mode [ 98.923759][ T5763] bond1: entered allmulticast mode [ 98.931316][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 98.936831][ T5763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.990399][ T5763] bond1 (unregistering): Released all slaves [ 99.038992][ T5773] team0: Port device geneve1 added [ 99.079697][ T5775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.119368][ T5769] syz.0.698: attempt to access beyond end of device [ 99.119368][ T5769] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 99.132729][ T5769] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 99.143841][ T5769] syz.0.698: attempt to access beyond end of device [ 99.143841][ T5769] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 99.157239][ T5769] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 99.330610][ T5793] loop2: detected capacity change from 0 to 1024 [ 99.337653][ T5793] EXT4-fs: Ignoring removed orlov option [ 99.358821][ T5793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.707'. [ 99.373605][ T5793] program syz.2.707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.405538][ T5802] loop0: detected capacity change from 0 to 2048 [ 99.415997][ T5804] loop2: detected capacity change from 0 to 128 [ 99.456168][ T5802] loop0: p1 < > p3 p4 < > [ 99.460594][ T5802] loop0: partition table partially beyond EOD, truncated [ 99.468003][ T5802] loop0: p1 start 8388352 is beyond EOD, truncated [ 99.474536][ T5802] loop0: p3 size 16777216 extends beyond EOD, truncated [ 99.660973][ T5805] syz.2.709: attempt to access beyond end of device [ 99.660973][ T5805] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 99.674911][ T5805] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 99.684239][ T5804] syz.2.709: attempt to access beyond end of device [ 99.684239][ T5804] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 99.697601][ T5804] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 99.813942][ T5812] loop1: detected capacity change from 0 to 1024 [ 99.820792][ T5812] EXT4-fs: Ignoring removed orlov option [ 99.858511][ T5812] EXT4-fs mount: 65 callbacks suppressed [ 99.858528][ T5812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.995141][ T3919] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 100.218487][ T5819] loop4: detected capacity change from 0 to 512 [ 100.236435][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.308682][ T5819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.323137][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.332925][ T5819] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.354519][ T5823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.456504][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.499611][ T5829] loop4: detected capacity change from 0 to 2048 [ 100.538574][ T3519] loop4: p2 p3 p7 [ 100.550882][ T5829] loop4: p2 p3 p7 [ 100.599182][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.708396][ T5836] loop4: detected capacity change from 0 to 512 [ 100.718948][ T5835] loop1: detected capacity change from 0 to 128 [ 100.760626][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 100.762452][ T5836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.769454][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 100.791726][ T5836] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.805231][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 100.834455][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 100.843299][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 100.949761][ T5853] 9pnet_fd: Insufficient options for proto=fd [ 100.965240][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.979245][ T5859] program syz.2.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.012678][ T5855] loop0: detected capacity change from 0 to 512 [ 101.067926][ T5855] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.728: couldn't read orphan inode 26 (err -116) [ 101.068562][ T5855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.068615][ T5855] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.203617][ T5875] loop4: detected capacity change from 0 to 2048 [ 101.248706][ T5875] loop4: p2 p3 p7 [ 101.297178][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.306111][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.317089][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.343158][ T5879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.369482][ T5885] loop0: detected capacity change from 0 to 128 [ 101.434305][ T5889] loop5: detected capacity change from 0 to 512 [ 101.450973][ T5889] EXT4-fs: Mount option(s) incompatible with ext2 [ 101.499157][ T3519] udevd[3519]: symlink '../../loop5' '/dev/disk/by-diskseq/553.tmp-b7:5' failed: Read-only file system [ 101.518924][ T5892] 9pnet_fd: Insufficient options for proto=fd [ 101.549495][ T3519] udevd[3519]: symlink '../../loop5' '/dev/disk/by-diskseq/553.tmp-b7:5' failed: Read-only file system [ 101.619853][ T3520] udevd[3520]: symlink '../../loop1' '/dev/disk/by-diskseq/544.tmp-b7:1' failed: Read-only file system [ 101.675402][ T3519] udevd[3519]: symlink '../../loop1' '/dev/disk/by-diskseq/544.tmp-b7:1' failed: Read-only file system [ 101.699305][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 101.699398][ T29] audit: type=1400 audit(1760745955.231:4022): avc: denied { create } for pid=5900 comm="syz.1.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.774711][ T29] audit: type=1400 audit(1760745955.281:4023): avc: denied { setopt } for pid=5900 comm="syz.1.746" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.849549][ T3519] udevd[3519]: symlink '../../loop1' '/dev/disk/by-diskseq/544.tmp-b7:1' failed: Read-only file system [ 102.040561][ T3519] udevd[3519]: symlink '../../loop2' '/dev/disk/by-diskseq/535.tmp-b7:2' failed: Read-only file system [ 102.087003][ T29] audit: type=1326 audit(1760745955.611:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 102.091569][ T3520] udevd[3520]: symlink '../../loop4' '/dev/disk/by-diskseq/549.tmp-b7:4' failed: Read-only file system [ 102.110405][ T29] audit: type=1326 audit(1760745955.611:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 102.144770][ T29] audit: type=1326 audit(1760745955.611:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 102.145020][ T5908] loop1: detected capacity change from 0 to 2048 [ 102.168125][ T29] audit: type=1326 audit(1760745955.611:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 102.178266][ T5910] 9pnet_fd: Insufficient options for proto=fd [ 102.205029][ T29] audit: type=1326 audit(1760745955.651:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 102.222604][ T3519] udevd[3519]: symlink '../../loop1' '/dev/disk/by-diskseq/554.tmp-b7:1' failed: Read-only file system [ 102.228715][ T29] audit: type=1326 audit(1760745955.651:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 102.263127][ T29] audit: type=1326 audit(1760745955.651:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 102.286530][ T29] audit: type=1326 audit(1760745955.651:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 102.313865][ T3519] udevd[3519]: symlink '../../loop4' '/dev/disk/by-diskseq/549.tmp-b7:4' failed: Read-only file system [ 102.332953][ T3520] udevd[3520]: symlink '../../loop0' '/dev/disk/by-diskseq/551.tmp-b7:0' failed: Read-only file system [ 102.336196][ T5917] loop0: detected capacity change from 0 to 128 [ 102.371320][ T5908] loop1: p2 p3 p7 [ 102.407908][ T5922] loop4: detected capacity change from 0 to 2048 [ 102.428524][ T5922] ext4: Unknown parameter 'appraise_type' [ 102.566090][ T5935] bond1: entered promiscuous mode [ 102.571179][ T5935] bond1: entered allmulticast mode [ 102.584764][ T5935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.594666][ T5939] loop4: detected capacity change from 0 to 512 [ 102.603448][ T5935] bond1 (unregistering): Released all slaves [ 102.637208][ T5939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.650409][ T5939] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.687439][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.737295][ T5958] loop0: detected capacity change from 0 to 1024 [ 102.744117][ T5958] EXT4-fs: Ignoring removed nobh option [ 102.758260][ T5958] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 102.787947][ T5962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.799492][ T5961] loop2: detected capacity change from 0 to 1024 [ 102.806390][ T5962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.814561][ T5961] EXT4-fs: Ignoring removed orlov option [ 102.822002][ T5958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.836512][ T5958] 9pnet_fd: Insufficient options for proto=fd [ 102.858100][ T5961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.896529][ T5961] program syz.2.771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.908089][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.970175][ T5970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.980134][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.152378][ T5976] loop2: detected capacity change from 0 to 512 [ 103.207476][ T5976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.254270][ T5976] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.267608][ T5976] FAULT_INJECTION: forcing a failure. [ 103.267608][ T5976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.280764][ T5976] CPU: 0 UID: 0 PID: 5976 Comm: syz.2.773 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.280788][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.280799][ T5976] Call Trace: [ 103.280805][ T5976] [ 103.280816][ T5976] __dump_stack+0x1d/0x30 [ 103.280882][ T5976] dump_stack_lvl+0xe8/0x140 [ 103.280903][ T5976] dump_stack+0x15/0x1b [ 103.280920][ T5976] should_fail_ex+0x265/0x280 [ 103.280958][ T5976] should_fail+0xb/0x20 [ 103.281044][ T5976] should_fail_usercopy+0x1a/0x20 [ 103.281062][ T5976] strncpy_from_user+0x25/0x230 [ 103.281086][ T5976] ? kmem_cache_alloc_noprof+0x242/0x480 [ 103.281115][ T5976] ? getname_flags+0x80/0x3b0 [ 103.281171][ T5976] getname_flags+0xae/0x3b0 [ 103.281202][ T5976] __x64_sys_unlinkat+0x70/0xb0 [ 103.281317][ T5976] x64_sys_call+0x2eed/0x3000 [ 103.281343][ T5976] do_syscall_64+0xd2/0x200 [ 103.281370][ T5976] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.281400][ T5976] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.281484][ T5976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.281508][ T5976] RIP: 0033:0x7fe150b4efc9 [ 103.281525][ T5976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.281546][ T5976] RSP: 002b:00007fe14f5af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 103.281568][ T5976] RAX: ffffffffffffffda RBX: 00007fe150da5fa0 RCX: 00007fe150b4efc9 [ 103.281607][ T5976] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 103.281617][ T5976] RBP: 00007fe14f5af090 R08: 0000000000000000 R09: 0000000000000000 [ 103.281686][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.281696][ T5976] R13: 00007fe150da6038 R14: 00007fe150da5fa0 R15: 00007fffb9810e98 [ 103.281713][ T5976] [ 103.290209][ T5984] FAULT_INJECTION: forcing a failure. [ 103.290209][ T5984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.474451][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.0.777 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.474483][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.474494][ T5984] Call Trace: [ 103.474499][ T5984] [ 103.474505][ T5984] __dump_stack+0x1d/0x30 [ 103.474523][ T5984] dump_stack_lvl+0xe8/0x140 [ 103.474556][ T5984] dump_stack+0x15/0x1b [ 103.474569][ T5984] should_fail_ex+0x265/0x280 [ 103.474599][ T5984] should_fail+0xb/0x20 [ 103.474630][ T5984] should_fail_usercopy+0x1a/0x20 [ 103.474693][ T5984] _copy_from_iter+0xd2/0xe80 [ 103.474714][ T5984] ? alloc_pages_mpol+0x217/0x260 [ 103.474746][ T5984] copy_page_from_iter+0x178/0x2a0 [ 103.474786][ T5984] tun_get_user+0x679/0x26e0 [ 103.474815][ T5984] ? ref_tracker_alloc+0x1f2/0x2f0 [ 103.474938][ T5984] tun_chr_write_iter+0x15e/0x210 [ 103.474972][ T5984] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 103.475045][ T5984] vfs_write+0x52a/0x960 [ 103.475073][ T5984] ksys_write+0xda/0x1a0 [ 103.475129][ T5984] __x64_sys_write+0x40/0x50 [ 103.475165][ T5984] x64_sys_call+0x2802/0x3000 [ 103.475263][ T5984] do_syscall_64+0xd2/0x200 [ 103.475325][ T5984] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.475378][ T5984] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.475400][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.475420][ T5984] RIP: 0033:0x7fbb3c04da7f [ 103.475569][ T5984] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 103.475591][ T5984] RSP: 002b:00007fbb3aab7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.475608][ T5984] RAX: ffffffffffffffda RBX: 00007fbb3c2a5fa0 RCX: 00007fbb3c04da7f [ 103.475620][ T5984] RDX: 000000000000003e RSI: 0000200000000140 RDI: 00000000000000c8 [ 103.475635][ T5984] RBP: 00007fbb3aab7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.475693][ T5984] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 103.475705][ T5984] R13: 00007fbb3c2a6038 R14: 00007fbb3c2a5fa0 R15: 00007ffc75a0a658 [ 103.475724][ T5984] [ 103.728886][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.873236][ T5999] loop0: detected capacity change from 0 to 512 [ 103.879838][ T5999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.331517][ T6004] loop1: detected capacity change from 0 to 512 [ 104.340294][ T5999] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 104.354791][ T5999] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.781: corrupted inode contents [ 104.372157][ T5999] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.781: mark_inode_dirty error [ 104.373299][ T6004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.399488][ T5999] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.781: invalid indirect mapped block 1 (level 1) [ 104.413806][ T5999] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.781: corrupted inode contents [ 104.418591][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.436165][ T5999] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 104.441921][ T6004] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.452111][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.462853][ T5999] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.781: corrupted inode contents [ 104.480939][ T5999] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.781: mark_inode_dirty error [ 104.492104][ T5999] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 104.501267][ T5999] EXT4-fs (loop0): 1 truncate cleaned up [ 104.507423][ T5999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.657406][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.666775][ T6013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.695189][ T6015] loop5: detected capacity change from 0 to 128 [ 104.813144][ T6021] loop4: detected capacity change from 0 to 128 [ 104.991819][ T6021] syz.4.789: attempt to access beyond end of device [ 104.991819][ T6021] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.005176][ T6021] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 105.013904][ T6023] syz.4.789: attempt to access beyond end of device [ 105.013904][ T6023] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.027235][ T6023] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 105.036249][ T6023] syz.4.789: attempt to access beyond end of device [ 105.036249][ T6023] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 105.049564][ T6023] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 105.170957][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.202108][ T6028] loop1: detected capacity change from 0 to 2048 [ 105.395374][ T3519] loop1: p1 < > p3 p4 < > [ 105.399879][ T3519] loop1: partition table partially beyond EOD, truncated [ 105.441114][ T6035] __nla_validate_parse: 17 callbacks suppressed [ 105.441131][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.794'. [ 105.456422][ T6035] netlink: 20 bytes leftover after parsing attributes in process `syz.2.794'. [ 105.467103][ T3519] loop1: p1 start 8388352 is beyond EOD, truncated [ 105.473673][ T3519] loop1: p3 size 16777216 extends beyond EOD, truncated [ 105.503532][ T6028] loop1: p1 < > p3 p4 < > [ 105.508110][ T6028] loop1: partition table partially beyond EOD, truncated [ 105.619129][ T6028] loop1: p1 start 8388352 is beyond EOD, truncated [ 105.625735][ T6028] loop1: p3 size 16777216 extends beyond EOD, truncated [ 105.635445][ T6035] program syz.2.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.776239][ T6047] loop0: detected capacity change from 0 to 512 [ 105.791248][ T6049] loop5: detected capacity change from 0 to 512 [ 105.797908][ T6049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.810879][ T6049] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 105.825427][ T6049] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #11: comm syz.5.797: corrupted inode contents [ 105.838605][ T6049] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #11: comm syz.5.797: mark_inode_dirty error [ 105.851167][ T6049] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.797: invalid indirect mapped block 1 (level 1) [ 105.865473][ T6049] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #11: comm syz.5.797: corrupted inode contents [ 105.879143][ T6049] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 105.889128][ T6049] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #11: comm syz.5.797: corrupted inode contents [ 105.904122][ T6049] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm syz.5.797: mark_inode_dirty error [ 105.917333][ T6049] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 105.927589][ T6049] EXT4-fs (loop5): 1 truncate cleaned up [ 105.933632][ T6049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.032760][ T6056] loop4: detected capacity change from 0 to 128 [ 106.042706][ T6047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.126441][ T6047] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.194747][ T6059] loop2: detected capacity change from 0 to 512 [ 106.202893][ T6059] EXT4-fs: Mount option(s) incompatible with ext2 [ 106.233472][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.343420][ T6063] loop2: detected capacity change from 0 to 2048 [ 106.383754][ T6066] bond1: entered promiscuous mode [ 106.383771][ T6066] bond1: entered allmulticast mode [ 106.383929][ T6066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.387815][ T6066] bond1 (unregistering): Released all slaves [ 106.411387][ T3520] loop2: p2 p3 p7 [ 106.448427][ T6063] loop2: p2 p3 p7 [ 106.503487][ T6057] syz.4.801: attempt to access beyond end of device [ 106.503487][ T6057] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 106.516883][ T6057] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 106.517712][ T3519] udevd[3519]: symlink '../../loop2' '/dev/disk/by-diskseq/584.tmp-b7:2' failed: Read-only file system [ 106.527167][ T6056] syz.4.801: attempt to access beyond end of device [ 106.527167][ T6056] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 106.549878][ T6056] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 106.560657][ T6056] syz.4.801: attempt to access beyond end of device [ 106.560657][ T6056] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 106.574085][ T6056] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 106.587615][ T6080] netlink: 996 bytes leftover after parsing attributes in process `syz.2.808'. [ 106.603649][ T6079] SELinux: Context  is not valid (left unmapped). [ 106.655387][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 106.665934][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 106.667320][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 106.685793][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.808665][ T3519] udevd[3519]: symlink '../../loop2' '/dev/disk/by-diskseq/584.tmp-b7:2' failed: Read-only file system [ 106.889929][ T6089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.902269][ T3519] udevd[3519]: symlink '../../loop2' '/dev/disk/by-diskseq/584.tmp-b7:2' failed: Read-only file system [ 107.001396][ T3519] udevd[3519]: symlink '../../loop2' '/dev/disk/by-diskseq/586.tmp-b7:2' failed: Read-only file system [ 107.095648][ T3519] udevd[3519]: symlink '../../loop4' '/dev/disk/by-diskseq/580.tmp-b7:4' failed: Read-only file system [ 107.158889][ T3519] udevd[3519]: symlink '../../loop4' '/dev/disk/by-diskseq/580.tmp-b7:4' failed: Read-only file system [ 107.172164][ T3520] udevd[3520]: symlink '../../loop5' '/dev/disk/by-diskseq/579.tmp-b7:5' failed: Read-only file system [ 107.193177][ T5321] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.214563][ T6096] loop4: detected capacity change from 0 to 512 [ 107.228930][ T6096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.248428][ T6096] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.286239][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.313955][ T6103] loop4: detected capacity change from 0 to 2048 [ 107.324666][ T6104] loop1: detected capacity change from 0 to 1024 [ 107.331393][ T6104] EXT4-fs: Ignoring removed orlov option [ 107.353273][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.378542][ T3519] loop4: p1 < > p3 p4 < > [ 107.382997][ T3519] loop4: partition table partially beyond EOD, truncated [ 107.392648][ T3519] loop4: p1 start 8388352 is beyond EOD, truncated [ 107.399231][ T3519] loop4: p3 size 16777216 extends beyond EOD, truncated [ 107.419745][ T6103] loop4: p1 < > p3 p4 < > [ 107.424171][ T6103] loop4: partition table partially beyond EOD, truncated [ 107.431559][ T6103] loop4: p1 start 8388352 is beyond EOD, truncated [ 107.438186][ T6103] loop4: p3 size 16777216 extends beyond EOD, truncated [ 107.473053][ T6111] loop0: detected capacity change from 0 to 512 [ 107.479730][ T6111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.488529][ T6111] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 107.503008][ T6111] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.818: corrupted inode contents [ 107.516321][ T6111] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.818: mark_inode_dirty error [ 107.527865][ T6111] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.818: invalid indirect mapped block 1 (level 1) [ 107.541308][ T6111] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.818: corrupted inode contents [ 107.553299][ T6111] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 107.561925][ T6111] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.818: corrupted inode contents [ 107.573964][ T6111] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.818: mark_inode_dirty error [ 107.585375][ T6111] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 107.594495][ T6111] EXT4-fs (loop0): 1 truncate cleaned up [ 107.600529][ T6111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.933753][ T6114] loop2: detected capacity change from 0 to 2048 [ 107.968834][ T6114] loop2: p2 p3 p7 [ 108.013161][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 108.022031][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 108.030972][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 108.048486][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 108.057310][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 108.066886][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 108.094321][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 108.113655][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.158939][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 108.159034][ T29] audit: type=1400 audit(1760745961.691:4222): avc: denied { write } for pid=6121 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.272585][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.282705][ T6123] bond1: entered promiscuous mode [ 108.288356][ T6123] bond1: entered allmulticast mode [ 108.299628][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.309336][ T6123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.322024][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.412937][ T6123] bond1 (unregistering): Released all slaves [ 108.612131][ T6136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.646576][ T6140] loop4: detected capacity change from 0 to 1024 [ 108.697159][ T6140] EXT4-fs: Ignoring removed orlov option [ 108.877891][ T6140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.898742][ T6140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.821: bg 0: block 232: padding at end of block bitmap is not set [ 108.913506][ T6140] EXT4-fs (loop4): Remounting filesystem read-only [ 108.920453][ T6140] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 109.082249][ T6140] program syz.4.821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.111288][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.136446][ T29] audit: type=1326 audit(1760745962.601:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 109.159801][ T29] audit: type=1326 audit(1760745962.601:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 109.183123][ T29] audit: type=1326 audit(1760745962.601:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 109.206494][ T29] audit: type=1326 audit(1760745962.601:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 109.229834][ T29] audit: type=1326 audit(1760745962.601:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 109.253144][ T29] audit: type=1326 audit(1760745962.601:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 109.276474][ T29] audit: type=1326 audit(1760745962.601:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 109.299783][ T29] audit: type=1326 audit(1760745962.601:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 109.323122][ T29] audit: type=1326 audit(1760745962.601:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 109.324942][ T3919] Bluetooth: hci0: command 0x1003 tx timeout [ 109.359396][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.468145][ T6152] loop0: detected capacity change from 0 to 2048 [ 109.499278][ T3519] loop0: p2 p3 p7 [ 109.541850][ T6161] loop5: detected capacity change from 0 to 512 [ 109.553471][ T6152] loop0: p2 p3 p7 [ 109.563997][ T6161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.590216][ T6161] EXT4-fs (loop5): orphan cleanup on readonly fs [ 109.603357][ T6161] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.834: bg 0: block 248: padding at end of block bitmap is not set [ 109.618059][ T6161] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.834: Failed to acquire dquot type 1 [ 109.641306][ T6148] veth0: entered promiscuous mode [ 109.647596][ T6148] veth0: left promiscuous mode [ 109.655474][ T6161] EXT4-fs (loop5): 1 truncate cleaned up [ 109.665824][ T3520] printk: udevd: 1986 output lines suppressed due to ratelimiting [ 109.683158][ T6161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.705606][ T6168] loop2: detected capacity change from 0 to 128 [ 109.715637][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.834309][ T6175] loop5: detected capacity change from 0 to 128 [ 109.883732][ T6169] loop0: detected capacity change from 0 to 512 [ 109.890683][ T6169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.126097][ T6169] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 110.242551][ T6169] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.837: corrupted inode contents [ 110.269722][ T6169] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.837: mark_inode_dirty error [ 110.282030][ T6169] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.837: invalid indirect mapped block 1 (level 1) [ 110.296164][ T6169] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.837: corrupted inode contents [ 110.308267][ T6169] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 110.317227][ T6169] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.837: corrupted inode contents [ 110.329320][ T6169] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.837: mark_inode_dirty error [ 110.340947][ T6169] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 110.350421][ T6169] EXT4-fs (loop0): 1 truncate cleaned up [ 110.357742][ T6169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.363100][ T6168] syz.2.839: attempt to access beyond end of device [ 110.363100][ T6168] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.383132][ T6168] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 110.391988][ T6168] syz.2.839: attempt to access beyond end of device [ 110.391988][ T6168] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.405377][ T6168] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 110.453292][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.474855][ T6179] syz.5.841: attempt to access beyond end of device [ 110.474855][ T6179] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.488306][ T6179] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 110.497319][ T6175] syz.5.841: attempt to access beyond end of device [ 110.497319][ T6175] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 110.510726][ T6175] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 110.552025][ T6186] loop5: detected capacity change from 0 to 2048 [ 110.605264][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.625762][ T6186] loop5: p1 < > p3 p4 < > [ 110.630204][ T6186] loop5: partition table partially beyond EOD, truncated [ 110.630285][ T6190] loop4: detected capacity change from 0 to 1024 [ 110.630712][ T6190] EXT4-fs: Ignoring removed nobh option [ 110.642026][ T6192] loop0: detected capacity change from 0 to 128 [ 110.643753][ T6186] loop5: p1 start 8388352 is beyond EOD, [ 110.654933][ T6190] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 110.655597][ T6186] truncated [ 110.674121][ T6186] loop5: p3 size 16777216 extends beyond EOD, truncated [ 110.705171][ T6190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.720715][ T6190] 9pnet_fd: Insufficient options for proto=fd [ 110.795351][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.833511][ T6200] loop4: detected capacity change from 0 to 512 [ 110.840076][ T6200] EXT4-fs: dax option not supported [ 111.238428][ T6197] syz.0.844: attempt to access beyond end of device [ 111.238428][ T6197] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.251796][ T6197] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 111.262636][ T6192] syz.0.844: attempt to access beyond end of device [ 111.262636][ T6192] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.276001][ T6192] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 111.305886][ T6192] syz.0.844: attempt to access beyond end of device [ 111.305886][ T6192] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.319272][ T6192] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 111.482286][ T6213] loop4: detected capacity change from 0 to 512 [ 111.489773][ T6213] EXT4-fs: Mount option(s) incompatible with ext2 [ 111.528822][ T6217] loop4: detected capacity change from 0 to 128 [ 111.599122][ T6221] loop0: detected capacity change from 0 to 1024 [ 111.620375][ T6221] EXT4-fs: Ignoring removed orlov option [ 111.731577][ T6221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.822406][ T6217] syz.4.852: attempt to access beyond end of device [ 111.822406][ T6217] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.832096][ T6221] __nla_validate_parse: 7 callbacks suppressed [ 111.832117][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 111.835976][ T6217] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 111.841947][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.854'. [ 111.853268][ T6224] syz.4.852: attempt to access beyond end of device [ 111.853268][ T6224] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.881721][ T6224] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 111.934513][ T6221] program syz.0.854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.944241][ T6217] syz.4.852: attempt to access beyond end of device [ 111.944241][ T6217] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 111.957679][ T6217] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 112.002085][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.148210][ T6235] loop0: detected capacity change from 0 to 1024 [ 112.174430][ T6235] EXT4-fs: Ignoring removed nobh option [ 112.204736][ T6235] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 112.247634][ T6235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.264618][ T6235] 9pnet_fd: Insufficient options for proto=fd [ 112.351272][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.379837][ T6245] loop4: detected capacity change from 0 to 512 [ 112.387308][ T6245] EXT4-fs: Mount option(s) incompatible with ext2 [ 112.465155][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.471423][ T3919] Bluetooth: hci0: command 0x1003 tx timeout [ 112.545532][ T6258] loop4: detected capacity change from 0 to 512 [ 112.552269][ T6258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.700621][ T6258] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 112.715301][ T6258] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.866: corrupted inode contents [ 112.728849][ T6258] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.866: mark_inode_dirty error [ 112.740336][ T6258] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.866: invalid indirect mapped block 1 (level 1) [ 112.809320][ T6258] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.866: corrupted inode contents [ 112.827135][ T6258] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 112.842750][ T6258] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.866: corrupted inode contents [ 112.857300][ T6258] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.866: mark_inode_dirty error [ 112.870229][ T6258] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 112.880512][ T6258] EXT4-fs (loop4): 1 truncate cleaned up [ 112.887535][ T6258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.177870][ T6263] loop1: detected capacity change from 0 to 1024 [ 113.376130][ T6267] loop2: detected capacity change from 0 to 128 [ 113.384211][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.459492][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.495710][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.518307][ T6263] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 113.609752][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.627315][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.661024][ T6276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.682707][ T6278] 9pnet_fd: Insufficient options for proto=fd [ 113.900862][ T6286] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.876'. [ 114.076146][ T6291] loop1: detected capacity change from 0 to 1024 [ 114.111273][ T6291] EXT4-fs: Ignoring removed orlov option [ 114.149303][ T6291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.203742][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.878'. [ 114.212722][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.878'. [ 114.226373][ T6291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.878: bg 0: block 232: padding at end of block bitmap is not set [ 114.244469][ T6291] EXT4-fs (loop1): Remounting filesystem read-only [ 114.251158][ T6291] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 114.264197][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 114.264211][ T29] audit: type=1326 audit(1760745967.791:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.294069][ T29] audit: type=1326 audit(1760745967.821:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.324516][ T6291] program syz.1.878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.339072][ T29] audit: type=1326 audit(1760745967.851:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.362595][ T29] audit: type=1326 audit(1760745967.851:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.385934][ T29] audit: type=1326 audit(1760745967.851:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.409142][ T29] audit: type=1326 audit(1760745967.851:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.432499][ T29] audit: type=1326 audit(1760745967.851:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.455826][ T29] audit: type=1326 audit(1760745967.851:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.479143][ T29] audit: type=1326 audit(1760745967.851:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.502410][ T29] audit: type=1326 audit(1760745967.851:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f21e9efc9 code=0x7ffc0000 [ 114.526402][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.559401][ T6301] loop0: detected capacity change from 0 to 512 [ 114.565946][ T6301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.578505][ T6301] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 114.592956][ T6301] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.882: corrupted inode contents [ 114.605076][ T6301] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.882: mark_inode_dirty error [ 114.616571][ T6301] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.882: invalid indirect mapped block 1 (level 1) [ 114.623127][ T6305] loop1: detected capacity change from 0 to 512 [ 114.629918][ T6301] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.882: corrupted inode contents [ 114.648155][ T6301] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 114.656880][ T6301] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.882: corrupted inode contents [ 114.669067][ T6301] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.882: mark_inode_dirty error [ 114.670993][ T6305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.680287][ T6301] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 114.694652][ T6305] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.701622][ T6301] EXT4-fs (loop0): 1 truncate cleaned up [ 114.717972][ T6301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.757756][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.862311][ T6316] 9pnet_fd: Insufficient options for proto=fd [ 114.913825][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 114.922681][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 114.931553][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 114.958139][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 114.967115][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.887'. [ 115.039638][ T6326] loop1: detected capacity change from 0 to 1024 [ 115.046532][ T6326] EXT4-fs: Ignoring removed orlov option [ 115.057473][ T6326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.078825][ T6330] loop4: detected capacity change from 0 to 1024 [ 115.085576][ T6330] EXT4-fs: Ignoring removed nobh option [ 115.091486][ T6330] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 115.121432][ T6330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.136724][ T6326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.889: bg 0: block 232: padding at end of block bitmap is not set [ 115.151916][ T6326] EXT4-fs (loop1): Remounting filesystem read-only [ 115.155439][ T6330] 9pnet_fd: Insufficient options for proto=fd [ 115.158480][ T6326] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 115.189621][ T6334] loop2: detected capacity change from 0 to 512 [ 115.206175][ T6326] program syz.1.889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.235158][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.247867][ T6334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.261204][ T6334] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.268092][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.312177][ T6341] sg_write: data in/out 268435420/8 bytes for SCSI command 0x63-- guessing data in; [ 115.312177][ T6341] program syz.1.893 not setting count and/or reply_len properly [ 115.330057][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.352223][ T6343] loop4: detected capacity change from 0 to 512 [ 115.418190][ T6348] loop0: detected capacity change from 0 to 1024 [ 115.425097][ T6348] EXT4-fs: Ignoring removed orlov option [ 115.470855][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.497072][ T6348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.560389][ T6343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.614472][ T6343] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.729802][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.760214][ T6359] 9pnet_fd: Insufficient options for proto=fd [ 115.916906][ T6364] loop2: detected capacity change from 0 to 512 [ 115.923698][ T6364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.998953][ T6364] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 116.013514][ T6364] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.899: corrupted inode contents [ 116.103628][ T6364] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.899: mark_inode_dirty error [ 116.115488][ T6364] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.899: invalid indirect mapped block 1 (level 1) [ 116.129337][ T6364] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.899: corrupted inode contents [ 116.141629][ T6364] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 116.150696][ T6364] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.899: corrupted inode contents [ 116.163110][ T6364] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.899: mark_inode_dirty error [ 116.174903][ T6364] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 116.206567][ T6364] EXT4-fs (loop2): 1 truncate cleaned up [ 116.213485][ T6364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.231171][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.258683][ T6368] loop5: detected capacity change from 0 to 1024 [ 116.295190][ T6368] EXT4-fs: Ignoring removed orlov option [ 116.353965][ T6368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.601711][ T6385] loop4: detected capacity change from 0 to 1024 [ 116.608533][ T6385] EXT4-fs: Ignoring removed nobh option [ 116.614496][ T6385] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 116.752575][ T6385] 9pnet_fd: Insufficient options for proto=fd [ 117.059890][ T6397] 9pnet_fd: Insufficient options for proto=fd [ 117.147261][ T6400] loop5: detected capacity change from 0 to 512 [ 117.154934][ T6400] EXT4-fs: Mount option(s) incompatible with ext2 [ 117.185655][ T6404] loop5: detected capacity change from 0 to 1024 [ 117.193398][ T6404] EXT4-fs: Ignoring removed orlov option [ 117.623196][ T6412] loop2: detected capacity change from 0 to 512 [ 117.629917][ T6412] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.643020][ T6412] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 117.657464][ T6412] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.913: corrupted inode contents [ 117.673180][ T6412] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.913: mark_inode_dirty error [ 117.685007][ T6412] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.913: invalid indirect mapped block 1 (level 1) [ 117.698817][ T6412] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.913: corrupted inode contents [ 117.711121][ T6412] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 117.720000][ T6412] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.913: corrupted inode contents [ 117.732247][ T6412] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.913: mark_inode_dirty error [ 117.743411][ T6412] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 117.755569][ T6412] EXT4-fs (loop2): 1 truncate cleaned up [ 117.786529][ T6404] __nla_validate_parse: 15 callbacks suppressed [ 117.786545][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.912'. [ 117.801721][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.912'. [ 117.973913][ T6417] loop0: detected capacity change from 0 to 128 [ 118.171875][ T6419] loop1: detected capacity change from 0 to 2048 [ 118.189393][ T6404] program syz.5.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.229238][ T6426] loop4: detected capacity change from 0 to 1024 [ 118.235930][ T6426] EXT4-fs: Ignoring removed orlov option [ 118.260680][ T6419] loop1: p2 p3 p7 [ 118.273165][ T6433] loop0: detected capacity change from 0 to 512 [ 118.283050][ T6433] EXT4-fs: Mount option(s) incompatible with ext2 [ 118.289332][ T6434] FAULT_INJECTION: forcing a failure. [ 118.289332][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 118.302086][ T6434] CPU: 0 UID: 0 PID: 6434 Comm: syz.2.921 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.302190][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.302205][ T6434] Call Trace: [ 118.302211][ T6434] [ 118.302218][ T6434] __dump_stack+0x1d/0x30 [ 118.302237][ T6434] dump_stack_lvl+0xe8/0x140 [ 118.302256][ T6434] dump_stack+0x15/0x1b [ 118.302273][ T6434] should_fail_ex+0x265/0x280 [ 118.302322][ T6434] should_failslab+0x8c/0xb0 [ 118.302349][ T6434] __kmalloc_noprof+0xa5/0x570 [ 118.302379][ T6434] ? io_cache_alloc_new+0x2a/0xb0 [ 118.302462][ T6434] io_cache_alloc_new+0x2a/0xb0 [ 118.302483][ T6434] io_send_zc_prep+0x30e/0x5d0 [ 118.302539][ T6434] io_submit_sqes+0x5ef/0x1060 [ 118.302584][ T6434] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 118.302673][ T6434] ? 0xffffffff81000000 [ 118.302687][ T6434] ? __rcu_read_unlock+0x4f/0x70 [ 118.302789][ T6434] ? get_pid_task+0x96/0xd0 [ 118.302816][ T6434] ? proc_fail_nth_write+0x13b/0x160 [ 118.302913][ T6434] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 118.302962][ T6434] ? vfs_write+0x7e8/0x960 [ 118.302988][ T6434] ? __rcu_read_unlock+0x4f/0x70 [ 118.303015][ T6434] ? __fget_files+0x184/0x1c0 [ 118.303050][ T6434] ? fput+0x8f/0xc0 [ 118.303087][ T6434] __x64_sys_io_uring_enter+0x78/0x90 [ 118.303136][ T6434] x64_sys_call+0x2df0/0x3000 [ 118.303162][ T6434] do_syscall_64+0xd2/0x200 [ 118.303188][ T6434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.303220][ T6434] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.303285][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.303309][ T6434] RIP: 0033:0x7fe150b4efc9 [ 118.303325][ T6434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.303345][ T6434] RSP: 002b:00007fe14f5af038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 118.303396][ T6434] RAX: ffffffffffffffda RBX: 00007fe150da5fa0 RCX: 00007fe150b4efc9 [ 118.303410][ T6434] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 118.303423][ T6434] RBP: 00007fe14f5af090 R08: 0000000000000000 R09: 0000000000000000 [ 118.303437][ T6434] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 118.303493][ T6434] R13: 00007fe150da6038 R14: 00007fe150da5fa0 R15: 00007fffb9810e98 [ 118.303516][ T6434] [ 118.544652][ T6436] loop5: detected capacity change from 0 to 2048 [ 118.594060][ T6444] loop4: detected capacity change from 0 to 2048 [ 118.600045][ T6436] loop5: p2 p3 p7 [ 118.604458][ T6447] loop0: detected capacity change from 0 to 128 [ 118.639725][ T6444] loop4: p2 p3 p7 [ 118.669168][ T6440] netlink: 996 bytes leftover after parsing attributes in process `syz.1.925'. [ 118.681759][ T6452] loop5: detected capacity change from 0 to 1024 [ 118.697058][ T6452] EXT4-fs: Ignoring removed orlov option [ 118.718264][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 118.727113][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 118.754599][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 118.763633][ T6440] bond1: entered promiscuous mode [ 118.770273][ T6440] bond1: entered allmulticast mode [ 118.785681][ T6440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.793777][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.930'. [ 118.802727][ T6452] netlink: 20 bytes leftover after parsing attributes in process `syz.5.930'. [ 118.835651][ T6459] netlink: 996 bytes leftover after parsing attributes in process `syz.4.933'. [ 118.838466][ T6440] bond1 (unregistering): Released all slaves [ 118.851956][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 118.864383][ T6452] program syz.5.930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.923261][ T6469] bond1: entered promiscuous mode [ 118.928515][ T6469] bond1: entered allmulticast mode [ 118.934492][ T6469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.964653][ T6469] bond1 (unregistering): Released all slaves [ 118.983994][ T6479] SELinux: failed to load policy [ 118.990465][ T6479] loop2: detected capacity change from 0 to 164 [ 119.005590][ T6479] Unable to read rock-ridge attributes [ 119.073635][ T6492] loop5: detected capacity change from 0 to 2048 [ 119.092684][ T6496] loop2: detected capacity change from 0 to 1024 [ 119.099724][ T6496] EXT4-fs: Ignoring removed orlov option [ 119.099909][ T6498] loop4: detected capacity change from 0 to 128 [ 119.115958][ T6500] loop1: detected capacity change from 0 to 512 [ 119.122553][ T6500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.134953][ T6500] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 119.149442][ T6500] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.940: corrupted inode contents [ 119.171515][ T6500] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.940: mark_inode_dirty error [ 119.183059][ T6500] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.940: invalid indirect mapped block 1 (level 1) [ 119.198990][ T6500] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.940: corrupted inode contents [ 119.210967][ T6500] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 119.219721][ T6500] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.940: corrupted inode contents [ 119.228471][ T6492] loop5: p2 p3 p7 [ 119.235309][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.241735][ T6500] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.940: mark_inode_dirty error [ 119.253142][ T6500] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 119.262469][ T6500] EXT4-fs (loop1): 1 truncate cleaned up [ 119.272582][ T6496] program syz.2.944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.282394][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 119.282410][ T29] audit: type=1326 audit(1760745972.801:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.312021][ T29] audit: type=1326 audit(1760745972.801:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.335359][ T29] audit: type=1326 audit(1760745972.801:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.358700][ T29] audit: type=1326 audit(1760745972.801:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.382068][ T29] audit: type=1326 audit(1760745972.801:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.405455][ T29] audit: type=1326 audit(1760745972.801:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.428825][ T29] audit: type=1326 audit(1760745972.801:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.452125][ T29] audit: type=1326 audit(1760745972.801:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.475486][ T29] audit: type=1326 audit(1760745972.801:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.498774][ T29] audit: type=1326 audit(1760745972.801:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6495 comm="syz.2.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe150b4efc9 code=0x7ffc0000 [ 119.543504][ T5321] Bluetooth: hci1: Frame reassembly failed (-84) [ 119.586960][ T6511] loop5: detected capacity change from 0 to 512 [ 119.605924][ T6511] EXT4-fs (loop5): too many log groups per flexible block group [ 119.613709][ T6511] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 119.620538][ T6511] EXT4-fs (loop5): mount failed [ 119.822079][ T6518] FAULT_INJECTION: forcing a failure. [ 119.822079][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 119.834756][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.5.950 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.834787][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.834817][ T6518] Call Trace: [ 119.834824][ T6518] [ 119.834832][ T6518] __dump_stack+0x1d/0x30 [ 119.834875][ T6518] dump_stack_lvl+0xe8/0x140 [ 119.834898][ T6518] dump_stack+0x15/0x1b [ 119.834916][ T6518] should_fail_ex+0x265/0x280 [ 119.835075][ T6518] should_failslab+0x8c/0xb0 [ 119.835142][ T6518] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 119.835169][ T6518] ? __alloc_skb+0x101/0x320 [ 119.835238][ T6518] __alloc_skb+0x101/0x320 [ 119.835262][ T6518] netlink_alloc_large_skb+0xbf/0xf0 [ 119.835288][ T6518] netlink_sendmsg+0x3cf/0x6b0 [ 119.835338][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.835378][ T6518] __sock_sendmsg+0x145/0x180 [ 119.835401][ T6518] ____sys_sendmsg+0x31e/0x4e0 [ 119.835437][ T6518] ___sys_sendmsg+0x17b/0x1d0 [ 119.835489][ T6518] __x64_sys_sendmsg+0xd4/0x160 [ 119.835527][ T6518] x64_sys_call+0x191e/0x3000 [ 119.835552][ T6518] do_syscall_64+0xd2/0x200 [ 119.835575][ T6518] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.835673][ T6518] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.835698][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.835725][ T6518] RIP: 0033:0x7fd7e4a7efc9 [ 119.835741][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.835761][ T6518] RSP: 002b:00007fd7e34df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.835844][ T6518] RAX: ffffffffffffffda RBX: 00007fd7e4cd5fa0 RCX: 00007fd7e4a7efc9 [ 119.835853][ T6518] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 119.835863][ T6518] RBP: 00007fd7e34df090 R08: 0000000000000000 R09: 0000000000000000 [ 119.835872][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.835882][ T6518] R13: 00007fd7e4cd6038 R14: 00007fd7e4cd5fa0 R15: 00007fff90d81ff8 [ 119.835912][ T6518] [ 120.129631][ T6531] loop0: detected capacity change from 0 to 1024 [ 120.136489][ T6531] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 120.147416][ T6531] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 120.157989][ T6531] JBD2: no valid journal superblock found [ 120.163736][ T6531] EXT4-fs (loop0): Could not load journal inode [ 120.176100][ T6531] 9pnet_fd: Insufficient options for proto=fd [ 120.217934][ T6537] loop0: detected capacity change from 0 to 128 [ 120.687346][ T6538] bio_check_eod: 2 callbacks suppressed [ 120.687361][ T6538] syz.0.959: attempt to access beyond end of device [ 120.687361][ T6538] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 120.706365][ T6538] buffer_io_error: 2 callbacks suppressed [ 120.706381][ T6538] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 120.723521][ T6540] syz.0.959: attempt to access beyond end of device [ 120.723521][ T6540] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 120.736939][ T6540] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 120.973296][ T6548] vlan2: entered allmulticast mode [ 121.051436][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.060159][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.179939][ T6560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.264922][ T4920] Bluetooth: hci0: command 0x1003 tx timeout [ 121.264949][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.301971][ T6562] loop4: detected capacity change from 0 to 1024 [ 121.308822][ T6562] EXT4-fs: Ignoring removed bh option [ 121.314535][ T6562] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 121.363258][ T3320] EXT4-fs error (device loop4): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /183/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 121.385472][ T3320] EXT4-fs (loop4): Remounting filesystem read-only [ 121.523138][ T6573] bond1: entered promiscuous mode [ 121.528579][ T6573] bond1: entered allmulticast mode [ 121.535220][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.564263][ T6573] bond1 (unregistering): Released all slaves [ 121.584919][ T3919] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 121.585255][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 121.634049][ T6578] loop2: detected capacity change from 0 to 128 [ 121.642212][ T6578] vfat filesystem being mounted at /210/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 121.682610][ T6580] loop4: detected capacity change from 0 to 1024 [ 121.689505][ T6580] EXT4-fs: Ignoring removed orlov option [ 121.771669][ T37] kworker/u8:2: attempt to access beyond end of device [ 121.771669][ T37] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 121.785968][ T37] kworker/u8:2: attempt to access beyond end of device [ 121.785968][ T37] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 121.801434][ T37] kworker/u8:2: attempt to access beyond end of device [ 121.801434][ T37] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 121.814962][ T37] kworker/u8:2: attempt to access beyond end of device [ 121.814962][ T37] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 121.815266][ T6590] loop5: detected capacity change from 0 to 1024 [ 121.830653][ T37] kworker/u8:2: attempt to access beyond end of device [ 121.830653][ T37] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 121.835752][ T6590] EXT4-fs: Ignoring removed orlov option [ 121.848876][ T37] kworker/u8:2: attempt to access beyond end of device [ 121.848876][ T37] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 121.867568][ T37] kworker/u8:2: attempt to access beyond end of device [ 121.867568][ T37] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 121.881012][ T37] kworker/u8:2: attempt to access beyond end of device [ 121.881012][ T37] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 121.897057][ T6590] FAULT_INJECTION: forcing a failure. [ 121.897057][ T6590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.910324][ T6590] CPU: 0 UID: 0 PID: 6590 Comm: syz.5.976 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.910355][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.910370][ T6590] Call Trace: [ 121.910376][ T6590] [ 121.910382][ T6590] __dump_stack+0x1d/0x30 [ 121.910400][ T6590] dump_stack_lvl+0xe8/0x140 [ 121.910416][ T6590] dump_stack+0x15/0x1b [ 121.910432][ T6590] should_fail_ex+0x265/0x280 [ 121.910467][ T6590] should_fail+0xb/0x20 [ 121.910518][ T6590] should_fail_usercopy+0x1a/0x20 [ 121.910538][ T6590] strncpy_from_user+0x25/0x230 [ 121.910568][ T6590] ? bpf_trace_run2+0x124/0x1c0 [ 121.910664][ T6590] __se_sys_add_key+0x86/0x350 [ 121.910701][ T6590] __x64_sys_add_key+0x67/0x80 [ 121.910750][ T6590] x64_sys_call+0x28c8/0x3000 [ 121.910775][ T6590] do_syscall_64+0xd2/0x200 [ 121.910858][ T6590] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.910884][ T6590] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.910916][ T6590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.910986][ T6590] RIP: 0033:0x7fd7e4a7efc9 [ 121.911002][ T6590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.911078][ T6590] RSP: 002b:00007fd7e34df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 121.911096][ T6590] RAX: ffffffffffffffda RBX: 00007fd7e4cd5fa0 RCX: 00007fd7e4a7efc9 [ 121.911187][ T6590] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 121.911201][ T6590] RBP: 00007fd7e34df090 R08: ffffffffffffffff R09: 0000000000000000 [ 121.911214][ T6590] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 121.911226][ T6590] R13: 00007fd7e4cd6038 R14: 00007fd7e4cd5fa0 R15: 00007fff90d81ff8 [ 121.911313][ T6590] [ 122.146351][ T6597] sg_write: data in/out 268435420/8 bytes for SCSI command 0x63-- guessing data in; [ 122.146351][ T6597] program syz.0.978 not setting count and/or reply_len properly [ 122.175675][ T6603] loop5: detected capacity change from 0 to 1024 [ 122.182418][ T6603] EXT4-fs: Ignoring removed orlov option [ 122.227295][ T6602] sg_write: data in/out 268435420/8 bytes for SCSI command 0x63-- guessing data in; [ 122.227295][ T6602] program syz.2.975 not setting count and/or reply_len properly [ 122.247595][ T6609] 9pnet_fd: Insufficient options for proto=fd [ 122.266045][ T6607] loop1: detected capacity change from 0 to 1024 [ 122.288317][ T6607] EXT4-fs: Ignoring removed nobh option [ 122.294296][ T6607] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 122.384559][ T6607] 9pnet_fd: Insufficient options for proto=fd [ 122.457327][ T6621] sg_write: data in/out 268435420/8 bytes for SCSI command 0x63-- guessing data in; [ 122.457327][ T6621] program syz.0.987 not setting count and/or reply_len properly [ 122.610272][ T6628] 9pnet_fd: Insufficient options for proto=fd [ 122.670457][ T6631] loop1: detected capacity change from 0 to 512 [ 122.679031][ T6631] EXT4-fs: Mount option(s) incompatible with ext2 [ 124.019783][ T6644] loop4: detected capacity change from 0 to 1024 [ 124.046063][ T6645] loop5: detected capacity change from 0 to 512 [ 124.065850][ T6645] EXT4-fs: Mount option(s) incompatible with ext2 [ 124.075290][ T6644] EXT4-fs: Ignoring removed orlov option [ 124.098144][ T6644] __nla_validate_parse: 21 callbacks suppressed [ 124.098158][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 124.113378][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.995'. [ 124.133274][ T6653] FAULT_INJECTION: forcing a failure. [ 124.133274][ T6653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.146464][ T6653] CPU: 1 UID: 0 PID: 6653 Comm: syz.2.997 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.146495][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.146538][ T6653] Call Trace: [ 124.146544][ T6653] [ 124.146551][ T6653] __dump_stack+0x1d/0x30 [ 124.146599][ T6653] dump_stack_lvl+0xe8/0x140 [ 124.146617][ T6653] dump_stack+0x15/0x1b [ 124.146631][ T6653] should_fail_ex+0x265/0x280 [ 124.146738][ T6653] should_fail+0xb/0x20 [ 124.146766][ T6653] should_fail_usercopy+0x1a/0x20 [ 124.146784][ T6653] _copy_from_user+0x1c/0xb0 [ 124.146815][ T6653] __copy_msghdr+0x244/0x300 [ 124.146916][ T6653] ___sys_sendmsg+0x109/0x1d0 [ 124.146956][ T6653] __x64_sys_sendmsg+0xd4/0x160 [ 124.146987][ T6653] x64_sys_call+0x191e/0x3000 [ 124.147006][ T6653] do_syscall_64+0xd2/0x200 [ 124.147030][ T6653] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.147055][ T6653] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.147075][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.147094][ T6653] RIP: 0033:0x7fe150b4efc9 [ 124.147108][ T6653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.147204][ T6653] RSP: 002b:00007fe14f5af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.147236][ T6653] RAX: ffffffffffffffda RBX: 00007fe150da5fa0 RCX: 00007fe150b4efc9 [ 124.147248][ T6653] RDX: 000000000004c040 RSI: 0000200000000780 RDI: 0000000000000003 [ 124.147259][ T6653] RBP: 00007fe14f5af090 R08: 0000000000000000 R09: 0000000000000000 [ 124.147346][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.147356][ T6653] R13: 00007fe150da6038 R14: 00007fe150da5fa0 R15: 00007fffb9810e98 [ 124.147374][ T6653] [ 124.338546][ T6658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.340821][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 124.340841][ T29] audit: type=1326 audit(4263431298.250:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.347938][ T6658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.353133][ T29] audit: type=1326 audit(4263431298.250:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.408152][ T29] audit: type=1326 audit(4263431298.250:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.431550][ T29] audit: type=1326 audit(4263431298.250:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.454740][ T29] audit: type=1326 audit(4263431298.250:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.469447][ T6658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.478351][ T29] audit: type=1326 audit(4263431298.250:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.508866][ T29] audit: type=1326 audit(4263431298.250:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.532258][ T29] audit: type=1326 audit(4263431298.250:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.555634][ T29] audit: type=1326 audit(4263431298.250:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.578959][ T29] audit: type=1326 audit(4263431298.250:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 124.633871][ T6644] program syz.4.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.699889][ T6680] loop0: detected capacity change from 0 to 512 [ 124.709035][ T6680] EXT4-fs: Mount option(s) incompatible with ext2 [ 124.717136][ T6681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.780130][ T6684] loop0: detected capacity change from 0 to 2048 [ 124.892877][ T6684] loop0: p2 p3 p7 [ 125.266856][ T6690] loop5: detected capacity change from 0 to 2048 [ 125.305152][ T6694] loop2: detected capacity change from 0 to 128 [ 125.312513][ T6694] vfat filesystem being mounted at /218/bus supports timestamps until 2107-12-31 (0x10391447e) [ 125.323086][ T6690] loop5: p1 < > p3 p4 < > [ 125.327561][ T6690] loop5: partition table partially beyond EOD, truncated [ 125.334745][ T6690] loop5: p1 start 8388352 is beyond EOD, truncated [ 125.341368][ T6690] loop5: p3 size 16777216 extends beyond EOD, truncated [ 125.504842][ T6700] loop1: detected capacity change from 0 to 1024 [ 125.511708][ T6700] EXT4-fs: Ignoring removed orlov option [ 125.559099][ T6700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 125.564500][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 125.568141][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1015'. [ 125.586001][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 125.606130][ T6700] program syz.1.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.644976][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 125.662856][ T6695] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 125.677414][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 125.677853][ T6696] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 125.686336][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 125.712404][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'. [ 125.928850][ T6718] loop4: detected capacity change from 0 to 128 [ 125.995940][ T6718] vfat filesystem being mounted at /194/bus supports timestamps until 2107-12-31 (0x10391447e) [ 126.067690][ T6722] bond1: entered promiscuous mode [ 126.072786][ T6722] bond1: entered allmulticast mode [ 126.214083][ T6722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.390854][ T6722] bond1 (unregistering): Released all slaves [ 126.418684][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.427506][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.454780][ T6727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.562385][ T6725] bio_check_eod: 106 callbacks suppressed [ 126.562408][ T6725] syz.4.1021: attempt to access beyond end of device [ 126.562408][ T6725] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 126.581653][ T6725] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 126.669246][ T6718] syz.4.1021: attempt to access beyond end of device [ 126.669246][ T6718] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 126.682723][ T6718] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 126.716763][ T6736] loop1: detected capacity change from 0 to 512 [ 126.742253][ T6736] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.774031][ T6742] 9pnet_fd: Insufficient options for proto=fd [ 126.931249][ T6753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6753 comm=syz.4.1033 [ 127.031571][ T6761] loop2: detected capacity change from 0 to 2048 [ 127.090567][ T6761] loop2: p2 p3 p7 [ 127.091192][ T6764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.106804][ T6776] loop0: detected capacity change from 0 to 128 [ 128.114291][ T6782] loop1: detected capacity change from 0 to 2048 [ 128.123681][ T6776] vfat filesystem being mounted at /223/bus supports timestamps until 2107-12-31 (0x10391447e) [ 128.182545][ T6782] loop1: p1 < > p3 p4 < > [ 128.187113][ T6782] loop1: partition table partially beyond EOD, truncated [ 128.194651][ T6782] loop1: p1 start 8388352 is beyond EOD, truncated [ 128.201241][ T6782] loop1: p3 size 16777216 extends beyond EOD, truncated [ 128.202945][ T6788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.217304][ T6788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.231478][ T6788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.527215][ T6786] syz.0.1040: attempt to access beyond end of device [ 128.527215][ T6786] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 128.540870][ T6786] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 128.644988][ T6786] syz.0.1040: attempt to access beyond end of device [ 128.644988][ T6786] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 128.658530][ T6786] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 128.696482][ T6793] 9pnet_fd: Insufficient options for proto=fd [ 128.779980][ T6797] sg_write: data in/out 268435420/8 bytes for SCSI command 0x63-- guessing data in; [ 128.779980][ T6797] program syz.0.1050 not setting count and/or reply_len properly [ 128.980838][ T6813] loop4: detected capacity change from 0 to 512 [ 129.089560][ T6815] sg_write: data in/out 268435420/8 bytes for SCSI command 0x63-- guessing data in; [ 129.089560][ T6815] program syz.5.1058 not setting count and/or reply_len properly [ 129.167819][ T6813] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.291149][ T6821] loop5: detected capacity change from 0 to 128 [ 129.350706][ T6821] vfat filesystem being mounted at /180/bus supports timestamps until 2107-12-31 (0x10391447e) [ 129.363373][ T6823] 9pnet_fd: Insufficient options for proto=fd [ 129.417339][ T6827] loop1: detected capacity change from 0 to 1024 [ 129.444959][ T6827] EXT4-fs: Ignoring removed nobh option [ 129.452004][ T6827] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 129.470634][ T6827] 9pnet_fd: Insufficient options for proto=fd [ 129.485124][ T6829] sg_write: data in/out 268435420/8 bytes for SCSI command 0x63-- guessing data in; [ 129.485124][ T6829] program syz.4.1063 not setting count and/or reply_len properly [ 129.513176][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.522279][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.548911][ T6834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.549344][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 129.549359][ T29] audit: type=1326 audit(4263431303.460:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.595794][ T6836] loop4: detected capacity change from 0 to 2048 [ 129.603357][ T29] audit: type=1326 audit(4263431303.500:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.626882][ T29] audit: type=1326 audit(4263431303.500:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.629546][ T6821] syz.5.1059: attempt to access beyond end of device [ 129.629546][ T6821] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 129.650423][ T29] audit: type=1326 audit(4263431303.500:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.663749][ T6821] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 129.695801][ T29] audit: type=1326 audit(4263431303.500:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.718560][ T6830] syz.5.1059: attempt to access beyond end of device [ 129.718560][ T6830] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 129.719207][ T29] audit: type=1326 audit(4263431303.500:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.732569][ T6830] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 129.756014][ T29] audit: type=1326 audit(4263431303.500:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.787970][ T29] audit: type=1326 audit(4263431303.500:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.811323][ T29] audit: type=1326 audit(4263431303.500:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.834944][ T29] audit: type=1326 audit(4263431303.500:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6835 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 129.882006][ T6843] loop5: detected capacity change from 0 to 128 [ 129.889932][ T6843] vfat filesystem being mounted at /181/bus supports timestamps until 2107-12-31 (0x10391447e) [ 129.934040][ T6847] loop2: detected capacity change from 0 to 512 [ 129.935747][ T6836] loop4: p2 p3 p7 [ 129.948448][ T6847] EXT4-fs mount: 36 callbacks suppressed [ 129.948465][ T6847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.965113][ T6845] sg_write: data in/out 268435420/8 bytes for SCSI command 0x63-- guessing data in; [ 129.965113][ T6845] program syz.0.1069 not setting count and/or reply_len properly [ 129.967144][ T6847] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.029745][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.050299][ T6857] 9pnet_fd: Insufficient options for proto=fd [ 130.078423][ T6858] loop0: detected capacity change from 0 to 1024 [ 130.085111][ T6858] EXT4-fs: Ignoring removed orlov option [ 130.097393][ T6859] loop4: detected capacity change from 0 to 1024 [ 130.104064][ T6859] EXT4-fs: Ignoring removed orlov option [ 130.112785][ T6858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.138122][ T6859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.240903][ T6855] syz.5.1067: attempt to access beyond end of device [ 130.240903][ T6855] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 130.254441][ T6855] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 130.269926][ T6855] syz.5.1067: attempt to access beyond end of device [ 130.269926][ T6855] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 130.283410][ T6855] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 130.297297][ T6871] loop1: detected capacity change from 0 to 512 [ 130.307240][ T6871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.319941][ T6871] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.876619][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.888205][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.888210][ T6886] sg_write: data in/out 268435420/8 bytes for SCSI command 0x63-- guessing data in; [ 131.888210][ T6886] program syz.0.1081 not setting count and/or reply_len properly [ 131.925632][ T6893] loop2: detected capacity change from 0 to 2048 [ 132.042665][ T6893] loop2: p2 p3 p7 [ 132.060932][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.148110][ T6895] loop5: detected capacity change from 0 to 1024 [ 132.175262][ T6895] EXT4-fs: Ignoring removed orlov option [ 132.230292][ T6900] loop1: detected capacity change from 0 to 512 [ 132.237666][ T6903] __nla_validate_parse: 5 callbacks suppressed [ 132.237684][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 132.252847][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 132.267476][ T6900] EXT4-fs: Mount option(s) incompatible with ext2 [ 132.274102][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 132.281714][ T6895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.322356][ T6909] loop0: detected capacity change from 0 to 1024 [ 132.322532][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1084'. [ 132.332288][ T6909] EXT4-fs: Ignoring removed orlov option [ 132.337818][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1084'. [ 132.352880][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 132.361915][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 132.371168][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 132.374172][ T6895] program syz.5.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.384246][ T6909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.412722][ T6909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 132.412759][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.425619][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 132.432144][ T6909] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1090: bg 0: block 232: padding at end of block bitmap is not set [ 132.455499][ T6909] EXT4-fs (loop0): Remounting filesystem read-only [ 132.462208][ T6920] loop4: detected capacity change from 0 to 1024 [ 132.468840][ T6920] EXT4-fs: Ignoring removed orlov option [ 132.475654][ T6921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.476677][ T6909] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 132.499893][ T6923] loop5: detected capacity change from 0 to 512 [ 132.500677][ T6920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.522492][ T6909] program syz.0.1090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.545299][ T6923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.558281][ T6923] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.587342][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.599394][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.667506][ T6932] loop5: detected capacity change from 0 to 512 [ 132.696936][ T6932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.709657][ T6932] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.687702][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.718223][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.833194][ T6952] loop2: detected capacity change from 0 to 1024 [ 133.847277][ T6952] EXT4-fs: Ignoring removed orlov option [ 133.876872][ T6959] loop4: detected capacity change from 0 to 1024 [ 133.883907][ T6959] EXT4-fs: Ignoring removed orlov option [ 133.891205][ T6952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.024238][ T6952] program syz.2.1103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.816350][ T6959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.832521][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.842662][ T6959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1105: bg 0: block 232: padding at end of block bitmap is not set [ 134.857358][ T6959] EXT4-fs (loop4): Remounting filesystem read-only [ 134.864031][ T6959] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 134.884065][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 134.884123][ T29] audit: type=1326 audit(4263431308.790:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 134.915474][ T6968] loop1: detected capacity change from 0 to 1024 [ 134.924940][ T6968] EXT4-fs: Ignoring removed orlov option [ 134.930845][ T29] audit: type=1326 audit(4263431308.830:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 134.954910][ T29] audit: type=1326 audit(4263431308.830:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 134.978369][ T29] audit: type=1326 audit(4263431308.830:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 135.001679][ T29] audit: type=1326 audit(4263431308.830:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 135.004785][ T6959] program syz.4.1105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.025219][ T29] audit: type=1326 audit(4263431308.830:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 135.075527][ T29] audit: type=1326 audit(4263431308.830:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 135.099024][ T29] audit: type=1326 audit(4263431308.840:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 135.122438][ T29] audit: type=1326 audit(4263431308.840:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 135.145915][ T29] audit: type=1326 audit(4263431308.840:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7f02efc9 code=0x7ffc0000 [ 135.146742][ T6968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.187467][ T6970] loop5: detected capacity change from 0 to 1024 [ 135.194300][ T6970] EXT4-fs: Ignoring removed orlov option [ 135.199499][ T6968] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1107: bg 0: block 232: padding at end of block bitmap is not set [ 135.208643][ T6977] loop2: detected capacity change from 0 to 512 [ 135.216589][ T6968] EXT4-fs (loop1): Remounting filesystem read-only [ 135.227203][ T6968] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 135.248874][ T6968] program syz.1.1107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.271909][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.281879][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.295652][ T6977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.308623][ T6977] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.319639][ T6970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.350870][ T6984] loop4: detected capacity change from 0 to 512 [ 135.369690][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.380434][ T6984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.393723][ T6984] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.704439][ T6995] bond1: entered promiscuous mode [ 135.709939][ T6995] bond1: entered allmulticast mode [ 135.718187][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.758665][ T6995] bond1 (unregistering): Released all slaves [ 135.838689][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.840281][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.954746][ T7008] loop5: detected capacity change from 0 to 1024 [ 135.962199][ T7008] EXT4-fs: Ignoring removed orlov option [ 135.978757][ T7008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.010046][ T7008] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1120: bg 0: block 232: padding at end of block bitmap is not set [ 136.013444][ T7015] loop1: detected capacity change from 0 to 2048 [ 136.024985][ T7008] EXT4-fs (loop5): Remounting filesystem read-only [ 136.097721][ T7008] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 136.147343][ T7021] loop0: detected capacity change from 0 to 512 [ 136.169725][ T7008] program syz.5.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.187226][ T7015] loop1: p2 p3 p7 [ 136.208304][ T7021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.253515][ T7021] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.320412][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.405987][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.422028][ T7027] loop1: detected capacity change from 0 to 512 [ 136.450467][ T7027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.463719][ T7027] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.517795][ T7035] loop5: detected capacity change from 0 to 2048 [ 136.595420][ T7035] loop5: p2 p3 p7 [ 136.782471][ T7044] loop2: detected capacity change from 0 to 1024 [ 136.789765][ T7044] EXT4-fs: Ignoring removed orlov option [ 136.812189][ T7044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.840431][ T7044] program syz.2.1131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.863730][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.872539][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.886684][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.901478][ T7054] loop4: detected capacity change from 0 to 1024 [ 136.908412][ T7054] EXT4-fs: Ignoring removed orlov option [ 136.916900][ T7056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.925471][ T7056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.936466][ T7056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.937373][ T7054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.958790][ T7054] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1136: bg 0: block 232: padding at end of block bitmap is not set [ 136.973445][ T7054] EXT4-fs (loop4): Remounting filesystem read-only [ 136.980109][ T7054] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 136.988392][ T7060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.002467][ T7054] program syz.4.1136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.022723][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.243417][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.497950][ T7074] __nla_validate_parse: 16 callbacks suppressed [ 137.497972][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 137.513331][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 137.522625][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 137.669485][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 137.678465][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 137.785429][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 137.820966][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 137.829958][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 137.839430][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 138.853011][ T7095] loop0: detected capacity change from 0 to 1024 [ 138.853889][ T7094] loop4: detected capacity change from 0 to 1024 [ 138.860165][ T7095] EXT4-fs: Ignoring removed orlov option [ 138.948634][ T7107] loop2: detected capacity change from 0 to 2048 [ 138.956505][ T7094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.975978][ T7095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.004535][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 139.014103][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.018206][ T7111] loop5: detected capacity change from 0 to 128 [ 139.024467][ T7095] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1148: bg 0: block 232: padding at end of block bitmap is not set [ 139.031241][ T7111] vfat filesystem being mounted at /200/bus supports timestamps until 2107-12-31 (0x10391447e) [ 139.045080][ T7095] EXT4-fs (loop0): Remounting filesystem read-only [ 139.063101][ T7095] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 139.091865][ T7095] program syz.0.1148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.155578][ T7107] loop2: p2 p3 p7 [ 139.233646][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.533630][ T7123] loop4: detected capacity change from 0 to 512 [ 139.540275][ T7123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.548964][ T7123] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 139.563551][ T7123] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1157: corrupted inode contents [ 139.575583][ T7123] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.1157: mark_inode_dirty error [ 139.592039][ T7123] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1157: invalid indirect mapped block 1 (level 1) [ 139.605626][ T7123] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1157: corrupted inode contents [ 139.618849][ T7123] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 139.627569][ T7123] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.1157: corrupted inode contents [ 139.639768][ T7123] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.1157: mark_inode_dirty error [ 139.651184][ T7123] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 139.660550][ T7123] EXT4-fs (loop4): 1 truncate cleaned up [ 139.666555][ T7123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.687702][ T7129] loop2: detected capacity change from 0 to 1024 [ 139.694339][ T7129] EXT4-fs: Ignoring removed orlov option [ 139.706453][ T7129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.778343][ T7115] syz.5.1154: attempt to access beyond end of device [ 139.778343][ T7115] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 139.791923][ T7115] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 139.802423][ T7111] syz.5.1154: attempt to access beyond end of device [ 139.802423][ T7111] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 139.815986][ T7111] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 139.825283][ T7115] syz.5.1154: attempt to access beyond end of device [ 139.825283][ T7115] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 139.838735][ T7115] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 139.850019][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.890040][ T7140] 9pnet_fd: Insufficient options for proto=fd [ 139.932489][ T7144] loop5: detected capacity change from 0 to 128 [ 139.932691][ T7147] loop1: detected capacity change from 0 to 128 [ 139.947843][ T7144] vfat filesystem being mounted at /201/bus supports timestamps until 2107-12-31 (0x10391447e) [ 139.966751][ T7147] vfat filesystem being mounted at /215/bus supports timestamps until 2107-12-31 (0x10391447e) [ 139.977390][ T7151] loop2: detected capacity change from 0 to 128 [ 140.029167][ T7151] vfat filesystem being mounted at /253/bus supports timestamps until 2107-12-31 (0x10391447e) [ 140.062127][ T7141] bond1: entered promiscuous mode [ 140.068116][ T7141] bond1: entered allmulticast mode [ 140.075660][ T7141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.112470][ T7141] bond1 (unregistering): Released all slaves [ 140.300693][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.412817][ T7163] bond1: entered promiscuous mode [ 140.417951][ T7163] bond1: entered allmulticast mode [ 140.428378][ T7163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.438761][ T7163] bond1 (unregistering): Released all slaves [ 140.474730][ T7154] syz.1.1167: attempt to access beyond end of device [ 140.474730][ T7154] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.488206][ T7154] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 140.497038][ T7147] syz.1.1167: attempt to access beyond end of device [ 140.497038][ T7147] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.510572][ T7147] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 140.518758][ T7156] syz.2.1169: attempt to access beyond end of device [ 140.518758][ T7156] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.532944][ T7156] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 140.547105][ T7156] syz.2.1169: attempt to access beyond end of device [ 140.547105][ T7156] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.560651][ T7156] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 140.570056][ T7154] syz.1.1167: attempt to access beyond end of device [ 140.570056][ T7154] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.583560][ T7154] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 140.636119][ T7155] syz.5.1166: attempt to access beyond end of device [ 140.636119][ T7155] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.649577][ T7155] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 140.662977][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.674842][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.691944][ T7168] loop0: detected capacity change from 0 to 1024 [ 140.698729][ T7168] EXT4-fs: Ignoring removed orlov option [ 140.709191][ T7171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.722538][ T7168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.759748][ T7144] syz.5.1166: attempt to access beyond end of device [ 140.759748][ T7144] loop5: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 140.761061][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.773348][ T7144] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 140.865203][ T7179] loop1: detected capacity change from 0 to 128 [ 140.875537][ T7179] vfat filesystem being mounted at /217/bus supports timestamps until 2107-12-31 (0x10391447e) [ 140.889656][ T7181] 9pnet_fd: Insufficient options for proto=fd [ 140.927981][ T7183] loop0: detected capacity change from 0 to 1024 [ 140.935065][ T7183] EXT4-fs: Ignoring removed orlov option [ 140.949319][ T7183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.975309][ T7188] loop5: detected capacity change from 0 to 1024 [ 140.982852][ T7188] EXT4-fs: Ignoring removed orlov option [ 140.992225][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 140.992247][ T29] audit: type=1326 audit(4263431314.910:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.025435][ T29] audit: type=1326 audit(4263431314.940:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.048964][ T29] audit: type=1326 audit(4263431314.940:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.072420][ T29] audit: type=1326 audit(4263431314.940:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.096021][ T29] audit: type=1326 audit(4263431314.940:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.119323][ T29] audit: type=1326 audit(4263431314.940:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.142905][ T29] audit: type=1326 audit(4263431314.940:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.166397][ T29] audit: type=1326 audit(4263431314.940:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.189875][ T29] audit: type=1326 audit(4263431314.940:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.213290][ T29] audit: type=1326 audit(4263431314.940:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7182 comm="syz.0.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb3c04efc9 code=0x7ffc0000 [ 141.240719][ T7183] program syz.0.1179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.251448][ T7192] FAULT_INJECTION: forcing a failure. [ 141.251448][ T7192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.263525][ T7188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.264542][ T7192] CPU: 0 UID: 0 PID: 7192 Comm: syz.4.1181 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.264571][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.264633][ T7192] Call Trace: [ 141.264643][ T7192] [ 141.264653][ T7192] __dump_stack+0x1d/0x30 [ 141.264682][ T7192] dump_stack_lvl+0xe8/0x140 [ 141.264708][ T7192] dump_stack+0x15/0x1b [ 141.264730][ T7192] should_fail_ex+0x265/0x280 [ 141.264787][ T7192] should_fail+0xb/0x20 [ 141.264828][ T7192] should_fail_usercopy+0x1a/0x20 [ 141.264860][ T7192] _copy_from_user+0x1c/0xb0 [ 141.264893][ T7192] memdup_user+0x5e/0xd0 [ 141.264925][ T7192] __se_sys_kexec_load+0x109/0x160 [ 141.265068][ T7192] __x64_sys_kexec_load+0x55/0x70 [ 141.265096][ T7192] x64_sys_call+0x289c/0x3000 [ 141.265145][ T7192] do_syscall_64+0xd2/0x200 [ 141.265177][ T7192] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.265240][ T7192] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 141.265270][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.265298][ T7192] RIP: 0033:0x7fed7f02efc9 [ 141.265318][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.265341][ T7192] RSP: 002b:00007fed7da97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 141.265366][ T7192] RAX: ffffffffffffffda RBX: 00007fed7f285fa0 RCX: 00007fed7f02efc9 [ 141.265416][ T7192] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.265431][ T7192] RBP: 00007fed7da97090 R08: 0000000000000000 R09: 0000000000000000 [ 141.265447][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.265463][ T7192] R13: 00007fed7f286038 R14: 00007fed7f285fa0 R15: 00007ffece42ca18 [ 141.265488][ T7192] [ 141.321156][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.352024][ T7188] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1180: bg 0: block 232: padding at end of block bitmap is not set [ 141.478788][ T7188] EXT4-fs (loop5): Remounting filesystem read-only [ 141.485640][ T7188] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 141.499078][ T7202] loop1: detected capacity change from 0 to 128 [ 141.507122][ T7202] vfat filesystem being mounted at /218/bus supports timestamps until 2107-12-31 (0x10391447e) [ 141.570999][ T7194] bond1: entered promiscuous mode [ 141.576661][ T7194] bond1: entered allmulticast mode [ 141.584386][ T7194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.624264][ T7188] program syz.5.1180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.640796][ T7194] bond1 (unregistering): Released all slaves [ 141.717989][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.749950][ T7210] loop5: detected capacity change from 0 to 2048 [ 141.795412][ T7214] 9pnet_fd: Insufficient options for proto=fd [ 141.800659][ T7210] loop5: p2 p3 p7 [ 141.830392][ T7216] loop0: detected capacity change from 0 to 2048 [ 141.857078][ T7220] loop5: detected capacity change from 0 to 512 [ 141.879208][ T7216] loop0: p2 p3 p7 [ 141.889820][ T7220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.907391][ T7220] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.943229][ T7230] loop4: detected capacity change from 0 to 1024 [ 141.950287][ T7230] EXT4-fs: Ignoring removed nobh option [ 141.956337][ T7230] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 141.977865][ T7230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.996951][ T7235] loop0: detected capacity change from 0 to 1024 [ 142.003648][ T7235] EXT4-fs: Ignoring removed orlov option [ 142.010232][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.010389][ T7230] 9pnet_fd: Insufficient options for proto=fd [ 142.041754][ T7235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.055784][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.080801][ T7243] loop5: detected capacity change from 0 to 1024 [ 142.087789][ T7243] EXT4-fs: Ignoring removed orlov option [ 142.097721][ T7243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.115377][ T7243] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1198: bg 0: block 232: padding at end of block bitmap is not set [ 142.134976][ T7243] EXT4-fs (loop5): Remounting filesystem read-only [ 142.142328][ T7243] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 142.167546][ T7243] program syz.5.1198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.190922][ T7251] loop1: detected capacity change from 0 to 2048 [ 142.199696][ T3872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.221772][ T7255] loop5: detected capacity change from 0 to 128 [ 142.229564][ T7255] vfat filesystem being mounted at /206/bus supports timestamps until 2107-12-31 (0x10391447e) [ 142.250707][ T7251] loop1: p2 p3 p7 [ 142.255747][ T7257] loop4: detected capacity change from 0 to 2048 [ 142.294787][ T7255] ================================================================== [ 142.303055][ T7255] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 142.311201][ T7255] [ 142.313530][ T7255] write to 0xffff8881183660a8 of 8 bytes by task 7260 on cpu 1: [ 142.321627][ T7255] filemap_splice_read+0x4f4/0x740 [ 142.326776][ T7255] splice_direct_to_actor+0x26f/0x680 [ 142.332177][ T7255] do_splice_direct+0xda/0x150 [ 142.336965][ T7255] do_sendfile+0x380/0x650 [ 142.341415][ T7255] __x64_sys_sendfile64+0x105/0x150 [ 142.346647][ T7255] x64_sys_call+0x2bb4/0x3000 [ 142.351347][ T7255] do_syscall_64+0xd2/0x200 [ 142.355890][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.361814][ T7255] [ 142.364159][ T7255] write to 0xffff8881183660a8 of 8 bytes by task 7255 on cpu 0: [ 142.371812][ T7255] filemap_splice_read+0x4f4/0x740 [ 142.376963][ T7255] splice_direct_to_actor+0x26f/0x680 [ 142.382357][ T7255] do_splice_direct+0xda/0x150 [ 142.387146][ T7255] do_sendfile+0x380/0x650 [ 142.391613][ T7255] __x64_sys_sendfile64+0x105/0x150 [ 142.396851][ T7255] x64_sys_call+0x2bb4/0x3000 [ 142.401550][ T7255] do_syscall_64+0xd2/0x200 [ 142.406069][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.411985][ T7255] [ 142.414314][ T7255] value changed: 0x0000000000000b84 -> 0x0000000000000b9a [ 142.421438][ T7255] [ 142.423782][ T7255] Reported by Kernel Concurrency Sanitizer on: [ 142.429945][ T7255] CPU: 0 UID: 0 PID: 7255 Comm: syz.5.1204 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.439682][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.449751][ T7255] ================================================================== [ 142.474439][ T7257] loop4: p2 p3 p7 [ 142.480927][ T7261] lo speed is unknown, defaulting to 1000 [ 142.770334][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.