last executing test programs: 2m47.984327355s ago: executing program 4 (id=2603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xff}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000001050000000000000000000a0000003c0001802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) dup3(r2, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x7, 0x2000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0x3}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e22, 0x4, @loopback, 0x7196}, {0xa, 0x4, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, r4, 0x9}}, 0x65) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x10007ffffffff}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f00000000c0)=ANY=[]) 2m47.942629939s ago: executing program 4 (id=2604): setresgid(0xee00, 0xee01, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7, 0x2b0, &(0x7f0000000280)="$eJzs3T9vI0UYB+B3E3vtg8IuqBASK0FBdbpcS+MI5aQIVyAXQAEn7k5CsYV0J0XijzBX0dJQ8gmQkOj4EjQU9Ei0SHRccdKi9e7GTlg72QgnwD1Pk8ns/Gbe3YwTpfD4g5dmR/eyePD481+j309iZxSjeJLEMHai9mWcMvo6AID/sid5Hn/kpTa5JCL62ysLANiilb//Ny4U+GHrJQEAW/b2O+++uT8eH7yVZf24M/vqeFL8Z198La/vP4iPYhr341YM4mlEfqJs38nzfN7JCsN4dTY/nhTJ2fs/VfPv/x6xyO/FIIaLrtP5w/HBXlZayc+LOp6r1h8V+dsxiBca1j8cH9xuyMckjddeWan/Zgzi5w/j45jGvUURy/wXe1n2Rv7Nn5+9V5RX5JP58aS3GLeU717xjwYAAAAAAAAAAAAAAAAAAAAAgP+xm9XZOb1YnN9TdFXn7+w+Lb7pRlYbnj6fp8wn9URnzgea5/Ftfb7OrSzL8mrgMt+JFzvRuZ67BgAAAAAAAAAAAAAAAAAAgH+XR598enR3Or3/8B9p1KcB1G/rv+w8o5Wel6NhzDBOenrLJXeqZTfMHLv1mCRiYxnFjK2K756/+prGjXWp775v++j654/pXqLClo16dx3dTZqfYS/qnn69SX5cHZPGBddK113KW22/tPFS2voFkj6/aMw3jIlkU2Gv/1Y+uaonOXsX6eKpNsa7VaN8LTTtjVb7+e+/KxKndQAAAAAAAAAAAAAAAAAAwFYt3/TbcPHxmtAvh+WH/Mdwy9UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNVYfv5/i8a8Cl9gcBoPH13zLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAM+CsAAP//yylfnw==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000500000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 2m47.63800675s ago: executing program 4 (id=2608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xff}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) epoll_create1(0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xf8, 0x582, &(0x7f0000001f80)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000001050000000000000000000a0000003c0001802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) dup3(r3, r2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x7, 0x2000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x3}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e22, 0x4, @loopback, 0x7196}, {0xa, 0x4, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, r5, 0x9}}, 0x65) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x10007ffffffff}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f00000000c0)=ANY=[]) 2m47.309792622s ago: executing program 4 (id=2612): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b0, &(0x7f0000000b80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m47.0309689s ago: executing program 4 (id=2619): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) close(r0) 2m46.684147404s ago: executing program 4 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x74) fspick(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@dioread_lock}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@usrquota}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) getsockopt(0xffffffffffffffff, 0x3, 0x8584, &(0x7f0000000340)=""/175, &(0x7f00000001c0)=0xaf) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001800010025bd7000000000000a000000000300000000000014000700000000000000000000000000000000010800040001"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000040)="cd3c8330bb154b6a6cbc40092ae2cbf0ffa8f92759d396e55ea86e93a475b9d1639e0b4fab7152", &(0x7f0000000080)="2c682a42d8f12c8956d8724591ece82bde3276b8901557c66d5f50d20cfe1334533346d1155f74780b4a00c5e82b88fb793bf00325bb53bcd6a392f3cf24483bde0514942134363e59d88ac66e6732bfaa780680420094d7"}}, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000a40)='ext4_insert_range\x00', r8, 0x0, 0x2}, 0x18) r9 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000240)={0xe54, 0x0, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) pipe(0x0) 2m46.660179746s ago: executing program 32 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x74) fspick(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@dioread_lock}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@usrquota}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) getsockopt(0xffffffffffffffff, 0x3, 0x8584, &(0x7f0000000340)=""/175, &(0x7f00000001c0)=0xaf) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001800010025bd7000000000000a000000000300000000000014000700000000000000000000000000000000010800040001"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000040)="cd3c8330bb154b6a6cbc40092ae2cbf0ffa8f92759d396e55ea86e93a475b9d1639e0b4fab7152", &(0x7f0000000080)="2c682a42d8f12c8956d8724591ece82bde3276b8901557c66d5f50d20cfe1334533346d1155f74780b4a00c5e82b88fb793bf00325bb53bcd6a392f3cf24483bde0514942134363e59d88ac66e6732bfaa780680420094d7"}}, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000a40)='ext4_insert_range\x00', r8, 0x0, 0x2}, 0x18) r9 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000240)={0xe54, 0x0, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) pipe(0x0) 2m44.894621461s ago: executing program 5 (id=2625): r0 = socket(0x1, 0x1, 0x1) getsockopt$SO_COOKIE(r0, 0x1, 0x47, 0x0, &(0x7f0000000180)) r1 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000000), 0x0, 0x7f) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) socket$tipc(0x1e, 0x5, 0x0) 2m44.739651736s ago: executing program 5 (id=2653): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b0, &(0x7f0000000b80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (fail_nth: 2) 2m44.455734524s ago: executing program 5 (id=2656): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x363942, 0x25) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="9b5c69d23da2dda22be5bab7f7fe626ce8f6169051224b53acd52bc02a73dea6954aa343669a5d72c5d0a013523ce42d0800a7d50086586facbf1866b9895e858da5656b209494ea4be1af22deefeab1350163cda7b00ccc1cae78c04d2074a4a1cdc5c3c7e84b553fbf5a850393feedb050031e17665620aca621e37b02c6584f0c5a8b29f71af9620c7b551eb0bc031586c5859d3b3d1a881c4374772dc04e6879be893485706a5a9f25bee037cd57e12768d64eab285ab27430f40da3679008b616026297be2fc82460771b2b9fa8d5c068a715961aa543a39bbb9a67b0008f"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="00000000000000000000000000000000000000000000000079000011fa00800aec2fd3433ce6dd50da98d3c9a1493b1f2b82193e309318e4074b2630498b8e9286c3e1955dcf6ccb8d55215506e5638d04b8aed1115d0f678ffc002c9e011e34b4e296ad8273cefbac9b1a874d710550fe20005b5483bc3e3e499591cb0356af"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000071a5b02fc76c23b7559afd9738a4759dfe24730500000024c56cb7976329ac42990c167b6900bb660d3189e165c4553a5f7aa5e2aca43b8d3737b50614c362b93bb696a41bb2539108967056d0de7a68fc3e48427b5310ca678208798665555fe2819ff5eecb7b0d1a428b18546e6f811766550b3d2fb2e5b355c080a950", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2m42.492033598s ago: executing program 5 (id=2676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000001050000000000000000000a0000003c0001802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) dup3(r1, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x7, 0x2000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e22, 0x4, @loopback, 0x7196}, {0xa, 0x4, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, r3, 0x9}}, 0x65) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x10007ffffffff}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[]) 2m42.435235014s ago: executing program 33 (id=2676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000001050000000000000000000a0000003c0001802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) dup3(r1, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10010, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x7, 0x2000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e22, 0x4, @loopback, 0x7196}, {0xa, 0x4, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, r3, 0x9}}, 0x65) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x10007ffffffff}, 0x18) socket$inet6_sctp(0xa, 0x801, 0x84) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[]) 4.929817413s ago: executing program 1 (id=4686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}}, 0x0) 4.788944177s ago: executing program 1 (id=4688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7098}, 0x18) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0x459}], 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 4.643102261s ago: executing program 1 (id=4692): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b0b1c000000000001090224"], 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[], 0x70}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40c4) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x17c1, 0x2000, [0x2], [0x3, 0x7]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_misc(r4, &(0x7f0000000740), 0xff67) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000fc0)={0x0, "d3e50b6d2ed943907a058a0a6f71d5a2"}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000), 0xfffb) fcntl$addseals(r4, 0x409, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/233, 0xe9}], 0x3}, 0x9}], 0x1, 0x2060, &(0x7f0000000900)) lseek(r4, 0x100000, 0x3) syz_usb_control_io(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x11}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8006, 0x8c}, 0x0) 3.956993039s ago: executing program 1 (id=4711): r0 = socket$unix(0x1, 0x5, 0x0) pipe(0x0) splice(r0, &(0x7f0000000180)=0xc9d4, 0xffffffffffffffff, 0x0, 0x1, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 2.989255615s ago: executing program 1 (id=4723): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000001c0)=""/172) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x300) 2.920375781s ago: executing program 1 (id=4726): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2400, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) fsopen(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r3, &(0x7f0000000300)={0xb, 0x77, 0x2, 0x7}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffe4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x200000000008, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x20008006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57dc}, 0x94) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000002000"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2.294886434s ago: executing program 0 (id=4732): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) geteuid() r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000004a00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x34, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 2.22117772s ago: executing program 0 (id=4735): ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x30bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20400, 0x1120}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvtap}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r8, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r12}]}}}]}, 0x3c}}, 0x40) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c0, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x4850) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff}, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x6, [0x5, 0x3], 0x9}, 0x10) sendto$inet6(r13, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 2.171621655s ago: executing program 0 (id=4736): socket$inet6_sctp(0xa, 0x801, 0x84) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000"], 0xfffffd97) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 2.170898706s ago: executing program 3 (id=4737): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r1, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x4c2103a0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r2, &(0x7f00000001c0), 0x0) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffffffffffffffd) 2.152062107s ago: executing program 0 (id=4738): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) write(0xffffffffffffffff, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(0xffffffffffffffff, r0, 0x0, 0x3ffff) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffffffffffffffd) 2.073685615s ago: executing program 3 (id=4740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@nobh}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r5, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)={0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r10, 0xe0, 0xfffffffffffffffe}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003180)={0x0, r8, "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", "f9afa625437096a80bacc7f4c4678a175653f1ebb9b5542c52cce23982b7b78c907964f768daa515892607e6bb49328598784951cb1d01bef5f702eebf2e60406a5c84964c662be83731be3b96be39a19bcdc8af466d4dcbae349fbdeb16749e2a5e60b74778bd3c344a3fd8f632cad42541748cdc5a7dc0f714bc27c5d0d950a1b84c895c18abcea0b5748df3993abdf848727771b42772c3227242a9cf8ffbc6b3dc96e57b15d9910c5668b8ea43125ddafde5cd8f773603528fe8c09add47bfc7c06155316885c8cc54ef467a40dde8a6807141140638f68e2f8596658e58be27c1c6da39caceefeff1eb04a8ee050da0f1b0e20a77b33d97ac2b7a96eac4de4cfb643cfb72a5f6d57fdd196580dcc805bc72aea92bec91f605683c294ddc7794e8f2c6379edc982b80b0b48bf4b452867592c7d2373c819e81c9ad7af15919f63a9c50f8555cdcd8ff99c5eb85a0191d174af9e86ae19319009cd350e2f3529ac68ee66c84685278fdb3b9052378d832ad635445261e8a73e94419ed26407d31f70f1a129638e7e56066023032a3aa543f8515b586b266b355666b05978740251134b1c303486fae261208b36962080f983e7ef08976f4f03c85a2504c22b337131083536b7518a0ccc65d48fcb8026fcac3a572b56209e7a50d836bde4e67af23e113fe65a81a7049fefacf30395965d6e77d0a883b6b97e1de1fb543822169753a299f3d54b28d43a828e4ed23d3d2769353fb39a1b0fd485f6f5c1a3423be5b2ae60cd0f4ba3591aaa8741ec25a49c9540b5d23073a5bb5b947b1212d351102c8059d7fda59a444e9a796ee22f75687ca3189762d7e47be04c49f3a7e50bf435bbb8f90768e5a0dc4045e673946438580433a99d63435b27f6a7192b3f13d2a163dfa5ab0449159a58d4c73beb9c783c22d1bd08c30e9d41f9463719d002feb8beb409ebee424efec24a5a7335509d457a2fe8eb27d0f6c11287c5194c169c6e0b63b2dbec033c933b86c24716327c4f06b00146389d5c7919637989d714ff826db504055187d7598a6be28d797d92794963b7029ca8cb2f3ce8acbf7ed35fcbc6293e31948c2009ac863c8a15d1e4e43caa0d541a741760442062cacea9333ccc5bc81016e05ec8fdab03a02dba4309d3eed44c782e9ba270f36cddce91c0fa38ed62c12f62b46b96136b72fce26c1e4d27d51bc7205cfbf7f915bcd6ef3bbc4c5a42f6c02fe25d769447b03840c32f104e77b226d93c24aee513adfce2f354cb7e2173102b5e5660a5e25e43a66cff1e97536dc4fc65b071f7fa58db5f363d4bb8277ac643082990a19038abb177ae474562231d7e4c0c23c0798facd1b98bac42666e12b7bc325174bf52ac66ecc1b26dd5ab731aa77e221dfada1a25b37de030239fb48ea3bcac2c9da42f2b0d40ddc6203a6096ee4e09e3e4569fca80ed8589a84e0d7f19fbba638edd30685737aadec09d80a8448a2ea14867bd8712fd2973616eee17308d34c3ebf2e1bb557d93e7a1f8ae9131370fab8ffa2b2ff85449ba4955f37cce8b5f73f6f2642c0038dad171198a9d80a666fa5b8d8984361eb8310d2034ab6aef8a36db52ea0e5860fbffe45e06a4b5e953484799fc2e03618fed4db3558fe3d6abe0d139528978441aadaea518db76f2d182c8b5bf53c2ed58f68508f8194af029e0ea19de33cbe955d31aff6f4223446384598534afe73357405ccb08ce5a9c520a340df3d539bdcf55dfd9b16ddfa2d97aaffe767f0850a15818d9f498b4f052f949e6669251e64fad38e69e51c0ad02d3467da71dd3cbf4e7a20e7caf85a098545719b73d000b0d7e74d02f04303c737f8ccae3ccd662ab6daabca0bd4b8010e0f85e9a39d619bd2ab99a0c3a9059e0ae4dc307d14dc33297ed037085eabba2f228f967bda941c7f0bcd60ece9bfb63fc2375d5c3e7c66209031595ba972d2ca374615f7e7872b8c59527945c0baf1ffcf1a9fc2d4b14ccb41ffb3e556da38456e865543f37d7506439b5d1f13264da18ceafcb1383a1318d6ece17cd471d064cf5c5982b7200153e125c29551532f94f9dc0f909f0183398c9eb2f41afa9d8bb4491c607cf0781cf0283a444e2f98165b830e0f739f53be0c8f0050fc43058bbc8f394e37e26e804c5ddd65a4926f84d421535accfadae67280f39967b614ea31be22f2ebc2b11571acf7cb8bba96101e3f3fb60b8bc4d63dc8787db3691a132d23931d09e88c071091dc7483b6d9e0bbb12845db7c649d0ca7e18aff73c768e527cee15121b8952d25d9a5ed3f49f8758c8b3f8ab2ecb604eca4528ba566ef2c963de2cfb929522a683bdea34b5de750b31f8627b91e61a24733ec4d940630befe365519adf0c7eacce8c6f9c7d4f144103954c93718199ca2d32908c81d8d11b22cbdb4c5e72a2a6e96b9873ae1761ca8f59de3a3a41225e47079444af79d49287cf517aec1827e6c09fd53af2e2104530bfc9695ee4cf726803882b9eea529f0aba693b5492da85d1db7bf295b32171785757d0d72d7d0dcdf7115a7307e267205901861570c96697516ceaeee5a83850821662136b6e22138dd7550db3a50fe7d9352e78122d3d9df5577e001c513148b84a213fe0d95afdb68c488e66d7f221a4e643f76382c768cfe94cfa1fbcfc099ac1d117033b514f0d2fff6c48f6a10ff5c403a8ad40306dce85553dd5fbbdbd20b48fa6f04fef4740f96a55a6c6d3a57bce8c28ccafa420adcf1ec9feb0def7b4a314dd76e9721d44772b3f6f780db8c14e8e5b724e6fc8fbde9bf08dfc46e0e6b391be6785b84c93f2c590518bc329fdc240e2ffd649e2a30333549c6b7e9eb50a76479028132525fd78bf59ca85997fe7a0c9b31e85545935ecf5a7a8f26a2e3e0a6ce201a89daf129908d2b8e719a3d957e6053fd937130c4453c2a5a3503a4919c9be4ab485e8f106b3aa3a3a0e58411de3d26df1d66870c0d6736bd5f0df133a5a68db2d429db997d6cbd544c62c26611934a6b721580fb340dbb8fd27ce6483e26e8b9200ff3b4a9bad2baf1b2846fce26e2e0ade07b8c9606e3cfaac70be80411c89c7c838f5270670a824ef8dcf4d5028095db69f7c67086151e967f32394d609871dccc0a50b9558412dcd0cd6ce9e2049471c6c286bbab6b840c1a16c7d59bbb108b4e1a624fae35750250de24636e10e197636d8b8a4155ccdcb9c696436fd245988b77c43a6608c5ee3e05fd972b64ce6af94b27ac7c3aace2ae6035922537d4bc7e4e5c7c5c6b2cbce457a9c8d1f88fb043612c0a06aad3840e7de0399185386d0cb67abbe28553d62b1a52521e1a51b446b13e3e8d3ef7af9d7c1aff2b344c5f55e840fab291276905a1a67dd34eebcf8ce804f5af83d5dac2dfcfd9e864264ae32b272cb2332d94629548a04abc512e36dea2a3033d57c31318a6a6850903188a55cc68d056e14c3d19f36927e5a17bd2fb6f53357a1f0dd29aeff2e2973071432d7facde053838e4e472af868d0ffdda61daf1b42444ac88eedfdd1c98198443c6b84b4a167c83695a5151a99fc1ec74a46d3faf6a10480d99d894676c0455a6f912e5f7ae902399a289230d6a1450757d64642673f741386f52d506c386a3b26bff1ea3fd1539f69745edb60c346379680d645c21d93b271d728f412c7d59ef70bb3123c3dc7360338b1037f624629d40ecc4829a6f3e26d27fcc54a04ca4141e3c34db36988ead1788b531138a92f3b4b79a7542b8c94ce548759dedd8c6c0b57991203ef46f17585e2f2ce5f8987ba87063560c693039f332e384f505afbd4749dd46a7dd3d4824f6e3cc642669a09763339e8eb6ef3e70bf99f7d9b9ca576c78dc118ac781d039ab833d4d0a45f13e618c676dd7b51f2d2299983fad1ff18e0a94c46f16f731f8bc06bffc46f900d05cbe2e1ac0438f515f6219461b457bc714d54931b80825016fda14fd476d4d6d6a98fb15440f56d2f0e9bc7f46e15ac537b9e8384fc70fa45935d99a344d653827aa8a280a304fbd6ce0a8c797837ddbb8bb99d2232a1a4c80e09f22c3e0c67afafd87ef9f9639f777fbe27c8eb0da627a52cc4888ad432469aa31220b46ef3bcab96e871947eee3a9aeed05d008e04f301406a1fe9c20f5ae196d2c9d1c28ecc0803cf4c203edf892f0b56453054ef56453e9a9e3944b8c4550fed5a94c60fc85d71b3d567ab96223211819c47c52e09216c4c6f7bb91e4ed92e8e3a945b35b61285fe76589619f1294e86498ed70186a14bf9402394b68cd6c55ea6ee4fd94310ed21b322910d79e420fc315d14fcc382d151066fe5d82bb8748bac2ee40eb1a494f683f8ba314f45172446e8a9bcc19489e334d29f3c8817777cb7c204334b6ecde2de5d8b6ee8276cef21f78131d8372c106ab738ba00f16806ab30b27eb1a6726aa1a30c4f3e0e84ca4786adad95ff1ac17133839c31a8465f6cc032e3ec6a0c5c389c11d95f9706db7c6bdb2ef596eb783c10fde33d060ba21684970edb48d35dfdd25b99285ef46ea868c8ce31ee443196723367908c9e6dac6f0453abae7ee58e80966ca599af14b79bd6a9d30600eb4cb049242175435a2acb731097b07587c8f44a1d95a8b7fc1a969fb2ced826754577ce1c0cf3f7ae0fd1396e17cc12029c53b2d7d4c52625b992b2b477178b6b0597a4d07ba6ba7362db568b200d7bccb00a46e1d1cb2610184195ab9c72cd416ea0fc54f98329f7c8a5fc9fd5981b575e96d56166119b624ea6dae4dc87a5bf42416d073f4417214ec1f4870dcb28c814a3bc5eb03285c9caf2fd23bc06498deb23f3233cef5e59312c5d744725b06f027690b29add604abd826c965f8afd9148b986676cbd30ba2042bf6d999e496c1b410cd4a14792752a4e52428a94e5f590af8723a7324110acb4c0786e1a5d3e3afa11bae74ea46758ba053c08d862f76062b2ed0748abdfd9169f935579fe827fbb9e73bf1045a05ab8d07621e81a95719af3a4ff3c7b81cddd156bbad29762a57457473b085a3cde54c09fa34656b03bd10c873cd4a280ba7fa28b01e8cb50c2b13dc7129d3856bb37f96fac8c59db48791895caf04950a473875bbe12714399f4cafd8e38096386afa7834111916b7af34d52482b7032408e701e05c9b968d1e35ed6eb5030488e53beb809df2c2f37fa7bd80724be21e8aef1bed850fccd86a56542685403a531eae92f18c108f541a1b318ca024a280cb1b5b8052d6dcbeed4186e8ec99c62a1a1749794c5bea42343fb1dc6194e3db5ecbd13e90cff87a89ceeb5222bfc98a74a52667788dbce61ce9643533d9e11379b9df1a61524ab83723c12841e24183ba435853a40e23a937daedb89cab26c24e1c7bbbef5361867cd242bf3e3ab23ea96ab574a0f042de4d8ebe"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x100000, 0x1000, 0x6, 0x1}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r13], 0x68}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r12, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0x1}}, './file0\x00'}) 1.986943514s ago: executing program 3 (id=4744): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r3, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r5 = open(0x0, 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mm_lru_insertion\x00'}, 0x18) 1.92815952s ago: executing program 2 (id=4746): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.800601132s ago: executing program 2 (id=4747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") 1.613162901s ago: executing program 2 (id=4749): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b0b1c000000000001090224"], 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[], 0x70}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40c4) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x17c1, 0x2000, [0x2], [0x3, 0x7]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_misc(r4, &(0x7f0000000740), 0xff67) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000fc0)={0x0, "d3e50b6d2ed943907a058a0a6f71d5a2"}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000), 0xfffb) fcntl$addseals(r4, 0x409, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/233, 0xe9}], 0x3}, 0x9}], 0x1, 0x2060, &(0x7f0000000900)) lseek(r4, 0x100000, 0x3) syz_usb_control_io(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x11}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8006, 0x8c}, 0x0) 1.11477058s ago: executing program 0 (id=4761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0xb, @empty, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 1.096083532s ago: executing program 3 (id=4752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x66, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@nodioread_nolock}]}, 0x1, 0x47a, &(0x7f0000000180)="$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") socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() socket$tipc(0x1e, 0x5, 0x0) 1.043595867s ago: executing program 2 (id=4754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = signalfd(0xffffffffffffffff, &(0x7f0000002140), 0x8) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad7, 0x80, 0x1, 0x8089}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000dc0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780, 0x12345}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) statx(r1, &(0x7f0000000040)='\x00', 0x1000, 0x800, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000010018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create(0x0) 903.931811ms ago: executing program 6 (id=4755): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r3, 0x30}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x10}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) vmsplice(r2, 0x0, 0x0, 0x1) 898.330591ms ago: executing program 2 (id=4756): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r1, 0x541b, 0xf0ff1f00000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r6, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r6, r0, 0x0, 0x3ffff) sendfile(r6, r0, 0x0, 0x7ffffffffffffffd) 671.191784ms ago: executing program 6 (id=4757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 609.50673ms ago: executing program 6 (id=4758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x74) fspick(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@dioread_lock}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@usrquota}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) 358.096935ms ago: executing program 6 (id=4759): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={0x0, 0xfb, 0x114, 0x6, 0x2, "f500", "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"}, 0x114, 0x0) write$binfmt_script(r0, &(0x7f0000002500)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0', [{}], 0xa, "cc3de289d7e4ee6cfc589ada7ff5cdcaf2f94853ec1699f25056353dce08b113ab7e49f0c358dd320d069076eb7baaf672bc19d3d5792166356e5b5b145e9b79aaeb282283271b869aef79207e60a7ee7e1baf8f25b265ef1893ece9a714d45340fd73c1aa8f452572ed47ef77ca333d23fc20fc8c92baa20e45fd11c6473fecbed842e69f3773f6270936845b7356650f8aeddcd8e413cff686b88d4277080fc7adf5fada207ee3d57e31c686474ec458d9882caf640d4efcaed525eef144170969e7bb1a181f2898924b64c3b7ceabac6606df3ca296cce85cdc7160bf813bfb3d641b80d1e0d49e9cff8b90beb07f17"}, 0x10f4) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0xa008, 0x0) 333.697357ms ago: executing program 6 (id=4760): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0xe, 0x6e05, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x7, 0x5, 0x6}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffd}, 0x18) r2 = socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000040)=[@in={0x2, 0x4e26, @loopback}, @in6={0xa, 0x4e21, 0xe915, @mcast2, 0x4}]}, &(0x7f0000000140)=0x10) 306.6089ms ago: executing program 0 (id=4762): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r1, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x4c2103a0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r2, &(0x7f00000001c0)="49bda8f11851", 0x6) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffffffffffffffd) 301.84683ms ago: executing program 6 (id=4763): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r3, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r5 = open(0x0, 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mm_lru_insertion\x00'}, 0x18) 213.965969ms ago: executing program 3 (id=4764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") 167.912303ms ago: executing program 3 (id=4765): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b0b1c000000000001090224"], 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[], 0x70}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40c4) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x17c1, 0x2000, [0x2], [0x3, 0x7]}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_misc(r4, &(0x7f0000000740), 0xff67) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000fc0)={0x0, "d3e50b6d2ed943907a058a0a6f71d5a2"}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000), 0xfffb) fcntl$addseals(r4, 0x409, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000005c0)=""/90, 0x5a}, {&(0x7f0000000640)=""/233, 0xe9}], 0x3}, 0x9}], 0x1, 0x2060, &(0x7f0000000900)) lseek(r4, 0x100000, 0x3) syz_usb_control_io(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "6537ce03"}]}}, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x11}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8006, 0x8c}, 0x0) 0s ago: executing program 2 (id=4766): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x4) kernel console output (not intermixed with test programs): =128, nr_sectors = 1 limit=128 [ 562.701950][ T29] audit: type=1326 audit(1760746086.725:15273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 562.715379][T17108] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 562.738936][ T29] audit: type=1326 audit(1760746086.725:15274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17127 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 562.784490][T17105] syz.0.4132: attempt to access beyond end of device [ 562.784490][T17105] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 562.798089][T17105] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 562.815209][T17133] loop3: detected capacity change from 0 to 128 [ 562.857682][T17137] 9pnet_fd: Insufficient options for proto=fd [ 562.912487][T17141] loop2: detected capacity change from 0 to 1024 [ 562.921459][T17141] EXT4-fs: Ignoring removed nobh option [ 562.931570][T17141] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 562.950386][T17143] loop3: detected capacity change from 0 to 512 [ 562.957948][T17143] EXT4-fs: Mount option(s) incompatible with ext2 [ 562.966609][T17141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.985413][T17141] 9pnet_fd: Insufficient options for proto=fd [ 563.029919][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.099215][T17126] syz.6.4140: attempt to access beyond end of device [ 563.099215][T17126] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 563.112688][T17126] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 563.127724][T17157] bond1: entered promiscuous mode [ 563.132828][T17157] bond1: entered allmulticast mode [ 563.147748][T17157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.158959][T17157] bond1 (unregistering): Released all slaves [ 563.168768][T17126] syz.6.4140: attempt to access beyond end of device [ 563.168768][T17126] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 563.182266][T17126] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 563.205035][T17161] loop3: detected capacity change from 0 to 128 [ 563.637647][T17172] 9pnet_fd: Insufficient options for proto=fd [ 563.695434][T17176] loop6: detected capacity change from 0 to 128 [ 563.855331][T17184] loop6: detected capacity change from 0 to 1024 [ 563.862418][T17184] EXT4-fs: Ignoring removed nobh option [ 563.876175][T17184] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 564.056095][T17184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.188498][T17184] 9pnet_fd: Insufficient options for proto=fd [ 564.292519][T17193] bond1: entered promiscuous mode [ 564.297646][T17193] bond1: entered allmulticast mode [ 564.304199][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.304440][T17193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.337217][T17198] loop2: detected capacity change from 0 to 1024 [ 564.344002][T17198] EXT4-fs: Ignoring removed orlov option [ 564.350945][T17193] bond1 (unregistering): Released all slaves [ 564.357332][T17201] loop3: detected capacity change from 0 to 128 [ 564.362597][T17198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.388123][T17204] loop6: detected capacity change from 0 to 512 [ 564.394828][T17204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 564.402830][T17204] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 564.417612][T17204] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4169: corrupted inode contents [ 564.430810][T17204] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4169: mark_inode_dirty error [ 564.442567][T17204] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4169: invalid indirect mapped block 1 (level 1) [ 564.456559][T17204] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4169: corrupted inode contents [ 564.468935][T17204] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 564.477996][T17204] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4169: corrupted inode contents [ 564.490092][T17204] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4169: mark_inode_dirty error [ 564.501607][T17204] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 564.511727][T17204] EXT4-fs (loop6): 1 truncate cleaned up [ 564.518000][T17204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.521383][T17213] loop0: detected capacity change from 0 to 128 [ 564.570976][T17215] loop0: detected capacity change from 0 to 2048 [ 564.608642][T17215] loop0: p2 p3 p7 [ 564.627440][T17217] siw: device registration error -23 [ 565.016149][T17229] loop0: detected capacity change from 0 to 128 [ 565.081311][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.176083][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.186933][T17232] loop2: detected capacity change from 0 to 1024 [ 565.193662][T17232] EXT4-fs: Ignoring removed nobh option [ 565.199906][T17232] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 565.222209][T17232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.236757][T17232] 9pnet_fd: Insufficient options for proto=fd [ 565.261314][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.265256][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4183'. [ 565.307683][T17242] loop2: detected capacity change from 0 to 512 [ 565.315165][T17242] EXT4-fs: Mount option(s) incompatible with ext2 [ 565.319429][T17244] bond1: entered promiscuous mode [ 565.326696][T17244] bond1: entered allmulticast mode [ 565.332128][T17244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.343099][T17244] bond1 (unregistering): Released all slaves [ 565.355523][T17247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.364127][T17247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.376750][T17247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.417604][T17249] loop6: detected capacity change from 0 to 128 [ 565.496592][T17253] loop6: detected capacity change from 0 to 1024 [ 565.503420][T17253] EXT4-fs: Ignoring removed orlov option [ 565.525234][T17253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.539314][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4190'. [ 565.548424][T17253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4190'. [ 565.566068][T17253] program syz.6.4190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.590014][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.665228][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4196'. [ 565.696650][T17272] loop6: detected capacity change from 0 to 512 [ 565.704022][T17272] EXT4-fs: Mount option(s) incompatible with ext2 [ 565.736685][T17274] bond1: entered promiscuous mode [ 565.741892][T17274] bond1: entered allmulticast mode [ 565.747330][T17274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.757689][T17274] bond1 (unregistering): Released all slaves [ 565.822265][T17277] loop6: detected capacity change from 0 to 2048 [ 565.868590][T17279] loop0: detected capacity change from 0 to 512 [ 565.870135][T17277] loop6: p2 p3 p7 [ 565.876138][T17279] EXT4-fs: Mount option(s) incompatible with ext2 [ 565.921920][T17281] bond1: entered promiscuous mode [ 565.927042][T17281] bond1: entered allmulticast mode [ 565.932525][T17281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.945088][T17281] bond1 (unregistering): Released all slaves [ 565.974873][T17288] loop0: detected capacity change from 0 to 128 [ 566.026874][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4208'. [ 566.100037][T17302] bond1: entered promiscuous mode [ 566.105240][T17302] bond1: entered allmulticast mode [ 566.110729][T17302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.122338][T17302] bond1 (unregistering): Released all slaves [ 566.330227][T17309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.373340][T17309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.450852][T17308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 566.865570][T17327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'. [ 566.943082][T17330] loop6: detected capacity change from 0 to 128 [ 567.029878][T17343] loop6: detected capacity change from 0 to 128 [ 567.042134][T17347] loop0: detected capacity change from 0 to 512 [ 567.049390][T17347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 567.058211][T17347] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 567.073115][T17347] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4227: corrupted inode contents [ 567.085475][T17347] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.4227: mark_inode_dirty error [ 567.097318][T17347] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4227: invalid indirect mapped block 1 (level 1) [ 567.112979][T17347] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4227: corrupted inode contents [ 567.125117][T17347] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 567.134407][T17347] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4227: corrupted inode contents [ 567.147922][T17347] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.4227: mark_inode_dirty error [ 567.159644][T17347] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 567.168991][T17354] loop6: detected capacity change from 0 to 128 [ 567.181113][T17347] EXT4-fs (loop0): 1 truncate cleaned up [ 567.187269][T17347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.683657][T17359] syz.6.4233: attempt to access beyond end of device [ 567.683657][T17359] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 567.697205][T17359] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 567.724611][T17354] syz.6.4233: attempt to access beyond end of device [ 567.724611][T17354] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 567.738355][T17354] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 567.828574][T13845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.861902][T17380] loop0: detected capacity change from 0 to 128 [ 567.903312][T17381] loop6: detected capacity change from 0 to 512 [ 567.910025][T17381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 567.921327][T17381] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 567.935956][T17381] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4239: corrupted inode contents [ 567.948281][T17381] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4239: mark_inode_dirty error [ 567.960084][T17381] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4239: invalid indirect mapped block 1 (level 1) [ 567.973586][T17381] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4239: corrupted inode contents [ 567.987895][T17381] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 568.124644][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4247'. [ 568.143043][T17388] loop0: detected capacity change from 0 to 128 [ 568.304225][T17391] loop2: detected capacity change from 0 to 1024 [ 568.365319][T17391] EXT4-fs: Ignoring removed orlov option [ 568.427335][T17381] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4239: corrupted inode contents [ 568.440285][T17381] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4239: mark_inode_dirty error [ 568.451766][T17381] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 568.461153][T17381] EXT4-fs (loop6): 1 truncate cleaned up [ 568.468290][T17381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.492136][T17391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.508717][T17391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4248'. [ 568.517805][T17391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4248'. [ 568.536857][T17403] loop0: detected capacity change from 0 to 1024 [ 568.543991][T17403] EXT4-fs: Ignoring removed nobh option [ 568.552122][T17404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.560863][T17404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.569176][T17403] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 568.599636][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 568.599654][ T29] audit: type=1326 audit(1760746092.795:15638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.2.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 568.629764][ T29] audit: type=1326 audit(1760746092.795:15639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.2.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 568.653475][ T29] audit: type=1326 audit(1760746092.795:15640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.2.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 568.657692][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.677261][ T29] audit: type=1326 audit(1760746092.795:15641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.2.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 568.689022][T17403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.709847][ T29] audit: type=1326 audit(1760746092.795:15642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.2.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 568.729441][T17403] 9pnet_fd: Insufficient options for proto=fd [ 568.745361][ T29] audit: type=1326 audit(1760746092.795:15643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17390 comm="syz.2.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 568.748016][T17408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 568.809250][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.855878][T17415] 9pnet_fd: Insufficient options for proto=fd [ 568.897502][T13845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.910683][T17420] loop3: detected capacity change from 0 to 1024 [ 568.917737][T17420] EXT4-fs: Ignoring removed orlov option [ 568.964265][T17420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.979184][T17420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4258'. [ 568.988288][T17420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4258'. [ 568.999206][T17420] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4258: bg 0: block 232: padding at end of block bitmap is not set [ 569.015012][T17420] EXT4-fs (loop3): Remounting filesystem read-only [ 569.021659][T17420] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 569.043925][ T29] audit: type=1326 audit(1760746093.255:15644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.3.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 569.067596][ T29] audit: type=1326 audit(1760746093.255:15645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.3.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 569.091362][ T29] audit: type=1326 audit(1760746093.255:15646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.3.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 569.114971][ T29] audit: type=1326 audit(1760746093.255:15647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17418 comm="syz.3.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 569.206007][T17436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.217647][T17420] program syz.3.4258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.259015][T17437] loop0: detected capacity change from 0 to 512 [ 569.266375][T17437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.310241][T17437] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 569.324892][T17437] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4263: corrupted inode contents [ 569.346157][T17437] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.4263: mark_inode_dirty error [ 569.359306][T17437] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4263: invalid indirect mapped block 1 (level 1) [ 569.373494][T17437] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4263: corrupted inode contents [ 569.387856][T17437] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 569.401046][T17437] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4263: corrupted inode contents [ 569.420091][T17437] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.4263: mark_inode_dirty error [ 569.432257][T17437] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 569.443127][T17437] EXT4-fs (loop0): 1 truncate cleaned up [ 569.450428][T17437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.928135][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.078363][T17445] loop3: detected capacity change from 0 to 1024 [ 570.085504][T17445] EXT4-fs: Ignoring removed orlov option [ 570.095505][T17445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.228828][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4264'. [ 570.238091][T17445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4264'. [ 570.254473][T13845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.530773][T17452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.548187][T17445] program syz.3.4264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.585103][T17452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.966554][T17452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.995891][T17456] loop6: detected capacity change from 0 to 128 [ 571.007485][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.020006][T17458] 9pnet_fd: Insufficient options for proto=fd [ 571.099115][T17464] loop6: detected capacity change from 0 to 128 [ 571.141860][T17466] loop2: detected capacity change from 0 to 1024 [ 571.158799][T17466] EXT4-fs: Ignoring removed orlov option [ 571.175721][T17466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.196514][T17466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4275'. [ 571.205583][T17466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4275'. [ 571.222082][T17466] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4275: bg 0: block 232: padding at end of block bitmap is not set [ 571.224893][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4271'. [ 571.245957][T17466] EXT4-fs (loop2): Remounting filesystem read-only [ 571.253039][T17466] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 571.305450][T17478] loop6: detected capacity change from 0 to 512 [ 571.312132][T17478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 571.328012][T17474] program syz.1.4278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.358492][T17466] program syz.2.4275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.396653][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.405957][T17478] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 571.420483][T17478] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4277: corrupted inode contents [ 571.432856][T17478] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4277: mark_inode_dirty error [ 571.444683][T17478] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4277: invalid indirect mapped block 1 (level 1) [ 571.460228][T17478] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4277: corrupted inode contents [ 571.472354][T17478] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 571.484412][T17478] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4277: corrupted inode contents [ 571.500307][T17478] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4277: mark_inode_dirty error [ 571.513918][T17478] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 571.524146][T17478] EXT4-fs (loop6): 1 truncate cleaned up [ 571.530514][T17478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.724505][T17485] loop3: detected capacity change from 0 to 1024 [ 571.767624][T17485] EXT4-fs: Ignoring removed orlov option [ 571.780301][T17487] loop0: detected capacity change from 0 to 128 [ 571.807886][T17485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.841836][T17485] program syz.3.4282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.868001][T17492] 9pnet_fd: Insufficient options for proto=fd [ 571.876649][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.937805][T17504] loop2: detected capacity change from 0 to 128 [ 571.947681][T17508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.957071][T17508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.983946][T17508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 572.055571][T17518] siw: device registration error -23 [ 572.061436][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.074434][T17522] program syz.1.4297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.089510][T17525] 9pnet_fd: Insufficient options for proto=fd [ 572.146778][T17534] loop6: detected capacity change from 0 to 128 [ 572.756012][T17548] loop2: detected capacity change from 0 to 512 [ 572.762926][T17548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 572.799337][T17548] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 572.814008][T17548] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4308: corrupted inode contents [ 572.826416][T17548] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.4308: mark_inode_dirty error [ 572.838441][T17548] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4308: invalid indirect mapped block 1 (level 1) [ 572.852137][T17548] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4308: corrupted inode contents [ 572.866974][T17548] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 572.875906][T17548] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4308: corrupted inode contents [ 572.888287][T17548] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.4308: mark_inode_dirty error [ 572.899828][T17548] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 572.911448][T17548] EXT4-fs (loop2): 1 truncate cleaned up [ 573.156767][T17556] 9pnet_fd: Insufficient options for proto=fd [ 573.165574][T17553] bond1: entered promiscuous mode [ 573.170660][T17553] bond1: entered allmulticast mode [ 573.177347][T17553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.188351][T17553] bond1 (unregistering): Released all slaves [ 573.259754][T17561] __nla_validate_parse: 7 callbacks suppressed [ 573.259777][T17561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4313'. [ 573.275456][T17561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4313'. [ 573.302168][T17561] program syz.1.4313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.392481][T17581] loop2: detected capacity change from 0 to 512 [ 573.394905][T17579] loop0: detected capacity change from 0 to 2048 [ 573.425637][T17581] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.454126][T17579] loop0: p2 p3 p7 [ 573.516815][T17589] loop6: detected capacity change from 0 to 512 [ 573.523654][T17589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.628740][T17591] loop0: detected capacity change from 0 to 128 [ 573.975002][T17589] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 573.989569][T17589] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4324: corrupted inode contents [ 574.001757][T17589] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4324: mark_inode_dirty error [ 574.013915][T17589] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4324: invalid indirect mapped block 1 (level 1) [ 574.028462][T17589] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4324: corrupted inode contents [ 574.040730][T17589] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 574.049578][T17589] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4324: corrupted inode contents [ 574.061786][T17589] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4324: mark_inode_dirty error [ 574.073189][T17589] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 574.082670][T17589] EXT4-fs (loop6): 1 truncate cleaned up [ 574.115790][T17594] loop2: detected capacity change from 0 to 128 [ 574.197697][T17602] loop0: detected capacity change from 0 to 1024 [ 574.224291][T17602] EXT4-fs: Ignoring removed orlov option [ 574.236354][T17602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4330'. [ 574.245455][T17602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4330'. [ 574.292754][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 574.292775][ T29] audit: type=1326 audit(1760746098.505:15924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.326822][T17602] program syz.0.4330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.336624][ T29] audit: type=1326 audit(1760746098.505:15925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.341135][T17613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.360319][ T29] audit: type=1326 audit(1760746098.505:15926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.379587][T17613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.392232][ T29] audit: type=1326 audit(1760746098.505:15927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.423338][ T29] audit: type=1326 audit(1760746098.505:15928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.446953][ T29] audit: type=1326 audit(1760746098.505:15929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.470575][ T29] audit: type=1326 audit(1760746098.505:15930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.494266][ T29] audit: type=1326 audit(1760746098.505:15931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.500700][T17619] loop6: detected capacity change from 0 to 1024 [ 574.518151][ T29] audit: type=1326 audit(1760746098.515:15932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.547996][ T29] audit: type=1326 audit(1760746098.515:15933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.0.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89e315efc9 code=0x7ffc0000 [ 574.548901][T17619] EXT4-fs: Ignoring removed orlov option [ 574.582744][T17613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.603332][T17620] siw: device registration error -23 [ 574.609535][T17622] loop0: detected capacity change from 0 to 1024 [ 574.616651][T17622] EXT4-fs: Ignoring removed nobh option [ 574.622642][T17622] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 574.626330][T17619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4338'. [ 574.640850][T17622] 9pnet_fd: Insufficient options for proto=fd [ 574.641498][T17619] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4338'. [ 574.671352][T17619] program syz.6.4338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.703773][T17630] loop0: detected capacity change from 0 to 128 [ 574.732982][T17634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4342'. [ 574.759050][T17636] siw: device registration error -23 [ 574.877616][T17640] loop0: detected capacity change from 0 to 512 [ 574.884386][T17640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.004886][T17640] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 575.019420][T17640] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4344: corrupted inode contents [ 575.034874][T17640] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.4344: mark_inode_dirty error [ 575.048095][T17640] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4344: invalid indirect mapped block 1 (level 1) [ 575.062449][T17640] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4344: corrupted inode contents [ 575.075173][T17640] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 575.084174][T17640] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4344: corrupted inode contents [ 575.096848][T17640] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.4344: mark_inode_dirty error [ 575.109988][T17640] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 575.119293][T17640] EXT4-fs (loop0): 1 truncate cleaned up [ 575.279318][T17648] loop3: detected capacity change from 0 to 1024 [ 575.322813][T17648] EXT4-fs: Ignoring removed orlov option [ 575.386487][T17652] loop6: detected capacity change from 0 to 128 [ 575.395615][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4347'. [ 575.404660][T17648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4347'. [ 575.460628][T17648] program syz.3.4347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.540040][T17664] loop6: detected capacity change from 0 to 128 [ 575.584661][T17667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.593451][T17667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.716104][T17672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.724777][T17672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.736747][T17672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.767206][T17676] loop3: detected capacity change from 0 to 512 [ 575.774406][T17676] EXT4-fs: Mount option(s) incompatible with ext2 [ 575.786327][T17677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.822444][T17681] loop3: detected capacity change from 0 to 1024 [ 575.829389][T17681] EXT4-fs: Ignoring removed nobh option [ 575.835732][T17681] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 575.857785][T17681] 9pnet_fd: Insufficient options for proto=fd [ 575.907519][T17687] loop3: detected capacity change from 0 to 128 [ 575.937500][T17689] loop3: detected capacity change from 0 to 1024 [ 575.944373][T17689] EXT4-fs: Ignoring removed orlov option [ 575.956173][T17689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4363'. [ 575.972069][T17689] program syz.3.4363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.055308][T17694] loop3: detected capacity change from 0 to 512 [ 576.061874][T17694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.070265][T17694] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 576.084726][T17694] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4365: corrupted inode contents [ 576.096732][T17694] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.4365: mark_inode_dirty error [ 576.108593][T17694] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4365: invalid indirect mapped block 1 (level 1) [ 576.122386][T17694] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4365: corrupted inode contents [ 576.134458][T17694] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 576.143183][T17694] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4365: corrupted inode contents [ 576.155374][T17694] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.4365: mark_inode_dirty error [ 576.166826][T17694] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 576.175975][T17694] EXT4-fs (loop3): 1 truncate cleaned up [ 576.530569][T17707] loop6: detected capacity change from 0 to 512 [ 576.538123][T17707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.555997][T17705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.604523][T17707] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 576.619047][T17707] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4368: corrupted inode contents [ 576.632883][T17707] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4368: mark_inode_dirty error [ 576.646742][T17707] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4368: invalid indirect mapped block 1 (level 1) [ 576.661348][T17707] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4368: corrupted inode contents [ 576.675927][T17707] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 576.688501][T17707] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4368: corrupted inode contents [ 576.704561][T17707] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4368: mark_inode_dirty error [ 576.717615][T17707] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 576.726850][T17707] EXT4-fs (loop6): 1 truncate cleaned up [ 577.512948][T17714] loop3: detected capacity change from 0 to 512 [ 577.538413][T17713] bond1: entered promiscuous mode [ 577.543541][T17713] bond1: entered allmulticast mode [ 577.549922][T17714] EXT4-fs: Mount option(s) incompatible with ext2 [ 577.568909][T17713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.595001][T17713] bond1 (unregistering): Released all slaves [ 577.623046][T17719] loop3: detected capacity change from 0 to 1024 [ 577.638299][T17719] EXT4-fs: Ignoring removed nobh option [ 577.670483][T17719] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 577.682926][T17723] loop2: detected capacity change from 0 to 128 [ 577.729059][T17725] loop6: detected capacity change from 0 to 2048 [ 577.738903][T17730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.747569][T17730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.748536][T17719] 9pnet_fd: Insufficient options for proto=fd [ 577.760212][T17730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 577.804375][T17734] loop3: detected capacity change from 0 to 128 [ 577.840517][T17725] loop6: p2 p3 p7 [ 577.870534][T17738] loop2: detected capacity change from 0 to 128 [ 578.002828][T17746] loop2: detected capacity change from 0 to 512 [ 578.010383][T17747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 578.018058][T17746] EXT4-fs: Mount option(s) incompatible with ext2 [ 578.140469][T17734] syz.3.4379: attempt to access beyond end of device [ 578.140469][T17734] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 578.153966][T17734] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 578.166592][T17743] syz.3.4379: attempt to access beyond end of device [ 578.166592][T17743] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 578.180386][T17743] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 578.234292][T17743] syz.3.4379: attempt to access beyond end of device [ 578.234292][T17743] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 578.247812][T17743] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 578.324636][T17755] bond1: entered promiscuous mode [ 578.329738][T17755] bond1: entered allmulticast mode [ 578.335640][T17755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.346514][T17755] bond1 (unregistering): Released all slaves [ 578.413117][T17760] loop2: detected capacity change from 0 to 512 [ 578.420025][T17760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 578.472527][T17760] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 578.487090][T17760] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4387: corrupted inode contents [ 578.500975][T17760] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.4387: mark_inode_dirty error [ 578.513654][T17760] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4387: invalid indirect mapped block 1 (level 1) [ 578.527242][T17760] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4387: corrupted inode contents [ 578.539550][T17760] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 578.548629][T17760] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4387: corrupted inode contents [ 578.560656][T17760] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.4387: mark_inode_dirty error [ 578.572556][T17760] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 578.582104][T17760] EXT4-fs (loop2): 1 truncate cleaned up [ 578.637467][T17763] 9pnet_fd: Insufficient options for proto=fd [ 578.918741][T17771] __nla_validate_parse: 1 callbacks suppressed [ 578.918763][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4393'. [ 579.047375][T17785] loop6: detected capacity change from 0 to 128 [ 579.089810][T17787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4401'. [ 579.098836][T17787] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4401'. [ 579.101011][T17791] loop0: detected capacity change from 0 to 128 [ 579.121044][T17787] program syz.1.4401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.314108][T17797] loop0: detected capacity change from 0 to 128 [ 579.387357][T17800] loop0: detected capacity change from 0 to 128 [ 579.432075][T17801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 579.548467][T17804] loop2: detected capacity change from 0 to 1024 [ 579.565087][T17806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4408'. [ 579.603352][T17804] EXT4-fs: Ignoring removed nobh option [ 579.627392][T17804] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 579.635596][T17812] loop6: detected capacity change from 0 to 128 [ 579.647779][T17804] 9pnet_fd: Insufficient options for proto=fd [ 579.687071][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 579.687092][ T29] audit: type=1326 audit(1760746103.905:16339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.717410][ T29] audit: type=1326 audit(1760746103.905:16340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.741291][ T29] audit: type=1326 audit(1760746103.905:16341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.763349][T17802] syz.0.4406: attempt to access beyond end of device [ 579.763349][T17802] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 579.765038][ T29] audit: type=1326 audit(1760746103.905:16342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.778468][T17802] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 579.802082][ T29] audit: type=1326 audit(1760746103.905:16343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.802120][ T29] audit: type=1326 audit(1760746103.905:16344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.802150][ T29] audit: type=1326 audit(1760746103.905:16345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.882212][ T29] audit: type=1326 audit(1760746103.905:16346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.906021][ T29] audit: type=1326 audit(1760746103.905:16347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.913168][T17802] syz.0.4406: attempt to access beyond end of device [ 579.913168][T17802] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 579.929664][ T29] audit: type=1326 audit(1760746103.905:16348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17816 comm="syz.2.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579d0fefc9 code=0x7ffc0000 [ 579.943034][T17802] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 580.034935][T17823] loop2: detected capacity change from 0 to 128 [ 580.046013][T17825] loop0: detected capacity change from 0 to 512 [ 580.078575][T17825] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.152825][T17840] loop6: detected capacity change from 0 to 512 [ 580.159674][T17840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 580.216671][T17842] loop2: detected capacity change from 0 to 128 [ 580.263535][T17844] loop2: detected capacity change from 0 to 128 [ 580.572235][T17840] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 580.586764][T17840] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4417: corrupted inode contents [ 580.598978][T17840] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4417: mark_inode_dirty error [ 580.610901][T17840] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4417: invalid indirect mapped block 1 (level 1) [ 580.625795][T17840] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4417: corrupted inode contents [ 580.638389][T17840] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 580.647387][T17840] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4417: corrupted inode contents [ 580.659631][T17840] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4417: mark_inode_dirty error [ 580.664512][T17846] bond1: entered promiscuous mode [ 580.675783][T17846] bond1: entered allmulticast mode [ 580.684134][T17840] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 580.693396][T17840] EXT4-fs (loop6): 1 truncate cleaned up [ 580.694368][T17846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.736048][T17852] loop0: detected capacity change from 0 to 512 [ 580.790680][T17846] bond1 (unregistering): Released all slaves [ 580.816804][T17852] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.845700][T17845] syz.2.4425: attempt to access beyond end of device [ 580.845700][T17845] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 580.859169][T17845] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 580.894029][T17844] syz.2.4425: attempt to access beyond end of device [ 580.894029][T17844] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 580.907672][T17844] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 580.926584][T17845] syz.2.4425: attempt to access beyond end of device [ 580.926584][T17845] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 580.940137][T17845] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 581.130348][T17862] bond1: entered promiscuous mode [ 581.135662][T17862] bond1: entered allmulticast mode [ 581.144031][T17868] loop3: detected capacity change from 0 to 128 [ 581.294173][T17862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.352790][T17862] bond1 (unregistering): Released all slaves [ 581.621255][T17880] loop2: detected capacity change from 0 to 128 [ 581.628949][T17879] loop3: detected capacity change from 0 to 1024 [ 581.646353][T17879] EXT4-fs: Ignoring removed nobh option [ 581.658921][T17879] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 581.691947][T17879] 9pnet_fd: Insufficient options for proto=fd [ 581.721366][T17892] loop2: detected capacity change from 0 to 512 [ 581.734843][T17892] EXT4-fs: Mount option(s) incompatible with ext2 [ 581.757077][T17899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.765744][T17899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.791174][T17899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.829185][T17904] loop0: detected capacity change from 0 to 512 [ 581.881393][T17904] EXT4-fs: Ignoring removed nomblk_io_submit option [ 581.983662][T17908] loop6: detected capacity change from 0 to 128 [ 582.003268][T17904] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 582.017906][T17904] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4444: corrupted inode contents [ 582.030608][T17904] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.4444: mark_inode_dirty error [ 582.042541][T17904] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4444: invalid indirect mapped block 1 (level 1) [ 582.056127][T17904] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4444: corrupted inode contents [ 582.070790][T17904] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 582.079643][T17904] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4444: corrupted inode contents [ 582.091823][T17904] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.4444: mark_inode_dirty error [ 582.103556][T17904] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 582.114630][T17904] EXT4-fs (loop0): 1 truncate cleaned up [ 582.164115][T17911] bond1: entered promiscuous mode [ 582.169222][T17911] bond1: entered allmulticast mode [ 582.233332][T17911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.280127][T17911] bond1 (unregistering): Released all slaves [ 582.387446][T17922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4455'. [ 582.408498][T17924] loop2: detected capacity change from 0 to 512 [ 582.416162][T17924] EXT4-fs: Mount option(s) incompatible with ext2 [ 582.440770][T17930] loop3: detected capacity change from 0 to 128 [ 582.466572][T17934] loop6: detected capacity change from 0 to 128 [ 582.487184][T17938] loop3: detected capacity change from 0 to 128 [ 582.496646][T17935] loop2: detected capacity change from 0 to 1024 [ 582.503451][T17935] EXT4-fs: Ignoring removed orlov option [ 582.512889][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4462'. [ 582.522016][T17936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4462'. [ 582.531157][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4461'. [ 582.540344][T17935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4461'. [ 582.541812][T17936] program syz.1.4462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.570100][T17935] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4461: bg 0: block 232: padding at end of block bitmap is not set [ 582.601694][T17935] EXT4-fs (loop2): Remounting filesystem read-only [ 582.610070][T17935] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 582.657263][T17949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.671010][T17951] loop0: detected capacity change from 0 to 1024 [ 582.682871][T17935] program syz.2.4461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.692911][T17951] EXT4-fs: Ignoring removed orlov option [ 582.710263][T17949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.730923][T17951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4467'. [ 582.751476][T17949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.760586][T17951] program syz.0.4467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.807280][T17957] bond1: entered promiscuous mode [ 582.812378][T17957] bond1: entered allmulticast mode [ 582.818199][T17957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.833459][T17957] bond1 (unregistering): Released all slaves [ 582.860662][T17964] loop2: detected capacity change from 0 to 512 [ 582.868553][T17964] EXT4-fs: Mount option(s) incompatible with ext2 [ 582.917190][T17970] loop2: detected capacity change from 0 to 128 [ 582.937253][T17972] loop0: detected capacity change from 0 to 1024 [ 582.944361][T17972] EXT4-fs: Ignoring removed orlov option [ 582.959704][T17972] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4476: bg 0: block 232: padding at end of block bitmap is not set [ 582.981692][T17972] EXT4-fs (loop0): Remounting filesystem read-only [ 582.996671][T17972] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 583.034964][T17972] program syz.0.4476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 583.153438][T17975] syz.2.4475: attempt to access beyond end of device [ 583.153438][T17975] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 583.166984][T17975] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 583.175656][T17991] loop3: detected capacity change from 0 to 512 [ 583.178422][T17991] EXT4-fs: Mount option(s) incompatible with ext2 [ 583.183954][T17970] syz.2.4475: attempt to access beyond end of device [ 583.183954][T17970] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 583.202049][T17970] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 583.211030][T17992] FAULT_INJECTION: forcing a failure. [ 583.211030][T17992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.231963][T17992] CPU: 1 UID: 0 PID: 17992 Comm: syz.0.4481 Not tainted syzkaller #0 PREEMPT(voluntary) [ 583.232000][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 583.232017][T17992] Call Trace: [ 583.232026][T17992] [ 583.232035][T17992] __dump_stack+0x1d/0x30 [ 583.232128][T17992] dump_stack_lvl+0xe8/0x140 [ 583.232229][T17992] dump_stack+0x15/0x1b [ 583.232296][T17992] should_fail_ex+0x265/0x280 [ 583.232364][T17992] should_fail+0xb/0x20 [ 583.232397][T17992] should_fail_usercopy+0x1a/0x20 [ 583.232424][T17992] strncpy_from_user+0x25/0x230 [ 583.232452][T17992] ? kmem_cache_alloc_noprof+0x242/0x480 [ 583.232557][T17992] ? getname_flags+0x80/0x3b0 [ 583.232592][T17992] getname_flags+0xae/0x3b0 [ 583.232669][T17992] do_sys_openat2+0x60/0x110 [ 583.232706][T17992] __x64_sys_openat+0xf2/0x120 [ 583.232747][T17992] x64_sys_call+0x2eab/0x3000 [ 583.232839][T17992] do_syscall_64+0xd2/0x200 [ 583.232874][T17992] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 583.232971][T17992] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 583.232999][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.233028][T17992] RIP: 0033:0x7f89e315efc9 [ 583.233048][T17992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.233136][T17992] RSP: 002b:00007f89e1b9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 583.233158][T17992] RAX: ffffffffffffffda RBX: 00007f89e33b6090 RCX: 00007f89e315efc9 [ 583.233175][T17992] RDX: 0000000000062181 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 583.233188][T17992] RBP: 00007f89e1b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 583.233205][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.233222][T17992] R13: 00007f89e33b6128 R14: 00007f89e33b6090 R15: 00007ffee74661d8 [ 583.233249][T17992] [ 583.422061][T17970] syz.2.4475: attempt to access beyond end of device [ 583.422061][T17970] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 583.435605][T17970] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 583.458302][T17998] loop3: detected capacity change from 0 to 128 [ 583.557070][T18007] loop2: detected capacity change from 0 to 512 [ 583.563554][T18008] loop3: detected capacity change from 0 to 1024 [ 583.563994][T18007] EXT4-fs: dax option not supported [ 583.583659][T18008] EXT4-fs: Ignoring removed orlov option [ 583.620455][T18018] loop6: detected capacity change from 0 to 128 [ 583.631911][T18008] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4492: bg 0: block 232: padding at end of block bitmap is not set [ 583.649035][T18008] EXT4-fs (loop3): Remounting filesystem read-only [ 583.655939][T18008] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 583.673526][T18008] program syz.3.4492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 583.721578][T18030] loop2: detected capacity change from 0 to 128 [ 583.814547][T18032] loop3: detected capacity change from 0 to 512 [ 583.821325][T18032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 583.830655][T18032] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 583.845175][T18032] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4500: corrupted inode contents [ 583.857766][T18032] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.4500: mark_inode_dirty error [ 583.872446][T18032] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4500: invalid indirect mapped block 1 (level 1) [ 583.886255][T18032] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4500: corrupted inode contents [ 583.898887][T18032] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 583.907895][T18032] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4500: corrupted inode contents [ 583.920332][T18032] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.4500: mark_inode_dirty error [ 583.932123][T18032] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 583.941298][T18032] EXT4-fs (loop3): 1 truncate cleaned up [ 584.338115][T18037] loop0: detected capacity change from 0 to 1024 [ 584.349752][T18037] EXT4-fs: Ignoring removed orlov option [ 584.367770][T18037] __nla_validate_parse: 7 callbacks suppressed [ 584.367790][T18037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4502'. [ 584.383066][T18037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4502'. [ 584.410195][T18037] program syz.0.4502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.479333][T18041] FAULT_INJECTION: forcing a failure. [ 584.479333][T18041] name failslab, interval 1, probability 0, space 0, times 0 [ 584.492152][T18041] CPU: 1 UID: 0 PID: 18041 Comm: syz.0.4503 Not tainted syzkaller #0 PREEMPT(voluntary) [ 584.492181][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 584.492194][T18041] Call Trace: [ 584.492200][T18041] [ 584.492220][T18041] __dump_stack+0x1d/0x30 [ 584.492250][T18041] dump_stack_lvl+0xe8/0x140 [ 584.492278][T18041] dump_stack+0x15/0x1b [ 584.492301][T18041] should_fail_ex+0x265/0x280 [ 584.492349][T18041] should_failslab+0x8c/0xb0 [ 584.492427][T18041] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 584.492467][T18041] ? __alloc_skb+0x101/0x320 [ 584.492528][T18041] __alloc_skb+0x101/0x320 [ 584.492559][T18041] netlink_alloc_large_skb+0xbf/0xf0 [ 584.492593][T18041] netlink_sendmsg+0x3cf/0x6b0 [ 584.492648][T18041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.492691][T18041] __sock_sendmsg+0x145/0x180 [ 584.492715][T18041] ____sys_sendmsg+0x31e/0x4e0 [ 584.492795][T18041] ___sys_sendmsg+0x17b/0x1d0 [ 584.492879][T18041] __x64_sys_sendmsg+0xd4/0x160 [ 584.492947][T18041] x64_sys_call+0x191e/0x3000 [ 584.492969][T18041] do_syscall_64+0xd2/0x200 [ 584.492998][T18041] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 584.493091][T18041] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 584.493123][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.493213][T18041] RIP: 0033:0x7f89e315efc9 [ 584.493234][T18041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.493285][T18041] RSP: 002b:00007f89e1bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.493312][T18041] RAX: ffffffffffffffda RBX: 00007f89e33b5fa0 RCX: 00007f89e315efc9 [ 584.493336][T18041] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 584.493353][T18041] RBP: 00007f89e1bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 584.493366][T18041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.493381][T18041] R13: 00007f89e33b6038 R14: 00007f89e33b5fa0 R15: 00007ffee74661d8 [ 584.493447][T18041] [ 584.512797][T18030] syz.2.4501: attempt to access beyond end of device [ 584.512797][T18030] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 584.708808][T18030] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 584.774661][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 584.774696][ T29] audit: type=1326 audit(1760746108.995:16710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 584.816655][T18055] loop3: detected capacity change from 0 to 512 [ 584.838348][T18055] EXT4-fs: Mount option(s) incompatible with ext2 [ 584.944574][ T29] audit: type=1326 audit(1760746109.025:16711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 584.968458][ T29] audit: type=1326 audit(1760746109.025:16712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 584.968493][ T29] audit: type=1326 audit(1760746109.025:16713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 584.968528][ T29] audit: type=1326 audit(1760746109.025:16714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 584.968597][ T29] audit: type=1326 audit(1760746109.025:16715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 584.968624][ T29] audit: type=1326 audit(1760746109.025:16716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 584.968656][ T29] audit: type=1326 audit(1760746109.025:16717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 584.968766][ T29] audit: type=1326 audit(1760746109.025:16718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 584.968799][ T29] audit: type=1326 audit(1760746109.025:16719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 585.137255][T18071] loop3: detected capacity change from 0 to 128 [ 585.209632][T18074] loop3: detected capacity change from 0 to 512 [ 585.426942][T18074] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.517975][T18081] 9pnet_fd: Insufficient options for proto=fd [ 585.609045][T18091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.640093][T18095] loop0: detected capacity change from 0 to 128 [ 585.703191][T18097] loop2: detected capacity change from 0 to 512 [ 585.710173][T18097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 585.799007][T18097] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 585.813621][T18097] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4519: corrupted inode contents [ 585.826747][T18097] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.4519: mark_inode_dirty error [ 585.840081][T18097] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4519: invalid indirect mapped block 1 (level 1) [ 585.854733][T18097] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4519: corrupted inode contents [ 585.870768][T18097] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 585.883905][T18097] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4519: corrupted inode contents [ 585.898249][T18097] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.4519: mark_inode_dirty error [ 585.912887][T18097] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 585.923884][T18097] EXT4-fs (loop2): 1 truncate cleaned up [ 585.930282][T18097] EXT4-fs mount: 54 callbacks suppressed [ 585.930302][T18097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.961695][T18101] loop0: detected capacity change from 0 to 1024 [ 585.969640][T18101] EXT4-fs: Ignoring removed nobh option [ 585.991917][T18101] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 586.039155][T18101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.092417][T18100] 9pnet_fd: Insufficient options for proto=fd [ 586.192889][T13845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.353743][T18120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4532'. [ 586.475309][T18127] loop0: detected capacity change from 0 to 512 [ 586.482321][T18127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 586.542178][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.552883][T18127] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 586.567596][T18127] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4531: corrupted inode contents [ 586.580355][T18127] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #11: comm syz.0.4531: mark_inode_dirty error [ 586.592230][T18127] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4531: invalid indirect mapped block 1 (level 1) [ 586.606281][T18127] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4531: corrupted inode contents [ 586.618936][T18127] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 586.628616][T18127] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #11: comm syz.0.4531: corrupted inode contents [ 586.641455][T18127] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.4531: mark_inode_dirty error [ 586.655805][T18127] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 586.665832][T18127] EXT4-fs (loop0): 1 truncate cleaned up [ 586.672929][T18127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.780799][T18129] loop3: detected capacity change from 0 to 1024 [ 586.805558][T18129] EXT4-fs: Ignoring removed nobh option [ 586.817540][T18125] siw: device registration error -23 [ 586.826114][T18129] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 586.847982][T18129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.866562][T18129] 9pnet_fd: Insufficient options for proto=fd [ 586.925047][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.004172][T18136] loop2: detected capacity change from 0 to 128 [ 587.034452][T18140] loop3: detected capacity change from 0 to 128 [ 587.161144][T18153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4544'. [ 587.340156][T13845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.501558][T18161] loop3: detected capacity change from 0 to 512 [ 587.508890][T18161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 587.534872][T18161] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 587.549429][T18161] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4546: corrupted inode contents [ 587.564840][T18161] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.4546: mark_inode_dirty error [ 587.578222][T18161] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4546: invalid indirect mapped block 1 (level 1) [ 587.592717][T18161] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4546: corrupted inode contents [ 587.609024][T18161] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 587.621420][T18161] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4546: corrupted inode contents [ 587.640017][T18161] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.4546: mark_inode_dirty error [ 587.652379][T18161] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 587.663997][T18161] EXT4-fs (loop3): 1 truncate cleaned up [ 587.675519][T18161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.008094][T18165] loop0: detected capacity change from 0 to 1024 [ 588.015375][T18165] EXT4-fs: Ignoring removed nobh option [ 588.122087][T18169] loop2: detected capacity change from 0 to 128 [ 588.178453][T18171] loop6: detected capacity change from 0 to 128 [ 588.290513][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'. [ 588.368257][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.376342][T18165] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 588.401375][T18165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.415626][T18165] 9pnet_fd: Insufficient options for proto=fd [ 588.425133][T18181] loop2: detected capacity change from 0 to 512 [ 588.441755][T18181] EXT4-fs: Mount option(s) incompatible with ext2 [ 588.450616][T13845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.578482][T18192] loop0: detected capacity change from 0 to 512 [ 588.587794][T18196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.596620][T18196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.605140][ T1411] bridge_slave_1: left allmulticast mode [ 588.610890][ T1411] bridge_slave_1: left promiscuous mode [ 588.616619][ T1411] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.630068][ T1411] bridge_slave_0: left allmulticast mode [ 588.635805][ T1411] bridge_slave_0: left promiscuous mode [ 588.637844][T18192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.641544][ T1411] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.654398][T18192] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.682264][T18204] loop6: detected capacity change from 0 to 512 [ 588.689954][T18204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.754235][T18209] loop3: detected capacity change from 0 to 512 [ 588.761015][T18209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.880888][T18204] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 588.895546][T18204] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4562: corrupted inode contents [ 588.908815][T18204] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4562: mark_inode_dirty error [ 588.922043][T18204] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4562: invalid indirect mapped block 1 (level 1) [ 588.939062][T18204] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4562: corrupted inode contents [ 588.957352][T18204] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 588.967608][T18204] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4562: corrupted inode contents [ 588.982759][T18209] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 588.997286][T18209] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4563: corrupted inode contents [ 589.009323][T18204] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4562: mark_inode_dirty error [ 589.022579][T18209] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.4563: mark_inode_dirty error [ 589.034081][T18204] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 589.045055][T18209] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4563: invalid indirect mapped block 1 (level 1) [ 589.058366][T18204] EXT4-fs (loop6): 1 truncate cleaned up [ 589.066910][T18204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.094934][T18209] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4563: corrupted inode contents [ 589.110776][T18209] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 589.122881][T18209] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4563: corrupted inode contents [ 589.137228][T18209] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.4563: mark_inode_dirty error [ 589.150754][T18209] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 589.163334][T18209] EXT4-fs (loop3): 1 truncate cleaned up [ 589.171455][T18209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.598483][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.611056][T18214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.653459][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.664858][ T1411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.676523][ T1411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.687486][ T1411] bond0 (unregistering): Released all slaves [ 589.693739][T18218] loop3: detected capacity change from 0 to 128 [ 589.700770][T18208] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 589.710322][T18208] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 589.750212][T18220] loop6: detected capacity change from 0 to 128 [ 589.780234][T18224] loop3: detected capacity change from 0 to 128 [ 589.785019][T18222] loop2: detected capacity change from 0 to 1024 [ 589.802542][T18222] EXT4-fs: Ignoring removed nobh option [ 589.810694][T18222] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 589.828816][T13845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.839986][ T1411] hsr_slave_0: left promiscuous mode [ 589.843400][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 589.843420][ T29] audit: type=1326 audit(1760746114.055:16906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 589.877553][ T29] audit: type=1326 audit(1760746114.065:16907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 589.901235][ T29] audit: type=1326 audit(1760746114.065:16908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 589.924841][ T29] audit: type=1326 audit(1760746114.065:16909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 589.948559][ T29] audit: type=1326 audit(1760746114.065:16910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 589.972272][ T29] audit: type=1326 audit(1760746114.065:16911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 589.995933][ T29] audit: type=1326 audit(1760746114.065:16912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 590.019522][ T29] audit: type=1326 audit(1760746114.065:16913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 590.043429][ T29] audit: type=1326 audit(1760746114.065:16914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 590.067038][ T29] audit: type=1326 audit(1760746114.065:16915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.3.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 590.104477][T18231] loop6: detected capacity change from 0 to 512 [ 590.111330][T18231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 590.125319][T18228] loop3: detected capacity change from 0 to 512 [ 590.131997][ T1411] hsr_slave_1: left promiscuous mode [ 590.189486][T18228] EXT4-fs: Mount option(s) incompatible with ext2 [ 590.210266][T18231] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 590.224929][T18231] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4569: corrupted inode contents [ 590.245864][T18222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.271503][T18231] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4569: mark_inode_dirty error [ 590.317195][T18231] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4569: invalid indirect mapped block 1 (level 1) [ 590.331341][T18231] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4569: corrupted inode contents [ 590.349482][ T1411] team0 (unregistering): Port device team_slave_1 removed [ 590.361817][ T1411] team0 (unregistering): Port device team_slave_0 removed [ 590.369228][T18231] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 590.378105][T18231] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4569: corrupted inode contents [ 590.386840][T18222] 9pnet_fd: Insufficient options for proto=fd [ 590.400179][T18231] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4569: mark_inode_dirty error [ 590.411626][T18231] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 590.421558][T18231] EXT4-fs (loop6): 1 truncate cleaned up [ 590.428122][T18231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.529201][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.572783][T18244] loop3: detected capacity change from 0 to 1024 [ 590.591558][T18242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4574'. [ 590.594587][T18246] loop0: detected capacity change from 0 to 128 [ 590.616627][T18244] EXT4-fs: Ignoring removed orlov option [ 590.624197][T18242] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4574'. [ 590.633568][T18244] EXT4-fs: dax option not supported [ 590.674601][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.707546][ T1411] ------------[ cut here ]------------ [ 590.713059][ T1411] WARNING: CPU: 0 PID: 1411 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x91/0x100 [ 590.723348][ T1411] Modules linked in: [ 590.727400][ T1411] CPU: 0 UID: 0 PID: 1411 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(voluntary) [ 590.737370][ T1411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 590.747521][ T1411] Workqueue: netns cleanup_net [ 590.752359][ T1411] RIP: 0010:xfrm6_tunnel_net_exit+0x91/0x100 [ 590.755583][T18254] loop3: detected capacity change from 0 to 128 [ 590.758536][ T1411] Code: 15 d5 a5 fc 4b 83 3c 3e 00 75 19 e8 49 6a 8a fc 49 81 ff f8 07 00 00 74 1d e8 3b 6a 8a fc 49 83 c7 08 eb d7 e8 30 6a 8a fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 590.784637][ T1411] RSP: 0018:ffffc90001777c78 EFLAGS: 00010293 [ 590.790732][ T1411] RAX: ffffffff84ccd550 RBX: ffff888109421780 RCX: ffff8881023d6300 [ 590.798791][ T1411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109a1e000 [ 590.806880][ T1411] RBP: ffffffff86c99250 R08: 0001ffff8684802f R09: 0000000000000000 [ 590.814924][ T1411] R10: ffff8881010b6300 R11: 0000000000000c00 R12: ffffffff86c99270 [ 590.822931][ T1411] R13: ffff8881094217a8 R14: ffff888109a1e000 R15: 0000000000000000 [ 590.831017][ T1411] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 590.840047][ T1411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.846704][ T1411] CR2: 00007f6f6de712f8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 590.854726][ T1411] Call Trace: [ 590.858037][ T1411] [ 590.860991][ T1411] ops_undo_list+0x27b/0x410 [ 590.865647][ T1411] cleanup_net+0x2f4/0x4f0 [ 590.870090][ T1411] process_scheduled_works+0x4ce/0x9d0 [ 590.875658][ T1411] worker_thread+0x582/0x770 [ 590.880270][ T1411] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 590.886181][ T1411] kthread+0x489/0x510 [ 590.890290][ T1411] ? finish_task_switch+0xad/0x2b0 [ 590.895462][ T1411] ? __pfx_worker_thread+0x10/0x10 [ 590.900609][ T1411] ? __pfx_kthread+0x10/0x10 [ 590.905362][ T1411] ret_from_fork+0x122/0x1b0 [ 590.910057][ T1411] ? __pfx_kthread+0x10/0x10 [ 590.914724][ T1411] ret_from_fork_asm+0x1a/0x30 [ 590.919537][ T1411] [ 590.922578][ T1411] ---[ end trace 0000000000000000 ]--- [ 590.929176][ T1411] ------------[ cut here ]------------ [ 590.934712][ T1411] WARNING: CPU: 0 PID: 1411 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 590.935373][T18259] bridge_slave_0: left allmulticast mode [ 590.944827][ T1411] Modules linked in: [ 590.944919][ T1411] CPU: 0 UID: 0 PID: 1411 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 590.950506][T18259] bridge_slave_0: left promiscuous mode [ 590.954422][ T1411] Tainted: [W]=WARN [ 590.954433][ T1411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 590.954449][ T1411] Workqueue: netns cleanup_net [ 590.966160][T18259] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.971466][ T1411] [ 590.971476][ T1411] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 591.005624][ T1411] Code: d1 d4 a5 fc 49 83 3c 1e 00 75 19 e8 05 6a 8a fc 48 81 fb f8 07 00 00 74 1d e8 f7 69 8a fc 48 83 c3 08 eb d7 e8 ec 69 8a fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 da 69 8a fc 5b 41 5e 41 5f [ 591.025309][ T1411] RSP: 0018:ffffc90001777c78 EFLAGS: 00010293 [ 591.031461][ T1411] RAX: ffffffff84ccd594 RBX: 0000000000000008 RCX: ffff8881023d6300 [ 591.039488][ T1411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109a1e808 [ 591.047512][ T1411] RBP: ffffffff86c99250 R08: 0001ffff8684802f R09: 0000000000000000 [ 591.055593][ T1411] R10: ffff8881010b6300 R11: 0000000000000c00 R12: ffffffff86c99270 [ 591.063599][ T1411] R13: ffff8881094217a8 R14: ffff888109a1e800 R15: 00000000000007f8 [ 591.071620][ T1411] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 591.080605][ T1411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.087240][ T1411] CR2: 00007f6f6de712f8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 591.095260][ T1411] Call Trace: [ 591.098823][ T1411] [ 591.101858][ T1411] ops_undo_list+0x27b/0x410 [ 591.106504][ T1411] cleanup_net+0x2f4/0x4f0 [ 591.111037][ T1411] process_scheduled_works+0x4ce/0x9d0 [ 591.116578][ T1411] worker_thread+0x582/0x770 [ 591.121193][ T1411] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 591.127157][ T1411] kthread+0x489/0x510 [ 591.131255][ T1411] ? finish_task_switch+0xad/0x2b0 [ 591.136434][ T1411] ? __pfx_worker_thread+0x10/0x10 [ 591.141602][ T1411] ? __pfx_kthread+0x10/0x10 [ 591.146240][ T1411] ret_from_fork+0x122/0x1b0 [ 591.150860][ T1411] ? __pfx_kthread+0x10/0x10 [ 591.155511][ T1411] ret_from_fork_asm+0x1a/0x30 [ 591.160353][ T1411] [ 591.163387][ T1411] ---[ end trace 0000000000000000 ]--- [ 591.188564][T18263] loop0: detected capacity change from 0 to 128 [ 591.198737][T18259] bridge_slave_1: left allmulticast mode [ 591.204577][T18259] bridge_slave_1: left promiscuous mode [ 591.210485][T18259] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.254728][T18259] bond0: (slave bond_slave_0): Releasing backup interface [ 591.279557][T18259] bond0: (slave bond_slave_1): Releasing backup interface [ 591.293741][T18259] team0: Port device team_slave_0 removed [ 591.303486][T18259] team0: Port device team_slave_1 removed [ 591.310962][T18259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.318464][T18259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.350246][T18259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.357878][T18259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.359135][T18260] netlink: 'syz.2.4584': attribute type 10 has an invalid length. [ 591.372882][T18260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4584'. [ 591.454912][T18259] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 591.525490][T18270] loop0: detected capacity change from 0 to 128 [ 591.551615][T18273] siw: device registration error -23 [ 591.937622][T18260] batman_adv: batadv0: Adding interface: veth1_vlan [ 591.952157][T18260] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.980468][T18260] batman_adv: batadv0: Interface activated: veth1_vlan [ 592.032054][ T1411] ------------[ cut here ]------------ [ 592.037662][ T1411] WARNING: CPU: 0 PID: 1411 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 592.047347][ T1411] Modules linked in: [ 592.051269][ T1411] CPU: 0 UID: 0 PID: 1411 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 592.062790][ T1411] Tainted: [W]=WARN [ 592.066628][ T1411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 592.076800][ T1411] Workqueue: netns cleanup_net [ 592.081607][ T1411] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 592.087287][ T1411] Code: 48 8d bb 70 0e 00 00 e8 a5 a2 b7 fc 48 8b bb 70 0e 00 00 e8 29 4e c4 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 78 4b 9c fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 6a 4b 9c fc 90 0f 0b 90 4c 89 f7 e8 6e [ 592.107164][ T1411] RSP: 0018:ffffc90001777c60 EFLAGS: 00010293 [ 592.113425][ T1411] RAX: ffffffff84baf408 RBX: ffff888109421780 RCX: ffff8881023d6300 [ 592.121473][ T1411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881094225c0 [ 592.129495][ T1411] RBP: ffffffff86c91000 R08: 0001ffff8684802f R09: 0000000000000000 [ 592.137532][ T1411] R10: ffffc90001777be8 R11: 0001c90001777be8 R12: ffffffff86c91020 [ 592.144405][T18287] loop2: detected capacity change from 0 to 128 [ 592.145607][ T1411] R13: ffff8881094217a8 R14: ffff8881094225c0 R15: ffff888109421780 [ 592.159908][ T1411] FS: 0000000000000000(0000) GS:ffff8882aee3a000(0000) knlGS:0000000000000000 [ 592.168903][ T1411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.175525][ T1411] CR2: 00007ffdb20d5238 CR3: 000000011783a000 CR4: 00000000003506f0 [ 592.183566][ T1411] Call Trace: [ 592.186872][ T1411] [ 592.189841][ T1411] xfrm_net_exit+0x2d/0x60 [ 592.194321][ T1411] ops_undo_list+0x27b/0x410 [ 592.199030][ T1411] cleanup_net+0x2f4/0x4f0 [ 592.203454][ T1411] process_scheduled_works+0x4ce/0x9d0 [ 592.208957][ T1411] worker_thread+0x582/0x770 [ 592.213745][ T1411] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 592.219657][ T1411] kthread+0x489/0x510 [ 592.223906][ T1411] ? finish_task_switch+0xad/0x2b0 [ 592.229059][ T1411] ? __pfx_worker_thread+0x10/0x10 [ 592.234183][ T1411] ? __pfx_kthread+0x10/0x10 [ 592.238784][ T1411] ret_from_fork+0x122/0x1b0 [ 592.243381][ T1411] ? __pfx_kthread+0x10/0x10 [ 592.248080][ T1411] ret_from_fork_asm+0x1a/0x30 [ 592.253025][ T1411] [ 592.256079][ T1411] ---[ end trace 0000000000000000 ]--- [ 592.322760][T18296] loop6: detected capacity change from 0 to 128 [ 592.340644][T18298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.349912][T18298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.360497][T18300] loop2: detected capacity change from 0 to 512 [ 592.375724][T18300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.388451][T18300] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.432427][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.453415][T18307] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4599'. [ 592.478164][T18310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.497393][T18312] loop2: detected capacity change from 0 to 128 [ 592.579341][T18304] syz.6.4596: attempt to access beyond end of device [ 592.579341][T18304] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 592.593918][T18304] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 592.603433][T18296] syz.6.4596: attempt to access beyond end of device [ 592.603433][T18296] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 592.617113][T18296] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 592.714933][T18316] loop6: detected capacity change from 0 to 128 [ 592.826792][T18314] syz.2.4600: attempt to access beyond end of device [ 592.826792][T18314] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 592.840332][T18314] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 592.849575][T18314] syz.2.4600: attempt to access beyond end of device [ 592.849575][T18314] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 592.863179][T18314] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 593.007314][T18316] syz.6.4601: attempt to access beyond end of device [ 593.007314][T18316] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 593.020949][T18316] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 593.029948][T18317] syz.6.4601: attempt to access beyond end of device [ 593.029948][T18317] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 593.043539][T18317] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 593.052679][T18317] syz.6.4601: attempt to access beyond end of device [ 593.052679][T18317] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 593.066232][T18317] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 593.281782][T18334] loop6: detected capacity change from 0 to 512 [ 593.288911][T18334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 593.689352][T18334] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 593.703883][T18334] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4607: corrupted inode contents [ 593.716844][T18334] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4607: mark_inode_dirty error [ 593.728790][T18334] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4607: invalid indirect mapped block 1 (level 1) [ 593.742540][T18334] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4607: corrupted inode contents [ 593.754963][T18334] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 593.763838][T18334] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4607: corrupted inode contents [ 593.778760][T18334] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4607: mark_inode_dirty error [ 593.791843][T18334] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 593.801478][T18334] EXT4-fs (loop6): 1 truncate cleaned up [ 593.808597][T18334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.880527][T18336] siw: device registration error -23 [ 593.928181][T18342] bond1: entered promiscuous mode [ 593.933285][T18342] bond1: entered allmulticast mode [ 593.938773][T18342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.950911][T18342] bond1 (unregistering): Released all slaves [ 594.022543][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.046499][T18345] loop6: detected capacity change from 0 to 1024 [ 594.069246][T18345] EXT4-fs: Ignoring removed orlov option [ 594.095767][T18345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.114181][T18345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4612'. [ 594.123171][T18345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4612'. [ 594.152361][T18345] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4612: bg 0: block 232: padding at end of block bitmap is not set [ 594.179817][T18361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4618'. [ 594.184268][T18345] EXT4-fs (loop6): Remounting filesystem read-only [ 594.199688][T18361] loop2: detected capacity change from 0 to 764 [ 594.207036][T18345] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 594.244183][T18361] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4618'. [ 594.264440][T18345] program syz.6.4612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.267252][T18369] loop3: detected capacity change from 0 to 1024 [ 594.281152][T18369] EXT4-fs: Ignoring removed nobh option [ 594.288123][T18369] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 594.312319][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.337474][T18369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.354949][T18378] loop6: detected capacity change from 0 to 128 [ 594.385062][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.395595][T18379] loop2: detected capacity change from 0 to 128 [ 594.521794][T18390] loop3: detected capacity change from 0 to 1024 [ 594.528703][T18390] EXT4-fs: Ignoring removed orlov option [ 594.551239][T18390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.712491][T18398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4633'. [ 594.721540][T18398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4633'. [ 594.739754][T18398] program syz.1.4633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.755423][T18379] syz.2.4625: attempt to access beyond end of device [ 594.755423][T18379] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 594.768915][T18379] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 594.779597][T18386] syz.2.4625: attempt to access beyond end of device [ 594.779597][T18386] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 594.793090][T18386] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 594.808085][T18386] syz.2.4625: attempt to access beyond end of device [ 594.808085][T18386] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 594.821548][T18386] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 594.892362][T18402] program syz.1.4634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.893235][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 594.893258][ T29] audit: type=1326 audit(1760746119.025:17051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6dc4efc9 code=0x7ffc0000 [ 594.931892][ T29] audit: type=1326 audit(1760746119.105:17052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f6dc4efc9 code=0x7ffc0000 [ 594.955541][ T29] audit: type=1326 audit(1760746119.105:17053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6dc4efc9 code=0x7ffc0000 [ 594.979248][ T29] audit: type=1326 audit(1760746119.105:17054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f6dc4d810 code=0x7ffc0000 [ 594.982740][T18407] netlink: 'syz.1.4636': attribute type 10 has an invalid length. [ 595.003013][ T29] audit: type=1326 audit(1760746119.105:17055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6dc4efc9 code=0x7ffc0000 [ 595.016099][T18408] loop2: detected capacity change from 0 to 128 [ 595.034586][ T29] audit: type=1326 audit(1760746119.105:17056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f6dc4efc9 code=0x7ffc0000 [ 595.056845][T18407] batman_adv: batadv0: Adding interface: veth1_vlan [ 595.064854][ T29] audit: type=1326 audit(1760746119.145:17057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.1.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6dc4efc9 code=0x7ffc0000 [ 595.071079][T18407] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.122384][T18407] batman_adv: batadv0: Interface activated: veth1_vlan [ 595.159952][T18412] loop6: detected capacity change from 0 to 128 [ 595.187087][T18416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.205650][T18418] loop6: detected capacity change from 0 to 1024 [ 595.212404][T18418] EXT4-fs: Ignoring removed nobh option [ 595.218607][T18418] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 595.245367][T18418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.278648][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.302476][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.314088][ T29] audit: type=1400 audit(1760746119.525:17058): avc: denied { mount } for pid=18428 comm="syz.6.4645" name="/" dev="ramfs" ino=51696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 595.370314][T18438] loop3: detected capacity change from 0 to 128 [ 595.407274][T18443] loop6: detected capacity change from 0 to 128 [ 595.562821][T18450] loop6: detected capacity change from 0 to 512 [ 595.569812][T18450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 595.655776][T18450] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 595.670545][T18450] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4653: corrupted inode contents [ 595.683314][T18450] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #11: comm syz.6.4653: mark_inode_dirty error [ 595.699497][T18450] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4653: invalid indirect mapped block 1 (level 1) [ 595.713627][T18450] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4653: corrupted inode contents [ 595.726430][T18450] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 595.736686][T18450] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #11: comm syz.6.4653: corrupted inode contents [ 595.749154][T18450] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.4653: mark_inode_dirty error [ 595.760917][T18450] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 595.770671][T18450] EXT4-fs (loop6): 1 truncate cleaned up [ 595.777673][T18450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.158591][T18455] __nla_validate_parse: 3 callbacks suppressed [ 596.158618][T18455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4655'. [ 596.182722][T18455] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4655'. [ 596.255771][T18457] loop2: detected capacity change from 0 to 512 [ 596.259794][T18463] loop0: detected capacity change from 0 to 128 [ 596.299243][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.330389][T18457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.402306][T18474] loop6: detected capacity change from 0 to 128 [ 596.407086][T18457] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.428768][T18476] loop3: detected capacity change from 0 to 128 [ 596.476043][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.487799][T18481] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4665'. [ 596.525654][T18484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.587411][T18484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.648704][T18491] loop3: detected capacity change from 0 to 128 [ 596.672525][T18493] loop0: detected capacity change from 0 to 128 [ 596.722997][T18499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 596.792271][T18509] loop3: detected capacity change from 0 to 512 [ 596.815220][T18509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.831629][T18512] loop6: detected capacity change from 0 to 128 [ 596.852354][T18509] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.938699][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.987457][T18523] loop0: detected capacity change from 0 to 128 [ 597.106926][T18530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4681'. [ 597.158012][T18524] loop3: detected capacity change from 0 to 764 [ 597.188853][T18524] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4681'. [ 597.552166][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.575872][T18547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.616196][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.650616][T18548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.696534][T18559] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4697'. [ 597.735238][T18565] loop6: detected capacity change from 0 to 128 [ 597.765329][T18569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.774274][T18569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.895069][T18574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.954262][T18576] loop0: detected capacity change from 0 to 128 [ 598.010938][T18582] loop3: detected capacity change from 0 to 1024 [ 598.017783][T18582] EXT4-fs: Ignoring removed nobh option [ 598.024332][T18582] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 598.046883][T18582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.084531][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.122052][T18591] loop3: detected capacity change from 0 to 128 [ 598.175223][T18593] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4709'. [ 598.212866][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4712'. [ 598.231682][T18599] bridge_slave_0: left allmulticast mode [ 598.237450][T18599] bridge_slave_0: left promiscuous mode [ 598.243144][T18599] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.252982][T18599] bridge_slave_1: left allmulticast mode [ 598.258830][T18599] bridge_slave_1: left promiscuous mode [ 598.264888][T18599] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.298453][T18604] loop3: detected capacity change from 0 to 1024 [ 598.307020][T18604] EXT4-fs: Ignoring removed orlov option [ 598.317971][T18599] bond0: (slave bond_slave_0): Releasing backup interface [ 598.329626][T18602] netlink: 'syz.1.4711': attribute type 10 has an invalid length. [ 598.330140][T18604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.337664][T18602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4711'. [ 598.353113][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4713'. [ 598.390466][T18587] syz.0.4703: attempt to access beyond end of device [ 598.390466][T18587] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 598.404065][T18587] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 598.418226][T18610] loop2: detected capacity change from 0 to 512 [ 598.424886][T18610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 598.440711][T18583] syz.0.4703: attempt to access beyond end of device [ 598.440711][T18583] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 598.454270][T18583] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 598.487579][T18599] bond0: (slave bond_slave_1): Releasing backup interface [ 598.515068][T18599] team0: Port device team_slave_0 removed [ 598.544565][T18599] team0: Port device team_slave_1 removed [ 598.563295][T18610] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 598.577947][T18610] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4714: corrupted inode contents [ 598.590998][ T29] audit: type=1326 audit(1760746122.775:17059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18603 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 598.616275][ T29] audit: type=1326 audit(1760746122.775:17060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18603 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f675722efc9 code=0x7ffc0000 [ 598.667456][T18604] program syz.3.4713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.680661][T18610] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.4714: mark_inode_dirty error [ 598.692693][T18610] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4714: invalid indirect mapped block 1 (level 1) [ 598.706688][T18610] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4714: corrupted inode contents [ 598.719397][T18610] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 598.735249][T18599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.742774][T18599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.771977][T18610] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4714: corrupted inode contents [ 598.784940][T18610] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.4714: mark_inode_dirty error [ 598.798521][T18613] loop6: detected capacity change from 0 to 128 [ 598.815289][T18610] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 598.842747][T18610] EXT4-fs (loop2): 1 truncate cleaned up [ 598.849656][T18610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.920063][T18599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.927609][T18599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.986360][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.997733][T18599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.023225][T18619] loop3: detected capacity change from 0 to 128 [ 599.023283][T18618] loop6: detected capacity change from 0 to 1024 [ 599.037045][T18618] EXT4-fs: Ignoring removed nobh option [ 599.058417][T18618] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 599.071490][T18621] loop3: detected capacity change from 0 to 128 [ 599.086391][T18618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.128120][T18627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 599.158796][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.171195][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.209687][T18637] siw: device registration error -23 [ 599.314699][T18644] loop2: detected capacity change from 0 to 512 [ 599.321681][T18644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 599.348759][T18647] loop3: detected capacity change from 0 to 1024 [ 599.356218][T18647] EXT4-fs: Ignoring removed orlov option [ 599.403236][T18644] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 599.417889][T18644] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4725: corrupted inode contents [ 599.431229][T18644] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.4725: mark_inode_dirty error [ 599.444283][T18644] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4725: invalid indirect mapped block 1 (level 1) [ 599.457718][T18644] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4725: corrupted inode contents [ 599.470033][T18644] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 599.479033][T18644] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.4725: corrupted inode contents [ 599.491441][T18644] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.4725: mark_inode_dirty error [ 599.503129][T18644] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 599.512593][T18644] EXT4-fs (loop2): 1 truncate cleaned up [ 599.519197][T18644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.556838][T18649] siw: device registration error -23 [ 599.565328][T18647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.590799][T18647] program syz.3.4728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.633426][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.758717][T18652] loop0: detected capacity change from 0 to 128 [ 599.918851][T18662] loop3: detected capacity change from 0 to 128 [ 599.926082][T18660] loop6: detected capacity change from 0 to 1024 [ 599.933032][T18660] EXT4-fs: Ignoring removed nobh option [ 599.946492][T18660] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 599.967097][T18660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.983016][T18660] 9pnet_fd: Insufficient options for proto=fd [ 599.990904][T18670] loop3: detected capacity change from 0 to 128 [ 600.002633][T18672] loop0: detected capacity change from 0 to 128 [ 600.012469][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.048527][T18675] loop3: detected capacity change from 0 to 1024 [ 600.055572][T18675] EXT4-fs: Ignoring removed nobh option [ 600.061452][T18676] loop6: detected capacity change from 0 to 128 [ 600.061893][T14127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.077119][T18675] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 600.096778][T18675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.133705][T18683] loop6: detected capacity change from 0 to 1024 [ 600.144266][T18683] EXT4-fs: Ignoring removed orlov option [ 600.151860][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.163358][T18683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.187698][T18683] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4742: bg 0: block 232: padding at end of block bitmap is not set [ 600.205319][T18683] EXT4-fs (loop6): Remounting filesystem read-only [ 600.211905][T18683] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 600.217151][T18693] loop2: detected capacity change from 0 to 128 [ 600.226199][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 600.226218][ T29] audit: type=1326 audit(1760746124.445:17132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.259508][ T29] audit: type=1326 audit(1760746124.455:17133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.283314][ T29] audit: type=1326 audit(1760746124.455:17134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.307050][ T29] audit: type=1326 audit(1760746124.455:17135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.324058][T18683] program syz.6.4742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.330971][ T29] audit: type=1326 audit(1760746124.455:17136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.350625][T18696] loop2: detected capacity change from 0 to 128 [ 600.363789][ T29] audit: type=1326 audit(1760746124.455:17137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.393251][ T29] audit: type=1326 audit(1760746124.455:17138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.416978][ T29] audit: type=1326 audit(1760746124.455:17139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.440577][ T29] audit: type=1326 audit(1760746124.455:17140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.464428][ T29] audit: type=1326 audit(1760746124.455:17141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18682 comm="syz.6.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611429efc9 code=0x7ffc0000 [ 600.494730][T18694] loop3: detected capacity change from 0 to 1024 [ 600.501405][T18694] EXT4-fs: Ignoring removed orlov option [ 600.508767][T12910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.519980][T18694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.536088][T18700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.545225][T18700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.556868][T18700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.574363][T18704] loop6: detected capacity change from 0 to 128 [ 600.956101][T18704] syz.6.4750: attempt to access beyond end of device [ 600.956101][T18704] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 600.969631][T18704] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 600.978452][T18705] syz.6.4750: attempt to access beyond end of device [ 600.978452][T18705] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 600.992009][T18705] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 601.027554][T18707] loop0: detected capacity change from 0 to 512 [ 601.036960][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.058681][T18707] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 601.074319][T18707] EXT4-fs (loop0): orphan cleanup on readonly fs [ 601.090861][T18707] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.4761: corrupted inode contents [ 601.103025][T18707] EXT4-fs (loop0): Remounting filesystem read-only [ 601.110007][T18707] EXT4-fs (loop0): 1 truncate cleaned up [ 601.168640][T18719] loop3: detected capacity change from 0 to 512 [ 601.175550][T18719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 601.252989][T18723] loop2: detected capacity change from 0 to 128 [ 601.292702][T18719] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 601.307303][T18719] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4752: corrupted inode contents [ 601.321244][T18719] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.4752: mark_inode_dirty error [ 601.333726][T18719] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4752: invalid indirect mapped block 1 (level 1) [ 601.349084][T18719] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4752: corrupted inode contents [ 601.361593][T18719] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 601.370787][T18719] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.4752: corrupted inode contents [ 601.393860][T18719] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.4752: mark_inode_dirty error [ 601.407301][T18719] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 601.417564][T18719] EXT4-fs (loop3): 1 truncate cleaned up [ 601.424335][T18719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.483726][T18728] loop6: detected capacity change from 0 to 128 [ 601.560706][T18730] loop6: detected capacity change from 0 to 512 [ 601.569484][T18730] EXT4-fs: Mount option(s) incompatible with ext2 [ 601.746266][ T1411] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 601.756932][ T1411] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 601.770581][ T1411] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 601.781573][T18707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 601.798946][T18707] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 601.824877][T13845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.845431][T18738] loop0: detected capacity change from 0 to 128 [ 601.894456][T18739] loop6: detected capacity change from 0 to 1024 [ 601.901667][T18739] EXT4-fs: Ignoring removed orlov option [ 601.918182][T14304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.941065][T18744] loop3: detected capacity change from 0 to 128 [ 601.973935][T18746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.982759][T18746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.994634][T18746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 602.107227][T18738] ================================================================== [ 602.115373][T18738] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 602.123312][T18738] [ 602.125657][T18738] write to 0xffff88811953b128 of 4 bytes by task 18740 on cpu 1: [ 602.133393][T18738] __mark_inode_dirty+0x248/0x750 [ 602.138470][T18738] mark_buffer_dirty+0x133/0x210 [ 602.143430][T18738] block_write_end+0x12d/0x210 [ 602.148232][T18738] generic_write_end+0x56/0x150 [ 602.153121][T18738] fat_write_end+0x4f/0x160 [ 602.157657][T18738] generic_perform_write+0x312/0x490 [ 602.162990][T18738] __generic_file_write_iter+0x9e/0x120 [ 602.168569][T18738] generic_file_write_iter+0x8d/0x2f0 [ 602.174051][T18738] iter_file_splice_write+0x666/0xa60 [ 602.179462][T18738] direct_splice_actor+0x156/0x2a0 [ 602.184691][T18738] splice_direct_to_actor+0x312/0x680 [ 602.190091][T18738] do_splice_direct+0xda/0x150 [ 602.194878][T18738] do_sendfile+0x380/0x650 [ 602.199343][T18738] __x64_sys_sendfile64+0x105/0x150 [ 602.204579][T18738] x64_sys_call+0x2bb4/0x3000 [ 602.209294][T18738] do_syscall_64+0xd2/0x200 [ 602.213837][T18738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.219762][T18738] [ 602.222142][T18738] read to 0xffff88811953b128 of 4 bytes by task 18738 on cpu 0: [ 602.229796][T18738] __mark_inode_dirty+0x55/0x750 [ 602.234778][T18738] fat_update_time+0x1ec/0x200 [ 602.239577][T18738] touch_atime+0x148/0x340 [ 602.244035][T18738] filemap_splice_read+0x6ba/0x740 [ 602.249200][T18738] splice_direct_to_actor+0x26f/0x680 [ 602.254590][T18738] do_splice_direct+0xda/0x150 [ 602.259382][T18738] do_sendfile+0x380/0x650 [ 602.263837][T18738] __x64_sys_sendfile64+0x105/0x150 [ 602.269093][T18738] x64_sys_call+0x2bb4/0x3000 [ 602.273806][T18738] do_syscall_64+0xd2/0x200 [ 602.278428][T18738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.284357][T18738] [ 602.286700][T18738] value changed: 0x00000010 -> 0x00000070 [ 602.292430][T18738] [ 602.294773][T18738] Reported by Kernel Concurrency Sanitizer on: [ 602.300948][T18738] CPU: 0 UID: 0 PID: 18738 Comm: syz.0.4762 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 602.312348][T18738] Tainted: [W]=WARN [ 602.316174][T18738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 602.326260][T18738] ================================================================== [ 602.597441][T18740] ================================================================== [ 602.605590][T18740] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 602.613720][T18740] [ 602.616060][T18740] write to 0xffff8881102a99a8 of 8 bytes by task 18738 on cpu 1: [ 602.623803][T18740] filemap_splice_read+0x4f4/0x740 [ 602.628963][T18740] splice_direct_to_actor+0x26f/0x680 [ 602.634359][T18740] do_splice_direct+0xda/0x150 [ 602.639155][T18740] do_sendfile+0x380/0x650 [ 602.643706][T18740] __x64_sys_sendfile64+0x105/0x150 [ 602.648947][T18740] x64_sys_call+0x2bb4/0x3000 [ 602.653657][T18740] do_syscall_64+0xd2/0x200 [ 602.658186][T18740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.664100][T18740] [ 602.666439][T18740] write to 0xffff8881102a99a8 of 8 bytes by task 18740 on cpu 0: [ 602.672339][T18738] syz.0.4762: attempt to access beyond end of device [ 602.672339][T18738] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 602.674173][T18740] filemap_splice_read+0x4f4/0x740 [ 602.674218][T18740] splice_direct_to_actor+0x26f/0x680 [ 602.674244][T18740] do_splice_direct+0xda/0x150 [ 602.687665][T18738] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 602.692717][T18740] do_sendfile+0x380/0x650 [ 602.715843][T18740] __x64_sys_sendfile64+0x105/0x150 [ 602.721160][T18740] x64_sys_call+0x2bb4/0x3000 [ 602.725913][T18740] do_syscall_64+0xd2/0x200 [ 602.730428][T18740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.736327][T18740] [ 602.738652][T18740] value changed: 0x00000000000038a6 -> 0x00000000000038ac [ 602.745772][T18740] [ 602.748105][T18740] Reported by Kernel Concurrency Sanitizer on: [ 602.754278][T18740] CPU: 0 UID: 0 PID: 18740 Comm: syz.0.4762 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 602.765659][T18740] Tainted: [W]=WARN [ 602.769457][T18740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 602.779520][T18740] ==================================================================