last executing test programs: 2.520461339s ago: executing program 3 (id=559): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x28082, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/204, 0xcc}, 0x40}], 0x2, 0x0, 0x0) 2.265777863s ago: executing program 1 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000060000004500000000100000", @ANYRES32, @ANYBLOB="00000300e400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff92, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000840)=[{0x6, 0xfc}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) 2.207123878s ago: executing program 0 (id=566): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 2.121666816s ago: executing program 0 (id=568): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00694ba7e2ae8959c3a1a1006a809454d1b9e49ca9bcfc4fc4988c654d24bf47f27cf5182a66907790f63da0382e7e8b6fa7bc01215b438ad0a0c54300383d371f98a51969e94000800000d1a09c066c83c90eb1659f642d9740b323fc7da8f03a2e547ee2dd62af8c0b51da0e3b75a1ccf23bb04d83fa977502819dcc5fbe622c4c35880cfe115f8743ddf5255ed6532d8ce9391e704bb6c64bf7bd3c353b218ccf99b00749bc4d22cdc096d92b7e3f7731bfbfc5af583df7f136a59dade8dafa14bcefad343a259d07d5b6e7152b1031acbba628c1f5310e53cd87b92c6be007f8aa026ce147dfd51281dba68af9b738f0a097f69b277ef9a9bd369a107367e5ed6f27bd9ef071148bc60b4845accf826763066baf9b092754602e7fe53fbd347a39262850be890a0300863518f5cd8e1d6d388c66123eac43a65f0b3a585c80576666c4ee5d579c349d415741bd3de7fd5af2fa9b50f63bbd192fa1ee4eb9d2eb2b4afffa5dd5a32f292bffcecbcc18071375b13aa12b581b2b23e80fb7a1eca9816df0137b589441fca8b569993caed53c6d9deae218"], 0x1, 0x253, &(0x7f00000004c0)="$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") execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 2.107626467s ago: executing program 1 (id=569): mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) futex_waitv(&(0x7f0000002200)=[{0x8000000000000001, &(0x7f00000004c0)=0x5, 0x82}, {0x9, &(0x7f0000000500)=0xfffffffffffffffb, 0x82}, {0x0, &(0x7f0000000540)=0x5f91, 0x82}, {0x9, &(0x7f0000000580)=0x8, 0x2}, {0x7, &(0x7f00000005c0)=0x8, 0x82}, {0x3, &(0x7f0000000600)=0x2, 0x2}, {0x3b, &(0x7f0000000680)=0x40, 0x82}, {0x2, &(0x7f00000006c0)=0x3, 0x82}, {0x5, &(0x7f0000000700)=0x5, 0x82}, {0x2545, &(0x7f0000000740)=0x7, 0x82}, {0xfffffffffffffff9, &(0x7f0000000780)=0x81, 0x82}, {0x3, &(0x7f00000007c0)=0x7b, 0x2}, {0x0, &(0x7f0000000800)=0x2e9, 0x2}, {0x4, &(0x7f0000000840)=0x6, 0x82}, {0xf9, &(0x7f0000000880), 0x82}, {0x4d, &(0x7f00000008c0), 0x2}, {0x100000000, &(0x7f0000000900)=0x7f, 0x47553007b9e20b65}, {0x8, &(0x7f0000000940)=0xc, 0x2}, {0x15b, &(0x7f0000000980)=0x2, 0x82}, {0x8, &(0x7f0000000a40)=0x1, 0x2}, {0xa5, &(0x7f0000000a80)=0x6ca, 0x82}, {0x3, &(0x7f0000000ac0)=0x7, 0x82}, {0xf, &(0x7f0000000c00)=0xe, 0x2}, {0x7fff, &(0x7f0000000c40), 0x82}, {0x8, 0xffffffffffffffff, 0x2}, {0x9, &(0x7f0000000d40)=0x4, 0x2}, {0x4, &(0x7f0000000d80)=0x3, 0x82}, {0x4, &(0x7f0000000dc0)=0x4, 0x2}, {0x4, &(0x7f0000000e00)=0x7ff, 0x82}, {0x10000, &(0x7f0000000e40)=0x3, 0x82}, {0xfffffffffffffff8, &(0x7f0000000e80)=0x8001, 0x2}, {0x4, &(0x7f0000000ec0)=0x5, 0x2}, {0x7, &(0x7f0000000f00)=0x79e4a996, 0x2}, {0x4, &(0x7f0000000f40)=0x3, 0x82}, {0x20, &(0x7f0000000f80)=0xd, 0x2}, {0x6, &(0x7f0000000fc0)=0x8, 0x82}, {0x4, &(0x7f0000001000)=0x6, 0x82}, {0x6, &(0x7f0000001040)=0x7f, 0x2}, {0x8, &(0x7f0000001080)=0x80, 0x2}, {0x46, &(0x7f00000010c0)=0x6, 0x82}, {0x9, &(0x7f0000001100)=0xd, 0x2}, {0x3, &(0x7f0000001140)=0x8, 0x2}, {0x7fffffff, &(0x7f0000001180)=0x1, 0x2}, {0x5, &(0x7f00000011c0)=0x80000001, 0x2}, {0x6, &(0x7f0000001200)=0x8, 0x2}, {0x0, &(0x7f0000001240)=0x1, 0x2}, {0x5cd, &(0x7f0000001280)=0x9, 0x82}, {0x0, &(0x7f00000012c0)=0x100000000, 0x90e398deeb40558}, {0x4, &(0x7f0000001300)=0x40000, 0x82}, {0x0, &(0x7f0000001340)=0x8, 0x2}, {0xaaa8, &(0x7f0000001380)=0x3, 0x82}, {0x1, &(0x7f00000013c0)=0x1, 0x2}, {0x6, &(0x7f0000001400)=0x8, 0x82}, {0x7, &(0x7f0000001440)=0x4, 0x2}, {0x3, &(0x7f0000001480)=0x7f, 0x2}, {0x7fffffff, &(0x7f00000014c0)=0x101, 0x2}, {0x5, &(0x7f0000001500)=0x1, 0xc1}, {0x7fffffffffffffff, &(0x7f0000001540)=0x4}, {0xf1, &(0x7f0000001580)=0xfffffffffffffffb}, {0xc7b3, &(0x7f00000015c0)=0x81, 0x2}, {0xc1, &(0x7f0000001600)=0x1ff, 0x82}, {0x3, &(0x7f0000001640)=0x8, 0x82}, {0x32, &(0x7f0000001680)=0x10, 0x82}, {0x7, &(0x7f00000016c0)=0x3, 0x2}, {0x9, &(0x7f0000001700)=0xffff, 0x2}, {0x6, &(0x7f0000001740)=0x10}, {0x3ff, &(0x7f0000001780)=0x1, 0x2}, {0xc2, &(0x7f00000017c0)=0x1, 0x2}, {0x0, &(0x7f0000001800)=0x8, 0x2}, {0x9, &(0x7f0000001880)=0xfec8, 0x2}, {0x101, &(0x7f00000018c0)=0x8, 0x2}, {0x7, &(0x7f0000001900)=0x6, 0x82}, {0xf7c, &(0x7f0000001940)=0x2, 0x2}, {0x1, &(0x7f0000001980)=0x7fff, 0x82}, {0xffffffffffffffff, &(0x7f00000019c0)=0x5, 0x82}, {0x26d, &(0x7f0000001a00), 0x2}, {0x1, &(0x7f0000001a40)=0x8, 0x2}, {0x2, &(0x7f0000001a80)=0x3ff}, {0x9, &(0x7f0000001ac0)=0x1000000, 0x2}, {0x4, &(0x7f0000001b00)=0x7, 0x82}, {0xffff, &(0x7f0000001b40)=0x1, 0x2}, {0x1, &(0x7f0000001b80)=0x4, 0x2}, {0x5, &(0x7f0000001bc0)=0xc4b, 0x82}, {0x100, &(0x7f0000001c00)=0x4, 0x82}, {0x100, &(0x7f0000001c40)=0xfffffffffffffffa, 0x82}, {0x81, &(0x7f0000001c80)=0x6, 0x2}, {0xd, &(0x7f0000001d40)=0x5, 0x82}, {0xf62b, &(0x7f0000001d80)=0x7, 0x82}, {0x7, &(0x7f0000001dc0)=0x4, 0x2}, {0x48a09616, &(0x7f0000001e00)=0x5, 0x82}, {0x6, &(0x7f0000001e40)=0x9, 0x82}, {0x6, &(0x7f0000001e80)=0x45cf, 0x82}, {0x5, &(0x7f0000001ec0)=0x7, 0x82}, {0x1, &(0x7f0000001f00)=0xd, 0x82}, {0x4, &(0x7f0000001f40)=0x4, 0x82}, {0x3, &(0x7f0000001f80)=0x9, 0x82}, {0xfffffffffffffffc, &(0x7f0000001fc0)=0x800, 0x82}, {0xe14, &(0x7f0000002000)=0x3, 0x82}, {0x1, &(0x7f0000002040)=0x5, 0x2}, {0xff, &(0x7f0000002080)=0x1, 0x2}, {0x7f16, &(0x7f00000020c0)=0x8, 0x82}, {0x1, &(0x7f0000002100)=0x40, 0x2}, {0x0, &(0x7f0000002140)=0x7, 0x2}, {0x5d, &(0x7f0000002180)=0x2}, {0x2, &(0x7f00000021c0)=0x2, 0x2}], 0x69, 0x0, &(0x7f0000002c40), 0x0) 2.052614512s ago: executing program 1 (id=570): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x5, &(0x7f0000000d40)=[{0x200000000006, 0x0, 0x8, 0x7ffc1ffb}, {0x3, 0x3, 0x81}, {0x5, 0xf, 0x1, 0x80000000}, {0xfffb, 0x7, 0x1}, {0xc, 0x6, 0x4, 0x5}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/721], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f00000002c0)="61df712bc884fed5722780b60800", 0x0, 0x8000, 0x0, 0x0, 0x5e, &(0x7f0000000280), &(0x7f0000000800)="ffe2000009000000393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4f737c7f91ceaa6790f080b0d2375918c17be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb000000", 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d000000020000000400000002400000850000004edfab4b5d1f351205a2877e6d4115e1ed0f0f3a4f44946b7f85f8df7e0ea0d56424c75c3fdd9d21c0672cb750ea2ac29a4e3bbe554f27394b573ac771d0a79f1defc0e74f0cd30c219f1e8c728c81af1ab0b9c3f9316b80610f1f2ac9aaaeba17e784ff206c6b939f39cde656d90fd510d0af3f31fadf8098d130bbc2df3284", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x200, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x24000, 0xa2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(r5, r6, 0x0, 0xf800) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) msgget$private(0x0, 0x270) 2.003891077s ago: executing program 2 (id=572): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000004000000c90500000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000002005cb3186a6b5e411c6f0f65842236f200dbc5ec93059365f073fd17a15b27c7477a3947d57d82549dfc2520681c37f37253563f6d72085c90a35e538cb132db5f588cb99a5e32323104a2a5968bc8c9308878fbfbeec6476747dced0d6d34c7d941bdc540e3b8fdb35f5f2ea6608837aa137257b32d1927ac92d46fcc196ec1beb7fc2093ba2c08e5918d9b7b7072f58943eca318d46dc6548fccedde8038e911036ea3df730b3baa381874f58664b8be622a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x7, &(0x7f00000006c0)) fcntl$lock(r3, 0x25, &(0x7f0000000180)) syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfd14) 1.880384968s ago: executing program 0 (id=573): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$ptp0(0xffffff9c, &(0x7f0000000180), 0x202000, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f00000001c0)={{0xb00, 0xa}, {0xffffffffffffee44, 0x1}, 0x8}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES8=r0, @ANYBLOB="000000000010eaffaf0b6100000000000010000000000000de7bddd874306f6aaa387ab8b5fe268f84defebf2954cce9b2a23b6930f1492df5701d46992a965dce93d90ddcb9fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000011120214de79029a232e58155345768fe35ee1fb8e1244ed02fc439d7ef416caf85387"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005c4000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") 1.726038092s ago: executing program 0 (id=578): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) poll(0x0, 0x0, 0xffffffffffbffff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000600)='$h', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'pimreg1\x00', @random="9370c3b45bf6"}) signalfd(r3, &(0x7f00000000c0), 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.183296212s ago: executing program 1 (id=588): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r1], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r4, 0x3707}, {r3, 0x44}, {r3, 0xa024}], 0x3, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073", @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.149460655s ago: executing program 2 (id=590): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x28082, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=""/204, 0xcc}, 0x40}], 0x2, 0x0, 0x0) 1.002779838s ago: executing program 4 (id=592): mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) futex_waitv(&(0x7f0000002200)=[{0x8000000000000001, &(0x7f00000004c0)=0x5, 0x82}, {0x9, &(0x7f0000000500)=0xfffffffffffffffb, 0x82}, {0x0, &(0x7f0000000540)=0x5f91, 0x82}, {0x9, &(0x7f0000000580)=0x8, 0x2}, {0x7, &(0x7f00000005c0)=0x8, 0x82}, {0x3, &(0x7f0000000600)=0x2, 0x2}, {0x3b, &(0x7f0000000680)=0x40, 0x82}, {0x2, &(0x7f00000006c0)=0x3, 0x82}, {0x5, &(0x7f0000000700)=0x5, 0x82}, {0x2545, &(0x7f0000000740)=0x7, 0x82}, {0xfffffffffffffff9, &(0x7f0000000780)=0x81, 0x82}, {0x3, &(0x7f00000007c0)=0x7b, 0x2}, {0x0, &(0x7f0000000800)=0x2e9, 0x2}, {0x4, &(0x7f0000000840)=0x6, 0x82}, {0xf9, &(0x7f0000000880), 0x82}, {0x4d, &(0x7f00000008c0), 0x2}, {0x100000000, &(0x7f0000000900)=0x7f, 0x47553007b9e20b65}, {0x8, &(0x7f0000000940)=0xc, 0x2}, {0x15b, &(0x7f0000000980)=0x2, 0x82}, {0x8, &(0x7f0000000a40)=0x1, 0x2}, {0xa5, &(0x7f0000000a80)=0x6ca, 0x82}, {0x3, &(0x7f0000000ac0)=0x7, 0x82}, {0xf, &(0x7f0000000c00)=0xe, 0x2}, {0x7fff, &(0x7f0000000c40), 0x82}, {0x8, 0xffffffffffffffff, 0x2}, {0x9, &(0x7f0000000d40)=0x4, 0x2}, {0x4, &(0x7f0000000d80)=0x3, 0x82}, {0x4, &(0x7f0000000dc0)=0x4, 0x2}, {0x4, &(0x7f0000000e00)=0x7ff, 0x82}, {0x10000, &(0x7f0000000e40)=0x3, 0x82}, {0xfffffffffffffff8, &(0x7f0000000e80)=0x8001, 0x2}, {0x4, &(0x7f0000000ec0)=0x5, 0x2}, {0x7, &(0x7f0000000f00)=0x79e4a996, 0x2}, {0x4, &(0x7f0000000f40)=0x3, 0x82}, {0x20, &(0x7f0000000f80)=0xd, 0x2}, {0x6, &(0x7f0000000fc0)=0x8, 0x82}, {0x4, &(0x7f0000001000)=0x6, 0x82}, {0x6, &(0x7f0000001040)=0x7f, 0x2}, {0x8, &(0x7f0000001080)=0x80, 0x2}, {0x46, &(0x7f00000010c0)=0x6, 0x82}, {0x9, &(0x7f0000001100)=0xd, 0x2}, {0x3, &(0x7f0000001140)=0x8, 0x2}, {0x7fffffff, &(0x7f0000001180)=0x1, 0x2}, {0x5, &(0x7f00000011c0)=0x80000001, 0x2}, {0x6, &(0x7f0000001200)=0x8, 0x2}, {0x0, &(0x7f0000001240)=0x1, 0x2}, {0x5cd, &(0x7f0000001280)=0x9, 0x82}, {0x0, &(0x7f00000012c0)=0x100000000, 0x90e398deeb40558}, {0x4, &(0x7f0000001300)=0x40000, 0x82}, {0x0, &(0x7f0000001340)=0x8, 0x2}, {0xaaa8, &(0x7f0000001380)=0x3, 0x82}, {0x1, &(0x7f00000013c0)=0x1, 0x2}, {0x6, &(0x7f0000001400)=0x8, 0x82}, {0x7, &(0x7f0000001440)=0x4, 0x2}, {0x3, &(0x7f0000001480)=0x7f, 0x2}, {0x7fffffff, &(0x7f00000014c0)=0x101, 0x2}, {0x5, &(0x7f0000001500)=0x1, 0xc1}, {0x7fffffffffffffff, &(0x7f0000001540)=0x4}, {0xf1, &(0x7f0000001580)=0xfffffffffffffffb}, {0xc7b3, &(0x7f00000015c0)=0x81, 0x2}, {0xc1, &(0x7f0000001600)=0x1ff, 0x82}, {0x3, &(0x7f0000001640)=0x8, 0x82}, {0x32, &(0x7f0000001680)=0x10, 0x82}, {0x7, &(0x7f00000016c0)=0x3, 0x2}, {0x9, &(0x7f0000001700)=0xffff, 0x2}, {0x6, &(0x7f0000001740)=0x10}, {0x3ff, &(0x7f0000001780)=0x1, 0x2}, {0xc2, &(0x7f00000017c0)=0x1, 0x2}, {0x0, &(0x7f0000001800)=0x8, 0x2}, {0x40, 0x0, 0x82}, {0x9, &(0x7f0000001880)=0xfec8, 0x2}, {0x101, &(0x7f00000018c0)=0x8, 0x2}, {0x7, &(0x7f0000001900)=0x6, 0x82}, {0xf7c, &(0x7f0000001940)=0x2, 0x2}, {0x1, &(0x7f0000001980)=0x7fff, 0x82}, {0xffffffffffffffff, &(0x7f00000019c0)=0x5, 0x82}, {0x26d, &(0x7f0000001a00), 0x2}, {0x1, &(0x7f0000001a40)=0x8, 0x2}, {0x2, &(0x7f0000001a80)=0x3ff}, {0x9, &(0x7f0000001ac0)=0x1000000, 0x2}, {0x4, &(0x7f0000001b00)=0x7, 0x82}, {0xffff, &(0x7f0000001b40)=0x1, 0x2}, {0x1, &(0x7f0000001b80)=0x4, 0x2}, {0x5, &(0x7f0000001bc0)=0xc4b, 0x82}, {0x100, &(0x7f0000001c00)=0x4, 0x82}, {0x100, &(0x7f0000001c40)=0xfffffffffffffffa, 0x82}, {0x81, &(0x7f0000001c80)=0x6, 0x2}, {0xd, &(0x7f0000001d40)=0x5, 0x82}, {0xf62b, &(0x7f0000001d80)=0x7, 0x82}, {0x7, &(0x7f0000001dc0)=0x4, 0x2}, {0x48a09616, &(0x7f0000001e00)=0x5, 0x82}, {0x6, &(0x7f0000001e40)=0x9, 0x82}, {0x6, &(0x7f0000001e80)=0x45cf, 0x82}, {0x5, &(0x7f0000001ec0)=0x7, 0x82}, {0x1, &(0x7f0000001f00)=0xd, 0x82}, {0x4, &(0x7f0000001f40)=0x4, 0x82}, {0x3, &(0x7f0000001f80)=0x9, 0x82}, {0xfffffffffffffffc, &(0x7f0000001fc0)=0x800, 0x82}, {0xe14, &(0x7f0000002000)=0x3, 0x82}, {0x1, &(0x7f0000002040)=0x5, 0x2}, {0xff, &(0x7f0000002080)=0x1, 0x2}, {0x7f16, &(0x7f00000020c0)=0x8, 0x82}, {0x1, &(0x7f0000002100)=0x40, 0x2}, {0x0, &(0x7f0000002140)=0x7, 0x2}, {0x5d, &(0x7f0000002180)=0x2}, {0x2, &(0x7f00000021c0)=0x2, 0x2}], 0x6a, 0x0, &(0x7f0000002c40), 0x0) 988.02752ms ago: executing program 4 (id=593): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 934.126455ms ago: executing program 4 (id=594): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) write$binfmt_aout(r1, &(0x7f0000001480), 0xfdef) 919.962206ms ago: executing program 4 (id=595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 868.801281ms ago: executing program 0 (id=596): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 868.435801ms ago: executing program 4 (id=597): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = inotify_init1(0x0) dup(r2) (fail_nth: 5) 537.868721ms ago: executing program 4 (id=598): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000280), 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004030000000000000091002c", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 537.485991ms ago: executing program 3 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000060000004500000000100000", @ANYRES32, @ANYBLOB="00000300e400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff92, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000840)=[{0x6, 0xfc}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 463.452188ms ago: executing program 0 (id=600): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000880)={0xffffffffffffffff, 0xe50, 0x4, 0xffff, 0x8, [{0x8, 0x1000, 0x2, '\x00', 0x105}, {0x8, 0x0, 0xe, '\x00', 0x4}, {0x5f, 0x9, 0x80000001, '\x00', 0x1200}, {0x8, 0x0, 0x3, '\x00', 0x82}, {0x1, 0x5, 0x100000000, '\x00', 0x2a82}, {0x81, 0x8, 0x7f, '\x00', 0x808}, {0x40000a62, 0x7b, 0x8000}, {0xa, 0x7ff, 0xcae, '\x00', 0x200}]}) (async, rerun: 64) r2 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) (rerun: 64) syz_usb_control_io$uac1(r2, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'pim6reg0\x00', 0x0}) (rerun: 64) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x2, 0x6}, 0xfffffffffffffdd9) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r5, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 293.869734ms ago: executing program 1 (id=601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b60000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r3, 0x400, 0x1) fchown(r3, 0x0, 0xffffffffffffffff) 264.127486ms ago: executing program 1 (id=602): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000004000000c90500000b00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000002005cb3186a6b5e411c6f0f65842236f200dbc5ec93059365f073fd17a15b27c7477a3947d57d82549dfc2520681c37f37253563f6d72085c90a35e538cb132db5f588cb99a5e32323104a2a5968bc8c9308878fbfbeec6476747dced0d6d34c7d941bdc540e3b8fdb35f5f2ea6608837aa137257b32d1927ac92d46fcc196ec1beb7fc2093ba2c08e5918d9b7b7072f58943eca318d46dc6548fccedde8038e911036ea3df730b3baa381874f58664b8be622a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x7, &(0x7f00000006c0)) fcntl$lock(r3, 0x25, &(0x7f0000000180)) syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfd14) 246.296158ms ago: executing program 2 (id=603): mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) futex_waitv(&(0x7f0000002200)=[{0x8000000000000001, &(0x7f00000004c0)=0x5, 0x82}, {0x9, &(0x7f0000000500)=0xfffffffffffffffb, 0x82}, {0x0, &(0x7f0000000540)=0x5f91, 0x82}, {0x9, &(0x7f0000000580)=0x8, 0x2}, {0x7, &(0x7f00000005c0)=0x8, 0x82}, {0x3, &(0x7f0000000600)=0x2, 0x2}, {0x3b, &(0x7f0000000680)=0x40, 0x82}, {0x2, &(0x7f00000006c0)=0x3, 0x82}, {0x5, &(0x7f0000000700)=0x5, 0x82}, {0x2545, &(0x7f0000000740)=0x7, 0x82}, {0xfffffffffffffff9, &(0x7f0000000780)=0x81, 0x82}, {0x3, &(0x7f00000007c0)=0x7b, 0x2}, {0x0, &(0x7f0000000800)=0x2e9, 0x2}, {0x4, &(0x7f0000000840)=0x6, 0x82}, {0xf9, &(0x7f0000000880), 0x82}, {0x4d, &(0x7f00000008c0), 0x2}, {0x100000000, &(0x7f0000000900)=0x7f, 0x47553007b9e20b65}, {0x8, &(0x7f0000000940)=0xc, 0x2}, {0x15b, &(0x7f0000000980)=0x2, 0x82}, {0x8, &(0x7f0000000a40)=0x1, 0x2}, {0xa5, &(0x7f0000000a80)=0x6ca, 0x82}, {0x3, &(0x7f0000000ac0)=0x7, 0x82}, {0xf, &(0x7f0000000c00)=0xe, 0x2}, {0x7fff, &(0x7f0000000c40), 0x82}, {0x8, 0xffffffffffffffff, 0x2}, {0x9, &(0x7f0000000d40)=0x4, 0x2}, {0x4, &(0x7f0000000d80)=0x3, 0x82}, {0x4, &(0x7f0000000dc0)=0x4, 0x2}, {0x4, &(0x7f0000000e00)=0x7ff, 0x82}, {0x10000, &(0x7f0000000e40)=0x3, 0x82}, {0xfffffffffffffff8, &(0x7f0000000e80)=0x8001, 0x2}, {0x4, &(0x7f0000000ec0)=0x5, 0x2}, {0x7, &(0x7f0000000f00)=0x79e4a996, 0x2}, {0x4, &(0x7f0000000f40)=0x3, 0x82}, {0x20, &(0x7f0000000f80)=0xd, 0x2}, {0x6, &(0x7f0000000fc0)=0x8, 0x82}, {0x4, &(0x7f0000001000)=0x6, 0x82}, {0x6, &(0x7f0000001040)=0x7f, 0x2}, {0x8, &(0x7f0000001080)=0x80, 0x2}, {0x46, &(0x7f00000010c0)=0x6, 0x82}, {0x9, &(0x7f0000001100)=0xd, 0x2}, {0x3, &(0x7f0000001140)=0x8, 0x2}, {0x7fffffff, &(0x7f0000001180)=0x1, 0x2}, {0x5, &(0x7f00000011c0)=0x80000001, 0x2}, {0x6, &(0x7f0000001200)=0x8, 0x2}, {0x0, &(0x7f0000001240)=0x1, 0x2}, {0x5cd, &(0x7f0000001280)=0x9, 0x82}, {0x0, &(0x7f00000012c0)=0x100000000, 0x90e398deeb40558}, {0x4, &(0x7f0000001300)=0x40000, 0x82}, {0x0, &(0x7f0000001340)=0x8, 0x2}, {0xaaa8, &(0x7f0000001380)=0x3, 0x82}, {0x1, &(0x7f00000013c0)=0x1, 0x2}, {0x6, &(0x7f0000001400)=0x8, 0x82}, {0x7, &(0x7f0000001440)=0x4, 0x2}, {0x3, &(0x7f0000001480)=0x7f, 0x2}, {0x7fffffff, &(0x7f00000014c0)=0x101, 0x2}, {0x5, &(0x7f0000001500)=0x1, 0xc1}, {0x7fffffffffffffff, &(0x7f0000001540)=0x4}, {0xf1, &(0x7f0000001580)=0xfffffffffffffffb}, {0xc7b3, &(0x7f00000015c0)=0x81, 0x2}, {0xc1, &(0x7f0000001600)=0x1ff, 0x82}, {0x3, &(0x7f0000001640)=0x8, 0x82}, {0x32, &(0x7f0000001680)=0x10, 0x82}, {0x7, &(0x7f00000016c0)=0x3, 0x2}, {0x9, &(0x7f0000001700)=0xffff, 0x2}, {0x6, &(0x7f0000001740)=0x10}, {0x3ff, &(0x7f0000001780)=0x1, 0x2}, {0xc2, &(0x7f00000017c0)=0x1, 0x2}, {0x0, &(0x7f0000001800)=0x8, 0x2}, {0x40, 0x0, 0x82}, {0x9, &(0x7f0000001880)=0xfec8, 0x2}, {0x101, &(0x7f00000018c0)=0x8, 0x2}, {0x7, &(0x7f0000001900)=0x6, 0x82}, {0xf7c, &(0x7f0000001940)=0x2, 0x2}, {0x1, &(0x7f0000001980)=0x7fff, 0x82}, {0xffffffffffffffff, &(0x7f00000019c0)=0x5, 0x82}, {0x26d, &(0x7f0000001a00), 0x2}, {0x1, &(0x7f0000001a40)=0x8, 0x2}, {0x2, &(0x7f0000001a80)=0x3ff}, {0x9, &(0x7f0000001ac0)=0x1000000, 0x2}, {0x4, &(0x7f0000001b00)=0x7, 0x82}, {0xffff, &(0x7f0000001b40)=0x1, 0x2}, {0x1, &(0x7f0000001b80)=0x4, 0x2}, {0x5, &(0x7f0000001bc0)=0xc4b, 0x82}, {0x100, &(0x7f0000001c00)=0x4, 0x82}, {0x100, &(0x7f0000001c40)=0xfffffffffffffffa, 0x82}, {0x81, &(0x7f0000001c80)=0x6, 0x2}, {0xd, &(0x7f0000001d40)=0x5, 0x82}, {0xf62b, &(0x7f0000001d80)=0x7, 0x82}, {0x7, &(0x7f0000001dc0)=0x4, 0x2}, {0x48a09616, &(0x7f0000001e00)=0x5, 0x82}, {0x6, &(0x7f0000001e40)=0x9, 0x82}, {0x6, &(0x7f0000001e80)=0x45cf, 0x82}, {0x5, &(0x7f0000001ec0)=0x7, 0x82}, {0x1, &(0x7f0000001f00)=0xd, 0x82}, {0x4, &(0x7f0000001f40)=0x4, 0x82}, {0x3, &(0x7f0000001f80)=0x9, 0x82}, {0xfffffffffffffffc, &(0x7f0000001fc0)=0x800, 0x82}, {0xe14, &(0x7f0000002000)=0x3, 0x82}, {0x1, &(0x7f0000002040)=0x5, 0x2}, {0xff, &(0x7f0000002080)=0x1, 0x2}, {0x7f16, &(0x7f00000020c0)=0x8, 0x82}, {0x1, &(0x7f0000002100)=0x40, 0x2}, {0x0, &(0x7f0000002140)=0x7, 0x2}, {0x5d, &(0x7f0000002180)=0x2}, {0x2, &(0x7f00000021c0)=0x2, 0x2}], 0x6a, 0x0, &(0x7f0000002c40), 0x0) 196.050543ms ago: executing program 3 (id=604): ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000}]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b00010065787c686472000014000280080001400000000d08000640000000040900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) r1 = open(0x0, 0x60142, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000ff070000000c000000ffffff5352000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)="b33caaafbe6cf8ffffff8aefc95c9a52c32170335dca8fb0c17bb1f57b65420e9717756a35a58d3c33d32b3020ec56bc4d0de84c0d0a80ae134b1d541f413ce5507366a116f65b903e52b1edb4aa", &(0x7f0000000c00)="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", 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='ext4_forget\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r5 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000200)=0x8) write(r7, &(0x7f0000000340), 0x11000) r10 = syz_io_uring_setup(0x4974, &(0x7f00000005c0)={0x0, 0x0, 0x10520}, &(0x7f0000000100), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x4f18, &(0x7f0000000200)={0x0, 0x0, 0x20, 0xfffffffd, 0x1db}, &(0x7f0000000180)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r10, 0xa3d, 0x0, 0x0, 0x0, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000002c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x108) 193.267913ms ago: executing program 2 (id=605): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x75) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 180.481934ms ago: executing program 2 (id=606): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="885800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0xffc, 0x1800}, {0x3, 0x5, 0x800}, {0x3, 0x8, 0x1800}, {0x3, 0x89, 0x800}, {0x3, 0x6, 0x800}], 0x5, 0x0) semop(0x0, &(0x7f0000000280)=[{0x1, 0x0, 0x800}, {}], 0x2) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x69) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200), 0xf642e7e) 28.946318ms ago: executing program 3 (id=607): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) poll(0x0, 0x0, 0xffffffffffbffff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000600)='$h', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 HID v0.00 Device [syz0] on syz1 [ 41.256424][ T4269] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 41.262962][ T4269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 41.270835][ T4269] vhci_hcd vhci_hcd.0: Device attached [ 41.296878][ T4270] vhci_hcd: connection closed [ 41.312458][ T56] vhci_hcd: stop threads [ 41.321491][ T56] vhci_hcd: release socket [ 41.325991][ T56] vhci_hcd: disconnect device [ 41.335934][ T4279] loop4: detected capacity change from 0 to 512 [ 41.355973][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.381600][ T4279] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.455526][ T3278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.499566][ T4298] loop4: detected capacity change from 0 to 256 [ 41.512973][ T4298] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.830805][ T4345] loop3: detected capacity change from 0 to 128 [ 41.874363][ T4345] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.896941][ T4353] loop4: detected capacity change from 0 to 512 [ 41.912624][ T4353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.935621][ T4345] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.973940][ T4353] EXT4-fs (loop4): 1 truncate cleaned up [ 41.981098][ T4353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.557482][ T4419] loop2: detected capacity change from 0 to 512 [ 42.574011][ T4419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.595564][ T4419] EXT4-fs (loop2): 1 truncate cleaned up [ 42.601765][ T4419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.681897][ T3278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.710722][ T4422] loop4: detected capacity change from 0 to 512 [ 42.718727][ T3264] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.743634][ T4424] loop3: detected capacity change from 0 to 512 [ 42.747603][ T4422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.768173][ T4422] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.768525][ T4424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.795681][ T4424] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.876221][ T3278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.904641][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.935767][ T4436] loop4: detected capacity change from 0 to 512 [ 42.973765][ T4436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.988605][ T4436] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.172621][ T3278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.200479][ T4469] loop3: detected capacity change from 0 to 512 [ 43.220141][ T4469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.245543][ T4468] loop1: detected capacity change from 0 to 256 [ 43.252454][ T4469] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.253355][ T4477] loop4: detected capacity change from 0 to 128 [ 43.287801][ T4468] FAT-fs (loop1): Directory bread(block 64) failed [ 43.299606][ T4468] FAT-fs (loop1): Directory bread(block 65) failed [ 43.316665][ T4477] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.329327][ T4468] FAT-fs (loop1): Directory bread(block 66) failed [ 43.338309][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.349304][ T4468] FAT-fs (loop1): Directory bread(block 67) failed [ 43.358932][ T4468] FAT-fs (loop1): Directory bread(block 68) failed [ 43.366161][ T4468] FAT-fs (loop1): Directory bread(block 69) failed [ 43.375301][ T3271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.384593][ T4468] FAT-fs (loop1): Directory bread(block 70) failed [ 43.386110][ T4477] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.391845][ T4468] FAT-fs (loop1): Directory bread(block 71) failed [ 43.510914][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 43.510929][ T29] audit: type=1326 audit(1727505146.709:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.521284][ T4468] FAT-fs (loop1): Directory bread(block 72) failed [ 43.540608][ T29] audit: type=1326 audit(1727505146.709:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.570805][ T29] audit: type=1326 audit(1727505146.709:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.575028][ T4468] FAT-fs (loop1): Directory bread(block 73) failed [ 43.594521][ T29] audit: type=1326 audit(1727505146.709:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.594549][ T29] audit: type=1326 audit(1727505146.709:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.649392][ T29] audit: type=1326 audit(1727505146.709:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.674517][ T29] audit: type=1326 audit(1727505146.709:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.687571][ T4503] loop3: detected capacity change from 0 to 512 [ 43.700515][ T29] audit: type=1326 audit(1727505146.709:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.733348][ T29] audit: type=1326 audit(1727505146.709:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.744868][ T4468] syz.1.234: attempt to access beyond end of device [ 43.744868][ T4468] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 43.757039][ T29] audit: type=1326 audit(1727505146.709:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.3.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 43.797335][ T4503] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.815519][ T4503] EXT4-fs (loop3): 1 truncate cleaned up [ 43.816758][ T4468] syz.1.234: attempt to access beyond end of device [ 43.816758][ T4468] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 43.826782][ T4503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.915626][ T4512] loop2: detected capacity change from 0 to 1024 [ 43.935048][ T4512] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.244: Failed to acquire dquot type 0 [ 43.952259][ T4512] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 43.974105][ T4512] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #13: comm syz.2.244: corrupted inode contents [ 43.994907][ T4512] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #13: comm syz.2.244: mark_inode_dirty error [ 44.016017][ T4512] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #13: comm syz.2.244: corrupted inode contents [ 44.037876][ T4512] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.244: mark_inode_dirty error [ 44.054108][ T4512] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #13: comm syz.2.244: corrupted inode contents [ 44.078099][ T4512] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 44.114869][ T3278] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.125487][ T4512] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #13: comm syz.2.244: corrupted inode contents [ 44.150656][ T4512] EXT4-fs error (device loop2): ext4_truncate:4208: inode #13: comm syz.2.244: mark_inode_dirty error [ 44.171547][ T4512] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 44.185388][ T4512] EXT4-fs (loop2): 1 truncate cleaned up [ 44.193238][ T4512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.228845][ T4522] hub 9-0:1.0: USB hub found [ 44.240870][ T4512] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.255002][ T4522] hub 9-0:1.0: 8 ports detected [ 44.371792][ T4543] loop4: detected capacity change from 0 to 512 [ 44.379391][ T4543] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.401461][ T4543] EXT4-fs (loop4): 1 truncate cleaned up [ 44.424460][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.458241][ T4543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.633666][ T4556] 9pnet_fd: Insufficient options for proto=fd [ 44.645614][ T4568] loop0: detected capacity change from 0 to 256 [ 44.699244][ T4568] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.942068][ T4598] FAULT_INJECTION: forcing a failure. [ 44.942068][ T4598] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.955287][ T4598] CPU: 1 UID: 0 PID: 4598 Comm: syz.3.262 Not tainted 6.11.0-syzkaller-11653-g3630400697a3 #0 [ 44.965598][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.975721][ T4598] Call Trace: [ 44.979000][ T4598] [ 44.981932][ T4598] dump_stack_lvl+0xf2/0x150 [ 44.986700][ T4598] dump_stack+0x15/0x20 [ 44.990860][ T4598] should_fail_ex+0x223/0x230 [ 44.995769][ T4598] should_fail+0xb/0x10 [ 44.999993][ T4598] should_fail_usercopy+0x1a/0x20 [ 45.005042][ T4598] _copy_from_iter+0xd3/0xd20 [ 45.009856][ T4598] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 45.015434][ T4598] copy_page_from_iter+0x14f/0x280 [ 45.020582][ T4598] tun_get_user+0x686/0x24e0 [ 45.025472][ T4598] ? kstrtoull+0x110/0x140 [ 45.030240][ T4598] ? ref_tracker_alloc+0x1f5/0x2f0 [ 45.036233][ T4598] tun_chr_write_iter+0x188/0x240 [ 45.042122][ T4598] vfs_write+0x76a/0x910 [ 45.046393][ T4598] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 45.052650][ T4598] ksys_write+0xeb/0x1b0 [ 45.056963][ T4598] __x64_sys_write+0x42/0x50 [ 45.061820][ T4598] x64_sys_call+0x27dd/0x2d60 [ 45.066744][ T4598] do_syscall_64+0xc9/0x1c0 [ 45.071335][ T4598] ? clear_bhb_loop+0x55/0xb0 [ 45.076098][ T4598] ? clear_bhb_loop+0x55/0xb0 [ 45.081145][ T4598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.087623][ T4598] RIP: 0033:0x7fa573d3cadf [ 45.092095][ T4598] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 45.113359][ T4598] RSP: 002b:00007fa572996000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 45.122089][ T4598] RAX: ffffffffffffffda RBX: 00007fa573ef6058 RCX: 00007fa573d3cadf [ 45.130252][ T4598] RDX: 0000000000000032 RSI: 00000000200010c0 RDI: 00000000000000c8 [ 45.138372][ T4598] RBP: 00007fa572996090 R08: 0000000000000000 R09: 0000000000000000 [ 45.146538][ T4598] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 45.155235][ T4598] R13: 0000000000000000 R14: 00007fa573ef6058 R15: 00007ffca49187d8 [ 45.163566][ T4598] [ 45.200118][ T3278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.289796][ T4614] loop4: detected capacity change from 0 to 512 [ 45.308266][ T4614] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.345533][ T4614] EXT4-fs (loop4): 1 truncate cleaned up [ 45.358914][ T4614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.386915][ T4622] usb usb8: usbfs: process 4622 (syz.1.267) did not claim interface 0 before use [ 45.543029][ T4631] hub 9-0:1.0: USB hub found [ 45.556908][ T4631] hub 9-0:1.0: 8 ports detected [ 45.752459][ T4653] loop2: detected capacity change from 0 to 128 [ 45.764650][ T4653] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.788047][ T4653] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.956220][ T3271] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.001670][ T4677] random: crng reseeded on system resumption [ 46.064929][ T4677] ip6gre0: Master is either lo or non-ether device [ 46.073022][ T4682] loop1: detected capacity change from 0 to 256 [ 46.095686][ T3278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.112769][ T4682] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.139350][ T4687] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 46.498211][ T4720] loop1: detected capacity change from 0 to 256 [ 46.524846][ T4720] FAT-fs (loop1): Directory bread(block 64) failed [ 46.556897][ T4720] FAT-fs (loop1): Directory bread(block 65) failed [ 46.573315][ T4720] FAT-fs (loop1): Directory bread(block 66) failed [ 46.590665][ T4720] FAT-fs (loop1): Directory bread(block 67) failed [ 46.616008][ T4720] FAT-fs (loop1): Directory bread(block 68) failed [ 46.635255][ T4720] FAT-fs (loop1): Directory bread(block 69) failed [ 46.658180][ T4720] FAT-fs (loop1): Directory bread(block 70) failed [ 46.683510][ T4720] FAT-fs (loop1): Directory bread(block 71) failed [ 46.703204][ T4720] FAT-fs (loop1): Directory bread(block 72) failed [ 46.722070][ T4720] FAT-fs (loop1): Directory bread(block 73) failed [ 46.763094][ T4720] syz.1.291: attempt to access beyond end of device [ 46.763094][ T4720] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 46.833875][ T4720] syz.1.291: attempt to access beyond end of device [ 46.833875][ T4720] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 46.993904][ T4743] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 47.009532][ T4745] loop0: detected capacity change from 0 to 128 [ 47.020201][ T4745] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.043240][ T4745] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.122432][ T4748] loop2: detected capacity change from 0 to 512 [ 47.138065][ T4750] loop1: detected capacity change from 0 to 256 [ 47.176212][ T4750] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.246322][ T4748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.265553][ T4758] loop3: detected capacity change from 0 to 1024 [ 47.311546][ T4758] EXT4-fs: Ignoring removed nobh option [ 47.317318][ T4758] EXT4-fs: Ignoring removed orlov option [ 47.327853][ T4748] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.348311][ T4763] syzkaller0: entered allmulticast mode [ 47.367021][ T4758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.386611][ T4763] syzkaller0 (unregistering): left allmulticast mode [ 47.438743][ T3271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.547604][ T4770] random: crng reseeded on system resumption [ 47.867365][ T3266] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.890922][ T4780] loop0: detected capacity change from 0 to 512 [ 47.904008][ T4780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.916862][ T4780] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.950716][ T3266] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.055832][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.186181][ T4815] 9pnet_fd: Insufficient options for proto=fd [ 48.238952][ T4827] hub 9-0:1.0: USB hub found [ 48.254412][ T4827] hub 9-0:1.0: 8 ports detected [ 48.323344][ T4835] loop1: detected capacity change from 0 to 128 [ 48.338870][ T4835] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.393030][ T4835] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.469973][ T4852] loop3: detected capacity change from 0 to 512 [ 48.495682][ T4852] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.500660][ T4854] syzkaller0: entered allmulticast mode [ 48.510073][ T4852] EXT4-fs (loop3): 1 truncate cleaned up [ 48.520700][ T4852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.538011][ T4854] syzkaller0 (unregistering): left allmulticast mode [ 48.645079][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 48.645092][ T29] audit: type=1400 audit(1727505151.729:1861): avc: denied { create } for pid=4876 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.673511][ T29] audit: type=1400 audit(1727505151.758:1862): avc: denied { read } for pid=4876 comm="syz.0.319" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.703551][ T29] audit: type=1400 audit(1727505151.758:1863): avc: denied { open } for pid=4876 comm="syz.0.319" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.733509][ T29] audit: type=1400 audit(1727505151.758:1864): avc: denied { ioctl } for pid=4876 comm="syz.0.319" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.734332][ T4878] 9pnet_fd: Insufficient options for proto=fd [ 48.824326][ T4882] 9pnet_fd: Insufficient options for proto=fd [ 48.898431][ T4895] loop4: detected capacity change from 0 to 1024 [ 48.906991][ T29] audit: type=1400 audit(1727505151.993:1865): avc: denied { mounton } for pid=4894 comm="syz.4.325" path="/66/file0" dev="tmpfs" ino=377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.907413][ T4895] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 48.939787][ T29] audit: type=1400 audit(1727505152.023:1866): avc: denied { read } for pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.946115][ T4895] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 48.973465][ T29] audit: type=1400 audit(1727505152.023:1867): avc: denied { search } for pid=2949 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.973557][ T29] audit: type=1400 audit(1727505152.023:1868): avc: denied { open } for pid=2949 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.030963][ T4895] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.325: Failed to acquire dquot type 0 [ 49.047554][ T4895] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 49.064352][ T4895] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #13: comm syz.4.325: corrupted inode contents [ 49.077033][ T4895] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #13: comm syz.4.325: mark_inode_dirty error [ 49.089182][ T4895] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #13: comm syz.4.325: corrupted inode contents [ 49.101629][ T4895] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.325: mark_inode_dirty error [ 49.113294][ T4895] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #13: comm syz.4.325: corrupted inode contents [ 49.126605][ T4895] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 49.135763][ T4895] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #13: comm syz.4.325: corrupted inode contents [ 49.149782][ T4895] EXT4-fs error (device loop4): ext4_truncate:4208: inode #13: comm syz.4.325: mark_inode_dirty error [ 49.162716][ T4895] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 49.173621][ T4895] EXT4-fs (loop4): 1 truncate cleaned up [ 49.179911][ T4895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.193516][ T3270] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.193906][ T4895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.229247][ T4902] loop1: detected capacity change from 0 to 512 [ 49.257962][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.260669][ T4902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.280524][ T4902] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.344720][ T3270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.374558][ T4914] program syz.1.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.773775][ T4922] loop0: detected capacity change from 0 to 256 [ 49.794490][ T4923] loop2: detected capacity change from 0 to 512 [ 49.803464][ T4923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.823727][ T4922] FAT-fs (loop0): Directory bread(block 64) failed [ 49.831156][ T4922] FAT-fs (loop0): Directory bread(block 65) failed [ 49.836169][ T4923] EXT4-fs (loop2): 1 truncate cleaned up [ 49.838139][ T4922] FAT-fs (loop0): Directory bread(block 66) failed [ 49.845003][ T4923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.851361][ T4922] FAT-fs (loop0): Directory bread(block 67) failed [ 49.872802][ T4922] FAT-fs (loop0): Directory bread(block 68) failed [ 49.879947][ T4922] FAT-fs (loop0): Directory bread(block 69) failed [ 49.884207][ T4926] 9pnet_fd: Insufficient options for proto=fd [ 49.888022][ T4922] FAT-fs (loop0): Directory bread(block 70) failed [ 49.902548][ T4922] FAT-fs (loop0): Directory bread(block 71) failed [ 49.911110][ T4922] FAT-fs (loop0): Directory bread(block 72) failed [ 49.922666][ T4922] FAT-fs (loop0): Directory bread(block 73) failed [ 49.942662][ T4930] loop4: detected capacity change from 0 to 512 [ 49.948371][ T4922] syz.0.335: attempt to access beyond end of device [ 49.948371][ T4922] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 49.965679][ T4922] syz.0.335: attempt to access beyond end of device [ 49.965679][ T4922] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 50.004414][ T4930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.020310][ T4930] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.048154][ T4936] loop0: detected capacity change from 0 to 1024 [ 50.066921][ T4936] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.338: Failed to acquire dquot type 0 [ 50.081047][ T4936] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 50.096834][ T4936] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.338: corrupted inode contents [ 50.110754][ T4936] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #13: comm syz.0.338: mark_inode_dirty error [ 50.123611][ T4939] loop4: detected capacity change from 0 to 128 [ 50.124454][ T4936] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.338: corrupted inode contents [ 50.135921][ T4939] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.144340][ T4936] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.338: mark_inode_dirty error [ 50.198822][ T4936] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.338: corrupted inode contents [ 50.213679][ T4936] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 50.237715][ T4936] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.338: corrupted inode contents [ 50.254221][ T4946] loop3: detected capacity change from 0 to 128 [ 50.263850][ T4936] EXT4-fs error (device loop0): ext4_truncate:4208: inode #13: comm syz.0.338: mark_inode_dirty error [ 50.283514][ T4946] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.289877][ T4936] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 50.331264][ T4936] EXT4-fs (loop0): 1 truncate cleaned up [ 50.368689][ T4953] loop0: detected capacity change from 0 to 256 [ 50.376445][ T4953] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.393565][ T4955] loop4: detected capacity change from 0 to 512 [ 50.411704][ T4955] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.489555][ T4961] 9pnet_fd: Insufficient options for proto=fd [ 50.564166][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.571462][ T4985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.655471][ T4996] syz.0.349[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.655557][ T4996] syz.0.349[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.670596][ T4996] syz.0.349[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.683387][ T4988] loop2: detected capacity change from 0 to 8192 [ 50.707964][ T5002] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 50.755739][ T4988] loop2: p1 p2 p3 [ 50.764120][ T2967] loop2: p1 p2 p3 [ 51.217178][ T5056] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 51.256169][ T5058] loop3: detected capacity change from 0 to 128 [ 51.297828][ T5058] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.430729][ T5073] loop1: detected capacity change from 0 to 512 [ 51.475619][ T5073] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.481424][ T5077] syzkaller0: entered allmulticast mode [ 51.516548][ T5077] syzkaller0 (unregistering): left allmulticast mode [ 51.538973][ T5073] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 51.559885][ T5073] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 51.648842][ T5104] syz.2.363[5104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.648939][ T5104] syz.2.363[5104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.665149][ T5104] syz.2.363[5104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.711404][ T5102] loop1: detected capacity change from 0 to 1024 [ 51.764750][ T5102] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.362: Failed to acquire dquot type 0 [ 51.787768][ T5102] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 51.804126][ T5102] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #13: comm syz.1.362: corrupted inode contents [ 51.805410][ T5122] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 51.827293][ T5102] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #13: comm syz.1.362: mark_inode_dirty error [ 51.850529][ T5102] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #13: comm syz.1.362: corrupted inode contents [ 51.867154][ T5102] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.362: mark_inode_dirty error [ 51.883419][ T5102] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #13: comm syz.1.362: corrupted inode contents [ 51.900164][ T5102] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 51.909548][ T5102] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #13: comm syz.1.362: corrupted inode contents [ 51.922687][ T5102] EXT4-fs error (device loop1): ext4_truncate:4208: inode #13: comm syz.1.362: mark_inode_dirty error [ 51.934809][ T5102] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 51.945209][ T5102] EXT4-fs (loop1): 1 truncate cleaned up [ 51.951837][ T5126] random: crng reseeded on system resumption [ 51.964613][ T5139] loop2: detected capacity change from 0 to 512 [ 51.979226][ T5139] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.011023][ T5139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 52.027001][ T5139] System zones: 1-12 [ 52.037780][ T5139] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.063260][ T5139] EXT4-fs (loop2): 1 truncate cleaned up [ 52.283567][ T5177] loop2: detected capacity change from 0 to 512 [ 52.306758][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.325314][ T5177] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.365307][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.416495][ T5189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.373'. [ 52.426037][ T5189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.373'. [ 52.506404][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.594693][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.688082][ T40] bridge_slave_1: left allmulticast mode [ 52.693900][ T40] bridge_slave_1: left promiscuous mode [ 52.699710][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.711156][ T40] bridge_slave_0: left allmulticast mode [ 52.717058][ T40] bridge_slave_0: left promiscuous mode [ 52.722921][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.872928][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.883897][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.895472][ T40] bond0 (unregistering): Released all slaves [ 52.954153][ T40] hsr_slave_0: left promiscuous mode [ 52.973299][ T40] hsr_slave_1: left promiscuous mode [ 52.996165][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.003771][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.012653][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.020680][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.035480][ T40] veth1_macvtap: left promiscuous mode [ 53.041604][ T40] veth0_macvtap: left promiscuous mode [ 53.047507][ T40] veth1_vlan: left promiscuous mode [ 53.052830][ T40] veth0_vlan: left promiscuous mode [ 53.060490][ T5232] loop3: detected capacity change from 0 to 512 [ 53.075827][ T5232] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.090857][ T5232] EXT4-fs (loop3): 1 truncate cleaned up [ 53.189141][ T40] team0 (unregistering): Port device team_slave_1 removed [ 53.199832][ T40] team0 (unregistering): Port device team_slave_0 removed [ 53.324110][ T5204] chnl_net:caif_netlink_parms(): no params data found [ 53.360945][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.368127][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.375343][ T5204] bridge_slave_0: entered allmulticast mode [ 53.382975][ T5204] bridge_slave_0: entered promiscuous mode [ 53.391744][ T5204] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.398862][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.406119][ T5204] bridge_slave_1: entered allmulticast mode [ 53.412916][ T5204] bridge_slave_1: entered promiscuous mode [ 53.429555][ T5204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.440523][ T5204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.466231][ T5204] team0: Port device team_slave_0 added [ 53.473917][ T5204] team0: Port device team_slave_1 added [ 53.491753][ T5204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.499692][ T5204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.526667][ T5204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.540452][ T5204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.547575][ T5204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.574369][ T5204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.624260][ T5204] hsr_slave_0: entered promiscuous mode [ 53.630736][ T5204] hsr_slave_1: entered promiscuous mode [ 53.637350][ T5204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.645089][ T5204] Cannot create hsr debugfs directory [ 53.888429][ T5293] loop4: detected capacity change from 0 to 512 [ 53.915863][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 53.915878][ T29] audit: type=1400 audit(1727505156.920:2066): avc: denied { create } for pid=5285 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 53.967172][ T5293] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.152794][ T29] audit: type=1400 audit(1727505157.146:2067): avc: denied { read write } for pid=5322 comm="syz.3.396" name="ptp0" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.176300][ T29] audit: type=1400 audit(1727505157.146:2068): avc: denied { open } for pid=5322 comm="syz.3.396" path="/dev/ptp0" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.179774][ T5204] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.243675][ T5332] netlink: 16382 bytes leftover after parsing attributes in process `syz.0.395'. [ 54.255403][ T29] audit: type=1326 audit(1727505157.245:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 54.264735][ T5204] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.279736][ T29] audit: type=1326 audit(1727505157.245:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 54.310425][ T29] audit: type=1326 audit(1727505157.245:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 54.334489][ T29] audit: type=1326 audit(1727505157.245:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 54.359298][ T29] audit: type=1326 audit(1727505157.245:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 54.384089][ T29] audit: type=1326 audit(1727505157.245:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 54.408967][ T29] audit: type=1326 audit(1727505157.245:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5322 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa573d3dff9 code=0x7ffc0000 [ 54.439756][ T5204] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.457299][ T5320] netlink: 16382 bytes leftover after parsing attributes in process `+}[@'. [ 54.480296][ T5204] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.614917][ T5204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.653069][ T5204] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.685755][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.693004][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.723643][ T5369] syzkaller0: entered allmulticast mode [ 54.730637][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.737739][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.751309][ T5372] loop0: detected capacity change from 0 to 512 [ 54.773761][ T5372] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.789846][ T5369] syzkaller0 (unregistering): left allmulticast mode [ 54.826405][ T5372] EXT4-fs (loop0): 1 truncate cleaned up [ 54.923462][ T5403] loop2: detected capacity change from 0 to 128 [ 54.936470][ T5403] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.007685][ T5204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.119640][ T5429] loop3: detected capacity change from 0 to 512 [ 55.137861][ T5429] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.160413][ T5429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 55.201971][ T5429] System zones: 1-12 [ 55.226923][ T5429] EXT4-fs (loop3): 1 truncate cleaned up [ 55.256950][ T5204] veth0_vlan: entered promiscuous mode [ 55.276880][ T5204] veth1_vlan: entered promiscuous mode [ 55.300203][ T5204] veth0_macvtap: entered promiscuous mode [ 55.308288][ T5204] veth1_macvtap: entered promiscuous mode [ 55.320178][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.330753][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.341034][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.352160][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.362538][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.373401][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.385168][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.396403][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.408317][ T5204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.416930][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.427849][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.438846][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.449588][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.459947][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.471622][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.482517][ T5204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.493283][ T5204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.505827][ T5204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.515039][ T5204] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.524103][ T5204] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.533185][ T5204] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.542280][ T5204] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.615343][ T5480] loop3: detected capacity change from 0 to 512 [ 55.713344][ T5480] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.734589][ T5495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5495 comm=syz.0.404 [ 55.756615][ T5495] syz.0.404 uses obsolete (PF_INET,SOCK_PACKET) [ 55.809879][ T5504] loop1: detected capacity change from 0 to 256 [ 55.836435][ T5504] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.837483][ T5509] netlink: 'syz.0.408': attribute type 3 has an invalid length. [ 55.970980][ T5524] loop0: detected capacity change from 0 to 1024 [ 55.986484][ T5524] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.411: Failed to acquire dquot type 0 [ 56.002907][ T5524] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 56.019351][ T5524] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.411: corrupted inode contents [ 56.032916][ T5524] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #13: comm syz.0.411: mark_inode_dirty error [ 56.047420][ T5524] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.411: corrupted inode contents [ 56.068049][ T5524] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.411: mark_inode_dirty error [ 56.079678][ T5524] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.411: corrupted inode contents [ 56.092534][ T5524] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 56.102464][ T5524] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #13: comm syz.0.411: corrupted inode contents [ 56.115701][ T5524] EXT4-fs error (device loop0): ext4_truncate:4208: inode #13: comm syz.0.411: mark_inode_dirty error [ 56.129656][ T5544] loop1: detected capacity change from 0 to 512 [ 56.139034][ T5544] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.149486][ T5524] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 56.161037][ T5524] EXT4-fs (loop0): 1 truncate cleaned up [ 56.167697][ T5544] EXT4-fs (loop1): 1 truncate cleaned up [ 56.208781][ T5553] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 56.259570][ T5562] loop0: detected capacity change from 0 to 512 [ 56.299797][ T5562] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.413867][ T5585] loop0: detected capacity change from 0 to 128 [ 56.441095][ T5585] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.682718][ T5621] loop2: detected capacity change from 0 to 512 [ 56.714091][ T5621] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.799977][ T5633] loop3: detected capacity change from 0 to 1024 [ 56.817581][ T5633] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.425: Failed to acquire dquot type 0 [ 56.832030][ T5633] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 56.849161][ T5633] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #13: comm syz.3.425: corrupted inode contents [ 56.861602][ T5633] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #13: comm syz.3.425: mark_inode_dirty error [ 56.879297][ T5633] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #13: comm syz.3.425: corrupted inode contents [ 56.892852][ T5633] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.425: mark_inode_dirty error [ 56.906478][ T5633] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #13: comm syz.3.425: corrupted inode contents [ 56.921703][ T5633] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 56.935697][ T5633] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #13: comm syz.3.425: corrupted inode contents [ 56.949384][ T5633] EXT4-fs error (device loop3): ext4_truncate:4208: inode #13: comm syz.3.425: mark_inode_dirty error [ 56.962998][ T5633] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 56.973419][ T5633] EXT4-fs (loop3): 1 truncate cleaned up [ 57.190105][ T5664] FAULT_INJECTION: forcing a failure. [ 57.190105][ T5664] name failslab, interval 1, probability 0, space 0, times 0 [ 57.203394][ T5664] CPU: 1 UID: 0 PID: 5664 Comm: syz.4.430 Not tainted 6.11.0-syzkaller-11653-g3630400697a3 #0 [ 57.214075][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.224388][ T5664] Call Trace: [ 57.227780][ T5664] [ 57.230894][ T5664] dump_stack_lvl+0xf2/0x150 [ 57.235497][ T5664] dump_stack+0x15/0x20 [ 57.239933][ T5664] should_fail_ex+0x223/0x230 [ 57.245030][ T5664] ? audit_log_start+0x34c/0x6b0 [ 57.250728][ T5664] should_failslab+0x8f/0xb0 [ 57.256146][ T5664] kmem_cache_alloc_noprof+0x4c/0x290 [ 57.262728][ T5664] audit_log_start+0x34c/0x6b0 [ 57.267572][ T5664] audit_seccomp+0x4b/0x130 [ 57.272123][ T5664] __seccomp_filter+0x6fa/0x1180 [ 57.277957][ T5664] ? proc_fail_nth_write+0x12a/0x150 [ 57.283388][ T5664] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 57.289838][ T5664] ? vfs_write+0x580/0x910 [ 57.294405][ T5664] __secure_computing+0x9f/0x1c0 [ 57.299501][ T5664] syscall_trace_enter+0xd1/0x1f0 [ 57.304633][ T5664] do_syscall_64+0xaa/0x1c0 [ 57.309524][ T5664] ? clear_bhb_loop+0x55/0xb0 [ 57.314402][ T5664] ? clear_bhb_loop+0x55/0xb0 [ 57.319481][ T5664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.325732][ T5664] RIP: 0033:0x7f29e635dff9 [ 57.330163][ T5664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.351383][ T5664] RSP: 002b:00007f29e4fd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 57.364586][ T5664] RAX: ffffffffffffffda RBX: 00007f29e6515f80 RCX: 00007f29e635dff9 [ 57.379687][ T5664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 57.389092][ T5664] RBP: 00007f29e4fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 57.399066][ T5664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.410792][ T5664] R13: 0000000000000000 R14: 00007f29e6515f80 R15: 00007ffca15ffd38 [ 57.419899][ T5664] [ 57.470611][ T5698] futex_wake_op: syz.0.432 tries to shift op by -1; fix this program [ 57.565300][ T5710] loop4: detected capacity change from 0 to 1024 [ 57.595469][ T5710] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.679953][ T5731] loop4: detected capacity change from 0 to 512 [ 57.706755][ T5731] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.799146][ T5744] 9pnet_fd: Insufficient options for proto=fd [ 57.899524][ T5759] loop4: detected capacity change from 0 to 512 [ 57.940744][ T5759] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.951066][ T5764] loop1: detected capacity change from 0 to 512 [ 57.968315][ T5764] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.440: corrupted in-inode xattr: invalid ea_ino [ 57.987255][ T5764] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.440: couldn't read orphan inode 15 (err -117) [ 58.046675][ T5780] loop2: detected capacity change from 0 to 128 [ 58.047477][ T5764] loop1: detected capacity change from 512 to 0 [ 58.063648][ T5764] syz.1.440: attempt to access beyond end of device [ 58.063648][ T5764] loop1: rw=12288, sector=506, nr_sectors = 2 limit=0 [ 58.078707][ T5764] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #12: lblock 0: comm syz.1.440: error -5 reading directory block [ 58.111127][ T5204] syz-executor: attempt to access beyond end of device [ 58.111127][ T5204] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 58.126113][ T5204] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 58.147883][ T3359] kworker/u8:7: attempt to access beyond end of device [ 58.147883][ T3359] loop1: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 58.151451][ T5786] loop4: detected capacity change from 0 to 512 [ 58.172245][ T5780] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.208551][ T3359] kworker/u8:7: attempt to access beyond end of device [ 58.208551][ T3359] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 58.227559][ T3359] kworker/u8:7: attempt to access beyond end of device [ 58.227559][ T3359] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 58.243561][ T3359] kworker/u8:7: attempt to access beyond end of device [ 58.243561][ T3359] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 58.263407][ T3359] kworker/u8:7: attempt to access beyond end of device [ 58.263407][ T3359] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 58.264335][ T5786] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.287960][ T3359] kworker/u8:7: attempt to access beyond end of device [ 58.287960][ T3359] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 58.331203][ T3359] kworker/u8:7: attempt to access beyond end of device [ 58.331203][ T3359] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 58.342685][ T5786] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 58.348062][ T3359] kworker/u8:7: attempt to access beyond end of device [ 58.348062][ T3359] loop1: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 58.372396][ T3359] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #18: block 9: comm kworker/u8:7: unable to read itable block [ 58.387053][ T3359] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 58.397302][ T3359] EXT4-fs (loop1): I/O error while writing superblock [ 58.407625][ T3359] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #12: block 7: comm kworker/u8:7: unable to read itable block [ 58.426721][ T3359] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 58.435464][ T3359] EXT4-fs (loop1): I/O error while writing superblock [ 58.443196][ T3359] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4526: inode #19: block 9: comm kworker/u8:7: unable to read itable block [ 58.460832][ T3359] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 58.492227][ T3359] EXT4-fs (loop1): I/O error while writing superblock [ 58.510727][ T5204] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 58.529142][ T5204] EXT4-fs (loop1): I/O error while writing superblock [ 58.587153][ T5822] loop0: detected capacity change from 0 to 512 [ 58.626470][ T5822] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.747692][ T5847] syzkaller0: entered allmulticast mode [ 58.758829][ T5847] syzkaller0 (unregistering): left allmulticast mode [ 58.802037][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.898384][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.971837][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.987058][ T5879] loop2: detected capacity change from 0 to 512 [ 58.997032][ T5879] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.013752][ T5879] EXT4-fs (loop2): 1 truncate cleaned up [ 59.024283][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.069497][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 59.069510][ T29] audit: type=1400 audit(1727505162.007:2619): avc: denied { unmount } for pid=3266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.094522][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 59.174988][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.183742][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.192610][ T5859] bridge_slave_0: entered allmulticast mode [ 59.199588][ T5859] bridge_slave_0: entered promiscuous mode [ 59.217297][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.225235][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.233760][ T5859] bridge_slave_1: entered allmulticast mode [ 59.242139][ T5859] bridge_slave_1: entered promiscuous mode [ 59.269471][ T11] bridge_slave_1: left allmulticast mode [ 59.275798][ T11] bridge_slave_1: left promiscuous mode [ 59.284442][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.293409][ T11] bridge_slave_0: left allmulticast mode [ 59.300029][ T11] bridge_slave_0: left promiscuous mode [ 59.306507][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.415762][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.428341][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.448015][ T11] bond0 (unregistering): Released all slaves [ 59.471213][ T5897] loop3: detected capacity change from 0 to 256 [ 59.471941][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.501391][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.506109][ T5897] FAT-fs (loop3): Directory bread(block 64) failed [ 59.530398][ T5897] FAT-fs (loop3): Directory bread(block 65) failed [ 59.539271][ T5897] FAT-fs (loop3): Directory bread(block 66) failed [ 59.553760][ T5897] FAT-fs (loop3): Directory bread(block 67) failed [ 59.567594][ T29] audit: type=1326 audit(1727505162.492:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b264dff9 code=0x7ffc0000 [ 59.608907][ T11] hsr_slave_0: left promiscuous mode [ 59.617707][ T5897] FAT-fs (loop3): Directory bread(block 68) failed [ 59.618568][ T29] audit: type=1326 audit(1727505162.492:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b264dff9 code=0x7ffc0000 [ 59.625103][ T5897] FAT-fs (loop3): Directory bread(block 69) failed [ 59.653475][ T29] audit: type=1326 audit(1727505162.492:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94b264dff9 code=0x7ffc0000 [ 59.663652][ T5897] FAT-fs (loop3): Directory bread(block 70) failed [ 59.691237][ T29] audit: type=1326 audit(1727505162.492:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b264dff9 code=0x7ffc0000 [ 59.691261][ T29] audit: type=1326 audit(1727505162.492:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b264dff9 code=0x7ffc0000 [ 59.691280][ T29] audit: type=1326 audit(1727505162.492:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94b264dff9 code=0x7ffc0000 [ 59.700919][ T5897] FAT-fs (loop3): Directory bread(block 71) failed [ 59.727305][ T29] audit: type=1326 audit(1727505162.492:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b264dff9 code=0x7ffc0000 [ 59.727333][ T29] audit: type=1326 audit(1727505162.492:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94b264dff9 code=0x7ffc0000 [ 59.727416][ T29] audit: type=1326 audit(1727505162.492:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5899 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b264dff9 code=0x7ffc0000 [ 59.758386][ T5897] FAT-fs (loop3): Directory bread(block 72) failed [ 59.875373][ T11] hsr_slave_1: left promiscuous mode [ 59.878128][ T5897] FAT-fs (loop3): Directory bread(block 73) failed [ 59.889521][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.898914][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.923545][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.932411][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.945515][ T11] veth1_macvtap: left promiscuous mode [ 59.954681][ T11] veth0_macvtap: left promiscuous mode [ 59.961768][ T11] veth1_vlan: left promiscuous mode [ 59.968074][ T11] veth0_vlan: left promiscuous mode [ 60.066575][ T5930] 9pnet_fd: Insufficient options for proto=fd [ 60.074697][ T11] team0 (unregistering): Port device team_slave_1 removed [ 60.086319][ T11] team0 (unregistering): Port device team_slave_0 removed [ 60.129801][ T5859] team0: Port device team_slave_0 added [ 60.152195][ T5859] team0: Port device team_slave_1 added [ 60.185878][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.195244][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.229233][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.246595][ T5935] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 60.251239][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.267298][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.300794][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.337916][ T5938] loop3: detected capacity change from 0 to 512 [ 60.366126][ T5938] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.369817][ T5859] hsr_slave_0: entered promiscuous mode [ 60.387699][ T5859] hsr_slave_1: entered promiscuous mode [ 60.396188][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.405039][ T5859] Cannot create hsr debugfs directory [ 60.692498][ T5991] 9pnet_fd: Insufficient options for proto=fd [ 60.821592][ T6006] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 60.857253][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.888369][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.923933][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.953248][ T6021] syzkaller0: entered allmulticast mode [ 60.970306][ T6021] syzkaller0 (unregistering): left allmulticast mode [ 60.988872][ T6028] loop3: detected capacity change from 0 to 512 [ 61.020103][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.060962][ T6028] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.107511][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.133903][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.169876][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.181061][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.197384][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.207258][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.269354][ T6066] loop0: detected capacity change from 0 to 128 [ 61.308114][ T6066] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.336480][ T6054] 9pnet_fd: Insufficient options for proto=fd [ 61.424517][ T6087] hub 9-0:1.0: USB hub found [ 61.449914][ T6087] hub 9-0:1.0: 8 ports detected [ 61.482209][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.616724][ T5859] veth0_vlan: entered promiscuous mode [ 61.656841][ T6124] loop2: detected capacity change from 0 to 256 [ 61.658504][ T5859] veth1_vlan: entered promiscuous mode [ 61.679848][ T6124] FAT-fs (loop2): Directory bread(block 64) failed [ 61.689979][ T6124] FAT-fs (loop2): Directory bread(block 65) failed [ 61.697575][ T5859] veth0_macvtap: entered promiscuous mode [ 61.720893][ T5859] veth1_macvtap: entered promiscuous mode [ 61.726559][ T6124] FAT-fs (loop2): Directory bread(block 66) failed [ 61.741550][ T6129] loop3: detected capacity change from 0 to 512 [ 61.752818][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.765347][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.778126][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.791689][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.805419][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.819690][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.820159][ T6124] FAT-fs (loop2): Directory bread(block 67) failed [ 61.834244][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.834264][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.869557][ T6124] FAT-fs (loop2): Directory bread(block 68) failed [ 61.873872][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.883105][ T6124] FAT-fs (loop2): Directory bread(block 69) failed [ 61.903461][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.906758][ T6129] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.918495][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.943342][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.946171][ T6124] FAT-fs (loop2): Directory bread(block 70) failed [ 61.957171][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.968576][ T6124] FAT-fs (loop2): Directory bread(block 71) failed [ 61.977170][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.999124][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.011396][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.013466][ T6124] FAT-fs (loop2): Directory bread(block 72) failed [ 62.022789][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.025055][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.038882][ T6124] FAT-fs (loop2): Directory bread(block 73) failed [ 62.053525][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.069904][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.081002][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.090353][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.183379][ T6153] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 62.198077][ T6151] loop0: detected capacity change from 0 to 512 [ 62.267809][ T6156] 9pnet_fd: Insufficient options for proto=fd [ 62.282368][ T6151] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.383826][ T6180] loop2: detected capacity change from 0 to 512 [ 62.394200][ T6184] loop1: detected capacity change from 0 to 512 [ 62.404495][ T6184] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.427231][ T6180] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.441054][ T6184] EXT4-fs (loop1): 1 truncate cleaned up [ 62.451064][ T6180] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 62.460950][ T6180] System zones: 1-12 [ 62.474606][ T6195] loop0: detected capacity change from 0 to 256 [ 62.479286][ T6180] EXT4-fs (loop2): 1 truncate cleaned up [ 62.522442][ T6195] FAT-fs (loop0): Directory bread(block 64) failed [ 62.534167][ T6195] FAT-fs (loop0): Directory bread(block 65) failed [ 62.542506][ T6195] FAT-fs (loop0): Directory bread(block 66) failed [ 62.550000][ T6195] FAT-fs (loop0): Directory bread(block 67) failed [ 62.557617][ T6195] FAT-fs (loop0): Directory bread(block 68) failed [ 62.572602][ T6195] FAT-fs (loop0): Directory bread(block 69) failed [ 62.605517][ T6195] FAT-fs (loop0): Directory bread(block 70) failed [ 62.613161][ T6195] FAT-fs (loop0): Directory bread(block 71) failed [ 62.628449][ T6195] FAT-fs (loop0): Directory bread(block 72) failed [ 62.639649][ T6195] FAT-fs (loop0): Directory bread(block 73) failed [ 62.715539][ T6219] loop2: detected capacity change from 0 to 512 [ 62.742291][ T6219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.769718][ T6219] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 62.783253][ T6219] System zones: 1-12 [ 62.796749][ T6219] EXT4-fs (loop2): 1 truncate cleaned up [ 62.852831][ T6237] loop0: detected capacity change from 0 to 512 [ 62.869710][ T6237] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.882775][ T6237] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 62.892609][ T6237] System zones: 1-12 [ 62.899004][ T6237] EXT4-fs (loop0): 1 truncate cleaned up [ 63.023867][ T6262] loop0: detected capacity change from 0 to 512 [ 63.050129][ T6262] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.193209][ T6283] loop1: detected capacity change from 0 to 512 [ 63.218738][ T6283] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.261931][ T6283] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.529: corrupted xattr block 33: invalid header [ 63.276640][ T6283] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 63.286269][ T6283] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.529: corrupted xattr block 33: invalid header [ 63.302704][ T6283] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 63.316406][ T6283] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.529: corrupted xattr block 33: invalid header [ 63.332306][ T6283] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 63.476199][ T6295] loop2: detected capacity change from 0 to 256 [ 63.510802][ T6295] FAT-fs (loop2): Directory bread(block 64) failed [ 63.532245][ T6295] FAT-fs (loop2): Directory bread(block 65) failed [ 63.548021][ T6295] FAT-fs (loop2): Directory bread(block 66) failed [ 63.558386][ T6295] FAT-fs (loop2): Directory bread(block 67) failed [ 63.566915][ T6295] FAT-fs (loop2): Directory bread(block 68) failed [ 63.581469][ T6295] FAT-fs (loop2): Directory bread(block 69) failed [ 63.587041][ T6301] loop3: detected capacity change from 0 to 128 [ 63.591433][ T6295] FAT-fs (loop2): Directory bread(block 70) failed [ 63.608089][ T6301] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.645808][ T6295] FAT-fs (loop2): Directory bread(block 71) failed [ 63.652881][ T6295] FAT-fs (loop2): Directory bread(block 72) failed [ 63.660275][ T6295] FAT-fs (loop2): Directory bread(block 73) failed [ 63.676627][ T6295] bio_check_eod: 29 callbacks suppressed [ 63.676641][ T6295] syz.2.532: attempt to access beyond end of device [ 63.676641][ T6295] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 63.700612][ T6309] 9pnet_fd: Insufficient options for proto=fd [ 63.707219][ T6295] syz.2.532: attempt to access beyond end of device [ 63.707219][ T6295] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 63.821549][ T6323] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.829348][ T6323] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 63.858312][ T6324] loop4: detected capacity change from 0 to 512 [ 63.866726][ T6324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.877406][ T6324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 63.886202][ T6324] System zones: 1-12 [ 63.890786][ T6324] EXT4-fs (loop4): 1 truncate cleaned up [ 63.922614][ T6329] loop1: detected capacity change from 0 to 128 [ 63.923686][ T6328] netlink: 'syz.3.543': attribute type 142 has an invalid length. [ 63.941240][ T6329] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.029398][ T6334] loop2: detected capacity change from 0 to 512 [ 64.047287][ T6334] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.072529][ T6344] loop3: detected capacity change from 0 to 256 [ 64.082010][ T6338] 9pnet_fd: Insufficient options for proto=fd [ 64.127609][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 64.127622][ T29] audit: type=1326 audit(1727505167.012:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.128705][ T6344] FAT-fs (loop3): Directory bread(block 64) failed [ 64.135372][ T29] audit: type=1326 audit(1727505167.022:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.157812][ T6344] FAT-fs (loop3): Directory bread(block 65) failed [ 64.164184][ T29] audit: type=1326 audit(1727505167.022:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.219164][ T29] audit: type=1326 audit(1727505167.022:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.243070][ T29] audit: type=1326 audit(1727505167.022:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.246794][ T6344] FAT-fs (loop3): Directory bread(block 66) failed [ 64.267712][ T29] audit: type=1326 audit(1727505167.022:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.298920][ T29] audit: type=1326 audit(1727505167.022:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.322495][ T29] audit: type=1326 audit(1727505167.022:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.346812][ T29] audit: type=1326 audit(1727505167.111:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.371645][ T29] audit: type=1326 audit(1727505167.111:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6352 comm="syz.4.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e635dff9 code=0x7ffc0000 [ 64.395801][ T6344] FAT-fs (loop3): Directory bread(block 67) failed [ 64.402326][ T6344] FAT-fs (loop3): Directory bread(block 68) failed [ 64.409815][ T6344] FAT-fs (loop3): Directory bread(block 69) failed [ 64.416581][ T6344] FAT-fs (loop3): Directory bread(block 70) failed [ 64.423537][ T6344] FAT-fs (loop3): Directory bread(block 71) failed [ 64.433443][ T6344] FAT-fs (loop3): Directory bread(block 72) failed [ 64.440820][ T6344] FAT-fs (loop3): Directory bread(block 73) failed [ 64.455318][ T6344] syz.3.551: attempt to access beyond end of device [ 64.455318][ T6344] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 64.469551][ T6344] syz.3.551: attempt to access beyond end of device [ 64.469551][ T6344] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 64.592564][ T6368] loop0: detected capacity change from 0 to 512 [ 64.599904][ T6368] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.613488][ T6368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 64.621886][ T6368] System zones: 1-12 [ 64.628241][ T6368] EXT4-fs (loop0): 1 truncate cleaned up [ 64.850302][ T6382] loop1: detected capacity change from 0 to 512 [ 64.858121][ T6382] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.869187][ T6382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 64.878054][ T6382] System zones: 1-12 [ 64.882914][ T6382] EXT4-fs (loop1): 1 truncate cleaned up [ 64.917971][ T6387] loop2: detected capacity change from 0 to 512 [ 64.941337][ T6389] loop0: detected capacity change from 0 to 256 [ 64.961657][ T6387] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.963457][ T6389] FAT-fs (loop0): Directory bread(block 64) failed [ 64.986776][ T6389] FAT-fs (loop0): Directory bread(block 65) failed [ 64.994029][ T6389] FAT-fs (loop0): Directory bread(block 66) failed [ 65.001130][ T6389] FAT-fs (loop0): Directory bread(block 67) failed [ 65.008145][ T6389] FAT-fs (loop0): Directory bread(block 68) failed [ 65.015306][ T6389] FAT-fs (loop0): Directory bread(block 69) failed [ 65.022319][ T6389] FAT-fs (loop0): Directory bread(block 70) failed [ 65.029040][ T6389] FAT-fs (loop0): Directory bread(block 71) failed [ 65.050378][ T6399] loop2: detected capacity change from 0 to 128 [ 65.050803][ T6389] FAT-fs (loop0): Directory bread(block 72) failed [ 65.064293][ T6389] FAT-fs (loop0): Directory bread(block 73) failed [ 65.067013][ T6400] loop1: detected capacity change from 0 to 512 [ 65.078708][ T6400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.089015][ T6389] syz.0.568: attempt to access beyond end of device [ 65.089015][ T6389] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 65.090073][ T6399] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.104842][ T6389] syz.0.568: attempt to access beyond end of device [ 65.104842][ T6389] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 65.159182][ T6400] EXT4-fs (loop1): 1 truncate cleaned up [ 65.230901][ T6406] loop0: detected capacity change from 0 to 2048 [ 65.269841][ T6414] loop4: detected capacity change from 0 to 512 [ 65.287225][ T6406] loop0: p2 p3 p7 [ 65.294821][ T6414] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.340892][ T4165] udevd[4165]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 65.340923][ T4166] udevd[4166]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 65.359044][ T4168] udevd[4168]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 65.436545][ T6428] loop4: detected capacity change from 0 to 512 [ 65.450450][ T6429] loop3: detected capacity change from 0 to 512 [ 65.464758][ T6429] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.470222][ T6428] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.479376][ T6429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 65.502223][ T6429] System zones: 1-12 [ 65.508550][ T6429] EXT4-fs (loop3): 1 truncate cleaned up [ 65.515221][ T6429] EXT4-fs mount: 101 callbacks suppressed [ 65.515235][ T6429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.536912][ T3278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.567533][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.589407][ T6436] loop4: detected capacity change from 0 to 256 [ 65.606043][ T6436] FAT-fs (loop4): Directory bread(block 64) failed [ 65.612964][ T6436] FAT-fs (loop4): Directory bread(block 65) failed [ 65.620475][ T6436] FAT-fs (loop4): Directory bread(block 66) failed [ 65.627547][ T6436] FAT-fs (loop4): Directory bread(block 67) failed [ 65.634556][ T6436] FAT-fs (loop4): Directory bread(block 68) failed [ 65.641796][ T6436] FAT-fs (loop4): Directory bread(block 69) failed [ 65.648778][ T6436] FAT-fs (loop4): Directory bread(block 70) failed [ 65.655601][ T6436] FAT-fs (loop4): Directory bread(block 71) failed [ 65.662430][ T6436] FAT-fs (loop4): Directory bread(block 72) failed [ 65.672185][ T6436] FAT-fs (loop4): Directory bread(block 73) failed [ 65.688926][ T6436] syz.4.585: attempt to access beyond end of device [ 65.688926][ T6436] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 65.703452][ T6436] syz.4.585: attempt to access beyond end of device [ 65.703452][ T6436] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 65.812705][ T6444] loop4: detected capacity change from 0 to 512 [ 65.820036][ T6444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.831261][ T6444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 65.839648][ T6444] System zones: 1-12 [ 65.844107][ T6444] EXT4-fs (loop4): 1 truncate cleaned up [ 65.850100][ T6444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.867146][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.900126][ T3271] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.900321][ T3278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.072529][ T6460] hub 9-0:1.0: USB hub found [ 66.077919][ T6460] hub 9-0:1.0: 8 ports detected [ 66.190905][ T6468] FAULT_INJECTION: forcing a failure. [ 66.190905][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 66.191501][ T6467] loop0: detected capacity change from 0 to 256 [ 66.204010][ T6468] CPU: 1 UID: 0 PID: 6468 Comm: syz.4.597 Not tainted 6.11.0-syzkaller-11653-g3630400697a3 #0 [ 66.221124][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.231287][ T6468] Call Trace: [ 66.234915][ T6468] [ 66.237926][ T6468] dump_stack_lvl+0xf2/0x150 [ 66.242544][ T6468] dump_stack+0x15/0x20 [ 66.246974][ T6468] should_fail_ex+0x223/0x230 [ 66.251662][ T6468] ? audit_log_d_path+0x96/0x250 [ 66.256694][ T6468] should_failslab+0x8f/0xb0 [ 66.261416][ T6468] __kmalloc_cache_noprof+0x4b/0x2a0 [ 66.267142][ T6468] audit_log_d_path+0x96/0x250 [ 66.272032][ T6468] ? get_file_rcu+0xeb/0x100 [ 66.276660][ T6468] ? __rcu_read_unlock+0x4e/0x70 [ 66.282336][ T6468] audit_log_d_path_exe+0x42/0x70 [ 66.287654][ T6468] audit_log_task+0x155/0x180 [ 66.292914][ T6468] audit_seccomp+0x68/0x130 [ 66.298396][ T6468] __seccomp_filter+0x6fa/0x1180 [ 66.303631][ T6468] ? proc_fail_nth_write+0x12a/0x150 [ 66.309324][ T6468] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.315498][ T6468] ? vfs_write+0x580/0x910 [ 66.320470][ T6468] ? __fget_files+0x1d4/0x210 [ 66.325179][ T6468] __secure_computing+0x9f/0x1c0 [ 66.330492][ T6468] syscall_trace_enter+0xd1/0x1f0 [ 66.335666][ T6468] ? fpregs_assert_state_consistent+0x83/0xa0 [ 66.341923][ T6468] do_syscall_64+0xaa/0x1c0 [ 66.346474][ T6468] ? clear_bhb_loop+0x55/0xb0 [ 66.351323][ T6468] ? clear_bhb_loop+0x55/0xb0 [ 66.356192][ T6468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.362770][ T6468] RIP: 0033:0x7f29e635dff9 [ 66.368037][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.388820][ T6468] RSP: 002b:00007f29e4fd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000020 [ 66.397611][ T6468] RAX: ffffffffffffffda RBX: 00007f29e6515f80 RCX: 00007f29e635dff9 [ 66.405618][ T6468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 66.413763][ T6468] RBP: 00007f29e4fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 66.421948][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.430531][ T6468] R13: 0000000000000000 R14: 00007f29e6515f80 R15: 00007ffca15ffd38 [ 66.438740][ T6468] [ 66.458597][ T6467] FAT-fs (loop0): Directory bread(block 64) failed [ 66.472940][ T6467] FAT-fs (loop0): Directory bread(block 65) failed [ 66.480043][ T6467] FAT-fs (loop0): Directory bread(block 66) failed [ 66.486968][ T6467] FAT-fs (loop0): Directory bread(block 67) failed [ 66.494396][ T6467] FAT-fs (loop0): Directory bread(block 68) failed [ 66.501152][ T6467] FAT-fs (loop0): Directory bread(block 69) failed [ 66.508708][ T6467] FAT-fs (loop0): Directory bread(block 70) failed [ 66.515825][ T6467] FAT-fs (loop0): Directory bread(block 71) failed [ 66.522508][ T6467] FAT-fs (loop0): Directory bread(block 72) failed [ 66.529254][ T6467] FAT-fs (loop0): Directory bread(block 73) failed [ 66.542364][ T6467] syz.0.596: attempt to access beyond end of device [ 66.542364][ T6467] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 66.557988][ T6467] syz.0.596: attempt to access beyond end of device [ 66.557988][ T6467] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 66.578017][ T6474] loop3: detected capacity change from 0 to 512 [ 66.585399][ T6474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.605525][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.614568][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.615231][ T6474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 66.622761][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.655618][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.655909][ T4167] printk: udevd: 239 output lines suppressed due to ratelimiting [ 66.664461][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.675187][ T6474] System zones: 1-12 [ 66.686305][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.695677][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.696027][ T6474] EXT4-fs (loop3): 1 truncate cleaned up [ 66.710932][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.711333][ T6474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.720540][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.742708][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.760248][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.775453][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.810134][ T3264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.833134][ T6484] loop1: detected capacity change from 0 to 128 [ 66.841845][ T6490] loop3: detected capacity change from 0 to 128 [ 66.867683][ T6490] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.882702][ T6484] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.893994][ T6490] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.936649][ T6484] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.947623][ T6501] loop2: detected capacity change from 0 to 512 [ 66.984718][ T6501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.997952][ T6501] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.020147][ T3264] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.048528][ T3264] ================================================================== [ 67.057741][ T3264] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 67.066321][ T3264] [ 67.068642][ T3264] write to 0xffff888237c2ac68 of 1 bytes by task 6513 on cpu 0: [ 67.076711][ T3264] folios_put_refs+0x26d/0x2b0 [ 67.081610][ T3264] folio_batch_move_lru+0x202/0x230 [ 67.087309][ T3264] lru_add_drain_cpu+0x7c/0x260 [ 67.092724][ T3264] lru_add_drain+0x26/0x80 [ 67.097301][ T3264] vms_clear_ptes+0xd0/0x300 [ 67.102373][ T3264] vms_clean_up_area+0x46/0x110 [ 67.107742][ T3264] mmap_region+0xc6b/0x16e0 [ 67.112626][ T3264] do_mmap+0x718/0xb60 [ 67.117070][ T3264] vm_mmap_pgoff+0x133/0x290 [ 67.121937][ T3264] ksys_mmap_pgoff+0x286/0x330 [ 67.127940][ T3264] x64_sys_call+0x1884/0x2d60 [ 67.133292][ T3264] do_syscall_64+0xc9/0x1c0 [ 67.137984][ T3264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.144545][ T3264] [ 67.147570][ T3264] read to 0xffff888237c2ac68 of 1 bytes by task 3264 on cpu 1: [ 67.155508][ T3264] __lru_add_drain_all+0x136/0x3f0 [ 67.160829][ T3264] lru_add_drain_all+0x10/0x20 [ 67.165810][ T3264] invalidate_bdev+0x47/0x70 [ 67.171043][ T3264] ext4_put_super+0x571/0x840 [ 67.175863][ T3264] generic_shutdown_super+0xe5/0x220 [ 67.181733][ T3264] kill_block_super+0x2a/0x70 [ 67.188873][ T3264] ext4_kill_sb+0x44/0x80 [ 67.193846][ T3264] deactivate_locked_super+0x7d/0x1c0 [ 67.199630][ T3264] deactivate_super+0x9f/0xb0 [ 67.204945][ T3264] cleanup_mnt+0x268/0x2e0 [ 67.210617][ T3264] __cleanup_mnt+0x19/0x20 [ 67.215140][ T3264] task_work_run+0x13a/0x1a0 [ 67.222031][ T3264] syscall_exit_to_user_mode+0xbe/0x130 [ 67.227775][ T3264] do_syscall_64+0xd6/0x1c0 [ 67.232321][ T3264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.239475][ T3264] [ 67.241799][ T3264] value changed: 0x01 -> 0x00 [ 67.246476][ T3264] [ 67.249058][ T3264] Reported by Kernel Concurrency Sanitizer on: [ 67.255227][ T3264] CPU: 1 UID: 0 PID: 3264 Comm: syz-executor Not tainted 6.11.0-syzkaller-11653-g3630400697a3 #0 [ 67.266741][ T3264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.278686][ T3264] ================================================================== [ 67.291901][ T3271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.638807][ T5859] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.