last executing test programs: 1m17.912055428s ago: executing program 1 (id=370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000002000000095000000000000007dcd33d5e622360734644e84a06138db263a340c52b59446c3c9f82e042b007cb29068e7f532b0722044db87f302e8eaf704b6483760593f4682964e486f3520f218859ad0a2024d15f6951fb80c345728562ac4004f4f3fd5c97a2c74b940af5d4b9ee4cbe24b308a5ebcf771a6fc0c457ad864e34860b4c6858f7f6e7bf0dd305f6bb5bff443d69f9407bd34c31e504dce82a7c11f8388fc4914b5a7b4"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) io_uring_setup(0x6ecd, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) 1m17.031432051s ago: executing program 1 (id=386): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m16.972253863s ago: executing program 1 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xacffa058e05fc9b3) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$inet6(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000016c0)}}], 0x1, 0x48800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) syz_usb_disconnect(0xffffffffffffffff) shutdown(r2, 0x2) 1m14.840305315s ago: executing program 1 (id=421): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000000)={[{@user_xattr}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x10, 0x2, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000080)={0x2, 0x13, 0x3, 0x0, 0x0, 0x8, 0x0}) 1m13.954753029s ago: executing program 1 (id=436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="2e946980c81401f320927562e3e616cb798355ebbbf3498b7b7b4305ea3f7631b7d21e3821423e155981cf6dfc37bc73fc9ad5b032af3efd07ba0f973741a3de4a2967fa38595b576c1e2f79dabd55ab4d1191f7f4216cf81a65d0fcc4b4ed4fd367d39602ea1c25023910b50ba6ef318ca03d209cf11918378ced479764bfc0b7b913ac6b78f8bb668e5980539c1bdbf1f2bd918f3d1968412d916aba52d477a8c70d0240ac8de3bf78d77fcf0b5c6c44a9da9bff0fad690fbcf89d3fbc8384fda145794a7d0ebee4157888771b60fb5fa49b25b15107584921b9ab5edab51a5bedad751fcdb3c892d7921846f3a7aee0a6b4a73c0bb4bb41782936b02a5df36fb9cc496834a87281eaa949d68dc55f600271124fb985b29298ffc479a085e15900987a6d55f893fecf84da914e08b47db5e139fab8c05584e71a2370f66a379d41819210", @ANYRES8, @ANYRES8, @ANYRES64, @ANYBLOB="322ae1be2e0fb676cb206dc63b8c0d8fbf5ec029e6e5152562483054bf8508b0f00fd07a778974493c4abb6d197be90b7c9f065324412f024704bc33c227063dcf96d4d4feda11dabfc836ac62c6106e10531e9c018fee73122c3627fbd49b693c0895821b9980ab1d450ab38d941a521fcbf2edb446b302118eaed44e3bfaeee549b4e226a31f53e2", @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unlink(0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x6cca41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0xb, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRESOCT=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x13) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x3920e, r6, 0x1, 0x0, 0x4, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x131742, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) write$tcp_mem(r8, &(0x7f0000000580)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0xffffffc7) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0xd, 0x0, 0x81, 0xfffffffb}) r10 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmctl$SHM_UNLOCK(r10, 0xc) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x81, 0x8000003, 0x0, 0xfffffffc, 0x0, 0x5}) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) 1m13.616590924s ago: executing program 1 (id=443): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0xfffffffffffffff9}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) 1m13.612355095s ago: executing program 32 (id=443): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0xfffffffffffffff9}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) 2.864258207s ago: executing program 5 (id=2193): socket$inet6(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='mm_page_alloc\x00', r0}, 0x18) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB], 0x20000600}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='snd_soc_jack_notify\x00', r4, 0x0, 0x8000000001}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x393, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) io_uring_setup(0x6ddd, &(0x7f0000000480)={0x0, 0x200000, 0x0, 0x800000, 0x2a9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="2c219bc500ebe1e6410c00000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r9) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x71bd29, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='svcrdma_dma_map_rw_err\x00', r4, 0x0, 0x40000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) clock_adjtime(0x0, 0x0) 2.808051327s ago: executing program 5 (id=2196): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x5, @perf_bp={0x0, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.768987688s ago: executing program 5 (id=2197): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040200) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0) 2.556430471s ago: executing program 5 (id=2198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={r1, r2/1000+10000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sync() socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x799, &(0x7f0000000a00)="$eJzs3c9rXNUeAPDvnSTNj/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9swmYaaSaZkJqUJWbSI4EZQcSHopmt/1J1bf2z1vxCUlqppseJCIndyJ502M+kkTWaq+XzgZs6590zO+c65P87MucwEsG+Npn9yEYcj4t0kYjhbn0REXy3VG3Fyvdyd1ZVCuiSxtvbqL0mtzO3VlUI0PCd1MMv8PyK+eSviSG5zvZWl5dmpUqm4kOXHq3MXxitLy0fPz03NFGeK88cnJiePnXjmxPHdi/W375cP3XjvpSc/P/nHm/+79s63SZyMQ9m2xjh2y2iMZq9JX/oS3uPF3a6sy5JuN4AdSQ/NnvWjPA7HcPTUUi0MdrJlAMBeWQMA9qHEGAAA9pn65wC3V1cK9aW7n0h01s0XImJgPf76/Ob6lt5szm6gNg86dDu5Z2YkiYiRXah/NCI+/vL1T9Mlsn4wlwZ0wuUrEXF2ZHTz+T/ZdM/Cdj211ca1/trD6H2r99v1B7rpq3T882yz8V9uY/wTTcY//U2O3Z148PGfu74L1bSUjv+eb7i37U5D/JmRniz3r9qYry85d75UTM9t/46IsejrT/MTtaLNR25jt/681ar+xvHfr++/8Ulaf/p4t0Tuem//vc+ZnqpOPWzcdTevRDzW2yz+ZKP/kxbj39Nt1vHyc29/1GpbGn8ab33ZHP/eWrsa8UTT/r/bl8mW9yeO13aH8fpO0cQXP3w41Kr+xv5Pl7T++nuBTkj7f2jr+EeSxvs1K9uv47urw1+32vbg+Jvv/weS12rpA9m6S1PV6sJExIHklYj4caNsbf2x2JSvl0/jH3u8+fG/Xm3z/T99T3i2zfh7b/z82c7j31IScbnNos2l8U9vq/+3n7h2Z7Zn5/Gn/T9ZS41la9o5/7XbwId57QAAAAAAAAAAAAAAAAAAAAAAAACgXbmIOBRJLr+RzuXy+fXf8P5vDOVK5Ur1yLny4vx01H4reyT6cvWvuhxu+D7Uiez78Ov5Y/fln46I/0TEB/2DtXy+UC5Ndzt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgcbPH7/6mf+rvdOgBgzwx0uwEAQMe5/gPA/rO96//gnrUDAOicbV3/Xf4B4B+h7ev/2b1tBwDQOeb/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2GOnT51Kl7XfV1cKaX764tLibPni0eliZTY/t1jIF8oLF/Iz5fJMqZgvlOda/qPL6w+lcvnCZMwvXhqvFivV8crS8pm58uJ89cz5uamZ4pliX8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2VZaWZ6dKpeKCxJaJwUejGY9Mojc6WulAtrs+ErHvj0TjWWKwOycnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL+BvwIAAP//708sGw==") ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "2ed705f3116b942f5917b3ba8945ff01"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x28) getdents(r4, 0xfffffffffffffffd, 0xbb) lsm_list_modules(0x0, 0x0, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000540)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@init_itable}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x46a, &(0x7f00000006c0)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) add_key(&(0x7f0000000040)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)="7d3712de7f29286d3038608c93a4d75b967cce579fb16fb027f7029b893828ca950c0ccdc29befa4bbb7bdc00021a3842fadaa731e3d098091bc05923996ed6efc5a7ca2e29440605ab3cf78890771bfabd8bfd96785b94da1a5bc560035b0da8bc0d16fa899387d121030bd343e93a386a51f7e307e3acacd840130c65428a34d28584f397a275b871f90198a24a9d4f474cf3c22282ebe6e3c9e2109fccd4708baded3cfc808bae0b5ae60450c2f0011d842a76e8bcf7a8379d1e2c244225f9e490fd6c537fe97b5086ec11e9becba41895898a840d5622f81edf2146f9507008db86db7ee2e2212e2", 0xea, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) 1.915658461s ago: executing program 4 (id=2208): openat$rfkill(0xffffffffffffff9c, &(0x7f0000004f40), 0x40200, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) close(0x3) 1.816983642s ago: executing program 4 (id=2211): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000180), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) ioperm(0x0, 0x4, 0x1) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xf, 0xef, 0x6, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0xb, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x4}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0x1000b, 0x2, 0x42}, {0x5, 0x4, 0x8, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x1}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000a40)=r6}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000010c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000011c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4884}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) r10 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES8], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r11 = open(&(0x7f0000000240)='./file2\x00', 0x147142, 0xf) sendfile(r10, r11, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x9, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1}, 0x50) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 1.707623864s ago: executing program 5 (id=2215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='reno\x00', 0x5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000004d94eef928f170330000000000007a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$setlease(r4, 0x400, 0x0) write$selinux_validatetrans(r9, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) open(&(0x7f0000000080)='./file1\x00', 0x402fc1, 0xcd) syz_io_uring_setup(0x1f87, &(0x7f0000000180)={0x0, 0x8404, 0x13580}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000000340)=0x3) 1.677918335s ago: executing program 4 (id=2217): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 1.633803625s ago: executing program 4 (id=2219): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000540)={@val={0x0, 0x8}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x8}}}}}}, 0x2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20400) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read$char_usb(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000340), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32=0x0, @ANYBLOB="1c"], 0x20) socket$packet(0x11, 0xa, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/!\x00', 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x98, 0x190, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x777391624e242618}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x0, [0x1, 0x7, 0x0, 0x6, 0x4, 0x1], 0x6, 0x7}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x200, 0x8000000}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x0, 0x2, 0x2], 0x6, 0x5}, {0x4, [0x3, 0x6, 0x4, 0x4, 0x5, 0x1], 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.597076356s ago: executing program 0 (id=2221): openat$rfkill(0xffffffffffffff9c, &(0x7f0000004f40), 0x40200, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) close(0x3) 1.556444367s ago: executing program 0 (id=2222): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.556030666s ago: executing program 0 (id=2223): openat$rfkill(0xffffffffffffff9c, &(0x7f0000004f40), 0x40200, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) close(0x3) 1.515538587s ago: executing program 0 (id=2224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) 1.514920867s ago: executing program 0 (id=2225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={r1, r2/1000+10000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sync() socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x799, &(0x7f0000000a00)="$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") ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "2ed705f3116b942f5917b3ba8945ff01"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x28) getdents(r4, 0xfffffffffffffffd, 0xbb) lsm_list_modules(0x0, 0x0, 0x1000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000540)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@init_itable}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x46a, &(0x7f00000006c0)="$eJzs28tvVNUfAPDvvX3wgwLtT/EBolaJsfHR0vKQhRuNJC4wmugCl3VaCGGghtZESCPVGNyYGBJdq0sT/wJ3boy6MnGre0NCtBvQVc29cy/MDB3oyLQDzOeTTHvOnDNzznfuPfeee89MAD1rNPuTRGyNiN8iYriWbawwWvt3dXmx8vfyYiWJZOXNP5O83pXlxUpZtXzdUJEZSyPSj5OikUbzZ8+dnK5WZ88U+YmFU+9OzJ899/yJU9PHZ4/Pnp46dGj/vskXDk4d6EicWVxXdn0wt3vnq29ffK1y9OI7P32b9XdrUV4fR6eMZoH/tZJrLnuq04112ba6dNLfxY7Qlr6IyDbXQD7+h6Mvrm+84Tj8UVc7B6yr7Ny0qXXx0gpwD0ui2z0AuqM80V9ZXhzKroGbr4MPr+/0o+suv1S7AMrivlo8aiX9kRZ1BpqubztpNCKOLv3zZfaIdboPAQBQ79PKF0fiudq8o3H+l8aDdfW2F2soIxHx/4i4LyLuj4gdEfFARF73oYh4uM32m5eGbpz/pJf+U2BrlM3/XizWthrnf+XsL0b6ity2PP6B5NiJ6uze4jMZi4FNWX7yJm18/8qvn7Uqq5//ZY+s/XIuWPTjUn/TDbqZ6YXpfFLaAZc/jNjVv1r8ybWVgCQidkbErvbeenuZOPHMN7tbVbp1/DfRgXWmla8jnq5t/6Voir+UtF6fHDg4dWDif1Gd3TtR7hU3+vmXC2+0an+V+CPiq7XF3wHZ9t/SuP83VxlJ6tdr59tv48Lvn7S8piniz/bmtvb/weSt/Hg0WDz3/vTCwpnJiMHkSJ5veH7q+mvLfFk/i39sz6rjf3P5miz+RyIi24kfjYjHIuLxou9PRMSTEbHnJvH/+HLrstva/zsgi3/mxuNfWlelafu3n+g7+cN3rdpf2/Fvf54aK57Jj3+3sNYO3s5nBwAAAHeLNP8OfJKOX0un6fh47Tv8O2JLWp2bX3j22Nx7p2dq35UfiYG0vNM1XHc/dDJZKt6xlp8q7hWX5fuK+8af923O8+OVuepMl2OHXjfUYvxn/ujrdu+AdbfaOtrUYBc6Amy45vGfNmbPv76RnQE2lN9rQ++6xfhPN6ofwMZz/ofetdr4P9+UtxYA9ybnf+hdxj/0LuMfepfxDz3pdn7XL9HLiUjviG7cxYmhO6MbLRLdPjIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xr8BAAD//7Bz6SQ=") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) add_key(&(0x7f0000000040)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)="7d3712de7f29286d3038608c93a4d75b967cce579fb16fb027f7029b893828ca950c0ccdc29befa4bbb7bdc00021a3842fadaa731e3d098091bc05923996ed6efc5a7ca2e29440605ab3cf78890771bfabd8bfd96785b94da1a5bc560035b0da8bc0d16fa899387d121030bd343e93a386a51f7e307e3acacd840130c65428a34d28584f397a275b871f90198a24a9d4f474cf3c22282ebe6e3c9e2109fccd4708baded3cfc808bae0b5ae60450c2f0011d842a76e8bcf7a8379d1e2c244225f9e490fd6c537fe97b5086ec11e9becba41895898a840d5622f81edf2146f9507008db86db7ee2e2212e2", 0xea, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x88, &(0x7f0000000640)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@norecovery}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.386587949s ago: executing program 4 (id=2226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={r1, r2/1000+10000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sync() socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x799, &(0x7f0000000a00)="$eJzs3c9rXNUeAPDvnSTNj/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9swmYaaSaZkJqUJWbSI4EZQcSHopmt/1J1bf2z1vxCUlqppseJCIndyJ502M+kkTWaq+XzgZs6590zO+c65P87MucwEsG+Npn9yEYcj4t0kYjhbn0REXy3VG3Fyvdyd1ZVCuiSxtvbqL0mtzO3VlUI0PCd1MMv8PyK+eSviSG5zvZWl5dmpUqm4kOXHq3MXxitLy0fPz03NFGeK88cnJiePnXjmxPHdi/W375cP3XjvpSc/P/nHm/+79s63SZyMQ9m2xjh2y2iMZq9JX/oS3uPF3a6sy5JuN4AdSQ/NnvWjPA7HcPTUUi0MdrJlAMBeWQMA9qHEGAAA9pn65wC3V1cK9aW7n0h01s0XImJgPf76/Ob6lt5szm6gNg86dDu5Z2YkiYiRXah/NCI+/vL1T9Mlsn4wlwZ0wuUrEXF2ZHTz+T/ZdM/Cdj211ca1/trD6H2r99v1B7rpq3T882yz8V9uY/wTTcY//U2O3Z148PGfu74L1bSUjv+eb7i37U5D/JmRniz3r9qYry85d75UTM9t/46IsejrT/MTtaLNR25jt/681ar+xvHfr++/8Ulaf/p4t0Tuem//vc+ZnqpOPWzcdTevRDzW2yz+ZKP/kxbj39Nt1vHyc29/1GpbGn8ab33ZHP/eWrsa8UTT/r/bl8mW9yeO13aH8fpO0cQXP3w41Kr+xv5Pl7T++nuBTkj7f2jr+EeSxvs1K9uv47urw1+32vbg+Jvv/weS12rpA9m6S1PV6sJExIHklYj4caNsbf2x2JSvl0/jH3u8+fG/Xm3z/T99T3i2zfh7b/z82c7j31IScbnNos2l8U9vq/+3n7h2Z7Zn5/Gn/T9ZS41la9o5/7XbwId57QAAAAAAAAAAAAAAAAAAAAAAAACgXbmIOBRJLr+RzuXy+fXf8P5vDOVK5Ur1yLny4vx01H4reyT6cvWvuhxu+D7Uiez78Ov5Y/fln46I/0TEB/2DtXy+UC5Ndzt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgcbPH7/6mf+rvdOgBgzwx0uwEAQMe5/gPA/rO96//gnrUDAOicbV3/Xf4B4B+h7ev/2b1tBwDQOeb/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2GOnT51Kl7XfV1cKaX764tLibPni0eliZTY/t1jIF8oLF/Iz5fJMqZgvlOda/qPL6w+lcvnCZMwvXhqvFivV8crS8pm58uJ89cz5uamZ4pliX8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2VZaWZ6dKpeKCxJaJwUejGY9Mojc6WulAtrs+ErHvj0TjWWKwOycnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL+BvwIAAP//708sGw==") ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "2ed705f3116b942f5917b3ba8945ff01"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$eJzs3b9uUmEUAPBDS/ljHLqZmJhc46BToz5BjamJkcSkhkG3JnYqEyzA0j6Gr+B7+QCmE4v5DF5uQUoRiRe0/n5LTznfufc73HBh4ZAi9+Xep2g0KrFzGIcxqsR+7EThIgCA22SUUnxNud+vrpaxJQCgZCu8/3/b8JYAgJK9e//hzYtW6+g4yxoRlxf9dr+d/83zr163jp5mP+xPqy77/fbuVf5ZNv/ZYZzfizuT/PO8PrtK1yKiXYsnj/L8OPfybSv7ub4eH0vuHQAAAAAAAAAAAAAAAAAAAAAAtuVBZIWF830ODubzzUk+/29mPtDc/J5q3C/GA0/HA6XzTTQFAAAAAAAAAAAAAAAAAAAA/5jeYHh20umcdqdBPSJmH6kuWHNzUJkceKXF2w92Yr3y5qTNNU5amTxF5TbYXHxxVwmi+rdcnXWD7E8dsF5c5uupZlSWlKc0Dha/CoqxGDeW1yJi+cYeH6/b1yil1Pn8sNsbRFq6eHqPqG/sbgQAAAAAAAAAAAAAAAAAAP+3mW99X9PY3caOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDzeoNh8Sv/w7OTTue02xusHJxHxN345eLiXHvR2F6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GrfAwAA//8nTRyq") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x28) getdents(r4, 0xfffffffffffffffd, 0xbb) lsm_list_modules(0x0, 0x0, 0x1000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000540)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@init_itable}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x46a, &(0x7f00000006c0)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) add_key(&(0x7f0000000040)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)="7d3712de7f29286d3038608c93a4d75b967cce579fb16fb027f7029b893828ca950c0ccdc29befa4bbb7bdc00021a3842fadaa731e3d098091bc05923996ed6efc5a7ca2e29440605ab3cf78890771bfabd8bfd96785b94da1a5bc560035b0da8bc0d16fa899387d121030bd343e93a386a51f7e307e3acacd840130c65428a34d28584f397a275b871f90198a24a9d4f474cf3c22282ebe6e3c9e2109fccd4708baded3cfc808bae0b5ae60450c2f0011d842a76e8bcf7a8379d1e2c244225f9e490fd6c537fe97b5086ec11e9becba41895898a840d5622f81edf2146f9507008db86db7ee2e2212e2", 0xea, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) 1.165307803s ago: executing program 3 (id=2231): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000180), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) ioperm(0x0, 0x4, 0x1) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0xf, 0xef, 0x6, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0xb, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x4}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0x1000b, 0x2, 0x42}, {0x5, 0x4, 0x8, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xd, 0x1}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000a40)=r6}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000010c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000011c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4884}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) r10 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES8], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r11 = open(&(0x7f0000000240)='./file2\x00', 0x147142, 0xf) sendfile(r10, r11, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) fchownat(r12, 0x0, 0x0, 0x0, 0x1000) 1.045028844s ago: executing program 2 (id=2233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x8af1}], 0x1, 0x10003, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/26], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = mq_open(&(0x7f00000004c0)='pim6reg1\x00', 0x1, 0x44, &(0x7f0000000540)={0x8, 0x2f, 0x8000000000000000}) mq_timedsend(r7, &(0x7f00000006c0)="6c114d5c308f6d4b4b0b219e4689f5f196a7101f591da9e2a977581c8271ce090ca20cb7d418906a32729e887471888bc8ce07454340aec721fd6e37e2b206db7be1f34c5ae156e96d3da5d29415d04ac69c723e6e015fa3acb0023ffc902d54692896bc850e4f6ea433c6b0fd0eca13cf606a691fa6a79e40ae5e023a0f48", 0x7f, 0x7, &(0x7f0000000580)={0x0, 0x3938700}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0], 0x40, 0x2a7, &(0x7f0000001180)="$eJzs3E9PE00Ax/Ef/x4KPLB94BEFY5zoRS8bqK+gIZAYm2iQGv8kJotstenSkm6DqTHCzavvwoR49GZifANcfAUevHHxyMG4ptsttGWNYoIL+P1cdrqzv+5MZ3Y7h2537r5aLRV8u+DU1Ntj1C+ltCul1as+hdKK9Erq0T+NYqq1b1NXJ3KfLty+d/9GNpebXzRmIbt0LWOMGbv4/unzN5c+1EbuvB17N6jt9MOdL5nP25PbUzvflp4UfVP0TblSM45ZrlRqzrLnmpWiX7KNueW5ju+aYtl3qx31Ba+ytlY3TnlldHit6vq+ccp1U3LrplYxtWrdOI+dYtnYtm1Gh4WfyW8tLjrZpFuBo1WtZp05SdMHavJbiTQIAAAkKmb9v9m1/ldPtG1b/+9h/X+Ssf4/Xfpi9zbW/w+i63ego4b1PwAAAAAAAAAAAAAAAAAAAAAAJ8FuEFhBEFit7YAUPuETRK+HJA1LGpH0r6RRSWOSrOiPAf6TNC5pQtL/ks5ImpR0VtI5SVNt75V0X3FQMuM/lGSX0ebIx388OhHX/7HE/f/v1vbgbkpafbmeX883t836bEFFeXI1I0tfw7GMNMsL13PzMyaU1vnVjSi/sZ7v68zPympMmLj8bDNvOvOD4bzby2dkNSZYXD4Tm0/pyuW2vC1LHx+pIk8r4Zzcz7+YNWbuZq4rPx0ed9rZZk/s+Nn2j+qb+UPMj67Pt1/T/cn2HZJff1ZyPM+tUogttL61jkt7TnShdb0f5ble6zj09BQUkrwr4U/ZH/SkWwIAAAAAAAAAAAAAAAAAOIzf/YVgsNHM/8rBSfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu3wMAAP//J7dUAg==") connect$inet(r9, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10) close(r0) 1.020771774s ago: executing program 3 (id=2234): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x5, @perf_bp={0x0, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0xfff, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 997.521075ms ago: executing program 2 (id=2235): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) 978.334795ms ago: executing program 2 (id=2236): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 966.815726ms ago: executing program 3 (id=2237): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 951.839256ms ago: executing program 2 (id=2238): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000180), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioperm(0x0, 0x4, 0x1) 948.276576ms ago: executing program 3 (id=2239): openat$rfkill(0xffffffffffffff9c, &(0x7f0000004f40), 0x40200, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYBLOB="1adaf2bf8a7601a913836fe3d6e8b2ce5f6cc161c68222dc5b519a237ee54d7e065a96a9e868e2b72c2d010913abfd97fe2d016edf1bc418b190c901c93dd99071c7cf6c77d602b747b6798f8ab5b26bc4e3e1908036187b0915d81aafbaa5e954d339f3b88fe9cbe719681d67049178f5", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703001a08000000b7040000000000008500000001000000955ca87b71101652d75ffc0016837184"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d00)=@newtaction={0xfc0, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{0x128, 0x1, [@m_vlan={0x124, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0xed, 0x6, "0a13a916fa37eb545b2be35aab0246ef94149c451cff15bd0df2e6e7c46522391d3c776251569524b20c2c0bfa56d272dcb1c17ccc2537ebc977a2b954ed8ff9906947d35a7fbf9d20533e3c6c8369931ed051227308dc8f5f8ebf19e4a5fe1885233adf69e27eb8c8c412ceb6c67b30854de4d3265e08e8f05970d67c6431d29a8d6fd4ac7a4d1c124bfd58855e25a89ae5b6f3f155d3f394135c8b1d2c4a54559d7f2d4cfcdaaa31a30845aea4354a30aa1bd05ae52d05eed3010d167e5fbbca9afce2d56ef909bc439010825ae4f4113ae5440352a4568de20043e482a96c574eaf3de14be39f1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xe84, 0x1, [@m_pedit={0xe80, 0x19, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x2, 0x7, 0x20000000, 0xc, 0xfffffff8}, 0xc, 0x3, [{0xca7, 0x8, 0x401, 0xd8, 0x6, 0x2}, {0xa619, 0x7ff, 0x9, 0x10000, 0x9, 0xb}]}, [{0x6, 0x7, 0x9, 0x8, 0xb7d}, {0x6, 0x0, 0xfff, 0x6, 0x2, 0x200}, {0x5, 0x6, 0x5, 0x8, 0x8, 0x8001}, {0x1, 0xb96, 0x87f, 0x1, 0x49, 0x5}, {0x80000001, 0x28e, 0x2, 0x42, 0x80, 0x2}, {0xb, 0x7d, 0x7, 0x9, 0x7fff, 0xffffff80}, {0x9, 0x7, 0x37, 0x3, 0x7, 0x8}, {0x5, 0x7, 0xf1e, 0x1, 0x10000000, 0x9}, {0x5, 0xfffffff9, 0x1, 0x8, 0x3, 0x85}, {0x5, 0x200, 0x10000, 0x2, 0x0, 0x5}, {0x2, 0xfffffffb, 0x2, 0xf4, 0xf42, 0x7}, {0x9, 0xffff, 0x6, 0x7ff, 0x200, 0xe}, {0xf, 0x2, 0x6, 0xffff, 0x23145486, 0x4}, {0x9, 0xa95, 0x81, 0x2, 0x7, 0xffffc625}, {0x8, 0xdd8, 0xffffffff, 0x80000000, 0x6, 0x7}, {0x7, 0x9, 0xba11, 0xd, 0x3}, {0x10000, 0xc20, 0x10001, 0x1, 0x8000, 0xd}, {0x63, 0x5, 0xfffffff4, 0xfffffff8, 0x9, 0x80}, {0x7, 0xffff, 0x6, 0x717, 0x7, 0x10}, {0x21d8615, 0x8, 0x4b07, 0x1, 0xc, 0xc5}, {0xffff, 0x1, 0x0, 0x5, 0x140000, 0x1}, {0x3, 0x3bc00000, 0x2, 0xfffffffd, 0xfff, 0x2}, {0xfffffffb, 0x2, 0x8, 0x9, 0x1, 0x6}, {0x401, 0xb1b, 0x62, 0x4, 0xbe, 0xd}, {0x7, 0x2, 0x3ff, 0x1e, 0x1, 0x2}, {0xffff8d49, 0x8, 0x8, 0xffffffff, 0x40, 0x8001}, {0x2, 0x5, 0x6, 0x9, 0x10001, 0x7}, {0x7, 0x3, 0x4, 0x5, 0x80, 0x2}, {0x0, 0x40, 0x7fffffff, 0xcf, 0xc, 0x5}, {0x8001, 0x42c, 0x8, 0xaddd, 0x9, 0xa}, {0x4e8f, 0x2, 0x2, 0x9, 0xc, 0x1000}, {0x40e0, 0xcd4e, 0x7fffffff, 0xffe000, 0x85, 0x8}, {0x0, 0x8, 0x8, 0x7, 0x3, 0xd}, {0x4e0, 0x7fff, 0x3, 0x40ff, 0xfffffff7, 0xda}, {0x2, 0x1, 0x8, 0x49d, 0x6, 0x2}, {0x55, 0xfffffff8, 0x7, 0x8, 0x800, 0xf0}, {0x4, 0x4, 0xfffffffc, 0xfffffff4, 0xa0d, 0x7}, {0x2, 0x3, 0x8001, 0x8, 0xa, 0x1}, {0x8, 0x0, 0x4, 0x4, 0x10001, 0x1ff}, {0x7, 0x2, 0x1, 0x2, 0x7, 0x5}, {0x3, 0x8, 0x2, 0x7, 0x7, 0x8}, {0x1, 0x7, 0x5, 0x782b, 0xc, 0xb}, {0x8, 0xd7, 0x9f, 0x3ff, 0x9, 0x3}, {0x4639, 0x3, 0xfffffff9, 0x9, 0x9f, 0x1}, {0x1, 0x1000, 0xdd43, 0x4, 0x9, 0x80}, {0x1000, 0xa, 0x2, 0x2, 0x8, 0xffffff6b}, {0xee, 0x2, 0xffffffff, 0x60b5, 0x800, 0x3}, {0x7, 0x5, 0x0, 0x2, 0x1000, 0x401}, {0x29, 0xf, 0x6, 0xfffffff4, 0x7fff, 0x1}, {0x9, 0x0, 0x2, 0xb0000000, 0x7fffffff, 0x2}, {0x2, 0xfffffff9, 0x1, 0x795, 0x0, 0x2}, {0x6e15, 0x800, 0x6, 0x4, 0x5, 0x3}, {0x7, 0x0, 0xc, 0xfffffffd, 0x3ff, 0x93}, {0x3, 0x3, 0xead, 0x7fffffff, 0x5, 0x9}, {0xd1ea, 0x5, 0xffffff57, 0x4, 0x1405, 0x2}, {0x3, 0x8, 0x2, 0x5, 0xd3cb, 0x9}, {0x9, 0x5, 0x66eb, 0x1, 0x7, 0xc229}, {0x7, 0x38000000, 0x0, 0xc678, 0x5, 0x2be}, {0x0, 0x2, 0xf2, 0x5, 0x10001, 0xfff}, {0x1fffc0, 0x0, 0x2, 0x1, 0x80000001, 0x6}, {0x6, 0x2, 0x0, 0x1ccad6fc, 0x9, 0x1}, {0x8, 0xf, 0x5, 0xc, 0x0, 0x100}, {0x9, 0x0, 0x2, 0x7, 0x2, 0x92fd}, {0x101, 0x9, 0x4, 0x8, 0x3, 0x1}, {0x1, 0xe7ab, 0x0, 0x4, 0x2566, 0x8}, {0x7, 0x7, 0x8, 0x10, 0x7, 0x8000}, {0x1, 0x10, 0x8, 0x4, 0x8, 0x4}, {0x6, 0xfffff800, 0x7, 0x101, 0x3, 0x89e3}, {0x3ff, 0x6, 0x5, 0x80000000, 0xf8, 0x21c4d336}, {0x9, 0x5, 0x4, 0x1, 0x3, 0x401}, {0x0, 0xaa, 0x1, 0x4, 0xbf, 0x2}, {0x8001, 0xfffffff8, 0x1, 0x0, 0x545c, 0x1}, {0x2, 0xfff, 0xe2b, 0x7f, 0x79a, 0x4}, {0x3, 0x7, 0xfffffffa, 0x9a69, 0x200, 0x2}, {0xca, 0x145, 0xab9, 0xc, 0x6, 0x9}, {0x80000001, 0x7, 0x4, 0x3, 0x5, 0x6}, {0x5, 0x91, 0x3, 0x5, 0xe90, 0x10001}, {0x5, 0xc7, 0xc496, 0xfe3, 0x82b, 0xeb}, {0x7, 0xf7, 0x719, 0x3, 0xcb97}, {0x7, 0x8a48, 0x7fffffff, 0x5, 0x5, 0xb476}, {0xffff4641, 0x9, 0x0, 0x81, 0x9, 0x4}, {0x1, 0x1, 0x8, 0xffffffc0, 0x6d, 0x55b}, {0x100, 0x6, 0xffff, 0x6, 0x6, 0xfffffffa}, {0xffff, 0x3, 0x7c, 0xd, 0x3ff, 0x6}, {0x8, 0x10000, 0x10001, 0x6, 0x8, 0x8}, {0x1, 0xe, 0x101, 0x8, 0xb, 0x4}, {0x7, 0x40, 0x3, 0x96, 0x3, 0x1}, {0x5, 0x2, 0x7, 0x9, 0x6, 0x3}, {0x10001, 0x1, 0x100, 0x8d12, 0x6, 0xc649}, {0x7, 0x9, 0xffff1e3b, 0x4, 0x200, 0x4}, {0xb, 0x3, 0xc, 0x1, 0xffff0ae0, 0xee}, {0x6, 0x8, 0x3ff, 0x0, 0x77e, 0x9}, {0x9, 0x40, 0x2, 0x5, 0x7, 0x6}, {0x8, 0x100, 0x2, 0x5, 0x3, 0x323}, {0x800, 0x9d, 0x1cd05445, 0x2, 0x80000000, 0x2}, {0x4, 0x6, 0x870a, 0x80000001, 0x5, 0x4}, {0x9, 0x3, 0x8, 0x4, 0xb04a, 0x8000}, {0x7, 0x8, 0x3, 0x1, 0x8001, 0x101}, {0xf, 0x10001, 0x2b6f, 0xb7, 0xfd, 0x7}, {0x7, 0x7, 0xd, 0xa, 0x5, 0x7f0d}, {0x1, 0x34, 0x40, 0xffff0000, 0xfffffff9, 0x3}, {0xc75a, 0x5, 0x0, 0x3, 0x10000, 0xffff7fff}, {0x8, 0x6c4, 0x5204, 0x1000, 0x1, 0xe9a0}, {0xc3, 0x1, 0x1, 0xfffffffb, 0xffffffff, 0x2}, {0xb, 0x5, 0x800, 0x8, 0x1, 0x1}, {0x6, 0x9, 0x6, 0x0, 0x4, 0x4}, {0x7, 0x6, 0x1, 0x6, 0x4f3, 0x8000}, {0x10, 0x8000, 0x4, 0x6, 0x1, 0x7}, {0xd, 0x9, 0x0, 0x1, 0xfff, 0x3}, {0x0, 0x7ffe, 0x5e46, 0x8, 0x6, 0x5}, {0xffffff81, 0x7, 0xd6, 0x401, 0x2, 0x3}, {0x7, 0x5, 0x9, 0xc5, 0x2}, {0x8000, 0x80000001, 0x4, 0x7, 0x5, 0x16a9}, {0x4685, 0xd, 0x5, 0x1, 0x2, 0x4}, {0x7e5f, 0x1df4, 0xb, 0x2f2e, 0x8000, 0x6}, {0x4, 0xfffffffe, 0x4, 0x2, 0x1, 0xa9}, {0x8, 0x3, 0x3, 0x6, 0x7, 0x7}, {0x7fff, 0x8001, 0x40, 0xfffffffd, 0x79e, 0x7}, {0xffff, 0x6, 0x7f, 0x8, 0x9, 0x4}, {0x5, 0xdb, 0x8, 0x6, 0x74ac86a8, 0x5}, {0x4, 0x1, 0x6, 0xfffffffd, 0xec000000, 0x5}, {0xb, 0x800, 0x7fffffff, 0x2, 0xa, 0x1}, {0xb, 0x3, 0x4c1, 0x2, 0x0, 0x2}, {0x6, 0x689, 0x7, 0x800, 0x4, 0xf98}, {0x8, 0xb1, 0x7, 0x1, 0xe8, 0x5c9db697}, {0x7, 0x8de, 0xe370, 0x3, 0xa609, 0x35}, {0x3, 0x6, 0x9, 0x9, 0x3, 0x6}, {0x157dde4b, 0x1, 0xf, 0x0, 0x7, 0x1}], [{}, {}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x5}, {0x5, 0x3}, {}, {0x3}, {0x5}, {0x5}, {0x3}, {0x2}, {0x4}, {0x2, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x1}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {}, {0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x2}, {}, {0x1, 0x1}, {0x5}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0xbb8882a69f2524cb}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x5}, {}, {0x3}, {0x3, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x83e6e88e375774fa}, {}, {}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x2}, {0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xfc0}, 0x1, 0x0, 0x0, 0x40050}, 0x80) preadv(0xffffffffffffffff, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000140000/0x2000)=nil, 0x2000, 0x1000008, 0x11, r0, 0x10000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) semget(0x1, 0x3, 0x116) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000005080)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=r7, @ANYBLOB="02000600", @ANYRES32=r7, @ANYBLOB="02000600", @ANYRES32=r7, @ANYBLOB="02000f00", @ANYRES32=r7, @ANYBLOB="0400040000000000100001bd000000002000040000000000"], 0x44, 0x2) 922.711016ms ago: executing program 2 (id=2240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = getpgrp(0xffffffffffffffff) r3 = gettid() kcmp(r2, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x891c, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/reserved_size', 0x149a82, 0x1a1) writev(r9, &(0x7f00000001c0), 0x0) write$UHID_DESTROY(r9, &(0x7f00000001c0), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xb, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 877.113427ms ago: executing program 3 (id=2241): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 761.618079ms ago: executing program 5 (id=2242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='reno\x00', 0x5) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000004d94eef928f170330000000000007a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$setlease(r4, 0x400, 0x0) write$selinux_validatetrans(r9, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) open(&(0x7f0000000080)='./file1\x00', 0x402fc1, 0xcd) syz_io_uring_setup(0x1f87, &(0x7f0000000180)={0x0, 0x8404, 0x13580}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000000340)=0x3) 715.258ms ago: executing program 3 (id=2243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={r1, r2/1000+10000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sync() socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x799, &(0x7f0000000a00)="$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") ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "2ed705f3116b942f5917b3ba8945ff01"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x28) getdents(r4, 0xfffffffffffffffd, 0xbb) lsm_list_modules(0x0, 0x0, 0x1000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) 570.660132ms ago: executing program 0 (id=2244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_emit_ethernet(0x1d5, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaa18aaaaaaaaaa0e86dd"], 0x0) 321.711266ms ago: executing program 4 (id=2245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x640c7100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2246): init_module(&(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x2, 0x4d, 0x7f, 0x3, 0x3, 0x0, 0x9d, 0x40, 0x8e, 0x9, 0x5, 0x38, 0x1, 0x0, 0x5, 0x5}, [{0x70000000, 0x3, 0x9, 0x8, 0x8001, 0x6, 0x7f, 0x8}], "59d71047369fda024032d7a49276878307f9aa9b03cdb71423af73a7435b448b333a15a45728b62382b9e0a91d21b863f540bb21d26bd9cd86f717378c48f5671c98da7e8553053591a5b3966ff369937eab07113c1f8c73c3e0721e0517b984d205c1ab28afb8a2980f2775680a42169508634eaedf526af630d6cdc3a52b5e83c1472d51a462dc0cfc68740197c6ee779eaec5f19cdec129274968c0a2a96348f0d230dcbfb9e05e9a96e3bfdd250691823033386b65c2dfa36aa8", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x634, &(0x7f0000000640)=':-@&[\x00') r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x7, 0xfb, 0xf, 0xa3, 0x2, 0x3e, 0x2, 0x289, 0x40, 0x1b1, 0x7, 0x9, 0x38, 0x4, 0x6dc3, 0xf1f9, 0xc}, [{0x70000000, 0x5c57, 0x0, 0x5, 0x8, 0x101, 0x6, 0xff000}, {0x60000000, 0x400, 0x4, 0x10, 0x9, 0x8, 0x9, 0xfffffffffffff800}, {0x6, 0x95, 0xc, 0x5, 0x1, 0x904, 0x2, 0xc}, {0x7, 0x10, 0xfff, 0x94, 0x7, 0xc60, 0x6, 0x3}], "b11e17bb66c0a91249788e2393de983c96eb7199c5828fa6ceeafc8969e5ea4c0b40dd2e38aee6152ec365692737f7b80e8ac77677d02e07b0c3a04413cf1e00789b114e53da4bdeaaec145551d7b4a7277b3ab1a97b18eb1020f051004e5d7e5e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x981) init_module(&(0x7f0000001040)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x4, 0xac, 0x2, 0x6, 0x3, 0x3, 0x80, 0x32b, 0x40, 0x17b, 0x1, 0x6, 0x38, 0x4, 0x34ca, 0x8, 0x8}, [{0x70000000, 0x7, 0x0, 0x3, 0x2ec, 0x0, 0x0, 0x6}, {0x4, 0x80000001, 0x3ff, 0x6, 0x1, 0x100, 0x7, 0x9}, {0x60000000, 0x4, 0x7, 0x0, 0x2, 0x10, 0x10001, 0xffffffffffff166a}, {0x2, 0x3ff, 0x39c, 0x9, 0x4, 0x2, 0x40, 0x8}], "4fe513320bf03d0133dd30007268f96a797be56ca32777582847fc06c9ac24c7f26215d43467cd21d5aa8043c63ec990c47c26b2e23a65ed835198605a4d3c011c7337a4cde4845a591c48984ed05477b686a4746fe71c5b67f6ed4dc2299154112d8abaa0cc95b8b7bab55c8449384f3aea3d7a08ba290c7bfe90c4e9986d34954c059eb937fa16fc708b892d9a49c3bcfcf8a4fc284c2b57f6cfe87635a46c239424631f632fc1ccda7adb08a1054f7ad89df3947752de3a783b0ffe59d266a761dcee2755925a3e232765e18c41986e125e1f496e36d74055eda3ce6686ab41c77a9337d9093a57a0", ['\x00', '\x00', '\x00', '\x00']}, 0x60a, &(0x7f0000001680)='&-)@\'I}\x00') mknod$loop(&(0x7f00000016c0)='./file0\x00', 0x6000, 0x0) init_module(&(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xe4, 0xd, 0x4, 0x5d6f, 0x2, 0x0, 0x9, 0x11, 0x40, 0x273, 0x2b74, 0x9, 0x38, 0x1, 0x5, 0x101}, [{0x1, 0x5, 0x33, 0xa664, 0x2, 0xfffffffffffff001, 0x5, 0x5}], "1843f14d0e7333ad285fc4d2a6a2dbeed844717dbeb8c2964a30fbb7b49d97abb103ae665dda1389feea9e4b74c22a044f93a9f57115c7c4326a9ad5b0d2324dba840d742d851d2029f14116c8e9", ['\x00']}, 0x1c6, &(0x7f0000001900)='\x00') write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001940)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) pipe2$9p(&(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104000) write$P9_RWRITE(r1, &(0x7f00000019c0)={0xb, 0x77, 0x2}, 0xb) init_module(&(0x7f0000001a00)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x38, 0x9, 0x80, 0x1, 0x3, 0x3, 0x9, 0x1d4, 0x40, 0x3a, 0x8001, 0x2, 0x38, 0x4, 0x7, 0x401, 0xff7f}, [{0x5, 0xfffffff9, 0x80000000, 0xffffffffffffffcf, 0x7, 0x3, 0xff, 0x65}, {0x70000000, 0x8, 0xfffffffffffffffe, 0xf, 0x2, 0x3, 0xffffffffffffff0e, 0x76}, {0x60000000, 0xc, 0x8, 0x6, 0x40, 0x1, 0x2, 0x9}, {0x5, 0x9, 0x4, 0xc, 0x3, 0xfffffffffffffff7, 0x7a71322d, 0x8}], "4b9241058fe4182cb341f656cb02da2bc7e565ba65257d3762753e192ac6ae29abc035fb923018a7b76944e77861e30b1df4e293a6008c284a886091e64655c1ed978b09e7a7e84dc9e7474716de18228a6bbf3b7cf359d6a77478a58c706300fc174169d526abe4cc650840bcbf943946cf9a72c3523caddddee158286bf1fdf33706c9c8326e44175c0c7bab32e5c3cd8f5b1371aa4f648e3284936a1da4f088c4f87d071ed091f65e9d116b161ff3e072078d8c9dc6"}, 0x1d7, &(0x7f0000001c00)=':-@&[\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000001c40), 0x101000, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001c80)={0x0, 0x800, 0x0, 0x1, 0x9}, &(0x7f0000001cc0)=0x18) setxattr$security_evm(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40), &(0x7f0000001d80)=@v2={0x3, 0x1, 0x1, 0x1000, 0x1000, "83c789f2c88918bc5e383c13ead8864e6e78793e284e5910554c8eb44198ae3bcf415333267464e203461df8e3a50c1bb9afb1cddeb16182e8a820c0c7c0386d03ee8d590bfe19401bfa033876a6543786a58ac6fefec87855cf72fe31b9024add4faaa312837cccb1491af611edaf491234336a1adb31a81bff0ee057c9ccd6549ba7d06c994e89059ed8c6ec8f3eacb23806eb0853f3243831e2d1c9b2e79ce30cc397c39f2e263add91e2cf716d3e98272bd12f9b5be457ac29e0b446294319340eae57786caa853915ecf4622779744bf3ca579af9ac98788b324545abf10648898f961611be3f770abeedd839177e320473f7f0b4986cf20d6033cc18a4f2c7facfb6fd0dbe1ba8a1a4a900e11de8a69859b9972cf0ff10e1fa042cf19f1c5ce2dd32697a574372a3151471c9efa9a53f1ebdd4dbcb3d2c23234b5f8f0f2a7aad6af2964a19ce7bea2550abd9642144e5e4240dd84408015fbe9d9c238c99fce4a4f1c4adf22416056d9062d2a9014693921c746787e9a62cad9d117ad7939a95c5506130f295b28a17c8feb11aa03ce3eee64bb17013705e1342e0e9155327b1ac7778b7f32150724ba6f05dcc68491403548234686d0a7804a522ad1b1b760884f99b8c58d78eb3f3a9e6b46e5b76408a5a8a5e30771495295e9fb28c07a6cf8734743fea345c71093963153ce864e69afbac35049fb17f974b8b9faa0903a24bf1df254f3effc84a06990a4172d47521177f2e91ec7de0e5301dbd2a0af4b6222fce7f12ba90d0fdeca3976b7dbcf0ee1c1582ebc7f34db35e0aeb2a2bcf30db81f43445e0ffb2db3d28d963b085b06d4f1b9d76790f7f40f2a4c25c2baa36ae6d3dca377d44144a9723eb9204133a0cf34ad5023eb3ca46053e9da1ea5579ba0681566bce079e1052a92d338644687376b1e4199bb67252d8006bb4092e95efecff8ccd6b17a9d4ba97176fbadeeeafaa40f10cc3934ea305a83a3a1c13ec2787d04ee5b1870089f2546bbf4f4fe0235f2b43a758e66f0abc75bd090a0246ad23a81364cf50da82b89d4c65c50e91d8da2899781b172e3bbb21fff948abfca9392ad370e130944f09b9c938d234d4d1e64dc37dfc68e07c9130dd24758082cc9a8429b3cb026ad54857973175febf0dbc297b188b45c2164397949db4064c86052dd4c263d2b23b8b9722695d2f4227cc358ca137ee60e6a856cccc2bab54666b5dd9b91e1bb32841d3c2aa03c403f046992eca485f3f187788c307eee7f06d756ea21975e2c8deb7cf2d46472973378ee14c9397f22be96fe1b858ad34af5a0ac0cbb29586dbc2fdb1658df9ee12bafdc54494cecbd54771dd23b16b9f83df7457331623c801de05d8513c81afa5099cee58388bdd349e9b6c2cff5ae4143184901ed959e3fd38096e8f5d45edf02cf9d51926d42d631c62a1b2a08c76ba0950911cbac88d62d42c19ee68425daf512c6d92407a5a353a72b6d4e5afdbb9ce6d72a59b0caf5c8963469e389ab60add56f8b5a1c8602bc875fbe39ed84585f382fc13b075fc4ffc7958d47c029aa147333b317374e36afdc72b422b6d007a3406f185cba0ff39677fb3973ea0a0cc6ce59aeec536ff01e446fefdcc9fb9e633bec5ace95a185d2bbc0ef441c4dfd60d83f8596a0cc29527e9a2fa59167704f52bc3262d934ace6911494569dd5da1fe75a73644c114c6cd67bf0e9137309c7ff7c7fcc2d9e2166c6b5c7027c4a6ab7629495a71c9ed0f071da3793c91fb69ac8af25927402aee8747c89fb343c2588be368aaba90cb35d6387522988bdadcdd2b85a2843d7e021eb37a116d7e7a26654a419edf4e1631687d67540a7c2f8536227a5344c87be4278fdd75243590fe18fab11afd817cba18fe204fa83be0642e856a5c84f1a2e2e366c160a8ad6a1d5f1c1b742ec7a3380a1e79521d27ff43da7206ab13a4083373b79063146042d16081ca6f8234807bcb985dd70dbf236d67f10f4eb9c8a0d4493bde3072ca5ec6a35c3ade372f1d2ea0c350aba8481065db3a57babd3cbffe21bf0b0c5788599fd02bb8645e1cf43076bfdd15701432c40d5b4f61555f753c07a1296a11553b20e3182691442218fb8df52e645e0fb51421e4cc62cf5492cbc7d64aeac1660532f88dd786f1196b135d6900204de7f31d624cae1a3f406b8e32889e021c879d95d9a27019705013c573fbd62c7d0c025a9abd7d57c1a84ff53740cfa3d5ba213921247ab3df22fd197f93bcddd00949c182a9188a73e07fb4c3868e7d94962b0c5d039f9031b155be45851861ed1f67746df138d63cbc297864240ce2947ad6506f480547266ed943a5298c7613ef19103fd327657b31900adf11369571c3ca00c45fa6b01619f36949451f7c08b85052489f70ea53347e1aa8f998cdae43e95899176ccb2ea1a7bdc54c02377a57038da6c2b183055d565cb029571cb611e19fa9a74a159754615a83069ef609cb3b6edfa9c40fec5d7f44b89bea6f283de5c2981a3e366f92e9bab56ad0a300396bfb5ebbb405193be8d525a7ae69feaa89f1930a83f2dc530739f5f2962f394c241c8da09e32f353668030d06cfef023b87884e418ef21aeb75712dbba0b35d124cec3137ea2f30910846148326f219262d5a4ea53d31a3f1555ed39a927096f720938e3a524ceafb37372bf9685e06845cdbeaf8f182553ee92f6cb78175ec4000d73ea9c490fa15201d3829fb0aba3ee320bf0ed24e7f7eba909ff60dfd05128f8862ebc2aa1b8fcd7cf0ba6c82a73d5af6e64139eb1f76c8838224bb5f5ad86c4caa0c2807037d41a7456b01798bc29640f703133b886d921f40d0065dbd97f4890b9f603dd3829ab95613611c06791decb1987fc3f0a8c1f08084792b838a3c1fdefd5fc732f900a79c177282c5ad83c26162013210e6b5e9502bd1f7d306f974ce26bd85252900fda1e5ca884756d0735b332e3550b4ff4765f34ca0da638da5d5047e843b37a7f2d5dc57b723b031c5b9b996fbc5f1d6eed61697f5714b0c5215205921386cd48dd8b3bc5aea6044baba8fd1674e275276f49eb1392e2c2df8a3b0650c0754826d2c56f4ed280fd2232ee9e7c6b0dbbd1948f606fbaf56470db237b610567abaf2f977df475fc5d86fb25bfeddcf777415ce86c94e792e742a1a63a505bdb6fd1ad4504e030ccfef60dcfe7e8ee4a7b794400ccc306b2cd683736d6ad644890b8322aa37129a5da43a737690c1dd0a273f0b5de3fc910bada7e3b03da30bd243419a0d6f6d5a1913dd869bb049d1aec56577cf8f1802fe77efed79a2571776a1c87ec1f73315ecf193f96f7032db4ac131578156673c0e44cb0fac31f41d450078f60cf5c08f368d0f49b87b77a2c6d2fe9fe01c6b4dd3661d810a0b3aaa43542159ccb672ae00543cfa445e2e51bbfc33a74ba7512d2c391ec4adbf06adb62a5f7db47dc374a5a47c4a22a28ff77cc5b018cd1a51ff64ec136b09092857c911c19c7fe81021dca095b2ff795a01bbc98e9d9bf8663e8069669a14a8e9d906ae901f26d4cfc2d5fa5f230be60a4496d659c265c63a530d972e1a919f78a404b4efce4b17866f4e4d858255bbea450f199b8920a74c3519e617264620bc51aa7727e967d08b39ec0283e91dab5d29d465c576555cba45c655cdd9aea2b3c713460ac089391aea993f7ee300a52ab4a995e2a8851fa4db0a660d2359ad43c565f42754c89d5ce059fb06537f60229cdf45810d7f38795acb466c0c997fae60b37e7f161262d208c195d77f924c2c21602ca45d2bc4898997752253b7d9834762a99e2971d3feb7fd9f8441f2e30fcb9cfd9042ba655837025b7970b8a6edb79f7fab8c70843e02313aa5ccf204cf2a3ea7f7e82475595b2e2eb5b60c10a1c6e639a24259f6d2c6734b13f66b8be7012b8d932ed06002fbf0deae1f9817fd5ed70402b0c752ee3a2530b60802585044512e0dd5c546b6dcb65c0fcd4866025500021313586807121d7998731523f023c5b045aeb2a659a9ae161cf79e23590416ff3a15b458697a353732cc583d875b7ea796079cb9a437b12cb2dc5dd6f9a3c03cb89cdfa7ba028f44e983b42b8a5deca4ff7538c52e688e01dec691227bf4d020df9e7cdc92827e98cd07cce3514d2628e64e953a65d080b1734111e953a2c338ab76445eea768b3b7e91d3eaa4ce0893f12f7fe9100cfcb8af2083f6f054cc15f3ad388ae48ec4019531fc2059a49a9e1f8ba8dbd201784ebbbfc83caf127e5ff1c49ea72369bf6b190a142a725db319e0fdf9ab140f0f820fc1b572299d3b8afb57aca3d4b8a06d18c0c2180f7a14871ccfcb19525326389bcf112ab0196622ba8dcdd578838d4c0eff36a267be1e9e9fbf0bbea6877b7413bd1bfefcf6d255df7c8382792fa40d3928ed9867ffea70b1afebfeab67115351c45bd0d19c105e65d11f2328f27536bf0888382c08cd5bb5d9441bdcc3e8966b3fa4707d24c5048e6755c3ff1a7b11fafc61fe5c405aa59724fb271268e83c627baa70aa649320f96f77b0150f1fff9483f64cadfd38b5d12095f939f4ec885ec84f17a01ab23ff8c9bcdcc969f7f31c2e90a693df9a5d2362e5b1e5bfc5201e3eb19a811d2319a421fe8ae4a3a74fce4dfbe45e1f3f12ad2d992820caeed1cec0d39771e4f7513362c1e85311ae83d402a4b53dc69acbddb5bcf4dad70429edc177afdfaee9c0138d54091b838dcc059dc3d054eec16e0aeef3173096b243021b1fd8694de7c0e0e9a5de8529c28f6a8f39030028747584afdc867e69fe422cc130daf73ef3ed3188f2da38d097c75b542cbc1532ba1e343b17d60fdf4e8503f76e9a8d3c0ae06f1e414b2dea4d8119805394a432e51aa3311dbf7dad209809991fcb02633f94cb5b8d54a157a01af8caa931dc191c293896291be7c63bc2dbf26aefe06e39e142a0c84ffbb939d60c12e3c9758cbfb1a5318eeb35577bc6b9bd510cab63f079fb904f783454489227db1202e7b7361958495c645b65551a80e0374f872147da88f18c739eabf65d6392bb88558a78f870a34bd1f55fca4db45809951a09dc8e7916409183aee8995bd9f1d1546a3cf94bbc69261a83d2398bcdca72e2c34ec32299862680e001db4d164592361c57d8beda94b9dd84abd2411ff152a03ba37fcd2153b13f1ed71712eed940450bc610bcfc92452d5f1933967c8eecc58b55649bf20080698d2b5d843a99d648abdaaa9f7accf7d2996e513e358f408b8698b48726b396ef11aa69b0f72187baece3f134a75a38cbb2aaf1ef549b8acdfc77820a57b9421e6d0cfadb642a86e8bdc9ffca86cca503d44fa505b08360fe3a913e190af58e05b06966b32babad5d061997aee6c761e12c80bb0dc25bbc677ae82f88dff961736b64f9ae872ce54ccfd7190b1eeab6688b344515b2ba5b9317ba71c22d70054bed42e66c550e9d64b4670ff15ec8264148cf06d80d7482ee7783e11b4a375dc9b1d3a08777b2288221e5fbe0bbc1a6e16fb1c09c20adc7773d7d9b3b80c2f7db7c088fe4f5d53f293b0781357a263e983338c4d88a9ea8ef3ecbe9ae1105bdd8ab2b1ec15a5cd3db86e950439f1941271bd02d7894130324306cbb94354942119528d8d077388f790ffc2d6453bd3200ed53c72af1d228c6beda158a37718309538a06561c00b0bd781aabbd223db9215ce200f249fea7c2f39e290e1bd1fa8f41656935594537a3d345447f36ca632b264872ffd2e6ae109c9ad4e33c3b68b981378975b6f437d573a410b5a1fbe137a"}, 0x1009, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002dc0), 0x2001, 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000002e00)) getgroups(0x7, &(0x7f0000002e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0x0]) lstat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, r6) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000002f40)=@req3={0x81, 0x9, 0x8, 0x8, 0x7, 0x8, 0x100}, 0x1c) write$binfmt_elf64(r3, &(0x7f0000002f80)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0x3, 0x6, 0x4, 0x3, 0x3e, 0x9, 0x177, 0x40, 0x2d6, 0x1, 0x2, 0x38, 0x4, 0x2, 0x1, 0x9}, [{0x5, 0x7, 0xd899, 0x4, 0x0, 0x4, 0xffffffffffffa0fe, 0x6}, {0x60000000, 0x9, 0xe, 0x5, 0x8, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x5, 0xba, 0x2, 0x4c36, 0x6}, {0x6, 0x7, 0x1, 0x4, 0x5, 0x9, 0x8, 0x6}], "361dd6500d2155b7c1e9eb45f618d063ad7cb70a6f9d2f9833dd185bd869d1734bc4920caa2df4d6c6fce00f313c2adb53374e6ad2f89acccf144bd1155f0766da817ca554a0d21587acfb8c46d25732045a70ee9b3166a230a5e9f3477b0592262ed1d2549bcc6830ac74412e0aa69fc202864ce86e89cbaeb4c4a2150651a1806fdc07e5ab56ae932feb1ff3a3ef8b2c0a628255720559c53a3be535359367497728107b420188cb036130e4dbfce0029351bfa44be492e3a0eed7b4b5aefe00974d07c395094ca9fbd658bfb7b32f9bbb8150", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaf4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r3, 0x0) r7 = accept4$nfc_llcp(r3, 0x0, &(0x7f0000003a80), 0x80000) recvmmsg(r7, &(0x7f00000051c0)=[{{&(0x7f0000003ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b40)=""/174, 0xae}], 0x1}, 0xffffffff}, {{&(0x7f0000003c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003cc0)=""/171, 0xab}, {&(0x7f0000003d80)=""/142, 0x8e}, {&(0x7f0000003e40)=""/83, 0x53}, {&(0x7f0000003ec0)=""/235, 0xeb}], 0x4}, 0x5}, {{&(0x7f0000004000)=@nl=@unspec, 0x80, &(0x7f0000004380)=[{&(0x7f0000004080)=""/78, 0x4e}, {&(0x7f0000004100)=""/192, 0xc0}, {&(0x7f00000041c0)=""/64, 0x40}, {&(0x7f0000004200)=""/128, 0x80}, {&(0x7f0000004280)=""/235, 0xeb}], 0x5, &(0x7f0000004400)=""/160, 0xa0}, 0x7}, {{&(0x7f00000044c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004540)=""/14, 0xe}, {&(0x7f0000004580)=""/181, 0xb5}, {&(0x7f0000004640)=""/62, 0x3e}, {&(0x7f0000004680)=""/107, 0x6b}, {&(0x7f0000004700)=""/74, 0x4a}, {&(0x7f0000004780)=""/246, 0xf6}], 0x6}, 0x5}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004900)=""/44, 0x2c}, {&(0x7f0000004940)=""/55, 0x37}, {&(0x7f0000004980)=""/255, 0xff}, {&(0x7f0000004a80)=""/72, 0x48}, {&(0x7f0000004b00)=""/40, 0x28}, {&(0x7f0000004b40)=""/93, 0x5d}, {&(0x7f0000004bc0)=""/188, 0xbc}, {&(0x7f0000004c80)=""/33, 0x21}], 0x8}, 0xe918}, {{&(0x7f0000004d40)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004dc0)=""/109, 0x6d}, {&(0x7f0000004e40)=""/178, 0xb2}, {&(0x7f0000004f00)}, {&(0x7f0000004f40)=""/116, 0x74}, {&(0x7f0000004fc0)=""/108, 0x6c}], 0x5, &(0x7f00000050c0)=""/195, 0xc3}, 0x6}], 0x6, 0x40000000, &(0x7f0000005340)={0x0, 0x989680}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000054c0)='subj_type') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000005500)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) getsockname$unix(r8, &(0x7f0000005540)=@abs, &(0x7f00000055c0)=0x6e) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000005600)=@loop={'/dev/loop', 0x0}, r5, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000005640)) kernel console output (not intermixed with test programs): 4.814071][ T7201] loop2: detected capacity change from 0 to 512 [ 94.901511][ T7221] vlan0: entered promiscuous mode [ 94.914254][ T7221] tipc: Started in network mode [ 94.919236][ T7221] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 94.926474][ T7221] tipc: Enabled bearer , priority 0 [ 94.934781][ T7231] loop5: detected capacity change from 0 to 1024 [ 94.945055][ T7231] EXT4-fs: Ignoring removed i_version option [ 95.010914][ T7242] loop2: detected capacity change from 0 to 512 [ 95.017879][ T7242] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 95.030885][ T7242] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.037536][ T7242] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1161: Block bitmap for bg 0 marked uninitialized [ 95.050881][ T23] tipc: Node number set to 11578026 [ 95.056580][ T7242] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 95.065959][ T7242] EXT4-fs (loop2): 1 orphan inode deleted [ 95.081008][ T4871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 95.096504][ T4871] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 95.363894][ T7271] program syz.5.1172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.712023][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 95.712055][ T29] audit: type=1400 audit(95.692:5111): avc: denied { prog_run } for pid=7330 comm="syz.4.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 95.794281][ T29] audit: type=1326 audit(95.772:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 95.817090][ T29] audit: type=1326 audit(95.772:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 95.840006][ T29] audit: type=1326 audit(95.772:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 95.862802][ T29] audit: type=1326 audit(95.772:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 95.885685][ T29] audit: type=1326 audit(95.772:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 95.908515][ T29] audit: type=1326 audit(95.772:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 95.909543][ T7344] loop3: detected capacity change from 0 to 2048 [ 95.931184][ T29] audit: type=1326 audit(95.772:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 95.960292][ T29] audit: type=1326 audit(95.772:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 96.006472][ T29] audit: type=1400 audit(95.822:5120): avc: denied { mounton } for pid=7343 comm="syz.4.1201" path="/256/file0" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.038987][ T3401] tipc: Node number set to 11578026 [ 96.196541][ T7359] tipc: Resetting bearer [ 96.240368][ T7374] team0: Port device vlan0 added [ 96.262826][ T7359] tipc: Enabling of bearer rejected, already enabled [ 96.285429][ T7378] loop4: detected capacity change from 0 to 1024 [ 96.314297][ T7378] EXT4-fs: Ignoring removed i_version option [ 96.415210][ T7390] __nla_validate_parse: 2 callbacks suppressed [ 96.415225][ T7390] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1217'. [ 96.450318][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 96.469926][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 96.539114][ T7399] loop2: detected capacity change from 0 to 512 [ 96.607532][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1225'. [ 96.680193][ T7420] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1230'. [ 96.721046][ T7424] loop0: detected capacity change from 0 to 256 [ 96.743490][ T7424] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.796971][ T7426] loop5: detected capacity change from 0 to 512 [ 96.847680][ T7426] EXT4-fs (loop5): too many log groups per flexible block group [ 96.859618][ T7426] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 96.909367][ T7426] EXT4-fs (loop5): mount failed [ 96.941817][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 97.039916][ T7426] loop5: detected capacity change from 0 to 512 [ 97.105950][ T7459] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 97.112581][ T7459] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.120293][ T7459] vhci_hcd vhci_hcd.0: Device attached [ 97.139802][ T7460] vhci_hcd: connection closed [ 97.140131][ T12] vhci_hcd: stop threads [ 97.149261][ T12] vhci_hcd: release socket [ 97.153713][ T12] vhci_hcd: disconnect device [ 97.290833][ T7464] team0: Port device vlan0 removed [ 97.325443][ T122] tipc: Resetting bearer [ 97.334147][ T7474] team0: Port device vlan0 added [ 97.359489][ T7464] tipc: Enabling of bearer rejected, already enabled [ 97.573297][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 97.667701][ T7500] loop5: detected capacity change from 0 to 2048 [ 97.708681][ T7504] loop3: detected capacity change from 0 to 512 [ 97.821586][ T7504] EXT4-fs (loop3): too many log groups per flexible block group [ 97.830981][ T7504] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 97.850340][ T7510] tipc: Enabling of bearer rejected, already enabled [ 97.859403][ T7504] EXT4-fs (loop3): mount failed [ 97.949334][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1269'. [ 97.981440][ T7504] loop3: detected capacity change from 0 to 512 [ 98.065815][ T7535] loop4: detected capacity change from 0 to 512 [ 98.132764][ T7535] EXT4-fs (loop4): too many log groups per flexible block group [ 98.141573][ T7535] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 98.150075][ T7535] EXT4-fs (loop4): mount failed [ 98.205483][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'. [ 98.224330][ T7535] loop4: detected capacity change from 0 to 512 [ 98.354840][ T7551] loop3: detected capacity change from 0 to 256 [ 98.423402][ T7553] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 98.430008][ T7553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.437641][ T7553] vhci_hcd vhci_hcd.0: Device attached [ 98.459889][ T7555] vhci_hcd: connection closed [ 98.460147][ T1397] vhci_hcd: stop threads [ 98.469239][ T1397] vhci_hcd: release socket [ 98.473677][ T1397] vhci_hcd: disconnect device [ 98.524905][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1277'. [ 98.569500][ T7563] program syz.5.1278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.659902][ T7572] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1282'. [ 98.811393][ T7584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1288'. [ 98.965196][ T7586] team0: Port device vlan0 removed [ 98.983883][ T7604] loop3: detected capacity change from 0 to 512 [ 98.989042][ T12] tipc: Resetting bearer [ 99.031603][ T7614] loop0: detected capacity change from 0 to 256 [ 99.084125][ T7586] tipc: Enabling of bearer rejected, already enabled [ 99.094465][ T7614] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.210172][ T7626] loop4: detected capacity change from 0 to 512 [ 99.423375][ T7643] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 99.430012][ T7643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.437590][ T7643] vhci_hcd vhci_hcd.0: Device attached [ 99.445852][ T7645] vhci_hcd: connection closed [ 99.446196][ T12] vhci_hcd: stop threads [ 99.455267][ T12] vhci_hcd: release socket [ 99.459795][ T12] vhci_hcd: disconnect device [ 99.552883][ T7650] loop2: detected capacity change from 0 to 512 [ 99.718554][ T7656] tipc: Resetting bearer [ 99.787715][ T7656] team0: Port device vlan0 added [ 99.805452][ T7656] tipc: Enabling of bearer rejected, already enabled [ 99.830578][ T7666] loop5: detected capacity change from 0 to 512 [ 99.972073][ T7683] loop4: detected capacity change from 0 to 512 [ 99.984451][ T7683] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 100.002592][ T7683] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.019068][ T7683] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.1320: Block bitmap for bg 0 marked uninitialized [ 100.043497][ T7683] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 100.054015][ T7683] EXT4-fs (loop4): 1 orphan inode deleted [ 100.293958][ T7698] tipc: Resetting bearer [ 100.347574][ T7698] tipc: Enabling of bearer rejected, already enabled [ 100.504159][ T7712] tipc: Resetting bearer [ 100.537352][ T7725] program syz.0.1334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.584576][ T7712] tipc: Enabling of bearer rejected, already enabled [ 100.649421][ T7742] loop4: detected capacity change from 0 to 512 [ 100.676273][ T7742] EXT4-fs mount: 138 callbacks suppressed [ 100.676288][ T7742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.702746][ T7744] loop2: detected capacity change from 0 to 1024 [ 100.710563][ T7744] EXT4-fs: Ignoring removed i_version option [ 100.744627][ T7751] loop5: detected capacity change from 0 to 2048 [ 100.760373][ T7744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.781811][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 100.781828][ T29] audit: type=1400 audit(100.762:5483): avc: denied { mounton } for pid=7743 comm="syz.2.1342" path="/239/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.806808][ T7751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.829877][ T29] audit: type=1326 audit(100.812:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 100.852832][ T29] audit: type=1326 audit(100.812:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 100.854463][ T7761] loop0: detected capacity change from 0 to 512 [ 100.876085][ T29] audit: type=1326 audit(100.812:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 100.894219][ T7761] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 100.905213][ T29] audit: type=1326 audit(100.812:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 100.937993][ T29] audit: type=1326 audit(100.812:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 100.960949][ T29] audit: type=1326 audit(100.812:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 100.963752][ T7761] EXT4-fs (loop0): orphan cleanup on readonly fs [ 100.984331][ T29] audit: type=1326 audit(100.812:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 100.993213][ T7761] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.1345: Block bitmap for bg 0 marked uninitialized [ 101.013272][ T29] audit: type=1326 audit(100.812:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 101.013319][ T29] audit: type=1326 audit(100.812:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 101.031206][ T7761] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 101.081962][ T7761] EXT4-fs (loop0): 1 orphan inode deleted [ 101.088300][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.125807][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.147501][ T3305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 101.171642][ T3305] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 101.186266][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.213489][ T7775] program syz.2.1349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.253410][ T7778] loop2: detected capacity change from 0 to 1024 [ 101.262299][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.273177][ T7778] EXT4-fs: Ignoring removed nobh option [ 101.278854][ T7778] EXT4-fs: Ignoring removed bh option [ 101.311800][ T7778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.330897][ T7779] loop0: detected capacity change from 0 to 2048 [ 101.342475][ T7778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.377253][ T7779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.416092][ T7785] loop4: detected capacity change from 0 to 512 [ 101.467497][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.478306][ T7785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.517784][ T7797] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 101.524427][ T7797] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.532153][ T7797] vhci_hcd vhci_hcd.0: Device attached [ 101.581976][ T7798] vhci_hcd: connection closed [ 101.582238][ T122] vhci_hcd: stop threads [ 101.591234][ T122] vhci_hcd: release socket [ 101.595690][ T122] vhci_hcd: disconnect device [ 101.618191][ T7809] program syz.2.1360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.631216][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.664841][ T7814] __nla_validate_parse: 5 callbacks suppressed [ 101.664859][ T7814] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1363'. [ 101.731225][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1366'. [ 101.823140][ T7827] loop5: detected capacity change from 0 to 512 [ 101.847589][ T7833] loop2: detected capacity change from 0 to 2048 [ 101.875068][ T7827] EXT4-fs (loop5): too many log groups per flexible block group [ 101.884658][ T7827] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 101.892732][ T7827] EXT4-fs (loop5): mount failed [ 101.900530][ T7833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.961441][ T7827] loop5: detected capacity change from 0 to 512 [ 102.015186][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.033718][ T7839] loop4: detected capacity change from 0 to 512 [ 102.041354][ T7827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.136299][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.164503][ T7839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.206888][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.228090][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1379'. [ 102.281629][ T7858] loop3: detected capacity change from 0 to 512 [ 102.418174][ T7858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.467574][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.516841][ T7881] program syz.5.1387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.517709][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1390'. [ 102.611827][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.788022][ T7908] loop2: detected capacity change from 0 to 512 [ 102.814597][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1402'. [ 102.841175][ T7916] loop3: detected capacity change from 0 to 1024 [ 102.856682][ T7916] EXT4-fs: Ignoring removed nobh option [ 102.862356][ T7916] EXT4-fs: Ignoring removed bh option [ 102.870976][ T7918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1404'. [ 102.900556][ T7908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.921715][ T7916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.938112][ T7916] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.963388][ T7927] loop5: detected capacity change from 0 to 512 [ 102.971186][ T7927] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 102.983744][ T7927] EXT4-fs (loop5): orphan cleanup on readonly fs [ 102.992339][ T7927] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1406: Block bitmap for bg 0 marked uninitialized [ 103.006551][ T7927] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 103.017005][ T7927] EXT4-fs (loop5): 1 orphan inode deleted [ 103.026535][ T7927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.045027][ T7932] loop3: detected capacity change from 0 to 512 [ 103.055709][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.078301][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.088476][ T7932] EXT4-fs (loop3): too many log groups per flexible block group [ 103.096298][ T7932] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 103.103967][ T7932] EXT4-fs (loop3): mount failed [ 103.170709][ T7943] loop3: detected capacity change from 0 to 512 [ 103.203333][ T7943] EXT4-fs (loop3): too many log groups per flexible block group [ 103.211212][ T7943] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 103.229695][ T7943] EXT4-fs (loop3): mount failed [ 103.306500][ T7944] loop5: detected capacity change from 0 to 512 [ 103.343867][ T7944] EXT4-fs (loop5): too many log groups per flexible block group [ 103.352693][ T7944] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 103.360084][ T7944] EXT4-fs (loop5): mount failed [ 103.362313][ T7947] team0: Port device vlan0 removed [ 103.425273][ T7964] team0: Port device vlan0 added [ 103.440027][ T7944] loop5: detected capacity change from 0 to 512 [ 103.449091][ T7969] tipc: Enabling of bearer rejected, already enabled [ 103.486423][ T7975] loop3: detected capacity change from 0 to 512 [ 103.494231][ T7975] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 103.522785][ T7975] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.524314][ T7944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.529377][ T7975] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1421: Block bitmap for bg 0 marked uninitialized [ 103.529553][ T7975] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 103.529726][ T7975] EXT4-fs (loop3): 1 orphan inode deleted [ 103.530088][ T7975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.617395][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.646883][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 103.663748][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.756886][ T7991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1428'. [ 103.789272][ T7994] loop2: detected capacity change from 0 to 1024 [ 103.797190][ T7994] EXT4-fs: Ignoring removed nobh option [ 103.802835][ T7994] EXT4-fs: Ignoring removed bh option [ 103.833304][ T7994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.858345][ T7994] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.869964][ T8000] loop5: detected capacity change from 0 to 2048 [ 103.889138][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'. [ 103.914714][ T8000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.003883][ T8011] loop4: detected capacity change from 0 to 2048 [ 104.021881][ T8011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.147218][ T8015] loop0: detected capacity change from 0 to 512 [ 104.154701][ T8015] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 104.165645][ T8015] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.172267][ T8015] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.1434: Block bitmap for bg 0 marked uninitialized [ 104.185998][ T8015] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 104.195103][ T8015] EXT4-fs (loop0): 1 orphan inode deleted [ 104.201404][ T8015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 104.224072][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.300095][ T8027] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 104.306663][ T8027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.314377][ T8027] vhci_hcd vhci_hcd.0: Device attached [ 104.322256][ T8028] vhci_hcd: connection closed [ 104.322536][ T12] vhci_hcd: stop threads [ 104.331681][ T12] vhci_hcd: release socket [ 104.336249][ T12] vhci_hcd: disconnect device [ 104.348915][ T7923] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 104.541994][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.629424][ T8037] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1442'. [ 104.668689][ T8040] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 104.675283][ T8040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.682954][ T8040] vhci_hcd vhci_hcd.0: Device attached [ 104.693536][ T8042] vhci_hcd: connection closed [ 104.693605][ T37] vhci_hcd: stop threads [ 104.702731][ T37] vhci_hcd: release socket [ 104.707241][ T37] vhci_hcd: disconnect device [ 104.780056][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.856946][ T8060] loop5: detected capacity change from 0 to 512 [ 104.871454][ T8063] loop4: detected capacity change from 0 to 1024 [ 104.881525][ T8063] EXT4-fs: Ignoring removed nobh option [ 104.887252][ T8063] EXT4-fs: Ignoring removed bh option [ 104.892324][ T8060] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 104.928440][ T8060] EXT4-fs (loop5): orphan cleanup on readonly fs [ 104.941249][ T8060] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1452: Block bitmap for bg 0 marked uninitialized [ 104.965034][ T8060] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 104.976312][ T8063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.989364][ T8060] EXT4-fs (loop5): 1 orphan inode deleted [ 104.995625][ T8060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.018448][ T8063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.038227][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.052208][ T8075] loop0: detected capacity change from 0 to 1024 [ 105.067229][ T8075] EXT4-fs: Ignoring removed nobh option [ 105.072955][ T8075] EXT4-fs: Ignoring removed bh option [ 105.104723][ T8075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.122643][ T8075] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.228588][ T8082] tipc: Resetting bearer [ 105.301148][ T8097] team0: Port device vlan0 removed [ 105.325313][ T3451] tipc: Resetting bearer [ 105.341052][ T8082] tipc: Enabling of bearer rejected, already enabled [ 105.365975][ T8097] team0: Port device vlan0 added [ 105.381051][ T8097] tipc: Enabling of bearer rejected, already enabled [ 105.403089][ T8112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 105.409649][ T8112] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.417247][ T8112] vhci_hcd vhci_hcd.0: Device attached [ 105.431375][ T8113] vhci_hcd: connection closed [ 105.433545][ T51] vhci_hcd: stop threads [ 105.442598][ T51] vhci_hcd: release socket [ 105.447084][ T51] vhci_hcd: disconnect device [ 105.678604][ T8129] team0: Port device vlan0 removed [ 105.691776][ T122] tipc: Resetting bearer [ 105.730847][ T8136] loop2: detected capacity change from 0 to 2048 [ 105.751515][ T8136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.769206][ T8129] team0: Port device vlan0 added [ 105.785703][ T8129] tipc: Enabling of bearer rejected, already enabled [ 105.793611][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 105.793624][ T29] audit: type=1326 audit(105.762:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe53936d3df code=0x7ffc0000 [ 105.822990][ T29] audit: type=1326 audit(105.762:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe53936e9b7 code=0x7ffc0000 [ 105.845891][ T29] audit: type=1326 audit(105.762:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe53936d290 code=0x7ffc0000 [ 105.868861][ T29] audit: type=1326 audit(105.762:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe53936d58a code=0x7ffc0000 [ 105.891554][ T29] audit: type=1326 audit(105.762:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 105.914455][ T29] audit: type=1326 audit(105.762:6123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 105.937269][ T29] audit: type=1326 audit(105.772:6124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 105.959987][ T29] audit: type=1326 audit(105.772:6125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 105.982790][ T29] audit: type=1326 audit(105.772:6126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 106.005724][ T29] audit: type=1326 audit(105.772:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 106.060664][ T8144] program syz.4.1476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.120902][ T8142] loop0: detected capacity change from 0 to 512 [ 106.187434][ T8148] loop4: detected capacity change from 0 to 512 [ 106.200441][ T8150] tipc: Enabling of bearer rejected, already enabled [ 106.219370][ T8142] EXT4-fs (loop0): too many log groups per flexible block group [ 106.228073][ T8142] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 106.237146][ T8142] EXT4-fs (loop0): mount failed [ 106.284412][ T8163] loop5: detected capacity change from 0 to 512 [ 106.329132][ T8148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.369438][ T8163] EXT4-fs (loop5): too many log groups per flexible block group [ 106.380198][ T8163] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 106.389048][ T8142] loop0: detected capacity change from 0 to 512 [ 106.409661][ T8163] EXT4-fs (loop5): mount failed [ 106.443953][ T8142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.450734][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.498392][ T8163] loop5: detected capacity change from 0 to 512 [ 106.518563][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.600890][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.613157][ T8185] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 106.619815][ T8185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.627490][ T8185] vhci_hcd vhci_hcd.0: Device attached [ 106.635019][ T8187] vhci_hcd: connection closed [ 106.635451][ T8163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.655747][ T12] vhci_hcd: stop threads [ 106.660042][ T12] vhci_hcd: release socket [ 106.664498][ T12] vhci_hcd: disconnect device [ 106.680759][ T8190] loop3: detected capacity change from 0 to 2048 [ 106.706101][ T8190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.723621][ T8193] __nla_validate_parse: 2 callbacks suppressed [ 106.723637][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1488'. [ 106.746609][ T8197] loop2: detected capacity change from 0 to 512 [ 106.760288][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.775134][ T8197] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 106.790705][ T8197] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.797347][ T8197] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1490: Block bitmap for bg 0 marked uninitialized [ 106.812231][ T8197] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 106.819726][ T8199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 106.821401][ T8197] EXT4-fs (loop2): 1 orphan inode deleted [ 106.827455][ T8199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.835070][ T8197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.840693][ T8199] vhci_hcd vhci_hcd.0: Device attached [ 106.873040][ T8201] vhci_hcd: connection closed [ 106.875768][ T51] vhci_hcd: stop threads [ 106.884811][ T51] vhci_hcd: release socket [ 106.889343][ T51] vhci_hcd: disconnect device [ 106.894789][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.937175][ T8209] loop2: detected capacity change from 0 to 1024 [ 106.944362][ T8209] EXT4-fs: Ignoring removed i_version option [ 106.970487][ T8209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.049091][ T3305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 107.063716][ T3305] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 107.075759][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.272337][ T8231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1501'. [ 107.338258][ T8240] loop4: detected capacity change from 0 to 1024 [ 107.345439][ T8240] EXT4-fs: Ignoring removed nobh option [ 107.351081][ T8240] EXT4-fs: Ignoring removed bh option [ 107.367835][ T8240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.382434][ T8240] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.402353][ T8237] team0: Port device vlan0 removed [ 107.424206][ T12] tipc: Resetting bearer [ 107.452339][ T8247] program syz.0.1506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.462710][ T8237] team0: Port device vlan0 added [ 107.470813][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.483800][ T8237] tipc: Enabling of bearer rejected, already enabled [ 107.560692][ T8257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1510'. [ 107.589876][ T8260] loop4: detected capacity change from 0 to 512 [ 107.612667][ T8260] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 107.624354][ T8260] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.633395][ T8260] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.1512: Block bitmap for bg 0 marked uninitialized [ 107.646660][ T8263] loop0: detected capacity change from 0 to 1024 [ 107.654735][ T8260] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 107.672935][ T8260] EXT4-fs (loop4): 1 orphan inode deleted [ 107.679491][ T8260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.692708][ T8263] EXT4-fs: Ignoring removed i_version option [ 107.736045][ T8263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.852138][ T3311] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 107.868142][ T3311] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 107.957570][ T8285] loop5: detected capacity change from 0 to 2048 [ 107.986049][ T8297] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1526'. [ 107.988046][ T8295] program syz.0.1522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.038988][ T8298] loop2: detected capacity change from 0 to 512 [ 108.073441][ T8299] loop3: detected capacity change from 0 to 2048 [ 108.099407][ T8305] loop4: detected capacity change from 0 to 512 [ 108.123132][ T8305] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 108.141785][ T8305] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.149034][ T8305] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.1527: Block bitmap for bg 0 marked uninitialized [ 108.162673][ T8305] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 108.171831][ T8305] EXT4-fs (loop4): 1 orphan inode deleted [ 108.240363][ T8313] loop4: detected capacity change from 0 to 512 [ 108.267535][ T8315] loop2: detected capacity change from 0 to 1024 [ 108.274918][ T8315] EXT4-fs: Ignoring removed nobh option [ 108.280729][ T8315] EXT4-fs: Ignoring removed bh option [ 108.292759][ T8313] EXT4-fs (loop4): too many log groups per flexible block group [ 108.302208][ T8313] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 108.309802][ T8313] EXT4-fs (loop4): mount failed [ 108.392940][ T8313] loop4: detected capacity change from 0 to 512 [ 108.425725][ T8325] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 108.432294][ T8325] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.439989][ T8325] vhci_hcd vhci_hcd.0: Device attached [ 108.448459][ T8326] vhci_hcd: connection closed [ 108.449447][ T3451] vhci_hcd: stop threads [ 108.458434][ T3451] vhci_hcd: release socket [ 108.462951][ T3451] vhci_hcd: disconnect device [ 108.620638][ T8335] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1537'. [ 108.696200][ T8341] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 108.702881][ T8341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.710521][ T8341] vhci_hcd vhci_hcd.0: Device attached [ 108.718459][ T8342] vhci_hcd: connection closed [ 108.719165][ T12] vhci_hcd: stop threads [ 108.728285][ T12] vhci_hcd: release socket [ 108.732798][ T12] vhci_hcd: disconnect device [ 108.824317][ T8354] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1545'. [ 108.833503][ T8352] loop3: detected capacity change from 0 to 1024 [ 108.841347][ T8352] EXT4-fs: Ignoring removed i_version option [ 108.936141][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 108.962403][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 108.989674][ T8369] loop2: detected capacity change from 0 to 512 [ 109.003088][ T8369] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 109.022093][ T8369] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.056951][ T8369] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1551: Block bitmap for bg 0 marked uninitialized [ 109.084779][ T8369] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 109.095355][ T8369] EXT4-fs (loop2): 1 orphan inode deleted [ 109.107361][ T8367] loop0: detected capacity change from 0 to 512 [ 109.164395][ T8367] EXT4-fs (loop0): too many log groups per flexible block group [ 109.174848][ T8367] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 109.198358][ T8367] EXT4-fs (loop0): mount failed [ 109.198938][ T8383] loop2: detected capacity change from 0 to 1024 [ 109.210688][ T8383] EXT4-fs: Ignoring removed nobh option [ 109.216300][ T8383] EXT4-fs: Ignoring removed bh option [ 109.243162][ T8389] loop3: detected capacity change from 0 to 512 [ 109.264514][ T8389] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 109.280185][ T8389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.291682][ T8389] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1557: Block bitmap for bg 0 marked uninitialized [ 109.324863][ T8367] loop0: detected capacity change from 0 to 512 [ 109.345775][ T8389] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 109.354894][ T8389] EXT4-fs (loop3): 1 orphan inode deleted [ 109.452066][ T8406] loop3: detected capacity change from 0 to 512 [ 109.488235][ T8408] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 109.494870][ T8408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.502445][ T8408] vhci_hcd vhci_hcd.0: Device attached [ 109.512866][ T8411] vhci_hcd: connection closed [ 109.513203][ T122] vhci_hcd: stop threads [ 109.522253][ T122] vhci_hcd: release socket [ 109.526706][ T122] vhci_hcd: disconnect device [ 109.625920][ T8416] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1564'. [ 109.676834][ T8420] loop3: detected capacity change from 0 to 512 [ 109.683945][ T8420] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 109.694516][ T8420] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.701162][ T8420] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1566: Block bitmap for bg 0 marked uninitialized [ 109.714970][ T8420] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 109.723986][ T8420] EXT4-fs (loop3): 1 orphan inode deleted [ 109.767709][ T8425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1568'. [ 109.843198][ T8429] loop3: detected capacity change from 0 to 512 [ 109.944812][ T8433] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 109.951375][ T8433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.958937][ T8433] vhci_hcd vhci_hcd.0: Device attached [ 109.972627][ T8436] vhci_hcd: connection closed [ 109.972841][ T3451] vhci_hcd: stop threads [ 109.981956][ T3451] vhci_hcd: release socket [ 109.981956][ T8439] loop5: detected capacity change from 0 to 1024 [ 109.986365][ T3451] vhci_hcd: disconnect device [ 109.997906][ T8439] EXT4-fs: Ignoring removed i_version option [ 110.083333][ T4871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 110.101523][ T4871] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 110.153461][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1579'. [ 110.244851][ T8466] loop2: detected capacity change from 0 to 2048 [ 110.272444][ T8468] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 110.279547][ T8468] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.287255][ T8468] vhci_hcd vhci_hcd.0: Device attached [ 110.298829][ T8471] vhci_hcd: connection closed [ 110.299024][ T3451] vhci_hcd: stop threads [ 110.308119][ T3451] vhci_hcd: release socket [ 110.312711][ T3451] vhci_hcd: disconnect device [ 110.564309][ T8483] loop3: detected capacity change from 0 to 256 [ 110.580462][ T8483] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.821492][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 110.821510][ T29] audit: type=1400 audit(110.802:6703): avc: denied { name_bind } for pid=8484 comm="syz.5.1590" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 110.871688][ T29] audit: type=1400 audit(110.852:6704): avc: denied { create } for pid=8486 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.958920][ T29] audit: type=1400 audit(110.932:6705): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.994058][ T29] audit: type=1400 audit(110.972:6706): avc: denied { write } for pid=8490 comm="syz.2.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.994236][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1593'. [ 111.052917][ T29] audit: type=1400 audit(111.032:6707): avc: denied { create } for pid=8492 comm="syz.0.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.101477][ T29] audit: type=1400 audit(111.042:6708): avc: denied { write } for pid=8492 comm="syz.0.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.121429][ T29] audit: type=1400 audit(111.042:6709): avc: denied { read } for pid=8492 comm="syz.0.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.141165][ T29] audit: type=1400 audit(111.072:6710): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.164801][ T29] audit: type=1400 audit(111.072:6711): avc: denied { open } for pid=3311 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.188347][ T29] audit: type=1400 audit(111.072:6712): avc: denied { ioctl } for pid=3311 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.283690][ T8502] loop0: detected capacity change from 0 to 512 [ 111.606451][ T8525] loop2: detected capacity change from 0 to 2048 [ 111.826663][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1614'. [ 111.931606][ T8548] team0: Port device vlan0 removed [ 111.951910][ T122] tipc: Resetting bearer [ 111.996746][ T8548] team0: Port device vlan0 added [ 112.021575][ T8548] tipc: Enabling of bearer rejected, already enabled [ 112.081008][ T8569] program syz.4.1619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.118042][ T8573] loop4: detected capacity change from 0 to 1024 [ 112.129142][ T8573] EXT4-fs: Ignoring removed nobh option [ 112.134763][ T8573] EXT4-fs: Ignoring removed bh option [ 112.308484][ T8595] loop5: detected capacity change from 0 to 512 [ 112.324378][ T8595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.352457][ T8595] EXT4-fs (loop5): 1 truncate cleaned up [ 112.375623][ T8600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1629'. [ 112.425219][ T8603] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1632'. [ 112.442209][ T8606] loop4: detected capacity change from 0 to 512 [ 112.549186][ T8611] loop9: detected capacity change from 0 to 7 [ 112.561354][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.570940][ T8611] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.578905][ T8611] loop9: unable to read partition table [ 112.584876][ T8611] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 112.584876][ T8611] ) failed (rc=-5) [ 112.593411][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.607174][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.608256][ T8604] team0: Port device vlan0 removed [ 112.617853][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.631195][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.639377][ T3299] Buffer I/O error on dev loop9, logical block 0, async page read [ 112.672454][ T122] tipc: Resetting bearer [ 112.679554][ T8636] team0: Port device vlan0 added [ 112.697666][ T8637] loop3: detected capacity change from 0 to 1024 [ 112.704268][ T8604] tipc: Enabling of bearer rejected, already enabled [ 112.707188][ T8637] EXT4-fs: Ignoring removed i_version option [ 112.860740][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 112.865093][ T8658] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1645'. [ 112.888089][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 113.328413][ T8697] program syz.2.1660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.445565][ T8713] syzkaller1: entered promiscuous mode [ 113.451225][ T8713] syzkaller1: entered allmulticast mode [ 113.581891][ T8717] loop5: detected capacity change from 0 to 1024 [ 113.588829][ T8717] EXT4-fs: Ignoring removed i_version option [ 113.651097][ T4871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 113.666847][ T4871] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 113.692643][ T8723] FAULT_INJECTION: forcing a failure. [ 113.692643][ T8723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.705810][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.5.1670 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 113.705846][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.705861][ T8723] Call Trace: [ 113.705869][ T8723] [ 113.705878][ T8723] __dump_stack+0x1d/0x30 [ 113.705901][ T8723] dump_stack_lvl+0xe8/0x140 [ 113.706028][ T8723] dump_stack+0x15/0x1b [ 113.706042][ T8723] should_fail_ex+0x265/0x280 [ 113.706068][ T8723] should_fail+0xb/0x20 [ 113.706091][ T8723] should_fail_usercopy+0x1a/0x20 [ 113.706130][ T8723] copy_folio_from_iter_atomic+0x278/0x1170 [ 113.706152][ T8723] ? shmem_write_begin+0xa8/0x190 [ 113.706254][ T8723] ? shmem_write_begin+0xe1/0x190 [ 113.706293][ T8723] generic_perform_write+0x2c2/0x490 [ 113.706347][ T8723] shmem_file_write_iter+0xc5/0xf0 [ 113.706365][ T8723] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 113.706384][ T8723] vfs_write+0x49d/0x8e0 [ 113.706416][ T8723] ksys_write+0xda/0x1a0 [ 113.706502][ T8723] __x64_sys_write+0x40/0x50 [ 113.706536][ T8723] x64_sys_call+0x2cdd/0x2fb0 [ 113.706564][ T8723] do_syscall_64+0xd2/0x200 [ 113.706581][ T8723] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.706660][ T8723] ? clear_bhb_loop+0x40/0x90 [ 113.706679][ T8723] ? clear_bhb_loop+0x40/0x90 [ 113.706698][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.706716][ T8723] RIP: 0033:0x7f4d25dcd3df [ 113.706729][ T8723] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 113.706793][ T8723] RSP: 002b:00007f4d24436df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 113.706817][ T8723] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f4d25dcd3df [ 113.706833][ T8723] RDX: 0000000000040000 RSI: 00007f4d1c017000 RDI: 0000000000000009 [ 113.706847][ T8723] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000004f1 [ 113.706861][ T8723] R10: 00000000000007cc R11: 0000000000000293 R12: 0000000000000009 [ 113.706950][ T8723] R13: 00007f4d24436ef0 R14: 00007f4d24436eb0 R15: 00007f4d1c017000 [ 113.706967][ T8723] [ 113.708341][ T8723] loop5: detected capacity change from 0 to 512 [ 113.822297][ T8725] loop3: detected capacity change from 0 to 1024 [ 113.932734][ T8725] EXT4-fs: Ignoring removed nobh option [ 113.938468][ T8725] EXT4-fs: Ignoring removed bh option [ 113.947293][ T8733] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 113.953847][ T8733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.961576][ T8733] vhci_hcd vhci_hcd.0: Device attached [ 113.991344][ T8734] vhci_hcd: connection closed [ 113.992349][ T12] vhci_hcd: stop threads [ 114.001401][ T12] vhci_hcd: release socket [ 114.005891][ T12] vhci_hcd: disconnect device [ 114.156015][ T8757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1682'. [ 114.246057][ T8764] loop5: detected capacity change from 0 to 512 [ 114.355527][ T8774] lo speed is unknown, defaulting to 1000 [ 114.370581][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 114.406552][ T8779] loop4: detected capacity change from 0 to 1024 [ 114.414313][ T8779] EXT4-fs: Ignoring removed nobh option [ 114.420052][ T8779] EXT4-fs: Ignoring removed bh option [ 114.529343][ T8796] program syz.3.1695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.614060][ T8808] loop4: detected capacity change from 0 to 2048 [ 114.666828][ T8822] loop3: detected capacity change from 0 to 1024 [ 114.673893][ T8822] EXT4-fs: Ignoring removed nobh option [ 114.679594][ T8822] EXT4-fs: Ignoring removed bh option [ 114.823461][ T8830] FAULT_INJECTION: forcing a failure. [ 114.823461][ T8830] name failslab, interval 1, probability 0, space 0, times 0 [ 114.836421][ T8830] CPU: 0 UID: 0 PID: 8830 Comm: syz.3.1705 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 114.836457][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.836469][ T8830] Call Trace: [ 114.836475][ T8830] [ 114.836481][ T8830] __dump_stack+0x1d/0x30 [ 114.836501][ T8830] dump_stack_lvl+0xe8/0x140 [ 114.836524][ T8830] dump_stack+0x15/0x1b [ 114.836594][ T8830] should_fail_ex+0x265/0x280 [ 114.836632][ T8830] should_failslab+0x8c/0xb0 [ 114.836683][ T8830] kmem_cache_alloc_noprof+0x50/0x310 [ 114.836721][ T8830] ? getname_kernel+0x3c/0x1f0 [ 114.836751][ T8830] getname_kernel+0x3c/0x1f0 [ 114.836780][ T8830] do_file_open_root+0xc6/0x3f0 [ 114.836829][ T8830] file_open_root+0xfd/0x130 [ 114.836883][ T8830] kernel_read_file_from_path_initns+0xda/0x170 [ 114.836910][ T8830] _request_firmware+0x958/0xbb0 [ 114.836944][ T8830] request_firmware+0x36/0x50 [ 114.837012][ T8830] devlink_compat_flash_update+0xb2/0x1b0 [ 114.837074][ T8830] dev_ethtool+0x148b/0x1650 [ 114.837111][ T8830] ? full_name_hash+0x92/0xe0 [ 114.837156][ T8830] dev_ioctl+0x2e0/0x960 [ 114.837237][ T8830] sock_do_ioctl+0x197/0x220 [ 114.837269][ T8830] sock_ioctl+0x41b/0x610 [ 114.837291][ T8830] ? __pfx_sock_ioctl+0x10/0x10 [ 114.837334][ T8830] __se_sys_ioctl+0xcb/0x140 [ 114.837362][ T8830] __x64_sys_ioctl+0x43/0x50 [ 114.837430][ T8830] x64_sys_call+0x19a8/0x2fb0 [ 114.837461][ T8830] do_syscall_64+0xd2/0x200 [ 114.837478][ T8830] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.837576][ T8830] ? clear_bhb_loop+0x40/0x90 [ 114.837603][ T8830] ? clear_bhb_loop+0x40/0x90 [ 114.837624][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.837694][ T8830] RIP: 0033:0x7f503ddae929 [ 114.837712][ T8830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.837733][ T8830] RSP: 002b:00007f503c417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.837767][ T8830] RAX: ffffffffffffffda RBX: 00007f503dfd5fa0 RCX: 00007f503ddae929 [ 114.837783][ T8830] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000009 [ 114.837798][ T8830] RBP: 00007f503c417090 R08: 0000000000000000 R09: 0000000000000000 [ 114.837814][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.837829][ T8830] R13: 0000000000000000 R14: 00007f503dfd5fa0 R15: 00007ffe5cb75af8 [ 114.837853][ T8830] [ 115.082297][ T8830] netdevsim netdevsim3: loading /lib/firmware/updates/6.16.0-rc3-syzkaller-00319-gded779017ad7/. failed with error -12 [ 115.096677][ T8830] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 115.104905][ T8830] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 115.151738][ T8833] loop2: detected capacity change from 0 to 1024 [ 115.160692][ T8833] EXT4-fs: Ignoring removed i_version option [ 115.323332][ T8841] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 115.323561][ T3305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 115.329902][ T8841] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.330024][ T8841] vhci_hcd vhci_hcd.0: Device attached [ 115.367866][ T8844] vhci_hcd: connection closed [ 115.368309][ T12] vhci_hcd: stop threads [ 115.377407][ T12] vhci_hcd: release socket [ 115.381908][ T12] vhci_hcd: disconnect device [ 115.397648][ T3305] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 115.512822][ T8854] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1714'. [ 115.542624][ T8855] loop4: detected capacity change from 0 to 1024 [ 115.560471][ T8855] EXT4-fs: Ignoring removed nobh option [ 115.566136][ T8855] EXT4-fs: Ignoring removed bh option [ 115.580863][ T8859] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1715'. [ 115.740254][ T8872] program syz.4.1720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.835510][ T8876] loop2: detected capacity change from 0 to 512 [ 115.863696][ T8876] EXT4-fs (loop2): too many log groups per flexible block group [ 115.872915][ T8876] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 115.914916][ T8882] loop5: detected capacity change from 0 to 512 [ 115.937048][ T8876] EXT4-fs (loop2): mount failed [ 115.945149][ T8882] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.983455][ T8882] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.993405][ T8882] EXT4-fs (loop5): invalid inodes per group: 3 [ 115.993405][ T8882] [ 116.053526][ T8886] loop4: detected capacity change from 0 to 512 [ 116.070304][ T8886] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1726: casefold flag without casefold feature [ 116.095610][ T8876] loop2: detected capacity change from 0 to 512 [ 116.102714][ T8886] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1726: couldn't read orphan inode 15 (err -117) [ 116.131482][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 116.131497][ T29] audit: type=1400 audit(116.112:7312): avc: denied { map } for pid=8885 comm="syz.4.1726" path="/376/file0/pids.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.160441][ T29] audit: type=1400 audit(116.112:7313): avc: denied { write } for pid=8885 comm="syz.4.1726" path="/376/file0/pids.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.197927][ T29] audit: type=1400 audit(116.172:7314): avc: denied { name_bind } for pid=8890 comm="syz.5.1728" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 116.289868][ T29] audit: type=1326 audit(116.272:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f0c6e929 code=0x7ffc0000 [ 116.313639][ T29] audit: type=1326 audit(116.272:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fd1f0c6e929 code=0x7ffc0000 [ 116.336586][ T29] audit: type=1326 audit(116.272:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f0c6e929 code=0x7ffc0000 [ 116.359648][ T29] audit: type=1326 audit(116.272:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.4.1729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f0c6e929 code=0x7ffc0000 [ 116.385271][ T8897] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 116.425247][ T29] audit: type=1400 audit(116.402:7319): avc: denied { validate_trans } for pid=8890 comm="syz.5.1728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 116.466095][ T29] audit: type=1400 audit(116.432:7320): avc: denied { write } for pid=8906 comm="syz.4.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.521925][ T8915] loop2: detected capacity change from 0 to 1024 [ 116.528369][ T29] audit: type=1400 audit(116.502:7321): avc: denied { module_request } for pid=8916 comm="syz.4.1738" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 116.539155][ T8915] EXT4-fs: Ignoring removed nobh option [ 116.555860][ T8915] EXT4-fs: Ignoring removed bh option [ 116.593227][ T8920] tipc: Resetting bearer [ 116.688348][ T8928] loop3: detected capacity change from 0 to 512 [ 116.694989][ T8920] tipc: Enabling of bearer rejected, already enabled [ 116.961587][ T8961] loop5: detected capacity change from 0 to 1024 [ 116.969647][ T8959] loop2: detected capacity change from 0 to 512 [ 116.970665][ T8961] EXT4-fs: Ignoring removed nobh option [ 116.981661][ T8961] EXT4-fs: Ignoring removed bh option [ 117.044702][ T8969] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 117.051280][ T8969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.058949][ T8969] vhci_hcd vhci_hcd.0: Device attached [ 117.066936][ T8970] vhci_hcd: connection closed [ 117.067216][ T51] vhci_hcd: stop threads [ 117.076427][ T51] vhci_hcd: release socket [ 117.080970][ T51] vhci_hcd: disconnect device [ 117.169203][ T8981] FAULT_INJECTION: forcing a failure. [ 117.169203][ T8981] name failslab, interval 1, probability 0, space 0, times 0 [ 117.182016][ T8981] CPU: 0 UID: 0 PID: 8981 Comm: syz.5.1758 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 117.182093][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.182106][ T8981] Call Trace: [ 117.182112][ T8981] [ 117.182119][ T8981] __dump_stack+0x1d/0x30 [ 117.182197][ T8981] dump_stack_lvl+0xe8/0x140 [ 117.182263][ T8981] dump_stack+0x15/0x1b [ 117.182285][ T8981] should_fail_ex+0x265/0x280 [ 117.182330][ T8981] ? __pfx_cond_bools_destroy+0x10/0x10 [ 117.182421][ T8981] should_failslab+0x8c/0xb0 [ 117.182523][ T8981] kmem_cache_alloc_noprof+0x50/0x310 [ 117.182551][ T8981] ? hashtab_duplicate+0xfe/0x360 [ 117.182640][ T8981] ? __pfx_cond_bools_destroy+0x10/0x10 [ 117.182758][ T8981] hashtab_duplicate+0xfe/0x360 [ 117.182785][ T8981] ? __pfx_cond_bools_copy+0x10/0x10 [ 117.182861][ T8981] cond_policydb_dup+0xd2/0x4e0 [ 117.182910][ T8981] security_set_bools+0xa0/0x340 [ 117.182940][ T8981] sel_commit_bools_write+0x1ea/0x270 [ 117.182974][ T8981] vfs_writev+0x406/0x8b0 [ 117.183010][ T8981] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 117.183049][ T8981] ? mutex_lock+0xd/0x30 [ 117.183096][ T8981] do_writev+0xe7/0x210 [ 117.183121][ T8981] __x64_sys_writev+0x45/0x50 [ 117.183142][ T8981] x64_sys_call+0x2006/0x2fb0 [ 117.183168][ T8981] do_syscall_64+0xd2/0x200 [ 117.183213][ T8981] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 117.183245][ T8981] ? clear_bhb_loop+0x40/0x90 [ 117.183349][ T8981] ? clear_bhb_loop+0x40/0x90 [ 117.183375][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.183401][ T8981] RIP: 0033:0x7f4d25dce929 [ 117.183419][ T8981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.183440][ T8981] RSP: 002b:00007f4d24437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 117.183513][ T8981] RAX: ffffffffffffffda RBX: 00007f4d25ff5fa0 RCX: 00007f4d25dce929 [ 117.183538][ T8981] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000006 [ 117.183553][ T8981] RBP: 00007f4d24437090 R08: 0000000000000000 R09: 0000000000000000 [ 117.183567][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.183581][ T8981] R13: 0000000000000000 R14: 00007f4d25ff5fa0 R15: 00007ffddadca398 [ 117.183603][ T8981] [ 117.495516][ T9006] loop3: detected capacity change from 0 to 1024 [ 117.520510][ T9011] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 117.527192][ T9011] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.534902][ T9011] vhci_hcd vhci_hcd.0: Device attached [ 117.553412][ T9014] vhci_hcd: connection closed [ 117.556465][ T51] vhci_hcd: stop threads [ 117.565623][ T51] vhci_hcd: release socket [ 117.570085][ T51] vhci_hcd: disconnect device [ 117.630821][ T9024] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 117.637387][ T9024] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.645059][ T9024] vhci_hcd vhci_hcd.0: Device attached [ 117.652360][ T9025] vhci_hcd: connection closed [ 117.652692][ T51] vhci_hcd: stop threads [ 117.661691][ T51] vhci_hcd: release socket [ 117.666175][ T51] vhci_hcd: disconnect device [ 117.738448][ T9028] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 117.745040][ T9028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.752583][ T9028] vhci_hcd vhci_hcd.0: Device attached [ 117.762723][ T9029] vhci_hcd: connection closed [ 117.763097][ T51] vhci_hcd: stop threads [ 117.772117][ T51] vhci_hcd: release socket [ 117.776620][ T51] vhci_hcd: disconnect device [ 118.428834][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1775'. [ 118.476803][ T9059] loop4: detected capacity change from 0 to 2048 [ 118.578288][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 118.671794][ T9081] team0: Port device vlan0 removed [ 118.691363][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 118.703825][ T9068] team0: Port device vlan0 added [ 118.730893][ T9091] loop3: detected capacity change from 0 to 1024 [ 118.750545][ T9091] EXT4-fs: Ignoring removed i_version option [ 118.766043][ T9068] tipc: Enabling of bearer rejected, already enabled [ 118.843457][ T9112] loop5: detected capacity change from 0 to 1024 [ 118.853572][ T9112] EXT4-fs: Ignoring removed nobh option [ 118.859278][ T9112] EXT4-fs: Ignoring removed bh option [ 118.859462][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 118.881163][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 119.035810][ T9114] xt_policy: too many policy elements [ 119.043206][ T9128] loop5: detected capacity change from 0 to 512 [ 119.493308][ T9190] program syz.2.1814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.551578][ T9201] loop3: detected capacity change from 0 to 2048 [ 119.567120][ T9197] tipc: Resetting bearer [ 119.701991][ T9213] loop2: detected capacity change from 0 to 512 [ 119.739846][ T9197] tipc: Enabling of bearer rejected, already enabled [ 119.787176][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 119.808054][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 119.870763][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 119.909194][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 119.971551][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1826'. [ 119.983874][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 120.004249][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 120.151779][ T9282] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 120.158355][ T9282] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.165957][ T9282] vhci_hcd vhci_hcd.0: Device attached [ 120.173465][ T9289] loop2: detected capacity change from 0 to 1024 [ 120.179187][ T9286] vhci_hcd: connection closed [ 120.180310][ T51] vhci_hcd: stop threads [ 120.189456][ T51] vhci_hcd: release socket [ 120.192179][ T9289] EXT4-fs: Ignoring removed nobh option [ 120.193932][ T51] vhci_hcd: disconnect device [ 120.199509][ T9289] EXT4-fs: Ignoring removed bh option [ 120.220521][ T9285] program syz.0.1835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.277985][ T9295] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 120.299293][ T9294] lo speed is unknown, defaulting to 1000 [ 120.305271][ T9297] syzkaller1: entered promiscuous mode [ 120.310817][ T9297] syzkaller1: entered allmulticast mode [ 120.467728][ T9322] loop2: detected capacity change from 0 to 256 [ 120.490016][ T9322] SELinux: syz.2.1848 (9322) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 120.511459][ T9324] loop3: detected capacity change from 0 to 2048 [ 120.614135][ T9330] loop2: detected capacity change from 0 to 512 [ 120.806327][ T9344] loop5: detected capacity change from 0 to 2048 [ 121.175010][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 121.175028][ T29] audit: type=1400 audit(121.152:7907): avc: denied { setopt } for pid=9357 comm="syz.2.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.207199][ T9358] loop2: detected capacity change from 0 to 1024 [ 121.247890][ T9362] loop4: detected capacity change from 0 to 1024 [ 121.254990][ T29] audit: type=1326 audit(121.222:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 121.255340][ T9365] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 121.278081][ T29] audit: type=1326 audit(121.222:7909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 121.284758][ T9365] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.307531][ T29] audit: type=1326 audit(121.222:7910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 121.315067][ T9365] vhci_hcd vhci_hcd.0: Device attached [ 121.337717][ T29] audit: type=1326 audit(121.242:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 121.344365][ T9362] EXT4-fs: Ignoring removed nobh option [ 121.365999][ T29] audit: type=1326 audit(121.242:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe53936d290 code=0x7ffc0000 [ 121.371638][ T9362] EXT4-fs: Ignoring removed bh option [ 121.394456][ T29] audit: type=1326 audit(121.242:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe539370157 code=0x7ffc0000 [ 121.408170][ T9358] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 121.422675][ T29] audit: type=1326 audit(121.242:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 121.453711][ T29] audit: type=1326 audit(121.242:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe539370157 code=0x7ffc0000 [ 121.476689][ T29] audit: type=1326 audit(121.242:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe53936d58a code=0x7ffc0000 [ 121.499373][ T9367] vhci_hcd: connection closed [ 121.499915][ T3451] vhci_hcd: stop threads [ 121.508997][ T3451] vhci_hcd: release socket [ 121.513559][ T3451] vhci_hcd: disconnect device [ 121.686487][ T1035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1035 comm=kworker/0:2 [ 121.774163][ T9395] team0: Port device vlan0 removed [ 121.787501][ T12] tipc: Resetting bearer [ 121.824230][ T9395] team0: Port device vlan0 added [ 121.834227][ T9395] tipc: Enabling of bearer rejected, already enabled [ 122.080963][ T9426] loop3: detected capacity change from 0 to 256 [ 122.093047][ T9426] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.155136][ T9424] team0: Port device vlan0 removed [ 122.169364][ T1397] tipc: Resetting bearer [ 122.221869][ T9424] team0: Port device vlan0 added [ 122.230820][ T9424] tipc: Enabling of bearer rejected, already enabled [ 122.269533][ T9433] syz_tun: left allmulticast mode [ 122.273592][ T9439] loop5: detected capacity change from 0 to 1024 [ 122.274681][ T9433] syz_tun: left promiscuous mode [ 122.282100][ T9439] EXT4-fs: Ignoring removed i_version option [ 122.286118][ T9433] bridge0: port 3(syz_tun) entered disabled state [ 122.301110][ T9433] bridge_slave_0: left allmulticast mode [ 122.306823][ T9433] bridge_slave_0: left promiscuous mode [ 122.312609][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.323011][ T9433] bridge_slave_1: left allmulticast mode [ 122.328823][ T9433] bridge_slave_1: left promiscuous mode [ 122.334588][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.343259][ T9433] bond0: (slave bond_slave_0): Releasing backup interface [ 122.352923][ T9433] bond0: (slave bond_slave_1): Releasing backup interface [ 122.362589][ T9433] team0: Port device team_slave_0 removed [ 122.370651][ T9433] team0: Port device team_slave_1 removed [ 122.376638][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.384871][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.394209][ T9442] vlan0: entered promiscuous mode [ 122.425437][ T9433] tipc: Started in network mode [ 122.430432][ T9433] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 122.437699][ T9433] tipc: Enabled bearer , priority 0 [ 122.466361][ T4871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 122.490996][ T4871] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 122.503484][ T9448] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 122.510068][ T9448] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.517638][ T9448] vhci_hcd vhci_hcd.0: Device attached [ 122.553361][ T9449] vhci_hcd: connection closed [ 122.560216][ T51] vhci_hcd: stop threads [ 122.569225][ T51] vhci_hcd: release socket [ 122.573657][ T51] vhci_hcd: disconnect device [ 122.641163][ T9458] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 122.647745][ T9458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.655401][ T9458] vhci_hcd vhci_hcd.0: Device attached [ 122.666084][ T9460] vhci_hcd: connection closed [ 122.666261][ T12] vhci_hcd: stop threads [ 122.671421][ T9462] loop4: detected capacity change from 0 to 1024 [ 122.675359][ T12] vhci_hcd: release socket [ 122.675369][ T12] vhci_hcd: disconnect device [ 122.684183][ T9457] lo speed is unknown, defaulting to 1000 [ 122.689637][ T9462] EXT4-fs: Ignoring removed nobh option [ 122.702430][ T9462] EXT4-fs: Ignoring removed bh option [ 122.791071][ T9467] loop4: detected capacity change from 0 to 1024 [ 122.801185][ T9467] EXT4-fs: Ignoring removed i_version option [ 122.870176][ T9475] loop2: detected capacity change from 0 to 512 [ 122.920693][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 122.936653][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 123.072773][ T3373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3373 comm=kworker/1:3 [ 123.282265][ T9507] lo speed is unknown, defaulting to 1000 [ 123.379971][ T9513] loop5: detected capacity change from 0 to 1024 [ 123.390007][ T9513] EXT4-fs: Ignoring removed i_version option [ 123.449142][ T1035] tipc: Node number set to 11578026 [ 123.468578][ T9519] __nla_validate_parse: 13 callbacks suppressed [ 123.468591][ T9519] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1908'. [ 123.521291][ T4871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 123.538978][ T4871] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 123.649507][ T9535] program syz.5.1913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.683027][ T9537] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1914'. [ 123.748621][ T9542] lo speed is unknown, defaulting to 1000 [ 123.836241][ T9551] loop3: detected capacity change from 0 to 512 [ 123.873627][ T9539] team0: Port device vlan0 removed [ 123.890819][ T1397] tipc: Resetting bearer [ 123.899531][ T9552] team0: Port device vlan0 added [ 123.921302][ T9563] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1920'. [ 123.930521][ T9539] tipc: Enabling of bearer rejected, already enabled [ 123.990401][ T9565] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.046418][ T9565] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.077358][ T9581] program syz.2.1926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.088321][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1921'. [ 124.097404][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1921'. [ 124.107902][ T9583] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1927'. [ 124.121293][ T9579] loop5: detected capacity change from 0 to 164 [ 124.143825][ T9579] syz.5.1921: attempt to access beyond end of device [ 124.143825][ T9579] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 124.162052][ T9579] syz.5.1921: attempt to access beyond end of device [ 124.162052][ T9579] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 124.163800][ T9565] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.265384][ T9565] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.326970][ T9565] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.341674][ T9565] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.355457][ T9565] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.383918][ T9565] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.421092][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1930'. [ 124.545497][ T9618] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1939'. [ 124.571548][ T9604] tipc: Enabling of bearer rejected, already enabled [ 124.598061][ T9625] loop4: detected capacity change from 0 to 1024 [ 124.605406][ T9625] EXT4-fs: Ignoring removed nobh option [ 124.611154][ T9625] EXT4-fs: Ignoring removed bh option [ 124.661885][ T9632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1943'. [ 124.700755][ T9634] loop4: detected capacity change from 0 to 1024 [ 124.782891][ T9651] loop5: detected capacity change from 0 to 512 [ 124.824521][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1952'. [ 124.911491][ T9666] tipc: Resetting bearer [ 124.980005][ T9680] loop3: detected capacity change from 0 to 512 [ 125.018906][ T9687] loop4: detected capacity change from 0 to 1024 [ 125.053439][ T9691] loop2: detected capacity change from 0 to 1024 [ 125.060293][ T9691] EXT4-fs: Ignoring removed nobh option [ 125.065897][ T9691] EXT4-fs: Ignoring removed bh option [ 125.316301][ T9700] SELinux: failed to load policy [ 125.491769][ T9713] Invalid ELF header type: 3 != 1 [ 125.497988][ T9713] Invalid ELF header type: 3 != 1 [ 125.503497][ T9713] Invalid ELF header type: 2 != 1 [ 125.514825][ T9713] Invalid ELF header type: 3 != 1 [ 125.572921][ T9717] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 125.579567][ T9717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.587107][ T9717] vhci_hcd vhci_hcd.0: Device attached [ 125.623330][ T9720] vhci_hcd: connection closed [ 125.623576][ T12] vhci_hcd: stop threads [ 125.632647][ T12] vhci_hcd: release socket [ 125.637163][ T12] vhci_hcd: disconnect device [ 125.750991][ T9730] loop3: detected capacity change from 0 to 1024 [ 125.759954][ T9730] EXT4-fs: Ignoring removed nobh option [ 125.765611][ T9730] EXT4-fs: Ignoring removed bh option [ 125.768111][ T9731] FAULT_INJECTION: forcing a failure. [ 125.768111][ T9731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.784173][ T9731] CPU: 0 UID: 0 PID: 9731 Comm: syz.0.1969 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 125.784206][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.784222][ T9731] Call Trace: [ 125.784235][ T9731] [ 125.784254][ T9731] __dump_stack+0x1d/0x30 [ 125.784281][ T9731] dump_stack_lvl+0xe8/0x140 [ 125.784302][ T9731] dump_stack+0x15/0x1b [ 125.784321][ T9731] should_fail_ex+0x265/0x280 [ 125.784363][ T9731] should_fail+0xb/0x20 [ 125.784392][ T9731] should_fail_usercopy+0x1a/0x20 [ 125.784426][ T9731] _copy_to_user+0x20/0xa0 [ 125.784453][ T9731] pagemap_read+0x379/0x5e0 [ 125.784554][ T9731] ? __pfx_pagemap_read+0x10/0x10 [ 125.784594][ T9731] vfs_read+0x19d/0x6f0 [ 125.784685][ T9731] ? __rcu_read_unlock+0x4f/0x70 [ 125.784711][ T9731] ? __fget_files+0x184/0x1c0 [ 125.784740][ T9731] __x64_sys_pread64+0xfd/0x150 [ 125.784774][ T9731] x64_sys_call+0x296d/0x2fb0 [ 125.784799][ T9731] do_syscall_64+0xd2/0x200 [ 125.784851][ T9731] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.784875][ T9731] ? clear_bhb_loop+0x40/0x90 [ 125.784948][ T9731] ? clear_bhb_loop+0x40/0x90 [ 125.784973][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.784994][ T9731] RIP: 0033:0x7fc76658e929 [ 125.785008][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.785073][ T9731] RSP: 002b:00007fc764bd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 125.785090][ T9731] RAX: ffffffffffffffda RBX: 00007fc7667b6080 RCX: 00007fc76658e929 [ 125.785102][ T9731] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000009 [ 125.785117][ T9731] RBP: 00007fc764bd6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.785132][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.785146][ T9731] R13: 0000000000000000 R14: 00007fc7667b6080 R15: 00007ffdd21f8ae8 [ 125.785167][ T9731] [ 126.085564][ T9741] lo speed is unknown, defaulting to 1000 [ 126.163957][ T9751] loop4: detected capacity change from 0 to 1024 [ 126.170911][ T9751] EXT4-fs: Ignoring removed i_version option [ 126.189776][ T9754] loop2: detected capacity change from 0 to 2048 [ 126.211885][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 126.211901][ T29] audit: type=1326 audit(126.192:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.2.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 126.241089][ T29] audit: type=1326 audit(126.192:8109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.2.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 126.265077][ T29] audit: type=1326 audit(126.192:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 126.288293][ T29] audit: type=1326 audit(126.192:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 126.311180][ T29] audit: type=1326 audit(126.192:8112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 126.334164][ T29] audit: type=1326 audit(126.192:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 126.334344][ T9761] loop3: detected capacity change from 0 to 2048 [ 126.357041][ T29] audit: type=1326 audit(126.192:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 126.386197][ T29] audit: type=1326 audit(126.192:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9752 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 126.409084][ T29] audit: type=1326 audit(126.192:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.2.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 126.431987][ T29] audit: type=1326 audit(126.192:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.2.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53936e929 code=0x7ffc0000 [ 126.464274][ T9763] FAULT_INJECTION: forcing a failure. [ 126.464274][ T9763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.473118][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 126.477938][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.5.1980 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 126.477978][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.477997][ T9763] Call Trace: [ 126.478005][ T9763] [ 126.478067][ T9763] __dump_stack+0x1d/0x30 [ 126.478094][ T9763] dump_stack_lvl+0xe8/0x140 [ 126.478122][ T9763] dump_stack+0x15/0x1b [ 126.478183][ T9763] should_fail_ex+0x265/0x280 [ 126.478227][ T9763] should_fail+0xb/0x20 [ 126.478362][ T9763] should_fail_usercopy+0x1a/0x20 [ 126.478408][ T9763] _copy_from_iter+0xcf/0xe40 [ 126.478453][ T9763] ? __build_skb_around+0x1a0/0x200 [ 126.478568][ T9763] ? __alloc_skb+0x223/0x320 [ 126.478612][ T9763] netlink_sendmsg+0x471/0x6b0 [ 126.478643][ T9763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.478671][ T9763] __sock_sendmsg+0x145/0x180 [ 126.478708][ T9763] ____sys_sendmsg+0x31e/0x4e0 [ 126.478776][ T9763] ___sys_sendmsg+0x17b/0x1d0 [ 126.478912][ T9763] __x64_sys_sendmsg+0xd4/0x160 [ 126.479024][ T9763] x64_sys_call+0x2999/0x2fb0 [ 126.479087][ T9763] do_syscall_64+0xd2/0x200 [ 126.479166][ T9763] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 126.479234][ T9763] ? clear_bhb_loop+0x40/0x90 [ 126.479263][ T9763] ? clear_bhb_loop+0x40/0x90 [ 126.479314][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.479419][ T9763] RIP: 0033:0x7f4d25dce929 [ 126.479502][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.479527][ T9763] RSP: 002b:00007f4d24437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.479553][ T9763] RAX: ffffffffffffffda RBX: 00007f4d25ff5fa0 RCX: 00007f4d25dce929 [ 126.479571][ T9763] RDX: 0000000000040804 RSI: 0000200000000180 RDI: 0000000000000003 [ 126.479588][ T9763] RBP: 00007f4d24437090 R08: 0000000000000000 R09: 0000000000000000 [ 126.479676][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.479691][ T9763] R13: 0000000000000000 R14: 00007f4d25ff5fa0 R15: 00007ffddadca398 [ 126.479734][ T9763] [ 126.604135][ T9757] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 88: padding at end of block bitmap is not set [ 126.617824][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 126.725521][ T9768] team0: Port device vlan0 removed [ 126.744596][ T9773] team0: Port device vlan0 added [ 126.769264][ T9777] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 126.776252][ T9777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.785165][ T9777] vhci_hcd vhci_hcd.0: Device attached [ 126.797115][ T9780] vhci_hcd: connection closed [ 126.797390][ T3451] vhci_hcd: stop threads [ 126.809403][ T3451] vhci_hcd: release socket [ 126.810672][ T9765] tipc: Enabling of bearer rejected, already enabled [ 126.813963][ T3451] vhci_hcd: disconnect device [ 126.891593][ T9787] loop5: detected capacity change from 0 to 1024 [ 126.899389][ T9787] EXT4-fs: Ignoring removed nobh option [ 126.905024][ T9787] EXT4-fs: Ignoring removed bh option [ 127.330170][ T9803] xt_hashlimit: max too large, truncated to 1048576 [ 127.337370][ T9803] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 127.494081][ T9832] loop3: detected capacity change from 0 to 2048 [ 127.692396][ T9844] team0: Port device vlan0 removed [ 127.705257][ T37] tipc: Resetting bearer [ 127.728897][ T9844] team0: Port device vlan0 added [ 127.736399][ T9844] tipc: Enabling of bearer rejected, already enabled [ 127.763042][ T9833] FAULT_INJECTION: forcing a failure. [ 127.763042][ T9833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.776436][ T9833] CPU: 0 UID: 0 PID: 9833 Comm: syz.0.1999 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 127.776472][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.776488][ T9833] Call Trace: [ 127.776554][ T9833] [ 127.776561][ T9833] __dump_stack+0x1d/0x30 [ 127.776586][ T9833] dump_stack_lvl+0xe8/0x140 [ 127.776611][ T9833] dump_stack+0x15/0x1b [ 127.776632][ T9833] should_fail_ex+0x265/0x280 [ 127.776714][ T9833] should_fail+0xb/0x20 [ 127.776823][ T9833] should_fail_usercopy+0x1a/0x20 [ 127.776858][ T9833] _copy_to_user+0x20/0xa0 [ 127.776880][ T9833] simple_read_from_buffer+0xb5/0x130 [ 127.776920][ T9833] proc_fail_nth_read+0x100/0x140 [ 127.776957][ T9833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.776996][ T9833] vfs_read+0x19d/0x6f0 [ 127.777027][ T9833] ? __rcu_read_unlock+0x4f/0x70 [ 127.777050][ T9833] ? __fget_files+0x184/0x1c0 [ 127.777073][ T9833] ksys_read+0xda/0x1a0 [ 127.777156][ T9833] __x64_sys_read+0x40/0x50 [ 127.777189][ T9833] x64_sys_call+0x2d77/0x2fb0 [ 127.777244][ T9833] do_syscall_64+0xd2/0x200 [ 127.777261][ T9833] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.777288][ T9833] ? clear_bhb_loop+0x40/0x90 [ 127.777310][ T9833] ? clear_bhb_loop+0x40/0x90 [ 127.777347][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.777392][ T9833] RIP: 0033:0x7fc76658d33c [ 127.777407][ T9833] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.777424][ T9833] RSP: 002b:00007fc764bd6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.777589][ T9833] RAX: ffffffffffffffda RBX: 00007fc7667b6080 RCX: 00007fc76658d33c [ 127.777601][ T9833] RDX: 000000000000000f RSI: 00007fc764bd60a0 RDI: 000000000000000d [ 127.777613][ T9833] RBP: 00007fc764bd6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.777624][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.777636][ T9833] R13: 0000000000000000 R14: 00007fc7667b6080 R15: 00007ffdd21f8ae8 [ 127.777654][ T9833] [ 128.121108][ T9863] loop2: detected capacity change from 0 to 512 [ 128.232349][ T9875] loop3: detected capacity change from 0 to 1024 [ 128.239264][ T9875] EXT4-fs: Ignoring removed nobh option [ 128.244874][ T9875] EXT4-fs: Ignoring removed bh option [ 128.322176][ T9884] loop3: detected capacity change from 0 to 1024 [ 128.362154][ T9888] lo speed is unknown, defaulting to 1000 [ 128.421961][ T9897] lo speed is unknown, defaulting to 1000 [ 128.495769][ T9901] loop3: detected capacity change from 0 to 128 [ 128.516379][ T9901] ext4: Unknown parameter 'euid<00000000000000060929' [ 128.605670][ T9907] loop3: detected capacity change from 0 to 512 [ 128.660246][ T9915] __nla_validate_parse: 6 callbacks suppressed [ 128.660265][ T9915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2026'. [ 128.740262][ T9918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 128.746910][ T9918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.754921][ T9918] vhci_hcd vhci_hcd.0: Device attached [ 128.785989][ T9919] vhci_hcd: connection closed [ 128.786134][ T1397] vhci_hcd: stop threads [ 128.795301][ T1397] vhci_hcd: release socket [ 128.799762][ T1397] vhci_hcd: disconnect device [ 128.813645][ T9924] loop4: detected capacity change from 0 to 1024 [ 128.835117][ T9924] EXT4-fs: Ignoring removed i_version option [ 128.894351][ T9937] program syz.2.2033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.935362][ T9939] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2034'. [ 128.948236][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 128.970601][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 129.037408][ T9949] loop3: detected capacity change from 0 to 512 [ 129.048928][ T9943] loop5: detected capacity change from 0 to 1024 [ 129.080970][ T9956] loop4: detected capacity change from 0 to 256 [ 129.089181][ T9956] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.244567][ T9968] loop5: detected capacity change from 0 to 1024 [ 129.253843][ T9968] EXT4-fs: Ignoring removed nobh option [ 129.259554][ T9968] EXT4-fs: Ignoring removed bh option [ 129.318491][ T9974] program syz.0.2045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.574836][T10002] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2054'. [ 129.722484][T10012] program syz.3.2058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.775477][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2060'. [ 129.783409][T10021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2062'. [ 129.865377][T10027] loop2: detected capacity change from 0 to 1024 [ 129.884251][T10025] lo speed is unknown, defaulting to 1000 [ 130.154301][T10053] program syz.3.2072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.243520][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2074'. [ 130.303622][T10062] loop2: detected capacity change from 0 to 128 [ 130.313486][T10062] ext4: Unknown parameter 'euid<00000000000000060929' [ 130.423656][T10067] loop2: detected capacity change from 0 to 1024 [ 130.468075][T10067] EXT4-fs: Ignoring removed nobh option [ 130.473746][T10067] EXT4-fs: Ignoring removed bh option [ 130.553450][T10081] program syz.5.2083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.641539][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2085'. [ 130.677855][T10091] loop2: detected capacity change from 0 to 2048 [ 130.715611][T10093] loop3: detected capacity change from 0 to 1024 [ 130.722360][T10097] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 130.728946][T10097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.736489][T10097] vhci_hcd vhci_hcd.0: Device attached [ 130.748730][T10099] vhci_hcd: connection closed [ 130.750197][ T3451] vhci_hcd: stop threads [ 130.759450][ T3451] vhci_hcd: release socket [ 130.763885][ T3451] vhci_hcd: disconnect device [ 130.770103][T10093] EXT4-fs mount: 158 callbacks suppressed [ 130.770114][T10093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.789643][T10091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.888495][T10075] SELinux: failed to load policy [ 130.961068][T10108] Invalid ELF header type: 3 != 1 [ 130.967517][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.967713][T10108] Invalid ELF header type: 3 != 1 [ 130.984155][T10108] Invalid ELF header type: 2 != 1 [ 130.989871][T10108] Invalid ELF header type: 3 != 1 [ 131.018927][T10112] loop4: detected capacity change from 0 to 512 [ 131.031216][T10112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.285428][T10122] loop5: detected capacity change from 0 to 1024 [ 131.292542][T10122] EXT4-fs: Ignoring removed nobh option [ 131.298211][T10122] EXT4-fs: Ignoring removed bh option [ 131.311367][T10122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.324888][T10122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.360840][T10131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2095'. [ 131.392073][T10136] FAULT_INJECTION: forcing a failure. [ 131.392073][T10136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.405222][T10136] CPU: 0 UID: 0 PID: 10136 Comm: syz.5.2097 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 131.405258][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.405366][T10136] Call Trace: [ 131.405374][T10136] [ 131.405381][T10136] __dump_stack+0x1d/0x30 [ 131.405406][T10136] dump_stack_lvl+0xe8/0x140 [ 131.405471][T10136] dump_stack+0x15/0x1b [ 131.405565][T10136] should_fail_ex+0x265/0x280 [ 131.405671][T10136] should_fail+0xb/0x20 [ 131.405706][T10136] should_fail_usercopy+0x1a/0x20 [ 131.405747][T10136] _copy_from_user+0x1c/0xb0 [ 131.405810][T10136] ___sys_sendmsg+0xc1/0x1d0 [ 131.405887][T10136] __sys_sendmmsg+0x178/0x300 [ 131.405922][T10136] __x64_sys_sendmmsg+0x57/0x70 [ 131.405945][T10136] x64_sys_call+0x2f2f/0x2fb0 [ 131.405972][T10136] do_syscall_64+0xd2/0x200 [ 131.405995][T10136] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.406094][T10136] ? clear_bhb_loop+0x40/0x90 [ 131.406120][T10136] ? clear_bhb_loop+0x40/0x90 [ 131.406156][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.406180][T10136] RIP: 0033:0x7f4d25dce929 [ 131.406219][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.406319][T10136] RSP: 002b:00007f4d24437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.406343][T10136] RAX: ffffffffffffffda RBX: 00007f4d25ff5fa0 RCX: 00007f4d25dce929 [ 131.406358][T10136] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 131.406373][T10136] RBP: 00007f4d24437090 R08: 0000000000000000 R09: 0000000000000000 [ 131.406387][T10136] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 131.406412][T10136] R13: 0000000000000000 R14: 00007f4d25ff5fa0 R15: 00007ffddadca398 [ 131.406434][T10136] [ 131.407774][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.563654][T10141] loop5: detected capacity change from 0 to 1024 [ 131.600057][T10133] tipc: Enabling of bearer rejected, already enabled [ 131.624440][T10141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.696680][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.708626][T10154] loop2: detected capacity change from 0 to 256 [ 131.718430][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2101'. [ 131.732858][T10154] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.747503][T10158] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 131.754108][T10158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.761660][T10158] vhci_hcd vhci_hcd.0: Device attached [ 131.796130][T10159] vhci_hcd: connection closed [ 131.796402][ T51] vhci_hcd: stop threads [ 131.805480][ T51] vhci_hcd: release socket [ 131.809945][ T51] vhci_hcd: disconnect device [ 131.821831][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.869783][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2107'. [ 131.895179][T10174] loop5: detected capacity change from 0 to 1024 [ 131.908924][T10174] EXT4-fs: Ignoring removed nobh option [ 131.914589][T10174] EXT4-fs: Ignoring removed bh option [ 131.932699][T10174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.951636][T10174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.973985][T10181] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.998299][T10183] loop3: detected capacity change from 0 to 1024 [ 132.041175][T10183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.055609][T10181] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.077679][T10190] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.101720][T10181] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.131308][T10190] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.151202][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.173782][T10181] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.198762][T10193] loop3: detected capacity change from 0 to 256 [ 132.206335][T10193] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.206582][T10190] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.249767][T10181] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.262155][T10181] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.275785][T10181] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.288151][T10181] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.299000][T10190] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.380574][T10199] loop3: detected capacity change from 0 to 512 [ 132.382318][T10190] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.407838][T10190] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.422714][T10190] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.442667][T10190] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.454570][T10199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.554158][T10212] Invalid ELF header type: 3 != 1 [ 132.574199][T10212] Invalid ELF header type: 3 != 1 [ 132.615606][T10212] Invalid ELF header type: 2 != 1 [ 132.621276][T10212] Invalid ELF header type: 3 != 1 [ 132.727329][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 132.727343][ T29] audit: type=1326 audit(132.692:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 132.756739][ T29] audit: type=1326 audit(132.692:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 132.779763][ T29] audit: type=1326 audit(132.702:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 132.802823][ T29] audit: type=1326 audit(132.702:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 132.825823][ T29] audit: type=1326 audit(132.702:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 132.848639][ T29] audit: type=1326 audit(132.702:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 132.869923][T10232] loop5: detected capacity change from 0 to 2048 [ 132.872115][ T29] audit: type=1326 audit(132.702:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 132.901344][ T29] audit: type=1326 audit(132.702:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 132.924864][T10228] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 132.931438][T10228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.939051][T10228] vhci_hcd vhci_hcd.0: Device attached [ 132.947458][T10232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.963306][T10233] vhci_hcd: connection closed [ 132.963469][ T12] vhci_hcd: stop threads [ 132.972516][ T12] vhci_hcd: release socket [ 132.977036][ T12] vhci_hcd: disconnect device [ 133.003667][ T29] audit: type=1326 audit(132.972:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 133.026665][ T29] audit: type=1326 audit(132.972:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d25dce929 code=0x7ffc0000 [ 133.058378][T10239] Invalid ELF header type: 3 != 1 [ 133.064606][T10239] Invalid ELF header type: 3 != 1 [ 133.070321][T10239] Invalid ELF header type: 2 != 1 [ 133.076635][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.104740][T10239] Invalid ELF header type: 3 != 1 [ 133.147434][T10241] bridge0: port 1(syz_tun) entered blocking state [ 133.154088][T10241] bridge0: port 1(syz_tun) entered disabled state [ 133.162406][T10241] syz_tun: entered allmulticast mode [ 133.168222][T10241] syz_tun: entered promiscuous mode [ 133.223916][T10247] loop4: detected capacity change from 0 to 512 [ 133.250577][T10247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.312809][T10255] loop3: detected capacity change from 0 to 2048 [ 133.340251][T10255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.473791][T10259] program syz.2.2131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.506938][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.570290][T10271] lo speed is unknown, defaulting to 1000 [ 133.583392][T10273] loop5: detected capacity change from 0 to 512 [ 133.592623][T10273] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.2136: bad orphan inode 15 [ 133.603522][T10273] ext4_test_bit(bit=14, block=5) = 0 [ 133.618553][T10273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.632145][T10273] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.712932][T10281] __nla_validate_parse: 7 callbacks suppressed [ 133.712957][T10281] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2136'. [ 133.748181][T10282] loop2: detected capacity change from 0 to 128 [ 133.758681][T10282] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.773637][T10282] ./file0: Can't lookup blockdev [ 133.787892][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.885544][T10287] loop4: detected capacity change from 0 to 2048 [ 133.911138][T10287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.078624][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.100581][T10292] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 134.107159][T10292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.114760][T10292] vhci_hcd vhci_hcd.0: Device attached [ 134.123310][T10293] vhci_hcd: connection closed [ 134.123483][ T37] vhci_hcd: stop threads [ 134.132491][ T37] vhci_hcd: release socket [ 134.136951][ T37] vhci_hcd: disconnect device [ 134.442433][T10299] lo speed is unknown, defaulting to 1000 [ 134.578636][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.607438][T10305] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 134.614019][T10305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.621641][T10305] vhci_hcd vhci_hcd.0: Device attached [ 134.642778][T10308] loop5: detected capacity change from 0 to 2048 [ 134.667797][T10306] vhci_hcd: connection closed [ 134.668087][ T51] vhci_hcd: stop threads [ 134.679014][ T51] vhci_hcd: release socket [ 134.683486][ T51] vhci_hcd: disconnect device [ 134.699762][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.723159][T10308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.748450][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2145'. [ 134.757569][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2145'. [ 134.802819][T10315] loop3: detected capacity change from 0 to 164 [ 134.835058][T10318] loop4: detected capacity change from 0 to 256 [ 134.850182][T10318] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.921686][T10320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2147'. [ 134.999833][T10326] loop3: detected capacity change from 0 to 1024 [ 135.008947][T10326] EXT4-fs: Ignoring removed i_version option [ 135.033209][T10326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.101104][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 135.116878][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 135.131165][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.185446][T10333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2152'. [ 135.253937][T10342] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 135.262815][T10342] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.369068][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.585169][T10357] loop5: detected capacity change from 0 to 1024 [ 135.601714][T10361] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 135.607479][T10357] EXT4-fs: Ignoring removed i_version option [ 135.608310][T10361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.621989][T10361] vhci_hcd vhci_hcd.0: Device attached [ 135.650029][T10362] vhci_hcd: connection closed [ 135.650276][ T1397] vhci_hcd: stop threads [ 135.659451][ T1397] vhci_hcd: release socket [ 135.663905][ T1397] vhci_hcd: disconnect device [ 135.675729][T10357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.698615][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2164'. [ 135.790053][ T4871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 135.812713][ T4871] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 135.831234][T10378] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2169'. [ 135.851888][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.936613][T10390] loop4: detected capacity change from 0 to 1024 [ 135.948190][T10390] EXT4-fs: Ignoring removed nobh option [ 135.953954][T10390] EXT4-fs: Ignoring removed bh option [ 135.981481][T10390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.998560][T10390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.083082][T10409] loop4: detected capacity change from 0 to 256 [ 136.100508][T10409] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.121319][T10408] loop3: detected capacity change from 0 to 512 [ 136.171794][T10408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.198450][T10404] FAULT_INJECTION: forcing a failure. [ 136.198450][T10404] name failslab, interval 1, probability 0, space 0, times 0 [ 136.211170][T10404] CPU: 1 UID: 0 PID: 10404 Comm: syz.5.2177 Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 136.211198][T10404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.211310][T10404] Call Trace: [ 136.211317][T10404] [ 136.211324][T10404] __dump_stack+0x1d/0x30 [ 136.211347][T10404] dump_stack_lvl+0xe8/0x140 [ 136.211367][T10404] dump_stack+0x15/0x1b [ 136.211384][T10404] should_fail_ex+0x265/0x280 [ 136.211447][T10404] should_failslab+0x8c/0xb0 [ 136.211484][T10404] kmem_cache_alloc_node_noprof+0x57/0x320 [ 136.211513][T10404] ? __alloc_skb+0x101/0x320 [ 136.211676][T10404] __alloc_skb+0x101/0x320 [ 136.211711][T10404] ? audit_log_start+0x365/0x6c0 [ 136.211745][T10404] audit_log_start+0x380/0x6c0 [ 136.211782][T10404] audit_seccomp+0x48/0x100 [ 136.211811][T10404] ? __seccomp_filter+0x68c/0x10d0 [ 136.211857][T10404] __seccomp_filter+0x69d/0x10d0 [ 136.211883][T10404] ? hrtimer_nanosleep+0x194/0x280 [ 136.211908][T10404] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 136.211940][T10404] __secure_computing+0x82/0x150 [ 136.211964][T10404] syscall_trace_enter+0xcf/0x1e0 [ 136.211990][T10404] do_syscall_64+0xac/0x200 [ 136.212008][T10404] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.212083][T10404] ? clear_bhb_loop+0x40/0x90 [ 136.212187][T10404] ? clear_bhb_loop+0x40/0x90 [ 136.212236][T10404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.212258][T10404] RIP: 0033:0x7f4d25dcd33c [ 136.212273][T10404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 136.212292][T10404] RSP: 002b:00007f4d24437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.212391][T10404] RAX: ffffffffffffffda RBX: 00007f4d25ff5fa0 RCX: 00007f4d25dcd33c [ 136.212404][T10404] RDX: 000000000000000f RSI: 00007f4d244370a0 RDI: 0000000000000005 [ 136.212416][T10404] RBP: 00007f4d24437090 R08: 0000000000000000 R09: 0000000000000000 [ 136.212428][T10404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.212440][T10404] R13: 0000000000000000 R14: 00007f4d25ff5fa0 R15: 00007ffddadca398 [ 136.212530][T10404] [ 136.454469][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.511414][T10420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2183'. [ 136.627012][T10418] netlink: 'syz.3.2182': attribute type 27 has an invalid length. [ 136.639185][T10418] vlan0: left promiscuous mode [ 136.669507][T10418] bridge0: port 1(syz_tun) entered blocking state [ 136.676090][T10418] bridge0: port 1(syz_tun) entered forwarding state [ 136.686173][T10418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.695008][T10418] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.703680][T10418] tipc: Resetting bearer [ 136.711991][T10418] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 136.730502][T10427] tipc: Enabling of bearer rejected, already enabled [ 136.803896][T10438] loop2: detected capacity change from 0 to 2048 [ 136.830913][T10438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.212001][T10456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2194'. [ 137.404501][T10465] lo speed is unknown, defaulting to 1000 [ 137.506875][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.625693][T10472] loop5: detected capacity change from 0 to 2048 [ 137.666115][T10472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.716735][T10475] syz_tun: left allmulticast mode [ 137.721886][T10475] syz_tun: left promiscuous mode [ 137.727135][T10475] bridge0: port 1(syz_tun) entered disabled state [ 137.741345][T10484] loop2: detected capacity change from 0 to 1024 [ 137.748337][T10484] EXT4-fs: Ignoring removed nobh option [ 137.754166][T10484] EXT4-fs: Ignoring removed bh option [ 137.763370][T10475] tipc: Resetting bearer [ 137.795816][T10475] vlan0: entered promiscuous mode [ 137.798241][T10484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.802143][T10475] tipc: Enabling of bearer rejected, already enabled [ 137.825747][T10486] loop4: detected capacity change from 0 to 256 [ 137.827138][T10484] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.854486][T10486] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.872136][T10496] binfmt_misc: register: failed to install interpreter file ./file2 [ 137.953622][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 137.953637][ T29] audit: type=1326 audit(137.932:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 137.983980][ T29] audit: type=1326 audit(137.932:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 138.006950][ T29] audit: type=1326 audit(137.932:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 138.030033][ T29] audit: type=1326 audit(137.932:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 138.040729][T10496] netlink: 'syz.0.2204': attribute type 21 has an invalid length. [ 138.053002][ T29] audit: type=1326 audit(137.932:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 138.060835][T10496] netlink: 'syz.0.2204': attribute type 1 has an invalid length. [ 138.060852][T10496] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2204'. [ 138.092919][ T29] audit: type=1326 audit(137.992:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10500 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503ddae929 code=0x7ffc0000 [ 138.158933][T10506] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 138.165520][T10506] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.173188][T10506] vhci_hcd vhci_hcd.0: Device attached [ 138.187554][T10509] vhci_hcd: connection closed [ 138.187739][ T3451] vhci_hcd: stop threads [ 138.196913][ T3451] vhci_hcd: release socket [ 138.201375][ T3451] vhci_hcd: disconnect device [ 138.213301][T10496] lo speed is unknown, defaulting to 1000 [ 138.222025][T10513] loop4: detected capacity change from 0 to 256 [ 138.232184][T10513] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.343364][ T4871] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.540866][ T29] audit: type=1326 audit(138.522:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f0c6e929 code=0x7ffc0000 [ 138.563954][ T29] audit: type=1326 audit(138.522:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd1f0c6e929 code=0x7ffc0000 [ 138.587904][ T29] audit: type=1326 audit(138.552:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f0c6e929 code=0x7ffc0000 [ 138.611152][ T29] audit: type=1326 audit(138.552:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10540 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f0c6e929 code=0x7ffc0000 [ 138.737195][T10562] loop4: detected capacity change from 0 to 2048 [ 138.761546][T10562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.825733][T10574] Invalid ELF header type: 3 != 1 [ 138.831858][T10574] Invalid ELF header type: 3 != 1 [ 138.837362][T10574] Invalid ELF header type: 2 != 1 [ 138.844313][T10574] Invalid ELF header type: 3 != 1 [ 138.896693][T10578] loop3: detected capacity change from 0 to 256 [ 138.903990][T10578] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.983548][T10584] loop2: detected capacity change from 0 to 128 [ 138.990798][T10584] FAT-fs (loop2): bogus number of FAT sectors [ 138.997005][T10584] FAT-fs (loop2): Can't find a valid FAT filesystem [ 139.540211][T10613] netlink: 'syz.0.2244': attribute type 1 has an invalid length. [ 139.639105][T10613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.735780][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.767417][T10616] veth3: entered promiscuous mode [ 139.792809][T10614] loop3: detected capacity change from 0 to 2048 [ 139.817976][T10616] bond1: (slave veth3): Enslaving as an active interface with a down link [ 139.948789][T10613] vlan2: entered allmulticast mode [ 139.954033][T10613] bond1: entered allmulticast mode [ 140.031648][T10613] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 140.054009][T10622] Invalid ELF header type: 3 != 1 [ 140.060639][ T2995] ================================================================== [ 140.068753][ T2995] BUG: KCSAN: data-race in dont_mount / step_into [ 140.075214][ T2995] [ 140.077550][ T2995] read-write to 0xffff888119ca7f00 of 4 bytes by task 3299 on cpu 0: [ 140.085620][ T2995] dont_mount+0x2a/0x40 [ 140.089806][ T2995] vfs_unlink+0x28f/0x420 [ 140.094152][ T2995] do_unlinkat+0x28e/0x4c0 [ 140.098621][ T2995] __x64_sys_unlink+0x2e/0x40 [ 140.103325][ T2995] x64_sys_call+0x22a6/0x2fb0 [ 140.108013][ T2995] do_syscall_64+0xd2/0x200 [ 140.112530][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.118445][ T2995] [ 140.120777][ T2995] read to 0xffff888119ca7f00 of 4 bytes by task 2995 on cpu 1: [ 140.128332][ T2995] step_into+0xe3/0x820 [ 140.132530][ T2995] walk_component+0x162/0x220 [ 140.137220][ T2995] path_lookupat+0xfe/0x2a0 [ 140.141735][ T2995] filename_lookup+0x147/0x340 [ 140.146515][ T2995] do_readlinkat+0x7d/0x320 [ 140.151041][ T2995] __x64_sys_readlink+0x47/0x60 [ 140.155923][ T2995] x64_sys_call+0x2cf3/0x2fb0 [ 140.160613][ T2995] do_syscall_64+0xd2/0x200 [ 140.165128][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.171043][ T2995] [ 140.173373][ T2995] value changed: 0x00300008 -> 0x00004008 [ 140.179097][ T2995] [ 140.181434][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 140.187592][ T2995] CPU: 1 UID: 0 PID: 2995 Comm: udevd Not tainted 6.16.0-rc3-syzkaller-00319-gded779017ad7 #0 PREEMPT(voluntary) [ 140.199591][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.209653][ T2995] ================================================================== [ 140.220584][T10622] Invalid ELF header type: 3 != 1 [ 140.226190][T10622] Invalid ELF header type: 2 != 1 [ 140.233047][T10614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.249757][T10622] Invalid ELF header type: 3 != 1 [ 140.257779][T10620] lo speed is unknown, defaulting to 1000 [ 140.396066][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.