last executing test programs: 30.179898703s ago: executing program 4 (id=984): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="fe4cecb210bc091b104f801f21ddeb4c"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 29.891048487s ago: executing program 4 (id=987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000022b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000022c40)=""/178, 0xb2}, 0x7}], 0x1, 0x40, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setresuid(0x0, 0x0, 0x0) 29.464801914s ago: executing program 4 (id=988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 29.317364257s ago: executing program 4 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = accept4(r1, &(0x7f00000001c0)=@ax25={{0x3, @null}, [@rose, @remote, @bcast, @bcast, @remote, @netrom, @default, @rose]}, 0x0, 0x80800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0xfbc, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xf84, 0x2, [@TCA_BASIC_ACT={0xd44, 0x3, [@m_police={0xcd8, 0xc, 0x0, 0x0, {{0xb}, {0xc30, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0x5, 0x400, 0x3ff, 0x1, 0x7, 0x6, 0x9, 0xfffffffe, 0x6, 0x200, 0x4, 0x7ff, 0x120424fa, 0x5, 0xd71858c, 0x5, 0x0, 0x2, 0x4c, 0x7, 0xc, 0x7, 0x10001, 0x9, 0x42, 0x5, 0x8001, 0x9, 0x8, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x4, 0x2, 0x400, 0x3, 0x200, 0x4, 0x3c, 0x2, 0x5, 0x80000000, 0x0, 0x40, 0x3ee, 0x1, 0x0, 0x6, 0x7, 0x8, 0x4, 0x3, 0xff, 0x5, 0x5, 0x1, 0x3, 0x20000, 0x5f6e, 0x2, 0xfffffffe, 0x401, 0x8, 0x5, 0x2, 0x101, 0x3, 0x9, 0x6, 0x7, 0x5, 0x3, 0x0, 0x5, 0x1fd, 0x4, 0x1400000, 0x7, 0x8, 0x3, 0x2, 0xfffffff1, 0x1, 0x9, 0x0, 0x7, 0x5, 0xfffffff1, 0xfffffffc, 0x2, 0x493fff03, 0xa3f, 0x3, 0x8, 0x273, 0x7, 0x8, 0x8001, 0x2, 0x6, 0xe2, 0x1, 0x250, 0x5, 0x4, 0x6, 0x0, 0x9, 0x9, 0x80000000, 0x101, 0x4, 0x7fffffff, 0x4, 0x432845b8, 0x8, 0x40000000, 0xa4, 0x1000, 0x800, 0x101, 0x9, 0x1, 0x2, 0x4, 0x7, 0x0, 0x0, 0x5, 0x7ff, 0x1, 0x80, 0x1, 0x3, 0x9, 0xfffffffd, 0x2, 0x10d8e5e2, 0x3, 0xde, 0x6, 0x2, 0xd27, 0x4, 0x2, 0x1, 0x6, 0x4, 0xa, 0x2e30, 0x80000000, 0x6, 0xfffffffc, 0xfffffffe, 0x4, 0x8, 0x27c, 0x4, 0x2, 0x5, 0x48000, 0x53, 0x4, 0x5fb, 0x6, 0x7, 0xfffffff7, 0x11, 0x8, 0x6, 0xffffff80, 0x10000, 0x3, 0x3, 0xa1ad, 0x6, 0xefd, 0x0, 0x7ff, 0x5, 0x9, 0x401, 0x46, 0xfffffffa, 0x10001, 0x80000000, 0x9, 0xc4, 0x443, 0x1ff, 0x10, 0xd708, 0x7fffffff, 0x8, 0x5, 0x966, 0xfffffe01, 0x2, 0x5, 0x9, 0x8, 0xfffffffc, 0x6, 0x9e2, 0x3, 0xd, 0x1, 0x10, 0x0, 0x4000067f, 0xa, 0x2, 0x3, 0x4, 0x1, 0x2, 0xa, 0x8000, 0x8, 0x7, 0x4, 0x0, 0x3, 0xe, 0x81, 0xfffffffc, 0xe, 0x6, 0x7fffffff, 0xffffffff, 0x3, 0x8, 0x9, 0xc, 0xfffffffd, 0x8, 0x1e, 0x33, 0x4, 0xd4, 0x4, 0x4, 0x6, 0x27f9e4bf, 0xe3, 0x9, 0x9, 0x7fffffff, 0xff, 0x5, 0xbf, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ad6, 0x7, 0x9, 0x9, 0x6, 0x7, 0x1ff, 0x6, 0x8, 0x2, 0x8000002, 0x7, 0x3, 0x3ff, 0x2, 0x8c5, 0xf32, 0x0, 0x6, 0x8001, 0x0, 0x8, 0xffff8001, 0x3, 0x9, 0xfffffffe, 0xd, 0x6, 0x7, 0x2, 0x9, 0x4, 0xffff, 0x6, 0x2024, 0x5, 0x9, 0x200, 0x40000001, 0xffffffff, 0x0, 0x1, 0xd9, 0x7fff, 0xa334, 0x10000, 0x8, 0x1, 0xfffffffe, 0x9, 0x3, 0x7, 0x0, 0x5, 0xff, 0x4, 0x80000001, 0xfffffffd, 0x9, 0x9, 0xfffffc01, 0x7, 0x8, 0x5, 0x800, 0x85c, 0x7, 0x6, 0x2, 0x0, 0x495f267e, 0x10000, 0x4, 0x7, 0x81, 0x2a, 0x5, 0x3, 0x3, 0x8, 0x6, 0xd, 0xc, 0x4, 0x0, 0x7f, 0x4, 0x4, 0x5, 0x8000, 0xad, 0x4603, 0x7fffffff, 0x1, 0x784, 0xa9, 0x1ff, 0x4, 0xab2, 0xffffffff, 0x5, 0x1, 0x3, 0x9, 0x8, 0x4512, 0x0, 0x3, 0x9, 0xd, 0x3, 0xffffffff, 0xa5, 0xff, 0x4, 0x5, 0xfffffff7, 0x3, 0x3, 0x7, 0x80000001, 0xfff, 0x10001, 0xa2, 0x7, 0x0, 0x42, 0x80, 0x1000000, 0x2, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff2c, 0xffffff0f, 0x5, 0x8, 0x6, 0x9b, 0x200, 0x4, 0x7f, 0x7, 0x1000, 0x1800, 0x1, 0x3, 0x7, 0x100, 0x80000000, 0x6, 0x4, 0x4, 0x3, 0x81, 0x2, 0x7, 0x6, 0x6, 0x3ff, 0x8, 0xe18, 0x6, 0x3, 0x1, 0xb, 0x1, 0x9, 0x8, 0x4, 0x1, 0x8, 0x6, 0x0, 0x8, 0x4, 0x4, 0x7, 0x0, 0x2, 0x6, 0x4, 0x5, 0x36c, 0x400, 0xfffffffd, 0xadcd, 0x5, 0xfff, 0x3, 0x5, 0x5, 0x1ff, 0x101, 0x2, 0x5, 0x8b, 0xaa65, 0x5, 0x0, 0xeb, 0xc, 0x5, 0x7, 0x2, 0x3, 0x1, 0x1, 0x58f69f97, 0x7, 0x5db7, 0x10000, 0xfffff778, 0x1, 0xffff3750, 0x4, 0x8, 0xffffffff, 0x400, 0x5, 0xf, 0x33e1, 0x401, 0x1, 0xfffffffd, 0xfa, 0xffff, 0x4efa, 0x5681, 0x100, 0xa4, 0x6, 0x6, 0x5, 0x7, 0x9dc, 0x6, 0x6f, 0xb9, 0x9, 0xfffffff8, 0x296fb8e5, 0x8, 0x2, 0x8001, 0x7f1, 0x9, 0x5000, 0x7, 0x10, 0xffffffff, 0x0, 0x5, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xcb, 0x8, 0x0, 0x7, 0x5, 0x5, 0x1, 0x9, 0x5, 0xf, 0x3fe00000, 0x0, 0x2, 0x8, 0x5, 0xfff, 0x7, 0xb2, 0x8, 0x7fff, 0x7, 0x8, 0x0, 0x52b, 0x5c9d, 0x8, 0x1, 0x10000, 0x9, 0x6, 0x0, 0x7, 0x67c4, 0xff, 0x8d11, 0x1, 0xa, 0xd, 0x8, 0x2, 0x6, 0x6, 0x9, 0xf2a9, 0x100, 0x0, 0x51, 0x4, 0x3, 0x3, 0x3, 0x6, 0xf01, 0x8, 0x7fffffff, 0x10000, 0x3ff, 0x3, 0x9, 0x7, 0x7, 0x5, 0xd, 0x8, 0x6, 0x0, 0x7, 0x0, 0x5, 0x8, 0x97, 0x6, 0xfffffffd, 0x401, 0x4, 0x9, 0xfffffff9, 0x5d2, 0xc, 0x6, 0x2, 0x7, 0x5, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x9, 0x6651, 0xfeb, 0x6677f80e, 0x1, 0x3, 0x5990, 0x7, 0x374b, 0x2, 0x5, 0x1, 0x81, 0x8000, 0x1, 0x6, 0x8, 0x6, 0x4ead, 0x8, 0xd742, 0x1, 0x3, 0x40, 0x9, 0x1, 0x5fc, 0x3, 0xf, 0xe, 0xffffffdb, 0x6, 0x8, 0x2c, 0xba0, 0x9, 0x4, 0xd, 0x3ff, 0x1f29, 0x9, 0x1, 0x8, 0x6, 0x80000000, 0x3, 0xffff, 0x8, 0xfffffffd, 0x200, 0xf, 0xb90, 0x0, 0xfffffff9, 0x1, 0x3, 0x80000000, 0x0, 0x2, 0x10001, 0x6, 0x5, 0x7, 0x5, 0x80, 0xffffc336, 0xffffffff, 0x8, 0xa87, 0x6, 0x10001, 0x81, 0x84, 0x3, 0xffffff18, 0x4, 0x4, 0x1, 0xd, 0x80000001, 0x8, 0xfffffff9, 0xf7db, 0xfffffffc, 0x3, 0xfffffffb, 0xab1, 0x4c, 0x20, 0x200, 0x8000, 0x5, 0x6, 0x7, 0xfffffffd, 0x200, 0x0, 0xffffffff, 0x6b, 0xab, 0x9, 0x9a, 0x4, 0x5, 0x3, 0x80000001, 0xf5, 0xb, 0x5, 0x3, 0x6, 0x7fffffff, 0x800, 0x1, 0x8, 0xfff, 0x80000001, 0x2cf2, 0x3, 0x8, 0xfd82, 0x365, 0x101, 0x7, 0xffffffe2, 0x3d0f, 0x8, 0x51c, 0x101, 0x5, 0x1ff, 0x0, 0x4db, 0x3ff, 0x66dc, 0x7ff, 0x7, 0xa13d, 0x21343989, 0x7, 0x124, 0xffffffff, 0x5, 0x54, 0x7f, 0x8000, 0x1, 0x1, 0xfffff000, 0x80000000, 0x1f, 0x2, 0x8001, 0x5, 0x9, 0x0, 0x3, 0x7, 0x10001, 0x7fffffff, 0x6, 0x7, 0x7, 0xf6c, 0x6, 0x200, 0x8001, 0x8001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe89f}]]}, {0x7e, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca413d114dc4ccc6"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x20, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7ef9a2d7de7f41002b1f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x23c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x6, 0x9, 0x3, 0x2}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xaf90}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9e}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0xa, 0x2, "f704000000bf8eb5d0e4"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x94, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4c, 0x2}, {0xe, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x1ff, 0x80, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xde, 0x1}, {0x58, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e2b7b69007ff8b0be684", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a425a57fefdb9168"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="cbc69de15ebfdff1cd45", @TCF_META_TYPE_VAR="9cb2232a929395"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='R&', @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x401}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa70, 0x8, 0x5}, {0x0, 0x1, 0x2}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x2}, {0x19, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc9a8, 0xe, 0x2}, {0x8}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x800}, {0x6, 0x1, 0x2, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd76d, 0x1, 0xcc}, {0x0, 0x10, 0x25, 0x7, 0x5, 0x0, 0x1}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x632}]}, 0xfbc}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 28.924270213s ago: executing program 4 (id=994): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f00000005c0), 0x8, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x94}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) inotify_init() 27.81220095s ago: executing program 4 (id=1009): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = fcntl$getown(r2, 0x9) sched_getscheduler(r3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6, 0x0, 0x8}, 0x18) syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5af9, 0x100, 0x62, 0x281}, &(0x7f0000000400), &(0x7f0000000100)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001f000200000000000000000000005d6232f6d58d222a12"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 12.724449143s ago: executing program 32 (id=1009): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = fcntl$getown(r2, 0x9) sched_getscheduler(r3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6, 0x0, 0x8}, 0x18) syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5af9, 0x100, 0x62, 0x281}, &(0x7f0000000400), &(0x7f0000000100)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000001f000200000000000000000000005d6232f6d58d222a12"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 3.642033864s ago: executing program 5 (id=1136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x4, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4c7, &(0x7f0000001240)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x7ffffffff000, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) 3.100443922s ago: executing program 3 (id=1142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x54a0, &(0x7f0000000280)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) close(r6) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) 2.766840588s ago: executing program 2 (id=1145): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x8001, 0x6, '9P2000'}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r5 = dup(r1) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb0760982d5a6f8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r9 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@empty, 0x4e21, 0x8a5, 0x4e24, 0x4ea9, 0xa, 0x0, 0x80, 0x33, r7, r9}, {0x401, 0x8, 0xffffffffffffff84, 0x101, 0xf4a8, 0x676, 0x200, 0xfffffffffffffffd}, {0x2000000000000000, 0x7fff, 0x7fffffffffffffff}, 0x954, 0x6e6bb5, 0x957a6d3a686b1a91, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d3, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3502, 0x4, 0x2, 0xd, 0x9, 0x52b2}}, 0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltuid}], [{@smackfsroot}, {@euid_lt={'euid<', r9}}], 0x6b}}) 2.302211794s ago: executing program 3 (id=1149): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 2.085583118s ago: executing program 2 (id=1150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x4, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4c7, &(0x7f0000001240)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x7ffffffff000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x18) 2.044204059s ago: executing program 0 (id=1151): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x9403, 0x0, 0x230, 0x2c0, 0x340, 0x3d8, 0x3d8, 0x340, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@physdev={{0x68}, {'ip6tnl0\x00', {0xff}, 'erspan0\x00', {}, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xfffffffc]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) getrandom(0x0, 0x0, 0x2) 1.918530001s ago: executing program 5 (id=1152): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/148, 0x94}, {0x0}], 0x2) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000061e00000a019f13ce22a6ded30ed746b7039c98b71cc04db02c32f5ac905d86cbbed5e47857c96d76ef068a0c0986992e52766b217776e493f111c7cf47faacd1e2f75c1f45d9dd0fc65fa3665323534c96cb3dd4d843f72bd22b45838ba17ed4ebb0e34c4f8ac78618bf657a0258ee5c17a56bcca9c97346810a433ea6021abeeaef04c58b24ce080fbbe9a225e313c8b87c7a5ecc5e5f7c29e6ac917484f0000000000000000008683a76ebd3efea03d789e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.889153071s ago: executing program 1 (id=1153): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB="fe4cecb210bc091b104f801f21ddeb4c"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.878779551s ago: executing program 3 (id=1154): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 1.858412542s ago: executing program 0 (id=1155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.745069543s ago: executing program 0 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.730840343s ago: executing program 2 (id=1157): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = memfd_create(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_misc(r3, &(0x7f0000000180)="e502", 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="000000009644f7bb25ece9e03fbf3840fc29e3a008a172a584d92fca4da09813ca114e37ffbb8eafd393b341f126d2ed63dc6565b1fcdc892de79febc231ea3f6f39caa63642994950e07be115128e8b973a72ba11680f290f73fad42ab5cbec250caf688c134615f02ada05d4a6c54470d8f7a843f2a62556801ccf2ca73c9372958e085cb5de9ab4e6481ca8d66f3993a633", @ANYRES16=r6, @ANYBLOB="1b0507000000ffdbdf25190000000c0001800800030004000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) acct(0x0) read(r2, &(0x7f0000003e40)=""/248, 0xf8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.688513754s ago: executing program 0 (id=1158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0xa24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x9e8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x8a8, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6b70, 0x101, 0x253, 0x400, 0x3, 0x3, 0x8, 0xff, 0xc15b, 0x80000001, 0x0, 0x8, 0x0, 0x2, 0x6, 0x40, 0x10, 0x401, 0x5, 0x200007, 0x10001, 0x48, 0xfffffe00, 0x7ff, 0x8000, 0x1, 0x80000000, 0x3, 0x8, 0x5, 0xef, 0xfffffff7, 0x5, 0x3, 0xa, 0x1ff, 0x1, 0x7, 0xa60, 0x4, 0x9, 0x9, 0x81, 0x2, 0x5, 0xd4, 0x4, 0x81, 0x7, 0xfa, 0x5, 0x3, 0x8, 0xce7f5e7, 0xec, 0x8000, 0x2, 0x4, 0x3f, 0x4, 0x1, 0x8, 0x4, 0xb, 0x6, 0x9, 0x3, 0x9, 0x4, 0x200, 0xab, 0x2, 0x8, 0xf, 0x9, 0x8, 0x1, 0x0, 0x8, 0x64ce, 0x6, 0x401, 0x13b, 0x80, 0xfffffffa, 0x8, 0xbb2d09a, 0x80000000, 0x2, 0xf, 0x6, 0x3dc, 0x22, 0x7, 0x9158, 0xd84, 0x15d, 0x1, 0x5, 0x0, 0x9, 0x8, 0x4, 0x8, 0x408, 0x2, 0x8, 0x52, 0x40, 0x8490, 0x2, 0xfe, 0x101, 0x4, 0x8000, 0x34a71484, 0x7, 0x2, 0x7fff, 0x1, 0x0, 0x3f, 0x1000, 0x3, 0x6, 0x6, 0x0, 0x1, 0x1, 0x4411dd87, 0x2172, 0x6, 0x5f2f40e7, 0x5, 0x3, 0x800, 0x7, 0x4, 0x8, 0x7, 0x646ddddc, 0x1, 0x0, 0x1, 0x6, 0x7, 0x6, 0x6, 0x10001, 0x4, 0x1, 0xd, 0x0, 0xe48, 0x8001, 0x7, 0xfffffffe, 0x4, 0x9, 0xded2, 0x3, 0x9, 0xffffffff, 0x8, 0x200, 0x4, 0x4, 0x40, 0x5, 0x39edd6c0, 0x6, 0x3, 0x5, 0x5, 0xfffff5c6, 0x4, 0x9, 0x200, 0x3ff, 0x4, 0x1, 0x342, 0x1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0xb7, 0x5, 0xd, 0x0, 0xf3f, 0x1, 0x5338, 0x401, 0x1, 0x2e, 0x1ff, 0x7, 0x4, 0xfffffffd, 0x7fff, 0x6, 0x81, 0x80, 0x200, 0x101, 0x1000, 0xfffffffc, 0x1, 0x3, 0x8, 0x8, 0x7fc, 0x8, 0x3, 0x7, 0x8, 0x7, 0x40, 0x3, 0xffffffff, 0xffffffff, 0x8, 0xe, 0x100, 0x5, 0xc, 0x2, 0x6e96914f, 0x7, 0x5, 0x1, 0x80000000, 0x1, 0x9, 0x7, 0x4, 0xe, 0x1, 0x4, 0xffff8001, 0x5, 0x10000, 0x4, 0xffff, 0x9, 0x8, 0xb3, 0x101, 0x5, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4800, 0x7, 0x1, 0x9ba, 0x0, {0x6, 0x1, 0x8, 0x100, 0x504, 0x100003}, {0x5, 0x0, 0x2, 0x3, 0xe, 0x7fc}, 0x2393, 0x3, 0x1ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xffffffdb, 0xfffffff7, 0x4, {0x8, 0x3, 0x9, 0xe, 0x2f7d, 0x8}, {0x2, 0x2, 0x3, 0xb77, 0x3, 0x9}, 0x3, 0xe, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffff7f, 0x7, 0x2dc, 0x9, 0x8001, 0xfffffff9, 0x291, 0x3, 0x5, 0x3, 0x8001, 0x4a49, 0xfffffff6, 0x1, 0x4, 0x4, 0x6ca, 0x7, 0x7, 0xb, 0x8, 0xc, 0xffffff7f, 0x8000, 0x811, 0x2000005, 0x3, 0x2, 0xff, 0xff, 0x1c, 0x2, 0x7, 0x2, 0x5, 0x0, 0x6af7, 0x10, 0x4, 0x400, 0x1, 0x6, 0x401, 0x5, 0x4, 0x7fff, 0xeb9, 0xdac, 0x8, 0x80, 0xf7, 0x7, 0x4, 0xfffffffa, 0x9, 0x4, 0x4, 0x7, 0x8000, 0x4, 0x10, 0x8, 0x4, 0x8, 0xe, 0x1, 0x10000, 0xe, 0xd0ee, 0x0, 0xffffff32, 0x2, 0xffffffff, 0xbd6, 0xfffffff8, 0xffff0001, 0x0, 0x2, 0xfffff6c2, 0x8, 0x1, 0x9, 0x5, 0x6, 0x8, 0x5, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x2, 0x81, 0x8, 0x5, 0x8, 0x1, 0x8, 0xf, 0x6c2, 0xb2, 0x80000001, 0x6, 0xa7a7, 0xc0000000, 0x800, 0x80000000, 0x7cc, 0x1, 0x3, 0x6, 0x5, 0x6, 0x0, 0xc3, 0x7fff, 0x800, 0x2, 0x5, 0x6, 0x8, 0xffffffff, 0x9, 0x0, 0xddb7, 0x3ff, 0x7fff, 0x200, 0x1, 0x81, 0x1, 0x100, 0x4, 0x401, 0x6, 0xd, 0x3ff, 0x3ff, 0x58a, 0x5, 0x53d1, 0x0, 0x8, 0x8, 0x2, 0x4, 0x5, 0x69a, 0x5, 0x3, 0x7, 0x200, 0xfffffff2, 0x0, 0x1, 0x8, 0x0, 0x200, 0x3, 0x7, 0x5, 0x0, 0x0, 0x10000, 0x3, 0x2, 0x81ce, 0x80000001, 0xfffffffa, 0xf, 0x0, 0x40, 0x5, 0xa, 0x7, 0x7, 0xfee, 0x2, 0xeec7, 0x40000000, 0xc6, 0x6d2, 0x9, 0x9, 0x6, 0x5, 0xa, 0x9, 0x3, 0x0, 0x7, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x7, 0x0, 0x2, 0x58, 0x8, 0x0, 0x753, 0x10000, 0x3, 0x8, 0x2, 0xb5, 0xffffffff, 0x8ec1, 0x9, 0x8001, 0x6, 0x1e, 0x8001, 0x7fffffff, 0x5, 0x2, 0x7d4, 0x400, 0xffff, 0x100, 0x800, 0xe, 0x26f4c879, 0x5, 0x6, 0x5, 0x894, 0x7, 0x6, 0xb, 0x764, 0x5c8a, 0xe0, 0x401, 0x81, 0xffffffff, 0x2, 0xf, 0xe8, 0x6, 0x0, 0x400, 0x9, 0xe, 0xfffffffd, 0xe73, 0x5, 0x1, 0x6, 0x8, 0x3, 0x454a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x1, 0xf, 0x2466aaee}, {0xfff, 0x0, 0xf, 0x2}, {0x1, 0xf8, 0xc, 0x1}, {0x3, 0x3, 0xf7, 0x1ff}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_ACT={0xd0, 0x1, [@m_csum={0xcc, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x3, 0x1, 0x1f9}, 0xf}}]}, {0x82, 0x6, "1cc777346f4a77963fca8ddd5c7925d3a3015c0c2d696c10910df00601ff73b0c64196c8b3a8ca7ee74edaae58bd0cfbfd7d43d61ac2de0ab0b819fad9a2567126484124b7d3305b1504f77ad91d0b0ce7f34230cf89ebde83700f0275fac58f53e84df07a81ca1d4cbb1f075e4a265a402b23c904584a7f4cb44c4fbcd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x3}}]}}]}, 0xa24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) recvmmsg(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)}, {&(0x7f0000003d00)=""/4095, 0xfff}, {&(0x7f0000000c40)=""/193, 0xc1}], 0x3, &(0x7f0000000f40)=""/214, 0xd6}, 0x101}, {{&(0x7f0000001040)=@can, 0x80, &(0x7f0000001200)=[{&(0x7f0000001100)=""/42, 0x2a}, {&(0x7f0000001140)=""/131, 0x83}], 0x2, &(0x7f0000001240)=""/19, 0x13}, 0x800}, {{&(0x7f0000001280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/73, 0x49}, {0x0}, {&(0x7f0000001640)=""/218, 0xda}, {&(0x7f0000001740)=""/48, 0x30}], 0x8, &(0x7f0000000980)=""/107, 0x6b}, 0x1}, {{&(0x7f0000002980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000002a00)=""/158, 0x9e}, {&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x3}, 0x8}], 0x4, 0x40002003, &(0x7f0000003cc0)) 1.671036154s ago: executing program 1 (id=1159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0xfbc, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xf84, 0x2, [@TCA_BASIC_ACT={0xd44, 0x3, [@m_police={0xcd8, 0xc, 0x0, 0x0, {{0xb}, {0xc30, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0x5, 0x400, 0x3ff, 0x1, 0x7, 0x6, 0x9, 0xfffffffe, 0x6, 0x200, 0x4, 0x7ff, 0x120424fa, 0x5, 0xd71858c, 0x5, 0x0, 0x2, 0x4c, 0x7, 0xc, 0x7, 0x10001, 0x9, 0x42, 0x5, 0x8001, 0x9, 0x8, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x4, 0x2, 0x400, 0x3, 0x200, 0x4, 0x3c, 0x2, 0x5, 0x80000000, 0x0, 0x40, 0x3ee, 0x1, 0x0, 0x6, 0x7, 0x8, 0x4, 0x3, 0xff, 0x5, 0x5, 0x1, 0x3, 0x20000, 0x5f6e, 0x2, 0xfffffffe, 0x401, 0x8, 0x5, 0x2, 0x101, 0x3, 0x9, 0x6, 0x7, 0x5, 0x3, 0x0, 0x5, 0x1fd, 0x4, 0x1400000, 0x7, 0x8, 0x3, 0x2, 0xfffffff1, 0x1, 0x9, 0x0, 0x7, 0x5, 0xfffffff1, 0xfffffffc, 0x2, 0x493fff03, 0xa3f, 0x3, 0x8, 0x273, 0x7, 0x8, 0x8001, 0x2, 0x6, 0xe2, 0x1, 0x250, 0x5, 0x4, 0x6, 0x0, 0x9, 0x9, 0x80000000, 0x101, 0x4, 0x7fffffff, 0x4, 0x432845b8, 0x8, 0x40000000, 0xa4, 0x1000, 0x800, 0x101, 0x9, 0x1, 0x2, 0x4, 0x7, 0x0, 0x0, 0x5, 0x7ff, 0x1, 0x80, 0x1, 0x3, 0x9, 0xfffffffd, 0x2, 0x10d8e5e2, 0x3, 0xde, 0x6, 0x2, 0xd27, 0x4, 0x2, 0x1, 0x6, 0x4, 0xa, 0x2e30, 0x80000000, 0x6, 0xfffffffc, 0xfffffffe, 0x4, 0x8, 0x27c, 0x4, 0x2, 0x5, 0x48000, 0x53, 0x4, 0x5fb, 0x6, 0x7, 0xfffffff7, 0x11, 0x8, 0x6, 0xffffff80, 0x10000, 0x3, 0x3, 0xa1ad, 0x6, 0xefd, 0x0, 0x7ff, 0x5, 0x9, 0x401, 0x46, 0xfffffffa, 0x10001, 0x80000000, 0x9, 0xc4, 0x443, 0x1ff, 0x10, 0xd708, 0x7fffffff, 0x8, 0x5, 0x966, 0xfffffe01, 0x2, 0x5, 0x9, 0x8, 0xfffffffc, 0x6, 0x9e2, 0x3, 0xd, 0x1, 0x10, 0x0, 0x4000067f, 0xa, 0x2, 0x3, 0x4, 0x1, 0x2, 0xa, 0x8000, 0x8, 0x7, 0x4, 0x0, 0x3, 0xe, 0x81, 0xfffffffc, 0xe, 0x6, 0x7fffffff, 0xffffffff, 0x3, 0x8, 0x9, 0xc, 0xfffffffd, 0x8, 0x1e, 0x33, 0x4, 0xd4, 0x4, 0x4, 0x6, 0x27f9e4bf, 0xe3, 0x9, 0x9, 0x7fffffff, 0xff, 0x5, 0xbf, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ad6, 0x7, 0x9, 0x9, 0x6, 0x7, 0x1ff, 0x6, 0x8, 0x2, 0x8000002, 0x7, 0x3, 0x3ff, 0x2, 0x8c5, 0xf32, 0x0, 0x6, 0x8001, 0x0, 0x8, 0xffff8001, 0x3, 0x9, 0xfffffffe, 0xd, 0x6, 0x7, 0x2, 0x9, 0x4, 0xffff, 0x6, 0x2024, 0x5, 0x9, 0x200, 0x40000001, 0xffffffff, 0x0, 0x1, 0xd9, 0x7fff, 0xa334, 0x10000, 0x8, 0x1, 0xfffffffe, 0x9, 0x3, 0x7, 0x0, 0x5, 0xff, 0x4, 0x80000001, 0xfffffffd, 0x9, 0x9, 0xfffffc01, 0x7, 0x8, 0x5, 0x800, 0x85c, 0x7, 0x6, 0x2, 0x0, 0x495f267e, 0x10000, 0x4, 0x7, 0x81, 0x2a, 0x5, 0x3, 0x3, 0x8, 0x6, 0xd, 0xc, 0x4, 0x0, 0x7f, 0x4, 0x4, 0x5, 0x8000, 0xad, 0x4603, 0x7fffffff, 0x1, 0x784, 0xa9, 0x1ff, 0x4, 0xab2, 0xffffffff, 0x5, 0x1, 0x3, 0x9, 0x8, 0x4512, 0x0, 0x3, 0x9, 0xd, 0x3, 0xffffffff, 0xa5, 0xff, 0x4, 0x5, 0xfffffff7, 0x3, 0x3, 0x7, 0x80000001, 0xfff, 0x10001, 0xa2, 0x7, 0x0, 0x42, 0x80, 0x1000000, 0x2, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff2c, 0xffffff0f, 0x5, 0x8, 0x6, 0x9b, 0x200, 0x4, 0x7f, 0x7, 0x1000, 0x1800, 0x1, 0x3, 0x7, 0x100, 0x80000000, 0x6, 0x4, 0x4, 0x3, 0x81, 0x2, 0x7, 0x6, 0x6, 0x3ff, 0x8, 0xe18, 0x6, 0x3, 0x1, 0xb, 0x1, 0x9, 0x8, 0x4, 0x1, 0x8, 0x6, 0x0, 0x8, 0x4, 0x4, 0x7, 0x0, 0x2, 0x6, 0x4, 0x5, 0x36c, 0x400, 0xfffffffd, 0xadcd, 0x5, 0xfff, 0x3, 0x5, 0x5, 0x1ff, 0x101, 0x2, 0x5, 0x8b, 0xaa65, 0x5, 0x0, 0xeb, 0xc, 0x5, 0x7, 0x2, 0x3, 0x1, 0x1, 0x58f69f97, 0x7, 0x5db7, 0x10000, 0xfffff778, 0x1, 0xffff3750, 0x4, 0x8, 0xffffffff, 0x400, 0x5, 0xf, 0x33e1, 0x401, 0x1, 0xfffffffd, 0xfa, 0xffff, 0x4efa, 0x5681, 0x100, 0xa4, 0x6, 0x6, 0x5, 0x7, 0x9dc, 0x6, 0x6f, 0xb9, 0x9, 0xfffffff8, 0x296fb8e5, 0x8, 0x2, 0x8001, 0x7f1, 0x9, 0x5000, 0x7, 0x10, 0xffffffff, 0x0, 0x5, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xcb, 0x8, 0x0, 0x7, 0x5, 0x5, 0x1, 0x9, 0x5, 0xf, 0x3fe00000, 0x0, 0x2, 0x8, 0x5, 0xfff, 0x7, 0xb2, 0x8, 0x7fff, 0x7, 0x8, 0x0, 0x52b, 0x5c9d, 0x8, 0x1, 0x10000, 0x9, 0x6, 0x0, 0x7, 0x67c4, 0xff, 0x8d11, 0x1, 0xa, 0xd, 0x8, 0x2, 0x6, 0x6, 0x9, 0xf2a9, 0x100, 0x0, 0x51, 0x4, 0x3, 0x3, 0x3, 0x6, 0xf01, 0x8, 0x7fffffff, 0x10000, 0x3ff, 0x3, 0x9, 0x7, 0x7, 0x5, 0xd, 0x8, 0x6, 0x0, 0x7, 0x0, 0x5, 0x8, 0x97, 0x6, 0xfffffffd, 0x401, 0x4, 0x9, 0xfffffff9, 0x5d2, 0xc, 0x6, 0x2, 0x7, 0x5, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x9, 0x6651, 0xfeb, 0x6677f80e, 0x1, 0x3, 0x5990, 0x7, 0x374b, 0x2, 0x5, 0x1, 0x81, 0x8000, 0x1, 0x6, 0x8, 0x6, 0x4ead, 0x8, 0xd742, 0x1, 0x3, 0x40, 0x9, 0x1, 0x5fc, 0x3, 0xf, 0xe, 0xffffffdb, 0x6, 0x8, 0x2c, 0xba0, 0x9, 0x4, 0xd, 0x3ff, 0x1f29, 0x9, 0x1, 0x8, 0x6, 0x80000000, 0x3, 0xffff, 0x8, 0xfffffffd, 0x200, 0xf, 0xb90, 0x0, 0xfffffff9, 0x1, 0x3, 0x80000000, 0x0, 0x2, 0x10001, 0x6, 0x5, 0x7, 0x5, 0x80, 0xffffc336, 0xffffffff, 0x8, 0xa87, 0x6, 0x10001, 0x81, 0x84, 0x3, 0xffffff18, 0x4, 0x4, 0x1, 0xd, 0x80000001, 0x8, 0xfffffff9, 0xf7db, 0xfffffffc, 0x3, 0xfffffffb, 0xab1, 0x4c, 0x20, 0x200, 0x8000, 0x5, 0x6, 0x7, 0xfffffffd, 0x200, 0x0, 0xffffffff, 0x6b, 0xab, 0x9, 0x9a, 0x4, 0x5, 0x3, 0x80000001, 0xf5, 0xb, 0x5, 0x3, 0x6, 0x7fffffff, 0x800, 0x1, 0x8, 0xfff, 0x80000001, 0x2cf2, 0x3, 0x8, 0xfd82, 0x365, 0x101, 0x7, 0xffffffe2, 0x3d0f, 0x8, 0x51c, 0x101, 0x5, 0x1ff, 0x0, 0x4db, 0x3ff, 0x66dc, 0x7ff, 0x7, 0xa13d, 0x21343989, 0x7, 0x124, 0xffffffff, 0x5, 0x54, 0x7f, 0x8000, 0x1, 0x1, 0xfffff000, 0x80000000, 0x1f, 0x2, 0x8001, 0x5, 0x9, 0x0, 0x3, 0x7, 0x10001, 0x7fffffff, 0x6, 0x7, 0x7, 0xf6c, 0x6, 0x200, 0x8001, 0x8001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe89f}]]}, {0x7e, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca413d114dc4ccc6"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x20, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7ef9a2d7de7f41002b1f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x23c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb3}, {0x6, 0x9, 0x3, 0x2}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x9, 0xaf90}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9e}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0xa, 0x2, "f704000000bf8eb5d0e4"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x94, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4c, 0x2}, {0xe, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x1ff, 0x80, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xde, 0x1}, {0x58, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="e2b7b69007ff8b0be684", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a425a57fefdb9168"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="cbc69de15ebfdff1cd45", @TCF_META_TYPE_VAR="9cb2232a929395"]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='R&', @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x401}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa70, 0x8, 0x5}, {0x0, 0x1, 0x2}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x2}, {0x19, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc9a8, 0xe, 0x2}, {0x8}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x800}, {0x6, 0x1, 0x2, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd76d, 0x1, 0xcc}, {0x0, 0x10, 0x25, 0x7, 0x5, 0x0, 0x1}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x632}]}, 0xfbc}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.445357378s ago: executing program 1 (id=1160): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42908}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="06000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r8) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa0800000c0000000000119078000009000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0x21, &(0x7f0000000340)=0xfffffffd, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) 1.075309934s ago: executing program 3 (id=1161): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x8001, 0x6, '9P2000'}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r5 = dup(r1) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb0760982d5a6f8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r8 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@empty, 0x4e21, 0x8a5, 0x4e24, 0x4ea9, 0xa, 0x0, 0x80, 0x33, 0x0, r8}, {0x401, 0x8, 0xffffffffffffff84, 0x101, 0xf4a8, 0x676, 0x200, 0xfffffffffffffffd}, {0x2000000000000000, 0x7fff, 0x7fffffffffffffff}, 0x954, 0x6e6bb5, 0x957a6d3a686b1a91, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d3, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3502, 0x4, 0x2, 0xd, 0x9, 0x52b2}}, 0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltuid}], [{@smackfsroot}, {@euid_lt={'euid<', r8}}], 0x6b}}) 988.846985ms ago: executing program 5 (id=1163): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 937.304296ms ago: executing program 2 (id=1164): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 921.214146ms ago: executing program 1 (id=1165): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x500, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x0, 0x6affffff, 0x3403000b, 0x3a0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x22}, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) 729.506819ms ago: executing program 0 (id=1166): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x8, 0xfffffffc}, {0xc, 0x0, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x7fff8013}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x2d0, 0x2d0, 0x230, 0x138, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x7f00007f, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@multicast2, @multicast2, 0xff, 0x0, 'veth1_vlan\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x0, 0x1, 0xc1513f04b421a003}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0x0, 0x5c6cad92e6a38bac], 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x56, 0x9, 0xb, 0x3, 0x7ff1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0xff}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xb, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 728.893829ms ago: executing program 5 (id=1167): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 HID v0.00 Device [syz0] on syz1 [ 94.922062][ T5963] loop1: detected capacity change from 0 to 2048 [ 95.433838][ T5993] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 95.489675][ T5999] loop2: detected capacity change from 0 to 512 [ 95.630093][ T6001] loop0: detected capacity change from 0 to 164 [ 95.646139][ T6001] syz.0.762: attempt to access beyond end of device [ 95.646139][ T6001] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 96.068041][ T6001] syz.0.762: attempt to access beyond end of device [ 96.068041][ T6001] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 96.084723][ T5999] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.763: casefold flag without casefold feature [ 96.226197][ T5999] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.763: couldn't read orphan inode 15 (err -117) [ 96.254253][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.261772][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.269216][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.495588][ T6013] loop3: detected capacity change from 0 to 512 [ 96.503954][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.511477][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.519035][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.526429][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.534140][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.541777][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.549476][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.557043][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.564516][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 96.572021][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.016427][ T6013] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.040427][ T6013] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.530492][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.537971][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.545397][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.552868][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.560399][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.567827][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.575321][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.582766][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.590263][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.598048][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.605627][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.613116][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.620573][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.628121][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 97.635595][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 98.619950][ T3414] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 98.638646][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 98.638660][ T29] audit: type=1326 audit(2000000056.230:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 98.763744][ T6021] fido_id[6021]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.887143][ T29] audit: type=1326 audit(2000000056.280:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 98.910814][ T29] audit: type=1326 audit(2000000056.280:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 98.934200][ T29] audit: type=1326 audit(2000000056.280:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 98.957655][ T29] audit: type=1326 audit(2000000056.280:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 98.981114][ T29] audit: type=1326 audit(2000000056.280:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 99.005506][ T29] audit: type=1326 audit(2000000056.280:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 99.028961][ T29] audit: type=1326 audit(2000000056.290:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 99.052329][ T29] audit: type=1326 audit(2000000056.290:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 99.075970][ T29] audit: type=1326 audit(2000000056.290:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 99.108603][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 99.244662][ T6033] loop1: detected capacity change from 0 to 2048 [ 99.278651][ T6034] loop0: detected capacity change from 0 to 1024 [ 99.313460][ T6034] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 99.313460][ T6034] [ 99.324330][ T6034] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 99.336150][ T3315] EXT4-fs unmount: 60 callbacks suppressed [ 99.336166][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.366578][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.616834][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.001713][ T6069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.357851][ T6071] loop0: detected capacity change from 0 to 128 [ 100.460322][ T6071] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.472963][ T6071] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.823353][ T6078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.306506][ T6088] loop3: detected capacity change from 0 to 1024 [ 101.334214][ T6090] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 101.370555][ T6088] EXT4-fs: Ignoring removed orlov option [ 101.423785][ T6088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.459445][ T6098] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 102.478519][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.645363][ T6075] loop4: detected capacity change from 0 to 1024 [ 102.724946][ T6075] EXT4-fs: Ignoring removed orlov option [ 102.863497][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.066532][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.353723][ T6118] 9pnet: p9_errstr2errno: server reported unknown error @ [ 103.435688][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.558063][ T6124] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 103.622375][ T6128] loop3: detected capacity change from 0 to 1024 [ 103.658039][ T6128] EXT4-fs: Ignoring removed orlov option [ 103.699499][ T6130] loop4: detected capacity change from 0 to 2048 [ 103.701390][ T6132] loop2: detected capacity change from 0 to 1024 [ 103.736225][ T6128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.738960][ T6137] loop0: detected capacity change from 0 to 2048 [ 103.756513][ T6132] EXT4-fs: Ignoring removed orlov option [ 103.774387][ T6130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.800304][ T6132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.859383][ T6137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.870876][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.924752][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.032588][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.040209][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.047889][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.059738][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.067252][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.074705][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.082389][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.090045][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.097611][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.105072][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.112552][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.115849][ T6162] loop2: detected capacity change from 0 to 512 [ 104.120093][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.133852][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.143686][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.151211][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.158687][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.166174][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.173631][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.181177][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.188656][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.196151][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.203740][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.211255][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.218754][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.226197][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.233637][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.241895][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.249809][ T2960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 104.279905][ T6162] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.806: casefold flag without casefold feature [ 104.292503][ T2960] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 104.333100][ T6163] loop3: detected capacity change from 0 to 512 [ 104.341299][ T6162] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.806: couldn't read orphan inode 15 (err -117) [ 104.355880][ T6163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.371279][ T6167] fido_id[6167]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.379165][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.421191][ T6163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.450859][ T6163] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.511296][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.522756][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.538716][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 104.538736][ T29] audit: type=1326 audit(2000000062.130:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 104.568392][ T29] audit: type=1326 audit(2000000062.130:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 104.591843][ T29] audit: type=1326 audit(2000000062.130:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 104.615273][ T29] audit: type=1326 audit(2000000062.130:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 104.638780][ T29] audit: type=1326 audit(2000000062.130:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 104.662474][ T29] audit: type=1326 audit(2000000062.130:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 104.685990][ T29] audit: type=1326 audit(2000000062.130:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 104.745005][ T6181] loop2: detected capacity change from 0 to 2048 [ 104.835253][ T6163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.835361][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.853447][ T29] audit: type=1326 audit(2000000062.130:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 104.876946][ T29] audit: type=1326 audit(2000000062.130:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 104.879851][ T6181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.900625][ T29] audit: type=1326 audit(2000000062.130:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6156 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9449e929 code=0x7ffc0000 [ 105.008799][ T6191] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 105.124381][ T6204] loop4: detected capacity change from 0 to 1024 [ 105.131467][ T6204] EXT4-fs: Ignoring removed orlov option [ 105.159447][ T6204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.248248][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.403588][ T6110] loop1: detected capacity change from 0 to 1024 [ 105.489869][ T6110] EXT4-fs: Ignoring removed orlov option [ 105.532087][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.576853][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 105.626006][ T6110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.631965][ T6229] loop2: detected capacity change from 0 to 1024 [ 105.662525][ T6226] loop4: detected capacity change from 0 to 1024 [ 105.675292][ T6229] EXT4-fs: Ignoring removed orlov option [ 105.722182][ T6229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.761616][ T6226] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 105.761616][ T6226] [ 105.772437][ T6226] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 105.850658][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.917391][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 105.924877][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 105.932346][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.141678][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.149214][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.156690][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.164135][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.171664][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.179152][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.186550][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.194156][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.201609][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.209093][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.245591][ T6242] loop4: detected capacity change from 0 to 512 [ 106.308499][ T6242] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.396143][ T6242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.456134][ T6242] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.604754][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.612278][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.619742][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.627212][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.634712][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.642145][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.649646][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.657265][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.664676][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.672163][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.679594][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.687096][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.694520][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.701999][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.709455][ T3414] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 106.748287][ T6250] loop3: detected capacity change from 0 to 1024 [ 106.762543][ T6250] EXT4-fs: Ignoring removed orlov option [ 106.790897][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.831050][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.895137][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.927383][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 106.957352][ T3414] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 106.985364][ T6259] 9pnet: p9_errstr2errno: server reported unknown error @L  [ 107.108218][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.212972][ T6267] loop4: detected capacity change from 0 to 1024 [ 107.343891][ T6267] EXT4-fs: Ignoring removed nobh option [ 107.349621][ T6267] EXT4-fs: Ignoring removed bh option [ 107.380022][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.510387][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.584965][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 107.756138][ T6276] loop3: detected capacity change from 0 to 1024 [ 107.798665][ T6276] EXT4-fs (loop3): Can't support bigalloc feature without extents feature [ 107.798665][ T6276] [ 107.809465][ T6276] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 108.017219][ T6257] fido_id[6257]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.189416][ T6288] loop2: detected capacity change from 0 to 512 [ 108.205781][ T6290] loop3: detected capacity change from 0 to 1024 [ 108.212920][ T6290] EXT4-fs: Ignoring removed orlov option [ 108.231591][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.299588][ T6288] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.836: casefold flag without casefold feature [ 108.343888][ T6288] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.836: couldn't read orphan inode 15 (err -117) [ 108.371388][ T6288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.419339][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.475061][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.644335][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.651839][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.659292][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.754422][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.761912][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.769406][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.776881][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.784429][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.791952][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.799399][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.806890][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.814305][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.821743][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 108.842925][ T6307] loop1: detected capacity change from 0 to 512 [ 108.886534][ T6307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.998040][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.005525][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.013327][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.020927][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.028458][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.033618][ T6307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.035857][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.055993][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.063602][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.071129][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.078730][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.086157][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.093649][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.101117][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.103362][ T6307] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.108817][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.127460][ T23] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 109.161210][ T23] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 109.196571][ T6319] loop3: detected capacity change from 0 to 512 [ 109.205425][ T6319] ext4: Unknown parameter 'delalloc.dax' [ 109.230250][ T6317] fido_id[6317]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.317507][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.401231][ T6327] loop1: detected capacity change from 0 to 1024 [ 109.450345][ T6327] EXT4-fs: Ignoring removed orlov option [ 109.462856][ T6327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.551697][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 109.551711][ T29] audit: type=1326 audit(2000000067.140:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e234358e7 code=0x7ffc0000 [ 109.585812][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.634540][ T29] audit: type=1326 audit(2000000067.170:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e233dab19 code=0x7ffc0000 [ 109.658056][ T29] audit: type=1326 audit(2000000067.170:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e234358e7 code=0x7ffc0000 [ 109.681609][ T29] audit: type=1326 audit(2000000067.170:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e233dab19 code=0x7ffc0000 [ 109.705111][ T29] audit: type=1326 audit(2000000067.170:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6e2343e929 code=0x7ffc0000 [ 109.718437][ T6339] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 109.728628][ T29] audit: type=1326 audit(2000000067.190:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e234358e7 code=0x7ffc0000 [ 109.760855][ T29] audit: type=1326 audit(2000000067.190:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e233dab19 code=0x7ffc0000 [ 109.784356][ T29] audit: type=1326 audit(2000000067.190:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6e2343e929 code=0x7ffc0000 [ 109.807782][ T29] audit: type=1326 audit(2000000067.200:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e234358e7 code=0x7ffc0000 [ 109.831084][ T29] audit: type=1326 audit(2000000067.200:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e233dab19 code=0x7ffc0000 [ 109.892294][ T6342] serio: Serial port ptm0 [ 109.942135][ T6345] loop0: detected capacity change from 0 to 1024 [ 109.954385][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 109.967119][ T6345] EXT4-fs: Ignoring removed nobh option [ 109.967250][ T6345] EXT4-fs: Ignoring removed bh option [ 109.994947][ T6345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.055402][ T6353] loop2: detected capacity change from 0 to 512 [ 110.108136][ T6353] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.860: casefold flag without casefold feature [ 110.108320][ T6353] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.860: couldn't read orphan inode 15 (err -117) [ 110.109032][ T6353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.157094][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.210355][ T6362] loop1: detected capacity change from 0 to 128 [ 110.242584][ T6362] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.255049][ T6362] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.496557][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.920905][ T6374] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 112.226073][ T6394] loop4: detected capacity change from 0 to 1024 [ 112.253829][ T6394] EXT4-fs: Ignoring removed nobh option [ 112.259629][ T6394] EXT4-fs: Ignoring removed bh option [ 112.353797][ T6394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.520756][ T6394] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.874: Allocating blocks 497-513 which overlap fs metadata [ 112.629488][ T6393] EXT4-fs (loop4): pa ffff8881069c03f0: logic 16, phys. 321, len 12 [ 112.637584][ T6393] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 112.768990][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.978038][ T6373] loop0: detected capacity change from 0 to 1024 [ 113.059037][ T6373] EXT4-fs: Ignoring removed orlov option [ 113.099168][ T6408] loop4: detected capacity change from 0 to 1024 [ 113.115056][ T6408] EXT4-fs: Ignoring removed orlov option [ 113.186553][ T6373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.206229][ T6408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.221170][ T3309] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.568202][ T6421] loop1: detected capacity change from 0 to 164 [ 113.593536][ T6421] syz.1.882: attempt to access beyond end of device [ 113.593536][ T6421] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 113.616713][ T6421] syz.1.882: attempt to access beyond end of device [ 113.616713][ T6421] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 113.644966][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.858893][ T6427] loop1: detected capacity change from 0 to 2048 [ 113.907359][ T6427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.009695][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.034158][ T6439] loop3: detected capacity change from 0 to 2048 [ 114.072308][ T6439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.328681][ T6465] loop4: detected capacity change from 0 to 128 [ 114.465082][ T6465] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.518557][ T6465] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.793407][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.871154][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.087227][ T6477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.096120][ T6483] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 115.331813][ T6485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.407206][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 115.407225][ T29] audit: type=1400 audit(2000000072.990:6823): avc: denied { write } for pid=6489 comm="syz.1.897" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.446248][ T6490] SET target dimension over the limit! [ 115.581458][ T6495] loop3: detected capacity change from 0 to 1024 [ 115.633141][ T6495] EXT4-fs: Ignoring removed nobh option [ 115.638890][ T6495] EXT4-fs: Ignoring removed bh option [ 115.723172][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.740083][ T29] audit: type=1326 audit(2000000073.270:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 115.763748][ T29] audit: type=1326 audit(2000000073.270:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 115.787299][ T29] audit: type=1326 audit(2000000073.270:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 115.811313][ T29] audit: type=1326 audit(2000000073.270:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 115.834733][ T29] audit: type=1326 audit(2000000073.280:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 115.858458][ T29] audit: type=1326 audit(2000000073.280:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 115.881968][ T29] audit: type=1326 audit(2000000073.280:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 115.905409][ T29] audit: type=1326 audit(2000000073.280:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 115.928840][ T29] audit: type=1326 audit(2000000073.280:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 116.153041][ T6504] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.898: Allocating blocks 497-513 which overlap fs metadata [ 116.182642][ T6506] loop2: detected capacity change from 0 to 512 [ 116.207438][ T6506] ext4: Unknown parameter 'delalloc.dax' [ 116.347497][ T6494] EXT4-fs (loop3): pa ffff888106a1d9a0: logic 16, phys. 321, len 12 [ 116.355666][ T6494] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 116.358595][ T6509] loop2: detected capacity change from 0 to 1024 [ 116.387312][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.481150][ T6511] loop3: detected capacity change from 0 to 1024 [ 116.642161][ T6479] loop0: detected capacity change from 0 to 1024 [ 116.666418][ T6479] EXT4-fs: Ignoring removed orlov option [ 116.725163][ T6509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.739602][ T6511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.831218][ T6511] FAULT_INJECTION: forcing a failure. [ 116.831218][ T6511] name failslab, interval 1, probability 0, space 0, times 0 [ 116.843995][ T6511] CPU: 1 UID: 0 PID: 6511 Comm: syz.3.903 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 116.844034][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 116.844052][ T6511] Call Trace: [ 116.844060][ T6511] [ 116.844069][ T6511] __dump_stack+0x1d/0x30 [ 116.844154][ T6511] dump_stack_lvl+0xe8/0x140 [ 116.844179][ T6511] dump_stack+0x15/0x1b [ 116.844225][ T6511] should_fail_ex+0x265/0x280 [ 116.844363][ T6511] ? alloc_pipe_info+0xae/0x350 [ 116.844381][ T6511] should_failslab+0x8c/0xb0 [ 116.844404][ T6511] __kmalloc_cache_noprof+0x4c/0x320 [ 116.844487][ T6511] alloc_pipe_info+0xae/0x350 [ 116.844506][ T6511] splice_direct_to_actor+0x592/0x680 [ 116.844536][ T6511] ? kstrtouint_from_user+0x9f/0xf0 [ 116.844604][ T6511] ? __pfx_direct_splice_actor+0x10/0x10 [ 116.844670][ T6511] ? __rcu_read_unlock+0x4f/0x70 [ 116.844701][ T6511] ? get_pid_task+0x96/0xd0 [ 116.844719][ T6511] ? avc_policy_seqno+0x15/0x30 [ 116.844893][ T6511] ? selinux_file_permission+0x1e4/0x320 [ 116.845037][ T6511] do_splice_direct+0xda/0x150 [ 116.845075][ T6511] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 116.845202][ T6511] do_sendfile+0x380/0x650 [ 116.845294][ T6511] __x64_sys_sendfile64+0x105/0x150 [ 116.845318][ T6511] x64_sys_call+0xb39/0x2fb0 [ 116.845340][ T6511] do_syscall_64+0xd2/0x200 [ 116.845407][ T6511] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.845441][ T6511] ? clear_bhb_loop+0x40/0x90 [ 116.845468][ T6511] ? clear_bhb_loop+0x40/0x90 [ 116.845535][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.845555][ T6511] RIP: 0033:0x7f8d9449e929 [ 116.845582][ T6511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.845605][ T6511] RSP: 002b:00007f8d92b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 116.845626][ T6511] RAX: ffffffffffffffda RBX: 00007f8d946c5fa0 RCX: 00007f8d9449e929 [ 116.845638][ T6511] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 116.845649][ T6511] RBP: 00007f8d92b07090 R08: 0000000000000000 R09: 0000000000000000 [ 116.845660][ T6511] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 116.845672][ T6511] R13: 0000000000000000 R14: 00007f8d946c5fa0 R15: 00007ffd40d03518 [ 116.845767][ T6511] [ 117.560827][ T6539] loop2: detected capacity change from 0 to 512 [ 117.576088][ T6536] loop4: detected capacity change from 0 to 164 [ 117.586009][ T6539] ext4: Unknown parameter 'delalloc.dax' [ 117.598183][ T6536] syz.4.910: attempt to access beyond end of device [ 117.598183][ T6536] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 117.631207][ T6536] syz.4.910: attempt to access beyond end of device [ 117.631207][ T6536] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 117.760815][ T6547] loop2: detected capacity change from 0 to 512 [ 117.781211][ T6547] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.914: casefold flag without casefold feature [ 117.827677][ T6547] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.914: couldn't read orphan inode 15 (err -117) [ 117.930354][ T6545] loop0: detected capacity change from 0 to 164 [ 118.010474][ T6545] syz.0.913: attempt to access beyond end of device [ 118.010474][ T6545] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 118.025683][ T6545] syz.0.913: attempt to access beyond end of device [ 118.025683][ T6545] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 118.150262][ T6550] dvmrp1: entered allmulticast mode [ 118.181726][ T6550] loop4: detected capacity change from 0 to 512 [ 118.221606][ T6550] EXT4-fs (loop4): too many log groups per flexible block group [ 118.230113][ T6550] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 118.238832][ T6550] EXT4-fs (loop4): mount failed [ 118.263223][ T6550] dvmrp1: left allmulticast mode [ 118.339620][ T6560] loop3: detected capacity change from 0 to 512 [ 118.373382][ T6560] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.917: casefold flag without casefold feature [ 118.387893][ T6560] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.917: couldn't read orphan inode 15 (err -117) [ 118.450269][ T6568] FAULT_INJECTION: forcing a failure. [ 118.450269][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 118.463578][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.2.919 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 118.463680][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.463694][ T6568] Call Trace: [ 118.463700][ T6568] [ 118.463710][ T6568] __dump_stack+0x1d/0x30 [ 118.463776][ T6568] dump_stack_lvl+0xe8/0x140 [ 118.463849][ T6568] dump_stack+0x15/0x1b [ 118.463864][ T6568] should_fail_ex+0x265/0x280 [ 118.463896][ T6568] should_failslab+0x8c/0xb0 [ 118.463927][ T6568] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 118.463985][ T6568] ? sidtab_sid2str_get+0xa0/0x130 [ 118.464016][ T6568] kmemdup_noprof+0x2b/0x70 [ 118.464039][ T6568] sidtab_sid2str_get+0xa0/0x130 [ 118.464062][ T6568] security_sid_to_context_core+0x1eb/0x2e0 [ 118.464102][ T6568] security_sid_to_context+0x27/0x40 [ 118.464178][ T6568] selinux_lsmprop_to_secctx+0x67/0xf0 [ 118.464204][ T6568] security_lsmprop_to_secctx+0x43/0x80 [ 118.464240][ T6568] audit_log_task_context+0x77/0x190 [ 118.464286][ T6568] audit_log_task+0xf4/0x250 [ 118.464347][ T6568] audit_seccomp+0x61/0x100 [ 118.464374][ T6568] ? __seccomp_filter+0x68c/0x10d0 [ 118.464399][ T6568] __seccomp_filter+0x69d/0x10d0 [ 118.464438][ T6568] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 118.464559][ T6568] ? vfs_write+0x75e/0x8e0 [ 118.464610][ T6568] __secure_computing+0x82/0x150 [ 118.464640][ T6568] syscall_trace_enter+0xcf/0x1e0 [ 118.464665][ T6568] do_syscall_64+0xac/0x200 [ 118.464707][ T6568] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 118.464741][ T6568] ? clear_bhb_loop+0x40/0x90 [ 118.464768][ T6568] ? clear_bhb_loop+0x40/0x90 [ 118.464792][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.464812][ T6568] RIP: 0033:0x7f737c3ee929 [ 118.464861][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.464885][ T6568] RSP: 002b:00007f737aa57038 EFLAGS: 00000246 ORIG_RAX: 000000000000006a [ 118.464926][ T6568] RAX: ffffffffffffffda RBX: 00007f737c615fa0 RCX: 00007f737c3ee929 [ 118.464940][ T6568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.464952][ T6568] RBP: 00007f737aa57090 R08: 0000000000000000 R09: 0000000000000000 [ 118.465009][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.465024][ T6568] R13: 0000000000000000 R14: 00007f737c615fa0 R15: 00007ffce01d1da8 [ 118.465048][ T6568] [ 118.831577][ T6576] loop0: detected capacity change from 0 to 128 [ 118.887425][ T6578] loop2: detected capacity change from 0 to 1024 [ 118.897489][ T6576] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.055417][ T6578] EXT4-fs: Ignoring removed orlov option [ 119.184563][ T6582] loop1: detected capacity change from 0 to 512 [ 119.300339][ T6585] loop4: detected capacity change from 0 to 512 [ 119.320743][ T6582] ext4: Unknown parameter 'delalloc.dax' [ 119.361243][ T6585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.452651][ T6585] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.022404][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 120.142092][ T6611] loop1: detected capacity change from 0 to 512 [ 120.211445][ T6611] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.933: casefold flag without casefold feature [ 120.290045][ T6611] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.933: couldn't read orphan inode 15 (err -117) [ 120.303980][ T6598] loop2: detected capacity change from 0 to 164 [ 120.445010][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 120.445029][ T29] audit: type=1326 audit(2000000078.030:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f737c3ed290 code=0x7ffc0000 [ 120.511780][ T6598] syz.2.928: attempt to access beyond end of device [ 120.511780][ T6598] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 120.541585][ T29] audit: type=1326 audit(2000000078.070:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f737c3ed677 code=0x7ffc0000 [ 120.565157][ T29] audit: type=1326 audit(2000000078.070:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f737c3ed290 code=0x7ffc0000 [ 120.588715][ T29] audit: type=1326 audit(2000000078.070:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c3ee929 code=0x7ffc0000 [ 120.612272][ T29] audit: type=1326 audit(2000000078.080:7398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f737c3ee929 code=0x7ffc0000 [ 120.659410][ T6616] loop4: detected capacity change from 0 to 512 [ 120.666579][ T6598] syz.2.928: attempt to access beyond end of device [ 120.666579][ T6598] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.705617][ T6616] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.833199][ T6616] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.988724][ T6625] loop1: detected capacity change from 0 to 2048 [ 121.050690][ T29] audit: type=1326 audit(2000000078.320:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.2.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737c3ee929 code=0x7ffc0000 [ 121.074318][ T29] audit: type=1326 audit(2000000078.540:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0874b8e929 code=0x7ffc0000 [ 121.097833][ T29] audit: type=1326 audit(2000000078.540:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0874b8e929 code=0x7ffc0000 [ 121.121395][ T29] audit: type=1326 audit(2000000078.550:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f0874b8e929 code=0x7ffc0000 [ 121.144905][ T29] audit: type=1326 audit(2000000078.550:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6615 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0874b8e929 code=0x7ffc0000 [ 121.223207][ T6628] FAULT_INJECTION: forcing a failure. [ 121.223207][ T6628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.236547][ T6628] CPU: 0 UID: 0 PID: 6628 Comm: syz.3.940 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 121.236625][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.236641][ T6628] Call Trace: [ 121.236649][ T6628] [ 121.236659][ T6628] __dump_stack+0x1d/0x30 [ 121.236686][ T6628] dump_stack_lvl+0xe8/0x140 [ 121.236711][ T6628] dump_stack+0x15/0x1b [ 121.236798][ T6628] should_fail_ex+0x265/0x280 [ 121.236832][ T6628] should_fail+0xb/0x20 [ 121.236862][ T6628] should_fail_usercopy+0x1a/0x20 [ 121.236894][ T6628] _copy_from_user+0x1c/0xb0 [ 121.237003][ T6628] copy_from_sockptr+0x5e/0xa0 [ 121.237033][ T6628] do_ip_setsockopt+0x17e8/0x2240 [ 121.237075][ T6628] ip_setsockopt+0x58/0x110 [ 121.237152][ T6628] tcp_setsockopt+0x98/0xb0 [ 121.237262][ T6628] sock_common_setsockopt+0x66/0x80 [ 121.237292][ T6628] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 121.237348][ T6628] __sys_setsockopt+0x181/0x200 [ 121.237380][ T6628] __x64_sys_setsockopt+0x64/0x80 [ 121.237459][ T6628] x64_sys_call+0x2bd5/0x2fb0 [ 121.237482][ T6628] do_syscall_64+0xd2/0x200 [ 121.237499][ T6628] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 121.237527][ T6628] ? clear_bhb_loop+0x40/0x90 [ 121.237548][ T6628] ? clear_bhb_loop+0x40/0x90 [ 121.237601][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.237703][ T6628] RIP: 0033:0x7f8d9449e929 [ 121.237723][ T6628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.237806][ T6628] RSP: 002b:00007f8d92b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.237827][ T6628] RAX: ffffffffffffffda RBX: 00007f8d946c5fa0 RCX: 00007f8d9449e929 [ 121.237839][ T6628] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000003 [ 121.237850][ T6628] RBP: 00007f8d92b07090 R08: 000000000000000c R09: 0000000000000000 [ 121.237924][ T6628] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 121.237939][ T6628] R13: 0000000000000000 R14: 00007f8d946c5fa0 R15: 00007ffd40d03518 [ 121.237966][ T6628] [ 121.635119][ T6634] loop3: detected capacity change from 0 to 512 [ 121.655274][ T6634] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.740720][ T6634] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.264129][ T6622] loop2: detected capacity change from 0 to 1024 [ 122.292854][ T6622] EXT4-fs: Ignoring removed orlov option [ 122.549070][ T6655] loop1: detected capacity change from 0 to 512 [ 122.590344][ T6655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.631916][ T6655] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.636557][ T6659] loop3: detected capacity change from 0 to 164 [ 122.705605][ T6657] syz.3.949: attempt to access beyond end of device [ 122.705605][ T6657] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 122.722895][ T6657] syz.3.949: attempt to access beyond end of device [ 122.722895][ T6657] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 122.810111][ T6668] 9pnet_fd: Insufficient options for proto=fd [ 123.048000][ T6679] loop3: detected capacity change from 0 to 256 [ 123.100251][ T6685] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 123.191492][ T6679] team0 (unregistering): Port device team_slave_0 removed [ 123.202901][ T6679] team0 (unregistering): Port device team_slave_1 removed [ 123.238751][ T6690] team0 (unregistering): Port device team_slave_0 removed [ 123.258597][ T6690] team0 (unregistering): Port device team_slave_1 removed [ 123.291437][ T6691] loop4: detected capacity change from 0 to 128 [ 123.352287][ T6691] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.954552][ T6706] loop1: detected capacity change from 0 to 164 [ 124.011606][ T6706] syz.1.965: attempt to access beyond end of device [ 124.011606][ T6706] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 124.060173][ T6708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.077728][ T6706] syz.1.965: attempt to access beyond end of device [ 124.077728][ T6706] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 124.600308][ T6717] 9pnet_fd: Insufficient options for proto=fd [ 124.711942][ T6720] loop2: detected capacity change from 0 to 512 [ 124.751747][ T6720] EXT4-fs: Ignoring removed nobh option [ 124.790644][ T6720] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 124.802305][ T6723] loop3: detected capacity change from 0 to 2048 [ 125.190707][ T6731] loop3: detected capacity change from 0 to 2048 [ 125.269361][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 125.518183][ T6739] loop2: detected capacity change from 0 to 512 [ 125.526022][ T6740] loop1: detected capacity change from 0 to 512 [ 125.563575][ T6739] EXT4-fs: Ignoring removed nobh option [ 125.580613][ T6740] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.976: casefold flag without casefold feature [ 125.614398][ T6739] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 125.650183][ T6740] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.976: couldn't read orphan inode 15 (err -117) [ 125.904306][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 125.904325][ T29] audit: type=1326 audit(2000000083.490:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.003779][ T6698] loop0: detected capacity change from 0 to 1024 [ 126.012952][ T29] audit: type=1326 audit(2000000083.520:7672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.036494][ T29] audit: type=1326 audit(2000000083.530:7673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.059891][ T29] audit: type=1326 audit(2000000083.530:7674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.083276][ T29] audit: type=1326 audit(2000000083.530:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.106711][ T29] audit: type=1326 audit(2000000083.530:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.130093][ T29] audit: type=1326 audit(2000000083.530:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.153478][ T29] audit: type=1326 audit(2000000083.530:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.176874][ T29] audit: type=1326 audit(2000000083.540:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.200347][ T29] audit: type=1326 audit(2000000083.540:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6750 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 126.258380][ T6698] EXT4-fs: Ignoring removed orlov option [ 126.303541][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 126.666809][ T6768] 9pnet_fd: Insufficient options for proto=fd [ 126.858338][ T6770] loop2: detected capacity change from 0 to 2048 [ 126.918458][ T6773] loop3: detected capacity change from 0 to 512 [ 127.035698][ T6773] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.246357][ T6785] loop4: detected capacity change from 0 to 128 [ 127.334486][ T6773] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.655999][ T6796] loop3: detected capacity change from 0 to 512 [ 127.791727][ T6796] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.989: casefold flag without casefold feature [ 127.847732][ T6796] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.989: couldn't read orphan inode 15 (err -117) [ 127.950272][ T6802] loop3: detected capacity change from 0 to 512 [ 127.968902][ T6802] ext4: Unknown parameter 'delalloc.dax' [ 128.143638][ T6810] loop4: detected capacity change from 0 to 1024 [ 128.164798][ T6810] EXT4-fs: Ignoring removed nobh option [ 128.170745][ T6810] EXT4-fs: Ignoring removed bh option [ 128.216117][ T6814] loop0: detected capacity change from 0 to 2048 [ 128.310392][ T6810] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.994: Allocating blocks 497-513 which overlap fs metadata [ 128.375699][ T6824] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 128.519473][ T6832] loop2: detected capacity change from 0 to 512 [ 128.529367][ T6832] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1002: casefold flag without casefold feature [ 128.543977][ T6832] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1002: couldn't read orphan inode 15 (err -117) [ 128.651882][ T6836] loop2: detected capacity change from 0 to 512 [ 128.688214][ T6836] ext4: Unknown parameter 'delalloc.dax' [ 129.078355][ T6808] EXT4-fs (loop4): pa ffff888106a1da10: logic 16, phys. 321, len 12 [ 129.086541][ T6808] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 129.100576][ T6847] loop3: detected capacity change from 0 to 2048 [ 129.276547][ T6852] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 131.333232][ T6866] loop3: detected capacity change from 0 to 512 [ 131.391247][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 131.391265][ T29] audit: type=1400 audit(2000000088.980:8125): avc: denied { mounton } for pid=6863 comm="syz.3.1014" path="/206/file0" dev="tmpfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 131.465584][ T6866] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1014: casefold flag without casefold feature [ 131.502396][ T6871] loop2: detected capacity change from 0 to 512 [ 131.532878][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'. [ 131.541966][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1013'. [ 131.558384][ T6871] ext4: Unknown parameter 'delalloc.dax' [ 131.576551][ T6866] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1014: couldn't read orphan inode 15 (err -117) [ 131.618593][ T29] audit: type=1400 audit(2000000089.030:8126): avc: denied { map_create } for pid=6868 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.637957][ T29] audit: type=1400 audit(2000000089.030:8127): avc: denied { bpf } for pid=6868 comm="syz.2.1016" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.658741][ T29] audit: type=1400 audit(2000000089.030:8128): avc: denied { map_read map_write } for pid=6868 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.678648][ T29] audit: type=1400 audit(2000000089.050:8129): avc: denied { create } for pid=6867 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.699435][ T29] audit: type=1400 audit(2000000089.050:8130): avc: denied { prog_load } for pid=6868 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.718605][ T29] audit: type=1400 audit(2000000089.050:8131): avc: denied { perfmon } for pid=6868 comm="syz.2.1016" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.739558][ T29] audit: type=1400 audit(2000000089.050:8132): avc: denied { prog_run } for pid=6868 comm="syz.2.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.758687][ T29] audit: type=1400 audit(2000000089.050:8133): avc: denied { write } for pid=6867 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.779346][ T29] audit: type=1400 audit(2000000089.080:8134): avc: denied { read write } for pid=6868 comm="syz.2.1016" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.851343][ T6866] EXT4-fs mount: 51 callbacks suppressed [ 131.851364][ T6866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.972722][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 131.980975][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 131.988546][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.002010][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.009493][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.017014][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.024503][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.031974][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.039446][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.046925][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.054432][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.061901][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.069324][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.104139][ T6879] loop2: detected capacity change from 0 to 512 [ 132.113366][ T6879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.149970][ T6879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.170228][ T6879] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.180990][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.188468][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.195931][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.203453][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.210894][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.218374][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.225921][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.233454][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.241082][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.248531][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.255956][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.263395][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.270871][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.278318][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.285719][ T3414] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 132.325380][ T3414] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 132.799478][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.864443][ T6879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.997015][ T6889] loop0: detected capacity change from 0 to 1024 [ 133.028229][ T6889] EXT4-fs: Ignoring removed nobh option [ 133.034017][ T6889] EXT4-fs: Ignoring removed bh option [ 133.110247][ T6889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.179290][ T6884] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1020: Allocating blocks 497-513 which overlap fs metadata [ 133.205731][ T6900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.030394][ T6883] EXT4-fs (loop0): pa ffff888106a1d8c0: logic 16, phys. 321, len 12 [ 134.038579][ T6883] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 134.141400][ T6915] loop3: detected capacity change from 0 to 512 [ 134.167406][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.175032][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.182520][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.197894][ T6915] ext4: Unknown parameter 'delalloc.dax' [ 134.216874][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.297451][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.304942][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.312545][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.320280][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.327733][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.335225][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.342673][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.350194][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.357681][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.365160][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.458818][ T6920] loop1: detected capacity change from 0 to 512 [ 134.513513][ T6920] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.640610][ T6920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.679302][ T6938] loop2: detected capacity change from 0 to 512 [ 134.686497][ T6920] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.715502][ T6938] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1037: casefold flag without casefold feature [ 134.757417][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.765045][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.772523][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.779942][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.787458][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.794926][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.802347][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.809764][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.817180][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.824582][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.832019][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.839534][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.846994][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.854396][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.861836][ T3414] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 134.886811][ T6938] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1037: couldn't read orphan inode 15 (err -117) [ 134.937366][ T6938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.031780][ T6945] loop3: detected capacity change from 0 to 512 [ 135.041567][ T6945] EXT4-fs: Ignoring removed oldalloc option [ 135.048493][ T6945] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 135.099745][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.157712][ T6920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.214859][ T3414] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 135.254428][ T6950] fido_id[6950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 135.268643][ T6949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.381878][ T6955] loop2: detected capacity change from 0 to 1024 [ 135.392199][ T6955] EXT4-fs: Ignoring removed nobh option [ 135.397924][ T6955] EXT4-fs: Ignoring removed bh option [ 135.474992][ T6955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.568643][ T6960] loop1: detected capacity change from 0 to 512 [ 135.597191][ T6960] ext4: Unknown parameter 'delalloc.dax' [ 135.685403][ T6955] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1043: Allocating blocks 497-513 which overlap fs metadata [ 136.099130][ T6954] EXT4-fs (loop2): pa ffff888106a1da10: logic 16, phys. 321, len 12 [ 136.107835][ T6954] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 136.200606][ T6978] loop3: detected capacity change from 0 to 164 [ 136.230586][ T6978] syz.3.1050: attempt to access beyond end of device [ 136.230586][ T6978] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 136.230659][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.230677][ T6978] syz.3.1050: attempt to access beyond end of device [ 136.230677][ T6978] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 136.325162][ T6984] netlink: 'syz.2.1052': attribute type 10 has an invalid length. [ 136.422962][ T6988] loop3: detected capacity change from 0 to 512 [ 136.434363][ T6988] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1054: casefold flag without casefold feature [ 136.438156][ T6988] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1054: couldn't read orphan inode 15 (err -117) [ 136.439371][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.446213][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 136.446231][ T29] audit: type=1400 audit(2000000094.030:8692): avc: denied { create } for pid=6986 comm="syz.3.1054" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 136.477932][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.669041][ T29] audit: type=1400 audit(2000000094.070:8693): avc: denied { execmem } for pid=6985 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 138.828738][ T29] audit: type=1326 audit(2000000096.160:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 138.852253][ T29] audit: type=1326 audit(2000000096.160:8695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 139.832173][ T29] audit: type=1326 audit(2000000097.140:8696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 139.855911][ T29] audit: type=1326 audit(2000000097.140:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 139.879613][ T29] audit: type=1326 audit(2000000097.140:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 139.903068][ T29] audit: type=1326 audit(2000000097.140:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 139.926635][ T29] audit: type=1326 audit(2000000097.150:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 139.950233][ T29] audit: type=1326 audit(2000000097.150:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6998 comm="syz.1.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 141.081771][ T7009] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 141.163026][ T7015] loop1: detected capacity change from 0 to 1024 [ 141.174246][ T7015] EXT4-fs: Ignoring removed nobh option [ 141.180078][ T7015] EXT4-fs: Ignoring removed bh option [ 141.258967][ T7015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.462330][ T7015] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1062: Allocating blocks 497-513 which overlap fs metadata [ 141.487839][ T7028] FAULT_INJECTION: forcing a failure. [ 141.487839][ T7028] name failslab, interval 1, probability 0, space 0, times 0 [ 141.500554][ T7028] CPU: 0 UID: 0 PID: 7028 Comm: syz.0.1064 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 141.500583][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.500618][ T7028] Call Trace: [ 141.500626][ T7028] [ 141.500636][ T7028] __dump_stack+0x1d/0x30 [ 141.500662][ T7028] dump_stack_lvl+0xe8/0x140 [ 141.500688][ T7028] dump_stack+0x15/0x1b [ 141.500703][ T7028] should_fail_ex+0x265/0x280 [ 141.500756][ T7028] should_failslab+0x8c/0xb0 [ 141.500786][ T7028] kmem_cache_alloc_node_noprof+0x57/0x320 [ 141.500841][ T7028] ? __alloc_skb+0x101/0x320 [ 141.500878][ T7028] __alloc_skb+0x101/0x320 [ 141.500912][ T7028] ? audit_log_start+0x365/0x6c0 [ 141.500945][ T7028] audit_log_start+0x380/0x6c0 [ 141.501005][ T7028] audit_seccomp+0x48/0x100 [ 141.501039][ T7028] ? __seccomp_filter+0x68c/0x10d0 [ 141.501070][ T7028] __seccomp_filter+0x69d/0x10d0 [ 141.501099][ T7028] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 141.501166][ T7028] ? vfs_write+0x75e/0x8e0 [ 141.501196][ T7028] ? __rcu_read_unlock+0x4f/0x70 [ 141.501218][ T7028] ? __fget_files+0x184/0x1c0 [ 141.501269][ T7028] __secure_computing+0x82/0x150 [ 141.501353][ T7028] syscall_trace_enter+0xcf/0x1e0 [ 141.501407][ T7028] do_syscall_64+0xac/0x200 [ 141.501427][ T7028] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 141.501499][ T7028] ? clear_bhb_loop+0x40/0x90 [ 141.501624][ T7028] ? clear_bhb_loop+0x40/0x90 [ 141.501684][ T7028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.501722][ T7028] RIP: 0033:0x7f6e2343e929 [ 141.501737][ T7028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.501755][ T7028] RSP: 002b:00007f6e21aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.501772][ T7028] RAX: ffffffffffffffda RBX: 00007f6e23665fa0 RCX: 00007f6e2343e929 [ 141.501800][ T7028] RDX: 0000000000000002 RSI: 0000000000005437 RDI: 0000000000000007 [ 141.501812][ T7028] RBP: 00007f6e21aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 141.501825][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.501841][ T7028] R13: 0000000000000000 R14: 00007f6e23665fa0 R15: 00007fff3c5e4058 [ 141.501869][ T7028] [ 141.502128][ T7028] audit_log_lost: 14 callbacks suppressed [ 141.502222][ T7028] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 141.736301][ T7028] audit: out of memory in audit_log_start [ 141.856333][ T7014] EXT4-fs (loop1): pa ffff8881069c0380: logic 16, phys. 321, len 12 [ 141.864537][ T7014] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 141.972351][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.017704][ T29] audit: type=1400 audit(2000000098.780:8716): avc: denied { setopt } for pid=7011 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.017815][ T29] audit: type=1400 audit(2000000098.780:8717): avc: denied { write } for pid=7011 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.017884][ T29] audit: type=1400 audit(2000000098.830:8718): avc: denied { read } for pid=7011 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.017940][ T29] audit: type=1400 audit(2000000098.840:8719): avc: denied { ioctl } for pid=7011 comm="syz.3.1061" path="socket:[14382]" dev="sockfs" ino=14382 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.018046][ T29] audit: type=1326 audit(2000000099.040:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2343e929 code=0x7ffc0000 [ 142.018096][ T29] audit: type=1326 audit(2000000099.040:8721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6e2343e929 code=0x7ffc0000 [ 142.018157][ T29] audit: type=1326 audit(2000000099.040:8722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2343e929 code=0x7ffc0000 [ 142.018268][ T29] audit: type=1326 audit(2000000099.040:8723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.0.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2343e929 code=0x7ffc0000 [ 142.220407][ T7041] loop0: detected capacity change from 0 to 512 [ 142.257634][ T7041] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1069: casefold flag without casefold feature [ 142.257745][ T7041] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1069: couldn't read orphan inode 15 (err -117) [ 142.258640][ T7041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.329246][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.525042][ T7048] loop0: detected capacity change from 0 to 1024 [ 143.371332][ T7048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.423023][ T7048] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.511343][ T7048] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm syz.0.1071: lblock 1 mapped to illegal pblock 1 (length 1) [ 143.743871][ T7048] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 143.756270][ T7048] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.756270][ T7048] [ 143.764722][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881033abc00: rx timeout, send abort [ 143.776726][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881033abc00: 0x20100: (3) A timeout occurred and this is the connection abort to close the session. [ 143.988864][ T7061] loop3: detected capacity change from 0 to 512 [ 143.996743][ T7061] ext4: Unknown parameter 'delalloc.dax' [ 144.148821][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.505324][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 145.044541][ T7075] chnl_net:caif_netlink_parms(): no params data found [ 145.093760][ T7093] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 145.179569][ T7090] loop2: detected capacity change from 0 to 512 [ 145.238039][ T7090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.254358][ T7101] loop3: detected capacity change from 0 to 164 [ 145.297406][ T7101] syz.3.1084: attempt to access beyond end of device [ 145.297406][ T7101] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 145.336889][ T7104] 9pnet_fd: Insufficient options for proto=fd [ 145.447034][ T7101] syz.3.1084: attempt to access beyond end of device [ 145.447034][ T7101] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.476548][ T7090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.508250][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.515514][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.560709][ T7090] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.588378][ T7115] 9pnet: p9_errstr2errno: server reported unknown error L O!L [ 145.603787][ T7075] bridge_slave_0: entered allmulticast mode [ 145.622424][ T7075] bridge_slave_0: entered promiscuous mode [ 145.650925][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.658126][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.710018][ T7075] bridge_slave_1: entered allmulticast mode [ 145.729070][ T7090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.742378][ T7075] bridge_slave_1: entered promiscuous mode [ 145.850225][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.032632][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.181062][ T7075] team0: Port device team_slave_0 added [ 146.206345][ T7075] team0: Port device team_slave_1 added [ 146.308701][ T7122] loop2: detected capacity change from 0 to 2048 [ 146.323848][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.330942][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.357052][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.479939][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.486993][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.513102][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.715628][ T7075] hsr_slave_0: entered promiscuous mode [ 146.784463][ T7075] hsr_slave_1: entered promiscuous mode [ 146.790602][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.798246][ T7075] Cannot create hsr debugfs directory [ 146.914599][ T7122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.989768][ T7131] loop3: detected capacity change from 0 to 128 [ 147.034118][ T7131] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.047571][ T7131] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.097008][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 147.097068][ T29] audit: type=1400 audit(2000000104.600:8823): avc: denied { read write open } for pid=7121 comm="syz.2.1091" path="/241/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 147.126947][ T29] audit: type=1400 audit(2000000104.600:8824): avc: denied { append } for pid=7121 comm="syz.2.1091" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 147.393625][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.470629][ T7075] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.551687][ T7075] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.596869][ T7075] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.611756][ T7075] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.828705][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.843574][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.853680][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.853715][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.877198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.877312][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.072854][ T6476] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.155172][ T7159] netlink: 'syz.2.1098': attribute type 27 has an invalid length. [ 148.199213][ T6476] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.251298][ T7161] loop1: detected capacity change from 0 to 512 [ 148.288606][ T7161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.311579][ T7161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.311726][ T7161] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.337977][ T29] audit: type=1326 audit(2000000105.920:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 148.338128][ T29] audit: type=1326 audit(2000000105.920:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 148.338215][ T29] audit: type=1326 audit(2000000105.920:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 148.338271][ T29] audit: type=1326 audit(2000000105.920:8828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 148.338322][ T29] audit: type=1326 audit(2000000105.920:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 148.338410][ T29] audit: type=1326 audit(2000000105.920:8830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 148.338449][ T29] audit: type=1326 audit(2000000105.920:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 148.338559][ T29] audit: type=1326 audit(2000000105.920:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7160 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21882ce929 code=0x7ffc0000 [ 148.372268][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.372464][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.661119][ T7161] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.919360][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.931535][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.115558][ T7159] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.124834][ T7159] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.133783][ T7159] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.142786][ T7159] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.207126][ T7159] geneve2: left promiscuous mode [ 149.212230][ T7159] geneve2: left allmulticast mode [ 149.229378][ T6476] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.352160][ T6476] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.462403][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.581784][ T7181] loop0: detected capacity change from 0 to 2048 [ 149.603426][ T7178] loop2: detected capacity change from 0 to 164 [ 149.677584][ T6476] bridge_slave_1: left allmulticast mode [ 149.683579][ T6476] bridge_slave_1: left promiscuous mode [ 149.689395][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.797791][ T6476] bridge_slave_0: left allmulticast mode [ 149.803499][ T6476] bridge_slave_0: left promiscuous mode [ 149.809332][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.849066][ T7181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.893062][ T7175] syz.2.1102: attempt to access beyond end of device [ 149.893062][ T7175] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 149.941530][ T7175] syz.2.1102: attempt to access beyond end of device [ 149.941530][ T7175] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.090123][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.404048][ T6476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.457059][ T6476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.473860][ T6476] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 150.484412][ T7214] loop2: detected capacity change from 0 to 164 [ 150.503730][ T6476] bond0 (unregistering): Released all slaves [ 150.524422][ T7214] syz.2.1107: attempt to access beyond end of device [ 150.524422][ T7214] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 150.540331][ T7214] syz.2.1107: attempt to access beyond end of device [ 150.540331][ T7214] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 150.938238][ T6476] hsr_slave_0: left promiscuous mode [ 150.955985][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 150.963601][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 150.971093][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 150.982683][ T6476] hsr_slave_1: left promiscuous mode [ 151.011030][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.018536][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.053433][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.071714][ T7244] 9pnet: p9_errstr2errno: server reported unknown error L O!L [ 151.085953][ T7240] loop1: detected capacity change from 0 to 512 [ 151.097870][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.105491][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.113088][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.120565][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.124780][ T7240] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.127997][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.144150][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.151769][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.159399][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.166974][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.174417][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.182956][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.190446][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.192487][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.198029][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.198060][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.198083][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.198158][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.205571][ T6476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.212993][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.242524][ T7240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.249854][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.249888][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.264594][ T7240] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.269761][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.269785][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.286064][ T7250] loop3: detected capacity change from 0 to 512 [ 151.287672][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.316326][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.323974][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.331467][ T2960] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 151.351115][ T2960] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 151.381790][ T6476] veth1_macvtap: left promiscuous mode [ 151.388139][ T6476] veth0_macvtap: left promiscuous mode [ 151.393681][ T6476] veth1_vlan: left promiscuous mode [ 151.399309][ T6476] veth0_vlan: left promiscuous mode [ 151.405523][ T7250] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1111: casefold flag without casefold feature [ 151.441443][ T7254] loop0: detected capacity change from 0 to 1024 [ 151.450112][ T7250] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1111: couldn't read orphan inode 15 (err -117) [ 151.473803][ T7254] EXT4-fs: Ignoring removed nobh option [ 151.477502][ T7240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.480195][ T7254] EXT4-fs: Ignoring removed bh option [ 151.495049][ T7253] fido_id[7253]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 151.531245][ T7250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.587608][ T7254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.612423][ T7262] netlink: 2564 bytes leftover after parsing attributes in process `syz.1.1115'. [ 151.637167][ T6476] team0 (unregistering): Port device team_slave_1 removed [ 151.650357][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.662847][ T6476] team0 (unregistering): Port device team_slave_0 removed [ 151.682775][ T7254] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1112: Allocating blocks 497-513 which overlap fs metadata [ 151.730189][ T7268] loop3: detected capacity change from 0 to 2048 [ 151.758173][ T7268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.780346][ T7252] EXT4-fs (loop0): pa ffff8881069c03f0: logic 16, phys. 321, len 12 [ 151.788638][ T7252] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 151.828967][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.842870][ T7075] veth0_vlan: entered promiscuous mode [ 151.867061][ T7075] veth1_vlan: entered promiscuous mode [ 151.897493][ T7075] veth0_macvtap: entered promiscuous mode [ 151.918866][ T7075] veth1_macvtap: entered promiscuous mode [ 151.962222][ T7279] loop0: detected capacity change from 0 to 1024 [ 151.970040][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.979777][ T7279] EXT4-fs: Ignoring removed orlov option [ 151.991521][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.007377][ T7279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.026094][ T7075] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.035208][ T7075] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.044174][ T7075] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.053005][ T7075] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.203607][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 152.203625][ T29] audit: type=1400 audit(2000000109.790:8907): avc: denied { create } for pid=7298 comm="syz.5.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.249921][ T7300] FAULT_INJECTION: forcing a failure. [ 152.249921][ T7300] name failslab, interval 1, probability 0, space 0, times 0 [ 152.262643][ T7300] CPU: 1 UID: 0 PID: 7300 Comm: syz.5.1079 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 152.262678][ T7300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.262732][ T7300] Call Trace: [ 152.262741][ T7300] [ 152.262758][ T7300] __dump_stack+0x1d/0x30 [ 152.262779][ T7300] dump_stack_lvl+0xe8/0x140 [ 152.262798][ T7300] dump_stack+0x15/0x1b [ 152.262888][ T7300] should_fail_ex+0x265/0x280 [ 152.262945][ T7300] should_failslab+0x8c/0xb0 [ 152.262975][ T7300] kmem_cache_alloc_noprof+0x50/0x310 [ 152.263008][ T7300] ? audit_log_start+0x365/0x6c0 [ 152.263070][ T7300] audit_log_start+0x365/0x6c0 [ 152.263117][ T7300] audit_seccomp+0x48/0x100 [ 152.263197][ T7300] ? __seccomp_filter+0x68c/0x10d0 [ 152.263288][ T7300] __seccomp_filter+0x69d/0x10d0 [ 152.263317][ T7300] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 152.263362][ T7300] ? vfs_write+0x75e/0x8e0 [ 152.263439][ T7300] ? __rcu_read_unlock+0x4f/0x70 [ 152.263466][ T7300] ? __fget_files+0x184/0x1c0 [ 152.263496][ T7300] __secure_computing+0x82/0x150 [ 152.263524][ T7300] syscall_trace_enter+0xcf/0x1e0 [ 152.263570][ T7300] do_syscall_64+0xac/0x200 [ 152.263593][ T7300] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.263625][ T7300] ? clear_bhb_loop+0x40/0x90 [ 152.263646][ T7300] ? clear_bhb_loop+0x40/0x90 [ 152.263667][ T7300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.263698][ T7300] RIP: 0033:0x7f7c7befe929 [ 152.263719][ T7300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.263815][ T7300] RSP: 002b:00007f7c7a567038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 152.263836][ T7300] RAX: ffffffffffffffda RBX: 00007f7c7c125fa0 RCX: 00007f7c7befe929 [ 152.263851][ T7300] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffffff [ 152.263866][ T7300] RBP: 00007f7c7a567090 R08: 0000000000000000 R09: 0000000000000000 [ 152.263881][ T7300] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 152.263896][ T7300] R13: 0000000000000000 R14: 00007f7c7c125fa0 R15: 00007ffd8a807608 [ 152.263975][ T7300] [ 152.263985][ T7300] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 152.483091][ T7300] audit: out of memory in audit_log_start [ 152.489835][ T29] audit: type=1326 audit(2000000109.830:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7befe929 code=0x7ffc0000 [ 152.513344][ T29] audit: type=1326 audit(2000000109.830:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f7c7befe929 code=0x7ffc0000 [ 152.536946][ T29] audit: type=1326 audit(2000000109.830:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7befe929 code=0x7ffc0000 [ 152.560399][ T29] audit: type=1326 audit(2000000109.830:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c7befe929 code=0x7ffc0000 [ 152.581016][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.584003][ T29] audit: type=1326 audit(2000000109.830:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7befe929 code=0x7ffc0000 [ 152.616402][ T29] audit: type=1326 audit(2000000109.830:8913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c7befe929 code=0x7ffc0000 [ 152.639805][ T29] audit: type=1400 audit(2000000109.830:8914): avc: denied { write } for pid=7298 comm="syz.5.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.865076][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.989340][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 153.020692][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'. [ 153.029733][ T7345] netlink: 'syz.5.1128': attribute type 18 has an invalid length. [ 153.037603][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 153.068661][ T7337] loop1: detected capacity change from 0 to 1024 [ 153.082207][ T7351] loop5: detected capacity change from 0 to 512 [ 153.089046][ T7337] EXT4-fs (loop1): Can't support bigalloc feature without extents feature [ 153.089046][ T7337] [ 153.099908][ T7337] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 153.145952][ T7357] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.1131'. [ 153.163731][ T7351] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 153.193742][ T7351] EXT4-fs (loop5): orphan cleanup on readonly fs [ 153.201641][ T7351] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 153.228817][ T7351] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 153.264762][ T7351] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1128: bg 0: block 40: padding at end of block bitmap is not set [ 153.286668][ T7351] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 153.295935][ T7351] EXT4-fs (loop5): 1 truncate cleaned up [ 153.302683][ T7351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 153.378613][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.395490][ T7372] loop1: detected capacity change from 0 to 1024 [ 153.434289][ T7372] EXT4-fs: Ignoring removed orlov option [ 153.463145][ T7372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.507484][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.515048][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.522683][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.532571][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.540209][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.547807][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.555248][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.562798][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.570270][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.577875][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.585386][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.592914][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.600377][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.607889][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.615580][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.623077][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.630993][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.638463][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.645953][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.653522][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.660983][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.668505][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.676029][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.683484][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.690961][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.698456][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.705970][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.713622][ T3387] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 153.730625][ T7394] loop5: detected capacity change from 0 to 512 [ 153.742461][ T3387] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 153.752145][ T7394] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.763676][ T7393] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 153.877120][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 153.884652][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 153.892133][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 153.904007][ T7394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.921684][ T7394] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.971213][ T7406] fido_id[7406]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.011978][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.019519][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.027068][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.034571][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.042063][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.049516][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.057070][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.064526][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.072027][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.079549][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.143742][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.151287][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.158784][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.166283][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.174034][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.181698][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.189294][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.190066][ T7411] loop0: detected capacity change from 0 to 512 [ 154.196930][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.210707][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.218173][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.225682][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.233289][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.240990][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.248497][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.255986][ T3387] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 154.266520][ T7404] loop3: detected capacity change from 0 to 256 [ 154.273402][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.275776][ T3387] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 154.282403][ T7411] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.304160][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.339877][ T7404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 154.348446][ T7404] FAT-fs (loop3): Filesystem has been set read-only [ 154.361215][ T7404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 154.403607][ T7418] fido_id[7418]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.405244][ T7411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.442701][ T7404] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 154.480928][ T7404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 154.490004][ T7434] netlink: 2564 bytes leftover after parsing attributes in process `syz.1.1144'. [ 154.529858][ T7411] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.568708][ T7430] loop2: detected capacity change from 0 to 164 [ 154.618797][ T7439] loop1: detected capacity change from 0 to 512 [ 154.645191][ T7443] loop5: detected capacity change from 0 to 256 [ 154.710353][ T7416] syz.2.1145: attempt to access beyond end of device [ 154.710353][ T7416] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 154.744433][ T7449] loop3: detected capacity change from 0 to 512 [ 154.751415][ T7439] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1147: casefold flag without casefold feature [ 154.766916][ T7416] syz.2.1145: attempt to access beyond end of device [ 154.766916][ T7416] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 154.808757][ T7433] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 154.817010][ T7433] FAT-fs (loop5): Filesystem has been set read-only [ 154.838270][ T7439] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1147: couldn't read orphan inode 15 (err -117) [ 154.851984][ T7433] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 154.864192][ T7449] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1149: casefold flag without casefold feature [ 154.878521][ T7433] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 154.879537][ T7439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.923107][ T7411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.967372][ T7449] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1149: couldn't read orphan inode 15 (err -117) [ 154.987045][ T7433] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 198) [ 155.013958][ T7466] loop2: detected capacity change from 0 to 512 [ 155.031126][ T7466] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.048831][ T7449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.067762][ T7467] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 155.112005][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.122329][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.152603][ T7466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.202949][ T7466] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.270720][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.293736][ T7482] loop3: detected capacity change from 0 to 1024 [ 155.331128][ T7482] EXT4-fs: Ignoring removed orlov option [ 155.364082][ T7495] netlink: 2564 bytes leftover after parsing attributes in process `syz.0.1158'. [ 155.372414][ T7482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.592183][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'. [ 155.601532][ T7512] netlink: 'syz.1.1160': attribute type 18 has an invalid length. [ 155.609477][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 155.635915][ T7493] loop2: detected capacity change from 0 to 164 [ 155.727020][ T7512] loop1: detected capacity change from 0 to 512 [ 155.749960][ T7512] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 155.763916][ T7512] EXT4-fs (loop1): orphan cleanup on readonly fs [ 155.784332][ T7512] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 155.800441][ T7512] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 155.809758][ T7512] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1160: bg 0: block 40: padding at end of block bitmap is not set [ 155.846825][ T7512] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 155.866245][ T7512] EXT4-fs (loop1): 1 truncate cleaned up [ 155.880645][ T7512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.931031][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.940910][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.077132][ T7524] loop5: detected capacity change from 0 to 512 [ 156.091864][ T7526] loop2: detected capacity change from 0 to 512 [ 156.092006][ T7524] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.1163: casefold flag without casefold feature [ 156.121467][ T7524] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1163: couldn't read orphan inode 15 (err -117) [ 156.136257][ T7524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.166415][ T7529] loop3: detected capacity change from 0 to 164 [ 156.168193][ T7526] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.1164: casefold flag without casefold feature [ 156.214435][ T7529] syz.3.1161: attempt to access beyond end of device [ 156.214435][ T7529] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 156.230438][ T7526] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.1164: couldn't read orphan inode 15 (err -117) [ 156.282330][ T7075] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.285994][ T7526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.304739][ T7529] syz.3.1161: attempt to access beyond end of device [ 156.304739][ T7529] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 156.312438][ T7534] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.336213][ T7537] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.349015][ T7537] xt_HMARK: spi-set and port-set can't be combined [ 156.365428][ T7537] loop0: detected capacity change from 0 to 256 [ 156.385848][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.429233][ T7537] FAT-fs (loop0): Directory bread(block 64) failed [ 156.435812][ T7537] FAT-fs (loop0): Directory bread(block 65) failed [ 156.490636][ T7541] loop2: detected capacity change from 0 to 2048 [ 156.491132][ T7537] FAT-fs (loop0): Directory bread(block 66) failed [ 156.516934][ T7537] FAT-fs (loop0): Directory bread(block 67) failed [ 156.523883][ T7537] FAT-fs (loop0): Directory bread(block 68) failed [ 156.525562][ T7541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.531238][ T7537] FAT-fs (loop0): Directory bread(block 69) failed [ 156.553299][ T7537] FAT-fs (loop0): Directory bread(block 70) failed [ 156.560241][ T7537] FAT-fs (loop0): Directory bread(block 71) failed [ 156.566959][ T7537] FAT-fs (loop0): Directory bread(block 72) failed [ 156.573607][ T7537] FAT-fs (loop0): Directory bread(block 73) failed [ 156.613089][ T7537] syz.0.1166: attempt to access beyond end of device [ 156.613089][ T7537] loop0: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 156.627262][ T7537] syz.0.1166: attempt to access beyond end of device [ 156.627262][ T7537] loop0: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 156.646337][ T7542] loop5: detected capacity change from 0 to 164 [ 156.690522][ T7539] syz.5.1167: attempt to access beyond end of device [ 156.690522][ T7539] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 156.710491][ T7552] loop3: detected capacity change from 0 to 256 [ 156.754601][ T7552] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 156.762883][ T7552] FAT-fs (loop3): Filesystem has been set read-only [ 156.767005][ T7555] loop0: detected capacity change from 0 to 1024 [ 156.776702][ T7539] syz.5.1167: attempt to access beyond end of device [ 156.776702][ T7539] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 156.796225][ T7555] EXT4-fs: Ignoring removed nobh option [ 156.802242][ T7555] EXT4-fs: Ignoring removed bh option [ 156.820613][ T7552] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 156.834003][ T7555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.932782][ T7552] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 156.953636][ T7552] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 157.001862][ T7555] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1170: Allocating blocks 497-513 which overlap fs metadata [ 157.023997][ T2997] ================================================================== [ 157.032120][ T2997] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 157.038908][ T2997] [ 157.041251][ T2997] write to 0xffff8881015ea618 of 8 bytes by task 3306 on cpu 0: [ 157.048989][ T2997] inc_diskseq+0x2d/0x40 [ 157.053248][ T2997] disk_force_media_change+0x9e/0xe0 [ 157.058572][ T2997] lo_release+0x2cb/0x400 [ 157.062933][ T2997] bdev_release+0x373/0x3d0 [ 157.067475][ T2997] blkdev_release+0x15/0x20 [ 157.071998][ T2997] __fput+0x298/0x650 [ 157.076021][ T2997] fput_close_sync+0x6e/0x120 [ 157.080733][ T2997] __x64_sys_close+0x56/0xf0 [ 157.085348][ T2997] x64_sys_call+0x2747/0x2fb0 [ 157.090058][ T2997] do_syscall_64+0xd2/0x200 [ 157.094575][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.100499][ T2997] [ 157.102863][ T2997] read to 0xffff8881015ea618 of 8 bytes by task 2997 on cpu 1: [ 157.110450][ T2997] block_uevent+0x31/0x50 [ 157.114811][ T2997] dev_uevent+0x34c/0x3d0 [ 157.119210][ T2997] uevent_show+0x11a/0x200 [ 157.123661][ T2997] dev_attr_show+0x3f/0xa0 [ 157.128138][ T2997] sysfs_kf_seq_show+0x1a3/0x280 [ 157.133122][ T2997] kernfs_seq_show+0x82/0xa0 [ 157.137746][ T2997] seq_read_iter+0x316/0x940 [ 157.142397][ T2997] kernfs_fop_read_iter+0xc4/0x300 [ 157.147540][ T2997] vfs_read+0x5cd/0x6f0 [ 157.151745][ T2997] ksys_read+0xda/0x1a0 [ 157.155939][ T2997] __x64_sys_read+0x40/0x50 [ 157.160497][ T2997] x64_sys_call+0x2d77/0x2fb0 [ 157.165237][ T2997] do_syscall_64+0xd2/0x200 [ 157.169771][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.175694][ T2997] [ 157.178060][ T2997] value changed: 0x0000000000000281 -> 0x0000000000000287 [ 157.185183][ T2997] [ 157.187527][ T2997] Reported by Kernel Concurrency Sanitizer on: [ 157.193698][ T2997] CPU: 1 UID: 0 PID: 2997 Comm: udevd Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 157.204051][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.214131][ T2997] ================================================================== [ 157.235981][ T7581] loop1: detected capacity change from 0 to 256 [ 157.283162][ T7554] EXT4-fs (loop0): pa ffff8881069c0380: logic 16, phys. 321, len 12 [ 157.286227][ T7586] loop5: detected capacity change from 0 to 1024 [ 157.291266][ T7554] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 157.300330][ T7586] EXT4-fs: Ignoring removed orlov option [ 157.317741][ T7578] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 157.325877][ T7578] FAT-fs (loop1): Filesystem has been set read-only [ 157.336248][ T7578] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 157.348122][ T7578] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 157.373466][ T7578] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198)