last executing test programs: 4.418577271s ago: executing program 4 (id=1083): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) 4.345785137s ago: executing program 4 (id=1086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.072252631s ago: executing program 4 (id=1092): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x53143df}}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000640)={0x10, 0x30, 0xfa00, {&(0x7f0000000480), 0x4, {0xa, 0x4e21, 0x71b, @remote, 0x3}}}, 0xfffffe2f) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000980)='kfree\x00', r5}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x82710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000007c0)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x30040004) 3.021215545s ago: executing program 4 (id=1094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.390103506s ago: executing program 3 (id=1104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") 2.081178351s ago: executing program 4 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',msize=0x0000000000001000']) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x0, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000010000000000000004000000555506000800000001410a00f0ffffff850000008f14baa42100000095000016000000006ab9fcfffcffffff95000000000000007190f8350c669ea06ff08b3b036232c5c90fde591a17018a2d82bd237b90dbfb8d64458fbfc94e3cc4f1796f8b3b0a4788c5dd7556a7819af9f1eaeef9452ab1dde337821fe9c77ed3ae19fd27fbf73181b117b3a84c3b6118c854cb6e97675a527a7969468fe7de2bba5c622273dc0462e508f5bc040ff6aff91dd386ab83d93af68eb8018362d7a0c66c28f195a3a6f47544402d6bb2425af2a274d01c9235fe9990893a5fc5e214e60014cdbbf489c3b08291362a5ecae09eb7fdf8752a3d444dce56b1fe76e961f382c776df97be83b6ff87d93f34c935a39bdfc12dcc86397820ed2df2dc11cd6ba3dfe9f5014707ab3cb1c9cf7db8064fbcfd4c1be5db94a91c2e0cd3818a9c763277"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x7e, &(0x7f0000000300)=""/126, 0x40f00, 0x2, '\x00', r0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x3, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[r4], &(0x7f0000000740)=[{0x4, 0x5, 0x10, 0x7}, {0x3, 0x1, 0x4, 0xc}, {0x4, 0x5, 0x7, 0xa}, {0x2, 0x3, 0x3, 0x4}], 0x10, 0x3852f428}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$phonet(r3, &(0x7f0000000a40)="3a5e6aa273569b9f6d3c6bc9cea08be855ae41c65ea25e508efde92fd8cb2d110e8c9098de7cad5d808ce8e414ecffe14c68b0e54409cd0fbde64e35bd9e616890df6204673072e88eb16bdc3d408b6da3a813cdcefcd4875032561a82ade81bfeb9d48a1554bd425ca6711035ee7d1ca2a5c6b16628d06647f856fd205d67c5fb68b0b241bcaa7972d80acbfad3d31090217b1270cb1421e4aeabb3", 0x9c, 0x8080, &(0x7f0000000240)={0x23, 0x6, 0x1, 0x55}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r11, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 2.014681316s ago: executing program 2 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) iopl(0x3) r2 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, 0x0, 0x0, 0x0) 1.981350409s ago: executing program 2 (id=1110): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x10004024) 1.980429259s ago: executing program 2 (id=1111): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) 1.929508773s ago: executing program 2 (id=1113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000050a0102000000000000000001fa1f000c00024000000000000000010900"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r2 = open(&(0x7f0000000200)='./bus\x00', 0x10080, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000008000000020000000400000005000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000008067a7d808839e88c0bd188bd"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000d635932f86d8c161e9ca6bdd6c370c8900002b01fc020000000000000000000000000001fe8000000000000000000000000000aa86addb8c3432e858847d11157225a7857483ccd65625561c8596b512a72093f161d1dca022aef8bee121d0ad8b93478f0b325b6ce9cb69279686a205f8526618e1a40c1bfe1ea51a4fe1fae03591c47f66fd41546012115892b8746935d07df5b6ccf22e01a4d29744fe90066f6ed1c5d7e3a20a3e994cd43e9be4a417b0a569dbc198ef62092373acb6205f57c6bd816ca196f5d2c033f223fdf2845bae0a946831d00ca0449a23e4"], 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r6, 0x7}, 0x8) acct(0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 1.205285322s ago: executing program 4 (id=1118): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x0, 0x0}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x2, 0x7f03) unshare(0x40020480) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f626174616476001c00038018000380"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 971.442851ms ago: executing program 2 (id=1119): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") 970.367031ms ago: executing program 3 (id=1120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) iopl(0x3) r2 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, 0x0, 0x0, 0x0) 874.545769ms ago: executing program 0 (id=1122): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="c732b9ec19f273e7ada7195503ff766c124a1b6c06fcd65c8ca9224e96e15d7f852c26e1179e6ff40239794828361eb4baa4f20114b0", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4048000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_emit_ethernet(0x191, &(0x7f00000005c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @empty, @void, {@ipv4={0x800, @dccp={{0x31, 0x4, 0x0, 0x2b, 0x183, 0x68, 0x0, 0x4, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@cipso={0x86, 0x4d, 0x3, [{0x5, 0x8, "0077a77d9a54"}, {0x1, 0x7, "e7fb51cdbe"}, {0x5, 0xa, "5a8341ce453db5dc"}, {0x0, 0xf, "3d7712385c1475ca7fea252455"}, {0x0, 0x4, "d874"}, {0x2, 0x6, "3aa2c7cf"}, {0x7, 0x3, 'C'}, {0x0, 0x5, 'mA['}, {0x7, 0x6, "f0cfead5"}, {0x7, 0x7, "c32ba10448"}]}, @rr={0x7, 0x3, 0x61}, @lsrr={0x83, 0x13, 0x8f, [@dev={0xac, 0x14, 0x14, 0x31}, @empty, @loopback, @local]}, @ra={0x94, 0x4, 0x1}, @noop, @end, @cipso={0x86, 0x44, 0x2, [{0x6, 0xe, "41122369f34191d2ac79f071"}, {0x6, 0x8, "4bc9ea823e8c"}, {0x6, 0x4, '\r|'}, {0x1, 0x5, 'o\as'}, {0x6, 0x8, "46c026ba0ade"}, {0x2, 0x9, "2121e9ab023aae"}, {0x5, 0xe, "04a2587f403d789f77b030d0"}]}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0x8, 0x1, "af189d", 0x32, "ffca18"}, "795ef89d9eac1552b605606054a597c0c86b97783cebd510228bc8b6d2e9b4efe64bc454c343fbb53d289de02687b2099228cb5016ca5154a2e0eee3a5a501f6f82a2dee7c088a224f0447866d518d9330a0f33a63c98a72feed524432d819cdf67ff3c5775379b4c7224a8a0bf6a634253b7545b0930ec4944d3371494c21508fc8ccf55360a9da832f7807e44132d1d836b6294185974895fd813b4782fc5a955e6c28d2ece42ad7097b283da761"}}}}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lsm_list_modules(&(0x7f00000003c0), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r9, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x80) syz_clone(0x28000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 819.629694ms ago: executing program 3 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x3, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r3, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x41, 0x8001, 0x49c, 0x1, 0x8, 0x0, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x5, 0x5, 0x0, 0x9, 0x40, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x3c, 0x6, 0x4, 0x1, 0x8000, 0xc9b2}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000400)="dd4eb4ab30ad3bdfdeaeda8b14ef8514913739405f2cecad811d9324f071554673bc80d37246cef4c20c6620e5e2160f1addf0b68f6e02923198e8f3bb8e6042a3fdfb0a554cca3c5335adcf31", 0x4d, 0x4000, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000b00)={'ip_vti0\x00', r6, 0x80, 0x80, 0x40007, 0x4, {{0x27, 0x4, 0x2, 0x8, 0x9c, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x23, 0x0, [{0x7, 0x12, "a3175dfd23b92c8caa06a6ed46f02493"}, {0x1, 0xb, "82a24e2450b54e7a5a"}]}, @ssrr={0x89, 0x1b, 0x92, [@multicast1, @private=0xa010101, @empty, @empty, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x7, 0x63, [@empty]}, @ssrr={0x89, 0x7, 0x5b, [@local]}, @rr={0x7, 0x17, 0xf2, [@remote, @multicast1, @private=0xa010100, @multicast2, @multicast2]}, @ssrr={0x89, 0x7, 0xec, [@local]}, @cipso={0x86, 0x19, 0x3, [{0x5, 0xc, "c1ba568b96709e9aeb4c"}, {0x0, 0x3, "f6"}, {0x7, 0x4, "038c"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYRESDEC=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="50a17bcb727d06164e55cd43052a9b426e773f68b51ce4a50886cbd38e8d3b255384abf7f91ce1193f7ea50fbcd3139b028343c352a2ab1bb0955467328e96fa677f53186948d9824291626d2027289d172ca812f05716bfba153c89f24c72ff6b1a529c8e0a2bee36c6ebc1e802fefd35ecf585d677b360fa3dc7cff73d848ba3928ffaf46d6d63874bfd295246648228f330994cb9502b8e7c837051d73a952b72c4d7fc0a1886ebe9a119c47567f04000"/188], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 767.585657ms ago: executing program 3 (id=1124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x3, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000cc0)=ANY=[@ANYRESHEX], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x41, 0x8001, 0x49c, 0x1, 0x8, 0x0, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x5, 0x5, 0x0, 0x9, 0x40, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x3c, 0x6, 0x4, 0x1, 0x8000, 0xc9b2}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r8, &(0x7f0000000400)="dd4eb4ab30ad3bdfdeaeda8b14ef8514913739405f2cecad811d9324f071554673bc80d37246cef4c20c6620e5e2160f1addf0b68f6e02923198e8f3bb8e6042a3fdfb0a554cca3c5335adcf31", 0x4d, 0x4000, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000b00)={'ip_vti0\x00', r7, 0x80, 0x80, 0x40007, 0x4, {{0x27, 0x4, 0x2, 0x8, 0x9c, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x23, 0x0, [{0x7, 0x12, "a3175dfd23b92c8caa06a6ed46f02493"}, {0x1, 0xb, "82a24e2450b54e7a5a"}]}, @ssrr={0x89, 0x1b, 0x92, [@multicast1, @private=0xa010101, @empty, @empty, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x7, 0x63, [@empty]}, @ssrr={0x89, 0x7, 0x5b, [@local]}, @rr={0x7, 0x17, 0xf2, [@remote, @multicast1, @private=0xa010100, @multicast2, @multicast2]}, @ssrr={0x89, 0x7, 0xec, [@local]}, @cipso={0x86, 0x19, 0x3, [{0x5, 0xc, "c1ba568b96709e9aeb4c"}, {0x0, 0x3, "f6"}, {0x7, 0x4, "038c"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYRESDEC=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="50a17bcb727d06164e55cd43052a9b426e773f68b51ce4a50886cbd38e8d3b255384abf7f91ce1193f7ea50fbcd3139b028343c352a2ab1bb0955467328e96fa677f53186948d9824291626d2027289d172ca812f05716bfba153c89f24c72ff6b1a529c8e0a2bee36c6ebc1e802fefd35ecf585d677b360fa3dc7cff73d848ba3928ffaf46d6d63874bfd295246648228f330994cb9502b8e7c837051d73a952b72c4d7fc0a1886ebe9a119c47567f04000"/188], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) 734.99354ms ago: executing program 0 (id=1125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) tee(r0, r0, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x4b) write$P9_RRENAMEAT(r2, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7c00, 0x0, 0x3) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0xa8) r10 = dup(r9) r11 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r10, r11, 0x0, 0x8000fffffffe) 628.973059ms ago: executing program 1 (id=1127): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="c732b9ec19f273e7ada7195503ff766c124a1b6c06fcd65c8ca9224e96e15d7f852c26e1179e6ff40239794828361eb4baa4f20114b0", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4048000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) lsm_list_modules(&(0x7f00000003c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) syz_clone(0x28000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4a, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/50}}}}}}, 0x0) 614.81292ms ago: executing program 3 (id=1128): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113369df8b913f2c0f5bc12e941d0000", 0x15}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a49", 0xb0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830272440b95c66d0aa091c738b41f76df43c9498d47f3d35a56205f4c1050cabb8cfd44814884bee33f0131915ac98d983f3cf39715100f932bc657d764c61dd2bb28be0b1a88aa08d2d0bc3d7347506ac629d201098307f21becdf4d9010a4cf9e378b439", 0x129}], 0x1}}], 0x2, 0x400c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0xdf9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 568.188514ms ago: executing program 0 (id=1129): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) 511.854868ms ago: executing program 3 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000050a0102000000000000000001fa1f000c00024000000000000000010900010073797a3100000000180004801400030076655b68315f6d6163"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r2 = open(&(0x7f0000000200)='./bus\x00', 0x10080, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000008000000020000000400000005000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000008067a7d808839e88c0bd188bd"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000d635932f86d8c161e9ca6bdd6c370c8900002b01fc020000000000000000000000000001fe8000000000000000000000000000aa86addb8c3432e858847d11157225a7857483ccd65625561c8596b512a72093f161d1dca022aef8bee121d0ad8b93478f0b325b6ce9cb69279686a205f8526618e1a40c1bfe1ea51a4fe1fae03591c47f66fd41546012115892b8746935d07df5b6ccf22e01a4d29744fe90066f6ed1c5d7e3a20a3e994cd43e9be4a417b0a569dbc198ef62092373acb6205f57c6bd816ca196f5d2c033f223fdf2845bae0a946831d00ca0449a23e4"], 0x0) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r6, 0x7}, 0x8) acct(0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 441.811824ms ago: executing program 2 (id=1131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r4 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_genetlink_get_family_id$ipvs(0x0, r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x1}) io_uring_enter(r4, 0x8ba, 0x696d, 0x20, 0x0, 0x0) recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) 377.310329ms ago: executing program 1 (id=1132): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="c732b9ec19f273e7ada7195503ff766c124a1b6c06fcd65c8ca9224e96e15d7f852c26e1179e6ff40239794828361eb4baa4f20114b0", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4048000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) lsm_list_modules(&(0x7f00000003c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) syz_clone(0x28000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_emit_ethernet(0x85, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x63, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/75}}}}}}, 0x0) 355.559411ms ago: executing program 0 (id=1133): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) 277.076917ms ago: executing program 0 (id=1134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x3, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r3, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x41, 0x8001, 0x49c, 0x1, 0x8, 0x0, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x5, 0x5, 0x0, 0x9, 0x40, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x3c, 0x6, 0x4, 0x1, 0x8000, 0xc9b2}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000400)="dd4eb4ab30ad3bdfdeaeda8b14ef8514913739405f2cecad811d9324f071554673bc80d37246cef4c20c6620e5e2160f1addf0b68f6e02923198e8f3bb8e6042a3fdfb0a554cca3c5335adcf31", 0x4d, 0x4000, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000b00)={'ip_vti0\x00', r6, 0x80, 0x80, 0x40007, 0x4, {{0x27, 0x4, 0x2, 0x8, 0x9c, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x23, 0x0, [{0x7, 0x12, "a3175dfd23b92c8caa06a6ed46f02493"}, {0x1, 0xb, "82a24e2450b54e7a5a"}]}, @ssrr={0x89, 0x1b, 0x92, [@multicast1, @private=0xa010101, @empty, @empty, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x7, 0x63, [@empty]}, @ssrr={0x89, 0x7, 0x5b, [@local]}, @rr={0x7, 0x17, 0xf2, [@remote, @multicast1, @private=0xa010100, @multicast2, @multicast2]}, @ssrr={0x89, 0x7, 0xec, [@local]}, @cipso={0x86, 0x19, 0x3, [{0x5, 0xc, "c1ba568b96709e9aeb4c"}, {0x0, 0x3, "f6"}, {0x7, 0x4, "038c"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYRESDEC=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="50a17bcb727d06164e55cd43052a9b426e773f68b51ce4a50886cbd38e8d3b255384abf7f91ce1193f7ea50fbcd3139b028343c352a2ab1bb0955467328e96fa677f53186948d9824291626d2027289d172ca812f05716bfba153c89f24c72ff6b1a529c8e0a2bee36c6ebc1e802fefd35ecf585d677b360fa3dc7cff73d848ba3928ffaf46d6d63874bfd295246648228f330994cb9502b8e7c837051d73a952b72c4d7fc0a1886ebe9a119c47567f04000"/188], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 275.749337ms ago: executing program 1 (id=1135): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="c732b9ec19f273e7ada7195503ff766c124a1b6c06fcd65c8ca9224e96e15d7f852c26e1179e6ff40239794828361eb4baa4f20114b0", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x10, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4048000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) syz_emit_ethernet(0x191, &(0x7f00000005c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @empty, @void, {@ipv4={0x800, @dccp={{0x31, 0x4, 0x0, 0x2b, 0x183, 0x68, 0x0, 0x4, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@cipso={0x86, 0x4d, 0x3, [{0x5, 0x8, "0077a77d9a54"}, {0x1, 0x7, "e7fb51cdbe"}, {0x5, 0xa, "5a8341ce453db5dc"}, {0x0, 0xf, "3d7712385c1475ca7fea252455"}, {0x0, 0x4, "d874"}, {0x2, 0x6, "3aa2c7cf"}, {0x7, 0x3, 'C'}, {0x0, 0x5, 'mA['}, {0x7, 0x6, "f0cfead5"}, {0x7, 0x7, "c32ba10448"}]}, @rr={0x7, 0x3, 0x61}, @lsrr={0x83, 0x13, 0x8f, [@dev={0xac, 0x14, 0x14, 0x31}, @empty, @loopback, @local]}, @ra={0x94, 0x4, 0x1}, @noop, @end, @cipso={0x86, 0x44, 0x2, [{0x6, 0xe, "41122369f34191d2ac79f071"}, {0x6, 0x8, "4bc9ea823e8c"}, {0x6, 0x4, '\r|'}, {0x1, 0x5, 'o\as'}, {0x6, 0x8, "46c026ba0ade"}, {0x2, 0x9, "2121e9ab023aae"}, {0x5, 0xe, "04a2587f403d789f77b030d0"}]}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0x8, 0x1, "af189d", 0x32, "ffca18"}, "795ef89d9eac1552b605606054a597c0c86b97783cebd510228bc8b6d2e9b4efe64bc454c343fbb53d289de02687b2099228cb5016ca5154a2e0eee3a5a501f6f82a2dee7c088a224f0447866d518d9330a0f33a63c98a72feed524432d819cdf67ff3c5775379b4c7224a8a0bf6a634253b7545b0930ec4944d3371494c21508fc8ccf55360a9da832f7807e44132d1d836b6294185974895fd813b4782fc5a955e6c28d2ece42ad7097b283da761"}}}}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lsm_list_modules(&(0x7f00000003c0), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r9, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x80) syz_clone(0x28000200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 194.640404ms ago: executing program 0 (id=1136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 173.629566ms ago: executing program 1 (id=1137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x3, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000cc0)=ANY=[@ANYRESHEX], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0xbc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x41, 0x8001, 0x49c, 0x1, 0x8, 0x0, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x7, 0x7f, 0x5, 0x5, 0x0, 0x9, 0x40, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x3c, 0x6, 0x4, 0x1, 0x8000, 0xc9b2}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x7, 0x6, 0x4, 0x2, 0xea31, 0xfff, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r8, &(0x7f0000000400)="dd4eb4ab30ad3bdfdeaeda8b14ef8514913739405f2cecad811d9324f071554673bc80d37246cef4c20c6620e5e2160f1addf0b68f6e02923198e8f3bb8e6042a3fdfb0a554cca3c5335adcf31", 0x4d, 0x4000, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000b00)={'ip_vti0\x00', r7, 0x80, 0x80, 0x40007, 0x4, {{0x27, 0x4, 0x2, 0x8, 0x9c, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x23, 0x0, [{0x7, 0x12, "a3175dfd23b92c8caa06a6ed46f02493"}, {0x1, 0xb, "82a24e2450b54e7a5a"}]}, @ssrr={0x89, 0x1b, 0x92, [@multicast1, @private=0xa010101, @empty, @empty, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x7, 0x63, [@empty]}, @ssrr={0x89, 0x7, 0x5b, [@local]}, @rr={0x7, 0x17, 0xf2, [@remote, @multicast1, @private=0xa010100, @multicast2, @multicast2]}, @ssrr={0x89, 0x7, 0xec, [@local]}, @cipso={0x86, 0x19, 0x3, [{0x5, 0xc, "c1ba568b96709e9aeb4c"}, {0x0, 0x3, "f6"}, {0x7, 0x4, "038c"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRESDEC=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="50a17bcb727d06164e55cd43052a9b426e773f68b51ce4a50886cbd38e8d3b255384abf7f91ce1193f7ea50fbcd3139b028343c352a2ab1bb0955467328e96fa677f53186948d9824291626d2027289d172ca812f05716bfba153c89f24c72ff6b1a529c8e0a2bee36c6ebc1e802fefd35ecf585d677b360fa3dc7cff73d848ba3928ffaf46d6d63874bfd295246648228f330994cb9502b8e7c837051d73a952b72c4d7fc0a1886ebe9a119c47567f04000"/188], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) 55.310005ms ago: executing program 1 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x82710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) 0s ago: executing program 1 (id=1139): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000640)={'\x00', 0x8000, 0x8, 0x9, 0xdf7, 0x2, r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000400)={0x10, 0x0, "942bd0bde12ecacdbd93502f9bf1830f"}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000c00000000000001000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYRES64=r5], 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="00683900000000000000b703000000000000850000000c0000008a0300000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000009000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) pipe2$9p(&(0x7f00000001c0), 0x0) kernel console output (not intermixed with test programs): 4576821.125:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 59.158138][ T29] audit: type=1326 audit(1754576821.125:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 59.181508][ T29] audit: type=1326 audit(1754576821.125:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 59.204879][ T29] audit: type=1326 audit(1754576821.125:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 59.228208][ T29] audit: type=1326 audit(1754576821.125:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5364 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 59.366332][ T5363] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.314: corrupted inode contents [ 59.387007][ T5363] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.314: mark_inode_dirty error [ 59.423479][ T5363] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.314: corrupted inode contents [ 59.435641][ T5363] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.314: mark_inode_dirty error [ 59.448216][ T5363] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.314: Failed to acquire dquot type 0 [ 59.459947][ T5363] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.314: corrupted inode contents [ 59.472546][ T5363] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.314: mark_inode_dirty error [ 59.484133][ T5363] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.314: corrupted inode contents [ 59.512603][ T5363] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.314: mark_inode_dirty error [ 59.526179][ T5363] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.314: corrupted inode contents [ 59.539301][ T5363] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 59.551633][ T5363] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.314: corrupted inode contents [ 59.625357][ T5392] loop2: detected capacity change from 0 to 1024 [ 59.685088][ T5363] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.314: mark_inode_dirty error [ 59.717983][ T5392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.805059][ T5363] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 59.932130][ T5363] EXT4-fs (loop0): 1 truncate cleaned up [ 59.932503][ T5363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.932744][ T5363] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.016356][ T5412] loop4: detected capacity change from 0 to 128 [ 60.043398][ T5412] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 60.043424][ T5412] FAT-fs (loop4): Filesystem has been set read-only [ 60.043439][ T5412] bio_check_eod: 108398 callbacks suppressed [ 60.043451][ T5412] syz.4.329: attempt to access beyond end of device [ 60.043451][ T5412] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 60.043485][ T5412] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 60.043576][ T5412] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 60.043784][ T5412] syz.4.329: attempt to access beyond end of device [ 60.043784][ T5412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.043824][ T5412] syz.4.329: attempt to access beyond end of device [ 60.043824][ T5412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.043883][ T5412] syz.4.329: attempt to access beyond end of device [ 60.043883][ T5412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.043970][ T5412] syz.4.329: attempt to access beyond end of device [ 60.043970][ T5412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.044008][ T5412] syz.4.329: attempt to access beyond end of device [ 60.044008][ T5412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.044112][ T5412] syz.4.329: attempt to access beyond end of device [ 60.044112][ T5412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.044161][ T5412] syz.4.329: attempt to access beyond end of device [ 60.044161][ T5412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.044268][ T5412] syz.4.329: attempt to access beyond end of device [ 60.044268][ T5412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.044317][ T5412] syz.4.329: attempt to access beyond end of device [ 60.044317][ T5412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 60.098842][ T5363] IPv6: Can't replace route, no match found [ 60.206725][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.206969][ T311] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 60.262763][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.348420][ T5423] loop1: detected capacity change from 0 to 8192 [ 60.362382][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 60.383961][ T5436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 60.642753][ T5443] loop3: detected capacity change from 0 to 512 [ 60.656728][ T5443] EXT4-fs: Ignoring removed nobh option [ 60.662464][ T5439] loop2: detected capacity change from 0 to 8192 [ 60.676655][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.341: corrupted inode contents [ 60.689465][ T5443] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.341: mark_inode_dirty error [ 60.702212][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.341: corrupted inode contents [ 60.714814][ T5443] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.341: mark_inode_dirty error [ 60.727510][ T5443] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.341: Failed to acquire dquot type 0 [ 60.741835][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.341: corrupted inode contents [ 60.754853][ T5443] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.341: mark_inode_dirty error [ 60.777602][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.341: corrupted inode contents [ 60.877839][ T5443] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.341: mark_inode_dirty error [ 60.943665][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.341: corrupted inode contents [ 60.978077][ T5443] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 60.992724][ T5443] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.341: corrupted inode contents [ 61.044969][ T5443] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.341: mark_inode_dirty error [ 61.094093][ T5443] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 61.118042][ T5443] EXT4-fs (loop3): 1 truncate cleaned up [ 61.124556][ T5443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.137546][ T5443] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.174762][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.193258][ T1769] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 61.889260][ T5490] loop2: detected capacity change from 0 to 8192 [ 62.038331][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'. [ 62.290501][ T5502] loop0: detected capacity change from 0 to 512 [ 62.297842][ T5502] EXT4-fs: Ignoring removed nobh option [ 62.314170][ T5502] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.358: corrupted inode contents [ 62.326969][ T5502] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.358: mark_inode_dirty error [ 62.338601][ T5502] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.358: corrupted inode contents [ 62.350682][ T5502] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.358: mark_inode_dirty error [ 62.365910][ T5502] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.358: Failed to acquire dquot type 0 [ 62.379034][ T5502] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.358: corrupted inode contents [ 62.391340][ T5502] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.358: mark_inode_dirty error [ 62.403441][ T5502] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.358: corrupted inode contents [ 62.415623][ T5502] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.358: mark_inode_dirty error [ 62.428237][ T5502] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.358: corrupted inode contents [ 62.440677][ T5502] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 62.451084][ T5502] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.358: corrupted inode contents [ 62.464244][ T5502] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.358: mark_inode_dirty error [ 62.475974][ T5502] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 62.485631][ T5502] EXT4-fs (loop0): 1 truncate cleaned up [ 62.492117][ T5502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.505665][ T5502] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.534516][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.544271][ T165] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 62.760396][ T5526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 62.787610][ T5531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 63.667059][ T5557] loop4: detected capacity change from 0 to 8192 [ 64.112347][ T5562] loop0: detected capacity change from 0 to 1024 [ 64.145681][ T5562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.158875][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 64.165149][ T29] audit: type=1326 audit(1754576826.215:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.188563][ T29] audit: type=1326 audit(1754576826.215:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.211925][ T29] audit: type=1326 audit(1754576826.215:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.235362][ T29] audit: type=1326 audit(1754576826.215:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.258684][ T29] audit: type=1326 audit(1754576826.215:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.282155][ T29] audit: type=1326 audit(1754576826.215:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.305449][ T29] audit: type=1326 audit(1754576826.215:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.328799][ T29] audit: type=1326 audit(1754576826.215:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.352337][ T29] audit: type=1326 audit(1754576826.215:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.375749][ T29] audit: type=1326 audit(1754576826.215:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5556 comm="syz.4.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 64.520784][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 64.558643][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.774481][ T5597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.783424][ T5597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.612055][ T5619] loop1: detected capacity change from 0 to 1024 [ 65.635820][ T5619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.909801][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 66.021341][ T5629] loop4: detected capacity change from 0 to 8192 [ 66.291511][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.328881][ T5641] loop3: detected capacity change from 0 to 128 [ 66.335929][ T5641] msdos: Unknown parameter 'dot–' [ 66.474365][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 67.045587][ T5672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 67.055934][ T5676] loop4: detected capacity change from 0 to 512 [ 67.063342][ T5676] EXT4-fs: Ignoring removed nobh option [ 67.090928][ T5676] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.412: corrupted inode contents [ 67.110011][ T5676] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.412: mark_inode_dirty error [ 67.135945][ T5676] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.412: corrupted inode contents [ 67.167469][ T5685] loop2: detected capacity change from 0 to 128 [ 67.174495][ T5685] msdos: Unknown parameter 'dot–' [ 67.180029][ T5676] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.412: mark_inode_dirty error [ 67.208106][ T5676] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.412: Failed to acquire dquot type 0 [ 67.221191][ T5676] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.412: corrupted inode contents [ 67.223783][ T5690] loop3: detected capacity change from 0 to 128 [ 67.233733][ T5676] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.412: mark_inode_dirty error [ 67.242113][ T5690] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 67.257314][ T5676] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.412: corrupted inode contents [ 67.258466][ T5690] FAT-fs (loop3): Filesystem has been set read-only [ 67.270524][ T5676] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.412: mark_inode_dirty error [ 67.276871][ T5690] bio_check_eod: 15098 callbacks suppressed [ 67.276893][ T5690] syz.3.416: attempt to access beyond end of device [ 67.276893][ T5690] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 67.308094][ T5690] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 67.315952][ T5690] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 67.324216][ T5676] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.412: corrupted inode contents [ 67.336533][ T5676] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 67.346666][ T5692] syz.3.416: attempt to access beyond end of device [ 67.346666][ T5692] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 67.359844][ T5692] buffer_io_error: 106870 callbacks suppressed [ 67.359886][ T5692] Buffer I/O error on dev loop3, logical block 2065, async page read [ 67.362764][ T5676] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.412: corrupted inode contents [ 67.366556][ T5692] syz.3.416: attempt to access beyond end of device [ 67.366556][ T5692] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 67.399236][ T5692] Buffer I/O error on dev loop3, logical block 2066, async page read [ 67.408050][ T5692] syz.3.416: attempt to access beyond end of device [ 67.408050][ T5692] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 67.421239][ T5692] Buffer I/O error on dev loop3, logical block 2067, async page read [ 67.429712][ T5692] syz.3.416: attempt to access beyond end of device [ 67.429712][ T5692] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 67.430671][ T5676] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.412: mark_inode_dirty error [ 67.442924][ T5692] Buffer I/O error on dev loop3, logical block 2068, async page read [ 67.443063][ T5692] syz.3.416: attempt to access beyond end of device [ 67.443063][ T5692] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 67.468141][ T5676] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 67.475321][ T5692] Buffer I/O error on dev loop3, logical block 2069, async page read [ 67.485033][ T5676] EXT4-fs (loop4): 1 truncate cleaned up [ 67.492438][ T5692] syz.3.416: attempt to access beyond end of device [ 67.492438][ T5692] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 67.498736][ T5676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.511041][ T5692] Buffer I/O error on dev loop3, logical block 2070, async page read [ 67.511135][ T5692] syz.3.416: attempt to access beyond end of device [ 67.511135][ T5692] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 67.544771][ T5692] Buffer I/O error on dev loop3, logical block 2071, async page read [ 67.553041][ T5676] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.564160][ T5692] syz.3.416: attempt to access beyond end of device [ 67.564160][ T5692] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 67.577371][ T5692] Buffer I/O error on dev loop3, logical block 2072, async page read [ 67.585799][ T5690] syz.3.416: attempt to access beyond end of device [ 67.585799][ T5690] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 67.599126][ T5690] Buffer I/O error on dev loop3, logical block 2065, async page read [ 67.607666][ T5690] Buffer I/O error on dev loop3, logical block 2066, async page read [ 67.616532][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.633272][ T309] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 67.725465][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 67.797555][ T5700] loop1: detected capacity change from 0 to 8192 [ 68.001827][ T5709] loop0: detected capacity change from 0 to 512 [ 68.043295][ T5709] EXT4-fs: Ignoring removed nobh option [ 68.105168][ T5709] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.421: corrupted inode contents [ 68.155154][ T5709] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.421: mark_inode_dirty error [ 68.168071][ T5709] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.421: corrupted inode contents [ 68.208966][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 68.234374][ T5715] loop3: detected capacity change from 0 to 128 [ 68.256783][ T5715] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 68.264679][ T5715] FAT-fs (loop3): Filesystem has been set read-only [ 68.273251][ T5709] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.421: mark_inode_dirty error [ 68.320191][ T5715] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 68.328191][ T5715] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 68.351766][ T5709] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.421: Failed to acquire dquot type 0 [ 68.385429][ T5709] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.421: corrupted inode contents [ 68.417339][ T5709] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.421: mark_inode_dirty error [ 68.449679][ T5709] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.421: corrupted inode contents [ 68.500259][ T5709] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.421: mark_inode_dirty error [ 68.519795][ T5709] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.421: corrupted inode contents [ 68.543649][ T5709] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 68.562336][ T5709] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.421: corrupted inode contents [ 68.586608][ T5709] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.421: mark_inode_dirty error [ 68.600109][ T5731] loop4: detected capacity change from 0 to 128 [ 68.606944][ T5731] msdos: Unknown parameter 'dot–' [ 68.633212][ T5709] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 68.647736][ T5709] EXT4-fs (loop0): 1 truncate cleaned up [ 68.660225][ T5709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.700219][ T5709] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.735850][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 68.950270][ T5709] IPv6: Can't replace route, no match found [ 68.957865][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 69.060678][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.081156][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 69.107381][ T5745] loop3: detected capacity change from 0 to 128 [ 69.126997][ T5745] msdos: Unknown parameter 'dot–' [ 69.147081][ T5747] loop0: detected capacity change from 0 to 512 [ 69.163572][ T5747] EXT4-fs: Ignoring removed nobh option [ 69.180458][ T5747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.430: corrupted inode contents [ 69.207059][ T5747] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.430: mark_inode_dirty error [ 69.232148][ T5747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.430: corrupted inode contents [ 69.273903][ T5747] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.430: mark_inode_dirty error [ 69.286293][ T5747] __quota_error: 260 callbacks suppressed [ 69.286308][ T5747] Quota error (device loop0): write_blk: dquota write failed [ 69.299546][ T5747] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 69.311120][ T5747] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.430: Failed to acquire dquot type 0 [ 69.320331][ T5754] futex_wake_op: syz.2.432 tries to shift op by -1; fix this program [ 69.323125][ T5747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.430: corrupted inode contents [ 69.352467][ T5747] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.430: mark_inode_dirty error [ 69.364323][ T5747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.430: corrupted inode contents [ 69.376539][ T5747] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.430: mark_inode_dirty error [ 69.389381][ T5747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.430: corrupted inode contents [ 69.402218][ T5747] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 69.411483][ T5747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.430: corrupted inode contents [ 69.430090][ T5747] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.430: mark_inode_dirty error [ 69.454248][ T5747] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 69.464178][ T5747] EXT4-fs (loop0): 1 truncate cleaned up [ 69.470240][ T5747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.483512][ T5747] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.574172][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.663221][ T51] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 69.673043][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 69.831342][ T5768] loop1: detected capacity change from 0 to 1024 [ 70.006348][ T5770] loop4: detected capacity change from 0 to 512 [ 70.025774][ T5768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.109653][ T5770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.149073][ T5770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.157560][ T5770] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.226824][ T5770] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.438: Allocating blocks 41-42 which overlap fs metadata [ 70.244679][ T5779] loop0: detected capacity change from 0 to 512 [ 70.251446][ T5770] EXT4-fs (loop4): Remounting filesystem read-only [ 70.258793][ T5779] EXT4-fs: Ignoring removed nobh option [ 70.264833][ T5770] Quota error (device loop4): write_blk: dquota write failed [ 70.272225][ T5770] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 70.286584][ T5770] Quota error (device loop4): write_blk: dquota write failed [ 70.295764][ T5779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.441: corrupted inode contents [ 70.307879][ T5770] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 70.318618][ T5779] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.441: mark_inode_dirty error [ 70.348539][ T5770] EXT4-fs (loop4): 1 truncate cleaned up [ 70.354940][ T5770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.375303][ T5779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.441: corrupted inode contents [ 70.389659][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.390090][ T5779] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.441: mark_inode_dirty error [ 70.489906][ T5779] Quota error (device loop0): write_blk: dquota write failed [ 70.498245][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.507288][ T5779] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 70.525816][ T5779] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.441: Failed to acquire dquot type 0 [ 70.560432][ T5779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.441: corrupted inode contents [ 70.590303][ T5799] loop4: detected capacity change from 0 to 8192 [ 70.597660][ T5779] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.441: mark_inode_dirty error [ 70.624088][ T5779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.441: corrupted inode contents [ 70.636429][ T5779] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.441: mark_inode_dirty error [ 70.657129][ T5779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.441: corrupted inode contents [ 70.683196][ T5779] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 70.692393][ T5779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.441: corrupted inode contents [ 70.706947][ T29] audit: type=1326 audit(1754576832.795:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5797 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 70.730509][ T5808] loop2: detected capacity change from 0 to 8192 [ 70.736919][ T5779] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.441: mark_inode_dirty error [ 70.750670][ T5779] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 70.761295][ T5779] EXT4-fs (loop0): 1 truncate cleaned up [ 70.770289][ T5779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.782991][ T5779] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.127316][ T5779] IPv6: Can't replace route, no match found [ 71.184790][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.203183][ T1769] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 71.359366][ T5878] loop0: detected capacity change from 0 to 512 [ 71.366192][ T5878] EXT4-fs: Ignoring removed nobh option [ 71.384843][ T5878] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.447: corrupted inode contents [ 71.397956][ T5878] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.447: mark_inode_dirty error [ 71.440136][ T5878] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.447: corrupted inode contents [ 71.465245][ T5878] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.447: mark_inode_dirty error [ 71.513465][ T5878] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.447: Failed to acquire dquot type 0 [ 71.535039][ T5878] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.447: corrupted inode contents [ 71.556099][ T5878] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.447: mark_inode_dirty error [ 71.567743][ T5878] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.447: corrupted inode contents [ 71.604062][ T5878] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.447: mark_inode_dirty error [ 71.617501][ T5878] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.447: corrupted inode contents [ 71.646021][ T5878] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 71.672929][ T5878] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.447: corrupted inode contents [ 71.686523][ T5878] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.447: mark_inode_dirty error [ 71.714911][ T5878] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 71.737073][ T5878] EXT4-fs (loop0): 1 truncate cleaned up [ 71.743601][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.756460][ T5878] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.772824][ T5914] futex_wake_op: syz.2.453 tries to shift op by -1; fix this program [ 71.812578][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.822404][ T311] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 71.935752][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 72.659262][ T5963] loop1: detected capacity change from 0 to 128 [ 72.668494][ T5963] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 72.676410][ T5963] FAT-fs (loop1): Filesystem has been set read-only [ 72.683192][ T5963] bio_check_eod: 77168 callbacks suppressed [ 72.683269][ T5963] syz.1.458: attempt to access beyond end of device [ 72.683269][ T5963] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 72.706151][ T5963] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 72.714041][ T5963] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 72.724045][ T5963] syz.1.458: attempt to access beyond end of device [ 72.724045][ T5963] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.809972][ T5963] syz.1.458: attempt to access beyond end of device [ 72.809972][ T5963] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.828909][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 72.838301][ T5963] syz.1.458: attempt to access beyond end of device [ 72.838301][ T5963] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.851910][ T5963] syz.1.458: attempt to access beyond end of device [ 72.851910][ T5963] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.865556][ T5963] syz.1.458: attempt to access beyond end of device [ 72.865556][ T5963] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.883326][ T5963] syz.1.458: attempt to access beyond end of device [ 72.883326][ T5963] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.896663][ T5963] syz.1.458: attempt to access beyond end of device [ 72.896663][ T5963] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.910201][ T5979] loop2: detected capacity change from 0 to 512 [ 72.911140][ T5963] syz.1.458: attempt to access beyond end of device [ 72.911140][ T5963] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.919071][ T5979] EXT4-fs: Ignoring removed nobh option [ 72.930934][ T5963] syz.1.458: attempt to access beyond end of device [ 72.930934][ T5963] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 72.949926][ T5971] buffer_io_error: 76766 callbacks suppressed [ 72.949951][ T5971] Buffer I/O error on dev loop1, logical block 2065, async page read [ 72.967153][ T5971] Buffer I/O error on dev loop1, logical block 2066, async page read [ 72.975559][ T5971] Buffer I/O error on dev loop1, logical block 2067, async page read [ 73.024719][ T5979] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.465: corrupted inode contents [ 73.047457][ T5979] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.465: mark_inode_dirty error [ 73.061989][ T5971] Buffer I/O error on dev loop1, logical block 2068, async page read [ 73.071646][ T5979] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.465: corrupted inode contents [ 73.120406][ T5971] Buffer I/O error on dev loop1, logical block 2069, async page read [ 73.138092][ T5979] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.465: mark_inode_dirty error [ 73.150059][ T5971] Buffer I/O error on dev loop1, logical block 2070, async page read [ 73.170285][ T5971] Buffer I/O error on dev loop1, logical block 2071, async page read [ 73.179323][ T5979] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.465: Failed to acquire dquot type 0 [ 73.241138][ T5971] Buffer I/O error on dev loop1, logical block 2072, async page read [ 73.265422][ T5979] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.465: corrupted inode contents [ 73.280746][ T5991] loop0: detected capacity change from 0 to 1024 [ 73.286554][ T5971] Buffer I/O error on dev loop1, logical block 2065, async page read [ 73.287990][ T5991] EXT4-fs: Ignoring removed orlov option [ 73.301133][ T5971] Buffer I/O error on dev loop1, logical block 2066, async page read [ 73.309854][ T5979] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.465: mark_inode_dirty error [ 73.322085][ T5979] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.465: corrupted inode contents [ 73.336008][ T5979] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.465: mark_inode_dirty error [ 73.348846][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.364824][ T5979] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.465: corrupted inode contents [ 73.380195][ T5979] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 73.389525][ T5979] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.465: corrupted inode contents [ 73.402127][ T5979] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.465: mark_inode_dirty error [ 73.413649][ T5979] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 73.423148][ T5979] EXT4-fs (loop2): 1 truncate cleaned up [ 73.429588][ T5979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.442716][ T5979] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.473991][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.483555][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 73.513694][ T5994] netlink: 'syz.2.468': attribute type 16 has an invalid length. [ 73.521525][ T5994] netlink: 'syz.2.468': attribute type 17 has an invalid length. [ 73.644121][ T5994] loop2: detected capacity change from 0 to 128 [ 73.651078][ T5994] msdos: Unknown parameter 'dot–' [ 73.958902][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.983902][ T6039] loop4: detected capacity change from 0 to 1024 [ 74.076116][ T6039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.157159][ T6046] loop3: detected capacity change from 0 to 128 [ 74.164146][ T6046] msdos: Unknown parameter 'dot–' [ 74.476720][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 74.659934][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.724606][ T6102] loop4: detected capacity change from 0 to 8192 [ 74.842984][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 74.843014][ T29] audit: type=1326 audit(1754576836.895:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 74.872562][ T29] audit: type=1326 audit(1754576836.895:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 74.895948][ T29] audit: type=1326 audit(1754576836.895:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 74.919312][ T29] audit: type=1326 audit(1754576836.895:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 74.942882][ T29] audit: type=1326 audit(1754576836.895:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 74.966273][ T29] audit: type=1326 audit(1754576836.895:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 74.989876][ T29] audit: type=1326 audit(1754576836.895:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 75.013352][ T29] audit: type=1326 audit(1754576836.895:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 75.036636][ T29] audit: type=1326 audit(1754576836.895:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 75.060049][ T29] audit: type=1326 audit(1754576836.895:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6101 comm="syz.4.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 75.454682][ T6145] loop2: detected capacity change from 0 to 1024 [ 75.463579][ T6145] EXT4-fs: Ignoring removed orlov option [ 75.479788][ T6145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.500548][ T6152] loop0: detected capacity change from 0 to 128 [ 75.534309][ T6152] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 75.542210][ T6152] FAT-fs (loop0): Filesystem has been set read-only [ 75.563210][ T6152] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 75.571076][ T6152] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 76.034358][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.507193][ T6226] loop4: detected capacity change from 0 to 8192 [ 76.666730][ T6274] loop0: detected capacity change from 0 to 1024 [ 76.675670][ T6274] EXT4-fs: Ignoring removed orlov option [ 76.686639][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.707524][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.716689][ T6274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.269622][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.379541][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 77.431891][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 77.489103][ T6391] futex_wake_op: syz.4.512 tries to shift op by -1; fix this program [ 78.385752][ T6500] loop4: detected capacity change from 0 to 512 [ 78.392290][ T6500] EXT4-fs: Ignoring removed nobh option [ 78.404437][ T6500] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.514: corrupted inode contents [ 78.416924][ T6500] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.514: mark_inode_dirty error [ 78.429024][ T6500] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.514: corrupted inode contents [ 78.441053][ T6500] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.514: mark_inode_dirty error [ 78.452726][ T6500] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.514: Failed to acquire dquot type 0 [ 78.464560][ T6500] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.514: corrupted inode contents [ 78.476515][ T6500] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.514: mark_inode_dirty error [ 78.487996][ T6500] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.514: corrupted inode contents [ 78.500058][ T6500] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.514: mark_inode_dirty error [ 78.511530][ T6500] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.514: corrupted inode contents [ 78.523673][ T6500] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 78.532646][ T6500] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.514: corrupted inode contents [ 78.544611][ T6500] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.514: mark_inode_dirty error [ 78.555817][ T6500] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 78.565191][ T6500] EXT4-fs (loop4): 1 truncate cleaned up [ 78.571172][ T6500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.583829][ T6500] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.732117][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.741486][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 78.829560][ T6512] loop4: detected capacity change from 0 to 8192 [ 78.920715][ T6519] loop3: detected capacity change from 0 to 512 [ 78.927748][ T6519] EXT4-fs: Ignoring removed nobh option [ 78.934626][ T6521] loop2: detected capacity change from 0 to 128 [ 78.941162][ T6521] msdos: Unknown parameter 'dot–' [ 78.964771][ T6519] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.520: corrupted inode contents [ 78.976968][ T6519] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.520: mark_inode_dirty error [ 78.988897][ T6519] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.520: corrupted inode contents [ 79.001199][ T6519] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.520: mark_inode_dirty error [ 79.013150][ T6519] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.520: Failed to acquire dquot type 0 [ 79.024929][ T6519] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.520: corrupted inode contents [ 79.037379][ T6519] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.520: mark_inode_dirty error [ 79.049172][ T6519] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.520: corrupted inode contents [ 79.070157][ T6519] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.520: mark_inode_dirty error [ 79.082852][ T6519] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.520: corrupted inode contents [ 79.111448][ T6519] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 79.128001][ T6519] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.520: corrupted inode contents [ 79.149632][ T6519] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.520: mark_inode_dirty error [ 79.161187][ T6519] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 79.170762][ T6519] EXT4-fs (loop3): 1 truncate cleaned up [ 79.192495][ T6519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.207409][ T6519] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.370017][ T6519] IPv6: Can't replace route, no match found [ 79.433378][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.442806][ T309] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 80.007759][ T6623] loop4: detected capacity change from 0 to 1024 [ 80.034283][ T6623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.744456][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.856020][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 80.856035][ T29] audit: type=1326 audit(1754576842.945:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 80.899332][ T29] audit: type=1326 audit(1754576842.945:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 80.922703][ T29] audit: type=1326 audit(1754576842.945:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 80.946267][ T29] audit: type=1326 audit(1754576842.945:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 80.969592][ T29] audit: type=1326 audit(1754576842.945:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 80.993129][ T29] audit: type=1326 audit(1754576842.945:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 81.016679][ T29] audit: type=1326 audit(1754576842.945:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 81.040110][ T29] audit: type=1326 audit(1754576842.945:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 81.063832][ T29] audit: type=1326 audit(1754576842.945:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 81.087152][ T29] audit: type=1326 audit(1754576842.945:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f07680aebe9 code=0x7ffc0000 [ 81.167178][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 81.178568][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 81.762568][ T6817] loop3: detected capacity change from 0 to 1024 [ 81.777538][ T6817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.238555][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.556'. [ 82.393022][ T6881] loop4: detected capacity change from 0 to 1024 [ 82.506766][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.553050][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.730671][ T6886] loop2: detected capacity change from 0 to 8192 [ 82.820272][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 83.108847][ T6908] loop1: detected capacity change from 0 to 1024 [ 83.165441][ T6908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.205555][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.610280][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 83.683605][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 83.722921][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.741529][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 83.926406][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 83.967041][ T6963] loop3: detected capacity change from 0 to 128 [ 83.988678][ T6963] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 83.996629][ T6963] FAT-fs (loop3): Filesystem has been set read-only [ 84.008540][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.582'. [ 84.013209][ T6963] bio_check_eod: 114186 callbacks suppressed [ 84.013232][ T6963] syz.3.581: attempt to access beyond end of device [ 84.013232][ T6963] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 84.038820][ T6963] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 84.046694][ T6963] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 84.055130][ T6963] syz.3.581: attempt to access beyond end of device [ 84.055130][ T6963] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.069102][ T6963] syz.3.581: attempt to access beyond end of device [ 84.069102][ T6963] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 84.090799][ T6968] syz.3.581: attempt to access beyond end of device [ 84.090799][ T6968] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 84.104017][ T6968] buffer_io_error: 114150 callbacks suppressed [ 84.104033][ T6968] Buffer I/O error on dev loop3, logical block 2065, async page read [ 84.127019][ T6968] syz.3.581: attempt to access beyond end of device [ 84.127019][ T6968] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 84.140302][ T6968] Buffer I/O error on dev loop3, logical block 2066, async page read [ 84.151757][ T6968] syz.3.581: attempt to access beyond end of device [ 84.151757][ T6968] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 84.165252][ T6968] Buffer I/O error on dev loop3, logical block 2067, async page read [ 84.175757][ T6968] syz.3.581: attempt to access beyond end of device [ 84.175757][ T6968] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 84.189026][ T6968] Buffer I/O error on dev loop3, logical block 2068, async page read [ 84.198340][ T6968] syz.3.581: attempt to access beyond end of device [ 84.198340][ T6968] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 84.211604][ T6968] Buffer I/O error on dev loop3, logical block 2069, async page read [ 84.220743][ T6968] syz.3.581: attempt to access beyond end of device [ 84.220743][ T6968] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 84.234130][ T6968] Buffer I/O error on dev loop3, logical block 2070, async page read [ 84.242716][ T6968] syz.3.581: attempt to access beyond end of device [ 84.242716][ T6968] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 84.255940][ T6968] Buffer I/O error on dev loop3, logical block 2071, async page read [ 84.264778][ T6968] Buffer I/O error on dev loop3, logical block 2072, async page read [ 84.272972][ T6963] Buffer I/O error on dev loop3, logical block 2065, async page read [ 84.281244][ T6963] Buffer I/O error on dev loop3, logical block 2066, async page read [ 84.327472][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 84.546347][ T7006] futex_wake_op: syz.2.596 tries to shift op by -1; fix this program [ 85.577391][ T7080] loop1: detected capacity change from 0 to 8192 [ 85.910689][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 85.910706][ T29] audit: type=1326 audit(1754576847.995:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 85.945210][ T29] audit: type=1326 audit(1754576848.025:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 85.968695][ T29] audit: type=1326 audit(1754576848.025:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 85.992096][ T29] audit: type=1326 audit(1754576848.025:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 86.015573][ T29] audit: type=1326 audit(1754576848.025:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 86.038891][ T29] audit: type=1326 audit(1754576848.035:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 86.062198][ T29] audit: type=1326 audit(1754576848.035:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 86.085634][ T29] audit: type=1326 audit(1754576848.035:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 86.182531][ T29] audit: type=1326 audit(1754576848.115:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 86.206180][ T29] audit: type=1326 audit(1754576848.115:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 86.296058][ T7140] netlink: 'syz.4.617': attribute type 16 has an invalid length. [ 86.303859][ T7140] netlink: 'syz.4.617': attribute type 17 has an invalid length. [ 86.360943][ T7147] loop4: detected capacity change from 0 to 128 [ 86.371820][ T7147] msdos: Unknown parameter 'dot–' [ 86.495759][ T7160] __nla_validate_parse: 4 callbacks suppressed [ 86.495776][ T7160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 86.915007][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 87.353867][ T7229] loop4: detected capacity change from 0 to 1024 [ 87.483779][ T7229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.712647][ T7243] loop0: detected capacity change from 0 to 8192 [ 87.713451][ T7245] loop2: detected capacity change from 0 to 512 [ 87.725635][ T7245] EXT4-fs: Ignoring removed nobh option [ 87.754664][ T7245] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.629: corrupted inode contents [ 87.775804][ T7245] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.629: mark_inode_dirty error [ 87.791700][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 87.797213][ T7245] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.629: corrupted inode contents [ 87.812707][ T7245] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.629: mark_inode_dirty error [ 87.826202][ T7245] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.629: Failed to acquire dquot type 0 [ 87.838136][ T7245] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.629: corrupted inode contents [ 87.850242][ T7245] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.629: mark_inode_dirty error [ 87.863925][ T7245] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.629: corrupted inode contents [ 87.879868][ T7245] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.629: mark_inode_dirty error [ 87.894234][ T7245] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.629: corrupted inode contents [ 87.911480][ T7245] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 87.928502][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 87.937619][ T7245] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.629: corrupted inode contents [ 87.964764][ T7245] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.629: mark_inode_dirty error [ 88.047129][ T7245] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 88.070430][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.081251][ T7245] EXT4-fs (loop2): 1 truncate cleaned up [ 88.090864][ T7245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.141344][ T7245] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.183084][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.208887][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.234292][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.244115][ T309] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 88.287548][ T7282] loop3: detected capacity change from 0 to 8192 [ 89.239190][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 89.451809][ T7452] loop3: detected capacity change from 0 to 512 [ 89.458961][ T7452] EXT4-fs: Ignoring removed nobh option [ 89.474716][ T7452] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.651: corrupted inode contents [ 89.487850][ T7452] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.651: mark_inode_dirty error [ 89.499836][ T7452] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.651: corrupted inode contents [ 89.511910][ T7452] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.651: mark_inode_dirty error [ 89.523862][ T7452] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.651: Failed to acquire dquot type 0 [ 89.535721][ T7452] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.651: corrupted inode contents [ 89.561720][ T7452] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.651: mark_inode_dirty error [ 89.574852][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 89.604203][ T7452] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.651: corrupted inode contents [ 89.616733][ T7452] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.651: mark_inode_dirty error [ 89.631633][ T7452] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.651: corrupted inode contents [ 89.643694][ T7452] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 89.652489][ T7452] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.651: corrupted inode contents [ 89.664982][ T7452] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.651: mark_inode_dirty error [ 89.676339][ T7452] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 89.685861][ T7452] EXT4-fs (loop3): 1 truncate cleaned up [ 89.691983][ T7452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.706057][ T7452] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.846565][ T7452] IPv6: Can't replace route, no match found [ 89.894478][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 89.940129][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.951149][ T1769] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 90.084679][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 90.189419][ T7576] loop3: detected capacity change from 0 to 512 [ 90.210252][ T7576] EXT4-fs: Ignoring removed nobh option [ 90.245053][ T7576] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.660: corrupted inode contents [ 90.259021][ T7576] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.660: mark_inode_dirty error [ 90.271301][ T7576] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.660: corrupted inode contents [ 90.283362][ T7576] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.660: mark_inode_dirty error [ 90.295137][ T7576] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.660: Failed to acquire dquot type 0 [ 90.306906][ T7576] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.660: corrupted inode contents [ 90.318843][ T7576] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.660: mark_inode_dirty error [ 90.330427][ T7576] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.660: corrupted inode contents [ 90.342446][ T7576] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.660: mark_inode_dirty error [ 90.353907][ T7576] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.660: corrupted inode contents [ 90.366178][ T7576] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 90.375040][ T7576] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.660: corrupted inode contents [ 90.387400][ T7576] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.660: mark_inode_dirty error [ 90.398663][ T7576] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 90.408057][ T7576] EXT4-fs (loop3): 1 truncate cleaned up [ 90.414293][ T7576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.426814][ T7576] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.456728][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.465846][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 90.484688][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 90.701250][ T7629] loop0: detected capacity change from 0 to 128 [ 90.710357][ T7629] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.718320][ T7629] FAT-fs (loop0): Filesystem has been set read-only [ 90.725359][ T7629] bio_check_eod: 29761 callbacks suppressed [ 90.725388][ T7629] syz.0.666: attempt to access beyond end of device [ 90.725388][ T7629] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 90.745196][ T7629] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.753090][ T7629] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 90.761438][ T7629] syz.0.666: attempt to access beyond end of device [ 90.761438][ T7629] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 90.775757][ T7640] syz.0.666: attempt to access beyond end of device [ 90.775757][ T7640] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 90.788937][ T7640] buffer_io_error: 29758 callbacks suppressed [ 90.788954][ T7640] Buffer I/O error on dev loop0, logical block 2065, async page read [ 90.803862][ T7640] syz.0.666: attempt to access beyond end of device [ 90.803862][ T7640] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 90.817053][ T7640] Buffer I/O error on dev loop0, logical block 2066, async page read [ 90.825304][ T7640] syz.0.666: attempt to access beyond end of device [ 90.825304][ T7640] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 90.838471][ T7640] Buffer I/O error on dev loop0, logical block 2067, async page read [ 90.846695][ T7640] syz.0.666: attempt to access beyond end of device [ 90.846695][ T7640] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 90.859858][ T7640] Buffer I/O error on dev loop0, logical block 2068, async page read [ 90.868324][ T7640] syz.0.666: attempt to access beyond end of device [ 90.868324][ T7640] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 90.881548][ T7640] Buffer I/O error on dev loop0, logical block 2069, async page read [ 90.889796][ T7640] syz.0.666: attempt to access beyond end of device [ 90.889796][ T7640] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 90.903293][ T7640] Buffer I/O error on dev loop0, logical block 2070, async page read [ 90.910365][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'. [ 90.912792][ T7640] syz.0.666: attempt to access beyond end of device [ 90.912792][ T7640] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 90.933494][ T7640] Buffer I/O error on dev loop0, logical block 2071, async page read [ 90.941722][ T7640] syz.0.666: attempt to access beyond end of device [ 90.941722][ T7640] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 90.955002][ T7640] Buffer I/O error on dev loop0, logical block 2072, async page read [ 90.963508][ T7629] Buffer I/O error on dev loop0, logical block 2065, async page read [ 90.971659][ T7629] Buffer I/O error on dev loop0, logical block 2066, async page read [ 91.661429][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 92.213433][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 92.582618][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'. [ 92.626346][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 92.626362][ T29] audit: type=1326 audit(1754576854.715:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 92.676281][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 92.685208][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 92.686555][ T29] audit: type=1326 audit(1754576854.715:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 92.718177][ T29] audit: type=1326 audit(1754576854.745:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 92.742104][ T29] audit: type=1326 audit(1754576854.745:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 92.765520][ T29] audit: type=1326 audit(1754576854.745:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 92.788988][ T29] audit: type=1326 audit(1754576854.745:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 92.812413][ T29] audit: type=1326 audit(1754576854.745:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 92.835972][ T29] audit: type=1326 audit(1754576854.745:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 92.859883][ T29] audit: type=1326 audit(1754576854.745:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 92.883475][ T29] audit: type=1326 audit(1754576854.745:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.4.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ddaebe9 code=0x7ffc0000 [ 93.095732][ T7911] loop1: detected capacity change from 0 to 1024 [ 93.130676][ T7911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.170002][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 93.186845][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.319449][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 93.999979][ T7995] netlink: 'syz.4.708': attribute type 16 has an invalid length. [ 94.007904][ T7995] netlink: 'syz.4.708': attribute type 17 has an invalid length. [ 94.026852][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 94.035766][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 94.057845][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 94.078718][ T8000] loop4: detected capacity change from 0 to 128 [ 94.091395][ T8000] msdos: Unknown parameter 'dot–' [ 94.197834][ T8009] loop1: detected capacity change from 0 to 512 [ 94.233636][ T8009] EXT4-fs: Ignoring removed nobh option [ 94.290734][ T8009] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.712: corrupted inode contents [ 94.303201][ T8009] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.712: mark_inode_dirty error [ 94.323489][ T8009] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.712: corrupted inode contents [ 94.343935][ T8009] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.712: mark_inode_dirty error [ 94.355696][ T8009] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.712: Failed to acquire dquot type 0 [ 94.370610][ T8009] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.712: corrupted inode contents [ 94.386274][ T8009] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.712: mark_inode_dirty error [ 94.397889][ T8009] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.712: corrupted inode contents [ 94.410180][ T8009] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.712: mark_inode_dirty error [ 94.421524][ T8009] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.712: corrupted inode contents [ 94.433921][ T8009] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 94.443021][ T8009] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.712: corrupted inode contents [ 94.455409][ T8009] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.712: mark_inode_dirty error [ 94.466867][ T8009] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 94.476663][ T8009] EXT4-fs (loop1): 1 truncate cleaned up [ 94.482686][ T8009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.497647][ T8009] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.523298][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.532801][ T1769] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 95.697960][ T8177] loop3: detected capacity change from 0 to 512 [ 95.705078][ T8177] EXT4-fs: Ignoring removed nobh option [ 95.722103][ T8177] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.726: corrupted inode contents [ 95.755091][ T8177] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.726: mark_inode_dirty error [ 95.773493][ T8177] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.726: corrupted inode contents [ 95.796165][ T8177] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.726: mark_inode_dirty error [ 95.829289][ T8177] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.726: Failed to acquire dquot type 0 [ 95.849641][ T8177] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.726: corrupted inode contents [ 95.869660][ T8177] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.726: mark_inode_dirty error [ 95.881475][ T8177] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.726: corrupted inode contents [ 95.896957][ T8177] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.726: mark_inode_dirty error [ 95.908953][ T8177] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.726: corrupted inode contents [ 95.921184][ T8177] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 95.930175][ T8177] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.726: corrupted inode contents [ 95.959453][ T8177] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.726: mark_inode_dirty error [ 95.970949][ T8177] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 95.981907][ T8177] EXT4-fs (loop3): 1 truncate cleaned up [ 95.988004][ T8177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.000940][ T8177] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.132366][ T8177] IPv6: Can't replace route, no match found [ 96.188284][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.197829][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 97.382232][ T8374] __nla_validate_parse: 4 callbacks suppressed [ 97.382247][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 97.407058][ T8374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.078279][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 98.078297][ T29] audit: type=1326 audit(1754576860.135:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 98.108041][ T29] audit: type=1326 audit(1754576860.135:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 98.131377][ T29] audit: type=1326 audit(1754576860.135:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 98.154815][ T29] audit: type=1326 audit(1754576860.135:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 98.178144][ T29] audit: type=1326 audit(1754576860.135:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 98.201673][ T29] audit: type=1326 audit(1754576860.135:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 98.225017][ T29] audit: type=1326 audit(1754576860.135:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 98.248340][ T29] audit: type=1326 audit(1754576860.135:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f634e73d69f code=0x7ffc0000 [ 98.271600][ T29] audit: type=1326 audit(1754576860.135:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 98.294922][ T29] audit: type=1326 audit(1754576860.135:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f634e73ebe9 code=0x7ffc0000 [ 98.400494][ T8421] loop0: detected capacity change from 0 to 1024 [ 98.423621][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 98.527173][ T8421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.746341][ T8423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.922402][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.078037][ T8449] loop0: detected capacity change from 0 to 512 [ 99.107293][ T8449] EXT4-fs: Ignoring removed nobh option [ 99.150256][ T8449] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.777: corrupted inode contents [ 99.175590][ T8449] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.777: mark_inode_dirty error [ 99.204983][ T8449] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.777: corrupted inode contents [ 99.225270][ T8449] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.777: mark_inode_dirty error [ 99.242121][ T8449] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.777: Failed to acquire dquot type 0 [ 99.280159][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 99.300264][ T8449] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.777: corrupted inode contents [ 99.312369][ T8449] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.777: mark_inode_dirty error [ 99.348966][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 99.376539][ T8449] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.777: corrupted inode contents [ 99.392533][ T8449] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.777: mark_inode_dirty error [ 99.404185][ T8449] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.777: corrupted inode contents [ 99.416394][ T8449] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 99.425200][ T8449] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.777: corrupted inode contents [ 99.437245][ T8449] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.777: mark_inode_dirty error [ 99.516724][ T8481] loop3: detected capacity change from 0 to 1024 [ 99.633203][ T8449] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 99.644409][ T8481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.665066][ T8449] EXT4-fs (loop0): 1 truncate cleaned up [ 99.686280][ T8449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.786895][ T8449] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.899923][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.790'. [ 99.927582][ T8496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.928259][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.945636][ T1769] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 100.001103][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 100.164054][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.247433][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 100.284108][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 100.362474][ T8536] loop0: detected capacity change from 0 to 512 [ 100.371051][ T8536] EXT4-fs: Ignoring removed nobh option [ 100.384878][ T8536] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.801: corrupted inode contents [ 100.397028][ T8536] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.801: mark_inode_dirty error [ 100.415265][ T8536] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.801: corrupted inode contents [ 100.427681][ T8536] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.801: mark_inode_dirty error [ 100.443241][ T8536] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.801: Failed to acquire dquot type 0 [ 100.458726][ T8536] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.801: corrupted inode contents [ 100.471169][ T8536] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.801: mark_inode_dirty error [ 100.482627][ T8536] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.801: corrupted inode contents [ 100.495550][ T8536] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.801: mark_inode_dirty error [ 100.507699][ T8536] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.801: corrupted inode contents [ 100.519921][ T8536] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 100.528890][ T8536] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.801: corrupted inode contents [ 100.541249][ T8536] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.801: mark_inode_dirty error [ 100.562754][ T8536] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 100.572316][ T8536] EXT4-fs (loop0): 1 truncate cleaned up [ 100.581201][ T8536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.594639][ T8536] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.630325][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.053651][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 101.123114][ T8651] loop3: detected capacity change from 0 to 8192 [ 101.738427][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 102.023306][ T8709] loop3: detected capacity change from 0 to 512 [ 102.029943][ T8709] EXT4-fs: Ignoring removed nobh option [ 102.070564][ T8709] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.815: corrupted inode contents [ 102.082790][ T8709] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.815: mark_inode_dirty error [ 102.095041][ T8709] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.815: corrupted inode contents [ 102.107133][ T8709] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.815: mark_inode_dirty error [ 102.118390][ T8716] netlink: 'syz.4.817': attribute type 16 has an invalid length. [ 102.119030][ T8709] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.815: Failed to acquire dquot type 0 [ 102.126413][ T8716] netlink: 'syz.4.817': attribute type 17 has an invalid length. [ 102.146923][ T8709] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.815: corrupted inode contents [ 102.159272][ T8709] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.815: mark_inode_dirty error [ 102.171544][ T8709] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.815: corrupted inode contents [ 102.184648][ T8709] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.815: mark_inode_dirty error [ 102.196432][ T8709] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.815: corrupted inode contents [ 102.208509][ T8709] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 102.217556][ T8709] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.815: corrupted inode contents [ 102.229586][ T8709] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.815: mark_inode_dirty error [ 102.241240][ T8709] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 102.251066][ T8709] EXT4-fs (loop3): 1 truncate cleaned up [ 102.257500][ T8709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.270277][ T8709] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.281625][ T8716] loop4: detected capacity change from 0 to 128 [ 102.298436][ T8716] msdos: Unknown parameter 'dot–' [ 102.339210][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.350985][ T309] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 102.532498][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 102.584152][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 102.619971][ T8738] loop3: detected capacity change from 0 to 8192 [ 102.744788][ T8746] loop2: detected capacity change from 0 to 1024 [ 102.785691][ T8746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.798453][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 103.173308][ T8767] futex_wake_op: syz.4.833 tries to shift op by -1; fix this program [ 103.359196][ T8770] loop0: detected capacity change from 0 to 1024 [ 103.386072][ T8770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.527675][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.619336][ T8805] netlink: 'syz.2.837': attribute type 16 has an invalid length. [ 103.627151][ T8805] netlink: 'syz.2.837': attribute type 17 has an invalid length. [ 103.655811][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 103.679534][ T8812] loop2: detected capacity change from 0 to 128 [ 103.698126][ T8812] msdos: Unknown parameter 'dot–' [ 103.781459][ T8822] futex_wake_op: syz.3.838 tries to shift op by -1; fix this program [ 104.055016][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.255498][ T8847] loop0: detected capacity change from 0 to 8192 [ 104.402956][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 104.402971][ T29] audit: type=1326 audit(1754576866.465:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.432663][ T29] audit: type=1326 audit(1754576866.465:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.456015][ T29] audit: type=1326 audit(1754576866.465:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.479352][ T29] audit: type=1326 audit(1754576866.465:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.502766][ T29] audit: type=1326 audit(1754576866.465:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.526549][ T29] audit: type=1326 audit(1754576866.465:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.549959][ T29] audit: type=1326 audit(1754576866.465:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.573431][ T29] audit: type=1326 audit(1754576866.465:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.597087][ T29] audit: type=1326 audit(1754576866.465:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.620561][ T29] audit: type=1326 audit(1754576866.465:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8846 comm="syz.0.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 104.952797][ T8893] loop2: detected capacity change from 0 to 8192 [ 105.392233][ T8933] loop0: detected capacity change from 0 to 8192 [ 105.513978][ T8940] loop4: detected capacity change from 0 to 1024 [ 105.663661][ T8940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.102043][ T8963] loop2: detected capacity change from 0 to 512 [ 106.113694][ T8963] EXT4-fs: Ignoring removed nobh option [ 106.122799][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 106.226124][ T8963] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.855: corrupted inode contents [ 106.238323][ T8963] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.855: mark_inode_dirty error [ 106.238589][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.249924][ T8963] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.855: corrupted inode contents [ 106.270604][ T8963] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.855: mark_inode_dirty error [ 106.305646][ T8963] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.855: Failed to acquire dquot type 0 [ 106.318983][ T8963] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.855: corrupted inode contents [ 106.337599][ T8963] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.855: mark_inode_dirty error [ 106.357331][ T8963] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.855: corrupted inode contents [ 106.382043][ T8963] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.855: mark_inode_dirty error [ 106.394959][ T8976] loop4: detected capacity change from 0 to 8192 [ 106.403726][ T8963] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.855: corrupted inode contents [ 106.416721][ T8963] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 106.426263][ T8963] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.855: corrupted inode contents [ 106.442426][ T8963] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.855: mark_inode_dirty error [ 106.458240][ T8963] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 106.470407][ T8963] EXT4-fs (loop2): 1 truncate cleaned up [ 106.478564][ T8963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.491481][ T8963] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.571353][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.583324][ T1769] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 106.611222][ T9014] futex_wake_op: syz.2.862 tries to shift op by -1; fix this program [ 107.369698][ T9079] loop4: detected capacity change from 0 to 8192 [ 107.945299][ T9132] loop3: detected capacity change from 0 to 8192 [ 107.966549][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 108.432859][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 108.530923][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 108.539793][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 108.890467][ T9168] loop1: detected capacity change from 0 to 8192 [ 109.005235][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 109.157315][ T9188] netlink: 'syz.0.885': attribute type 16 has an invalid length. [ 109.165099][ T9188] netlink: 'syz.0.885': attribute type 17 has an invalid length. [ 109.268599][ T9197] loop0: detected capacity change from 0 to 128 [ 109.310829][ T9197] msdos: Unknown parameter 'dot–' [ 109.316084][ T9201] loop3: detected capacity change from 0 to 512 [ 109.333276][ T9201] EXT4-fs: Ignoring removed nobh option [ 109.366733][ T9201] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.891: corrupted inode contents [ 109.418203][ T9201] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.891: mark_inode_dirty error [ 109.457703][ T9201] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.891: corrupted inode contents [ 109.487114][ T9201] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.891: mark_inode_dirty error [ 109.511773][ T9201] __quota_error: 341 callbacks suppressed [ 109.511822][ T9201] Quota error (device loop3): write_blk: dquota write failed [ 109.525023][ T29] audit: type=1326 audit(1754576871.605:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00ae3ebe9 code=0x7ffc0000 [ 109.548439][ T29] audit: type=1326 audit(1754576871.605:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00ae3ebe9 code=0x7ffc0000 [ 109.571928][ T29] audit: type=1326 audit(1754576871.605:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00ae3ebe9 code=0x7ffc0000 [ 109.575124][ T9201] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 109.595277][ T29] audit: type=1326 audit(1754576871.605:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00ae3ebe9 code=0x7ffc0000 [ 109.595313][ T29] audit: type=1326 audit(1754576871.605:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00ae3ebe9 code=0x7ffc0000 [ 109.651888][ T29] audit: type=1326 audit(1754576871.605:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00ae3ebe9 code=0x7ffc0000 [ 109.675291][ T29] audit: type=1326 audit(1754576871.605:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00ae3ebe9 code=0x7ffc0000 [ 109.698598][ T29] audit: type=1326 audit(1754576871.605:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9213 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff00ae3d69f code=0x7ffc0000 [ 109.722921][ T9201] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.891: Failed to acquire dquot type 0 [ 109.756785][ T9201] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.891: corrupted inode contents [ 109.793255][ T9201] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.891: mark_inode_dirty error [ 109.813648][ T9201] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.891: corrupted inode contents [ 109.825720][ T9201] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.891: mark_inode_dirty error [ 109.837997][ T9201] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.891: corrupted inode contents [ 109.850078][ T9201] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 109.861061][ T9201] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.891: corrupted inode contents [ 109.873429][ T9201] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.891: mark_inode_dirty error [ 109.885022][ T9201] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 109.894695][ T9201] EXT4-fs (loop3): 1 truncate cleaned up [ 109.900895][ T9201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.913889][ T9201] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.191705][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 110.296487][ T9201] IPv6: Can't replace route, no match found [ 110.384337][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.407258][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 110.450621][ T9275] loop1: detected capacity change from 0 to 512 [ 110.457526][ T9275] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 110.467294][ T9275] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 110.477429][ T9275] EXT4-fs (loop1): group descriptors corrupted! [ 110.524614][ T9284] mmap: syz.3.921 (9284) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.563049][ T9290] FAULT_INJECTION: forcing a failure. [ 110.563049][ T9290] name failslab, interval 1, probability 0, space 0, times 1 [ 110.575743][ T9290] CPU: 1 UID: 0 PID: 9290 Comm: syz.3.924 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 110.575771][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.575787][ T9290] Call Trace: [ 110.575798][ T9290] [ 110.575805][ T9290] __dump_stack+0x1d/0x30 [ 110.575839][ T9290] dump_stack_lvl+0xe8/0x140 [ 110.575857][ T9290] dump_stack+0x15/0x1b [ 110.575874][ T9290] should_fail_ex+0x265/0x280 [ 110.575912][ T9290] should_failslab+0x8c/0xb0 [ 110.575940][ T9290] kmem_cache_alloc_noprof+0x50/0x310 [ 110.575983][ T9290] ? mas_alloc_nodes+0x265/0x520 [ 110.576036][ T9290] mas_alloc_nodes+0x265/0x520 [ 110.576063][ T9290] mas_preallocate+0x33e/0x520 [ 110.576089][ T9290] __split_vma+0x240/0x650 [ 110.576116][ T9290] ? __rcu_read_unlock+0x34/0x70 [ 110.576146][ T9290] ? unwind_next_frame+0xada/0xc80 [ 110.576182][ T9290] ? __bpf_trace_sys_enter+0x10/0x30 [ 110.576208][ T9290] ? trace_sys_enter+0x86/0xf0 [ 110.576229][ T9290] ? __kernel_text_address+0xd/0x40 [ 110.576262][ T9290] vma_modify+0x3f2/0xc80 [ 110.576281][ T9290] ? sysvec_reschedule_ipi+0x4f/0x70 [ 110.576315][ T9290] vma_modify_flags+0x101/0x130 [ 110.576341][ T9290] mprotect_fixup+0x2cc/0x570 [ 110.576370][ T9290] do_mprotect_pkey+0x6d6/0x980 [ 110.576404][ T9290] __x64_sys_mprotect+0x48/0x60 [ 110.576429][ T9290] x64_sys_call+0x274e/0x2ff0 [ 110.576449][ T9290] do_syscall_64+0xd2/0x200 [ 110.576477][ T9290] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.576502][ T9290] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.576525][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.576556][ T9290] RIP: 0033:0x7f634e73ebe9 [ 110.576580][ T9290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.576598][ T9290] RSP: 002b:00007f634d19f038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 110.576626][ T9290] RAX: ffffffffffffffda RBX: 00007f634e965fa0 RCX: 00007f634e73ebe9 [ 110.576640][ T9290] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000 [ 110.576657][ T9290] RBP: 00007f634d19f090 R08: 0000000000000000 R09: 0000000000000000 [ 110.576670][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.576683][ T9290] R13: 00007f634e966038 R14: 00007f634e965fa0 R15: 00007ffc37bc7aa8 [ 110.576702][ T9290] [ 111.081662][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 111.126159][ T9338] FAULT_INJECTION: forcing a failure. [ 111.126159][ T9338] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.139448][ T9338] CPU: 1 UID: 0 PID: 9338 Comm: syz.0.945 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 111.139486][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.139498][ T9338] Call Trace: [ 111.139504][ T9338] [ 111.139512][ T9338] __dump_stack+0x1d/0x30 [ 111.139534][ T9338] dump_stack_lvl+0xe8/0x140 [ 111.139556][ T9338] dump_stack+0x15/0x1b [ 111.139575][ T9338] should_fail_ex+0x265/0x280 [ 111.139755][ T9338] should_fail+0xb/0x20 [ 111.139781][ T9338] should_fail_usercopy+0x1a/0x20 [ 111.139803][ T9338] _copy_to_user+0x20/0xa0 [ 111.139910][ T9338] simple_read_from_buffer+0xb5/0x130 [ 111.139940][ T9338] proc_fail_nth_read+0x10e/0x150 [ 111.140030][ T9338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.140126][ T9338] vfs_read+0x1a0/0x6f0 [ 111.140152][ T9338] ? __rcu_read_unlock+0x4f/0x70 [ 111.140173][ T9338] ? __fget_files+0x184/0x1c0 [ 111.140205][ T9338] ksys_read+0xda/0x1a0 [ 111.140230][ T9338] __x64_sys_read+0x40/0x50 [ 111.140312][ T9338] x64_sys_call+0x27bc/0x2ff0 [ 111.140335][ T9338] do_syscall_64+0xd2/0x200 [ 111.140363][ T9338] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 111.140388][ T9338] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.140429][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.140453][ T9338] RIP: 0033:0x7fa0a5b5d5fc [ 111.140469][ T9338] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.140487][ T9338] RSP: 002b:00007fa0a45c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.140550][ T9338] RAX: ffffffffffffffda RBX: 00007fa0a5d85fa0 RCX: 00007fa0a5b5d5fc [ 111.140562][ T9338] RDX: 000000000000000f RSI: 00007fa0a45c70a0 RDI: 0000000000000003 [ 111.140589][ T9338] RBP: 00007fa0a45c7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.140602][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.140614][ T9338] R13: 00007fa0a5d86038 R14: 00007fa0a5d85fa0 R15: 00007ffec5fb9248 [ 111.140632][ T9338] [ 111.394142][ T9346] futex_wake_op: syz.1.948 tries to shift op by -1; fix this program [ 111.542436][ T9355] loop0: detected capacity change from 0 to 8192 [ 112.055629][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 112.260548][ T9382] loop4: detected capacity change from 0 to 8192 [ 112.785738][ T9409] 9pnet_fd: Insufficient options for proto=fd [ 112.793785][ T9409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.816889][ T9409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.524237][ T9443] random: crng reseeded on system resumption [ 113.588907][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.985'. [ 113.869944][ T9470] loop0: detected capacity change from 0 to 512 [ 113.883891][ T9470] EXT4-fs: Ignoring removed nobh option [ 113.897281][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 113.907416][ T9470] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.993: corrupted inode contents [ 113.929459][ T9470] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.993: mark_inode_dirty error [ 113.950679][ T9470] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.993: corrupted inode contents [ 114.039229][ T9470] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.993: mark_inode_dirty error [ 114.077722][ T9470] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.993: Failed to acquire dquot type 0 [ 114.089524][ T9470] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.993: corrupted inode contents [ 114.104261][ T9470] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.993: mark_inode_dirty error [ 114.116600][ T9470] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.993: corrupted inode contents [ 114.131453][ T9470] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.993: mark_inode_dirty error [ 114.145105][ T9470] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.993: corrupted inode contents [ 114.175845][ T9470] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 114.188728][ T9470] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.993: corrupted inode contents [ 114.208003][ T9503] loop4: detected capacity change from 0 to 8192 [ 114.220694][ T9470] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.993: mark_inode_dirty error [ 114.232327][ T9470] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 114.242099][ T9470] EXT4-fs (loop0): 1 truncate cleaned up [ 114.248372][ T9470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.273560][ T9470] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.441406][ T9470] IPv6: Can't replace route, no match found [ 114.541031][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.593193][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 114.603816][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 114.603830][ T29] audit: type=1326 audit(1754576876.695:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.645087][ T29] audit: type=1326 audit(1754576876.725:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.668585][ T29] audit: type=1326 audit(1754576876.725:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.692077][ T29] audit: type=1326 audit(1754576876.725:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.715575][ T29] audit: type=1326 audit(1754576876.725:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.739076][ T29] audit: type=1326 audit(1754576876.725:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.762713][ T29] audit: type=1326 audit(1754576876.725:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.786230][ T29] audit: type=1326 audit(1754576876.725:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.809613][ T29] audit: type=1326 audit(1754576876.725:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.833326][ T29] audit: type=1326 audit(1754576876.725:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9532 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 114.891180][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 115.134666][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.144436][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.189140][ T9559] futex_wake_op: syz.2.1021 tries to shift op by -1; fix this program [ 115.193757][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.206034][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.387117][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 115.623644][ T9583] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 115.687195][ T9585] loop1: detected capacity change from 0 to 8192 [ 116.213598][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 116.424908][ T9606] netlink: 'syz.3.1037': attribute type 16 has an invalid length. [ 116.432840][ T9606] netlink: 'syz.3.1037': attribute type 17 has an invalid length. [ 116.483775][ T9607] loop3: detected capacity change from 0 to 128 [ 116.499880][ T9607] msdos: Unknown parameter 'dot–' [ 116.577180][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'. [ 116.751114][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 116.760050][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 116.770761][ T9613] bridge_slave_0: entered promiscuous mode [ 116.993542][ T9618] futex_wake_op: syz.2.1041 tries to shift op by -1; fix this program [ 117.324543][ T9626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1044'. [ 117.623887][ T9644] loop3: detected capacity change from 0 to 1024 [ 117.630687][ T9644] EXT4-fs: Ignoring removed bh option [ 117.636615][ T9644] EXT4-fs: inline encryption not supported [ 117.642824][ T9644] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.655007][ T9644] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1052: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.669207][ T9644] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1052: lblock 0 mapped to illegal pblock 48 (length 1) [ 117.683790][ T9644] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1052: Failed to acquire dquot type 0 [ 117.695121][ T9644] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 117.705111][ T9644] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1052: mark_inode_dirty error [ 117.716587][ T9644] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 117.726850][ T9644] EXT4-fs (loop3): 1 orphan inode deleted [ 117.732819][ T9644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.750336][ T309] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.765028][ T309] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 118.316954][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.330048][ T3311] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 118.356752][ T3311] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 118.377122][ T3311] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 118.543106][ T9697] loop4: detected capacity change from 0 to 1024 [ 118.564435][ T9697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.970639][ T9705] __nla_validate_parse: 3 callbacks suppressed [ 118.970694][ T9705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1071'. [ 119.252356][ T9708] loop3: detected capacity change from 0 to 8192 [ 119.352359][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.370016][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'. [ 119.379124][ T9716] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1075'. [ 120.194006][ T9814] loop3: detected capacity change from 0 to 1024 [ 120.241632][ T9814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.859809][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.928137][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 120.928156][ T29] audit: type=1326 audit(1754576883.015:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 120.957789][ T29] audit: type=1326 audit(1754576883.015:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 120.981200][ T29] audit: type=1326 audit(1754576883.015:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 121.004972][ T29] audit: type=1326 audit(1754576883.015:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 121.028388][ T29] audit: type=1326 audit(1754576883.015:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 121.051838][ T29] audit: type=1326 audit(1754576883.015:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 121.075508][ T29] audit: type=1326 audit(1754576883.015:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 121.098996][ T29] audit: type=1326 audit(1754576883.015:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 121.122412][ T29] audit: type=1326 audit(1754576883.015:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 121.145821][ T29] audit: type=1326 audit(1754576883.015:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.0.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0a5b5ebe9 code=0x7ffc0000 [ 121.171061][ T9880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1093'. [ 121.180085][ T9880] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1093'. [ 121.371186][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 121.491889][ T9913] random: crng reseeded on system resumption [ 121.949087][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 121.958027][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 121.985055][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1113'. [ 122.119467][ T9918] loop3: detected capacity change from 0 to 1024 [ 122.149605][ T9946] loop2: detected capacity change from 0 to 8192 [ 122.192405][ T9918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.718392][ T9967] futex_wake_op: syz.4.1118 tries to shift op by -1; fix this program [ 122.940031][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.009064][ T9976] loop2: detected capacity change from 0 to 1024 [ 123.048735][ T9976] EXT4-fs: Ignoring removed bh option [ 123.073212][ T9976] EXT4-fs: inline encryption not supported [ 123.111265][ T9976] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.147806][ T9976] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1119: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.194528][ T9976] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1119: lblock 0 mapped to illegal pblock 48 (length 1) [ 123.246181][ T9976] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1119: Failed to acquire dquot type 0 [ 123.257997][ T9976] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 123.269400][ T9976] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1119: mark_inode_dirty error [ 123.295553][ T9976] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 123.361419][ T9976] EXT4-fs (loop2): 1 orphan inode deleted [ 123.373135][ T41] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.395672][ T9976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.407944][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 123.469344][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.479338][T10004] loop3: detected capacity change from 0 to 8192 [ 123.500328][ T3302] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 123.521130][ T3302] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 123.558665][ T3302] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 124.077963][T10010] ================================================================== [ 124.086186][T10010] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 124.093425][T10010] [ 124.095751][T10010] write to 0xffff88812b88b9b0 of 2 bytes by task 10004 on cpu 1: [ 124.103465][T10010] fat16_ent_put+0x28/0x60 [ 124.107900][T10010] fat_ent_write+0x6c/0xe0 [ 124.112330][T10010] fat_chain_add+0x15d/0x440 [ 124.116938][T10010] fat_get_block+0x46c/0x5e0 [ 124.121534][T10010] __block_write_begin_int+0x3fd/0xf90 [ 124.127009][T10010] cont_write_begin+0x5fc/0x970 [ 124.131861][T10010] fat_write_begin+0x4f/0xe0 [ 124.136452][T10010] generic_perform_write+0x181/0x490 [ 124.141755][T10010] __generic_file_write_iter+0x9e/0x120 [ 124.147314][T10010] generic_file_write_iter+0x8d/0x2f0 [ 124.152690][T10010] vfs_write+0x4a0/0x8e0 [ 124.156938][T10010] ksys_write+0xda/0x1a0 [ 124.161186][T10010] __x64_sys_write+0x40/0x50 [ 124.165773][T10010] x64_sys_call+0x27fe/0x2ff0 [ 124.170452][T10010] do_syscall_64+0xd2/0x200 [ 124.174963][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.180853][T10010] [ 124.183169][T10010] read to 0xffff88812b88b800 of 512 bytes by task 10010 on cpu 0: [ 124.190964][T10010] fat_mirror_bhs+0x1df/0x320 [ 124.195655][T10010] fat_alloc_clusters+0x98b/0xa80 [ 124.200705][T10010] fat_get_block+0x258/0x5e0 [ 124.205313][T10010] __block_write_begin_int+0x3fd/0xf90 [ 124.210788][T10010] cont_write_begin+0x5fc/0x970 [ 124.215654][T10010] fat_write_begin+0x4f/0xe0 [ 124.220253][T10010] generic_perform_write+0x181/0x490 [ 124.225548][T10010] __generic_file_write_iter+0x9e/0x120 [ 124.231089][T10010] generic_file_write_iter+0x8d/0x2f0 [ 124.236456][T10010] vfs_write+0x4a0/0x8e0 [ 124.240695][T10010] ksys_write+0xda/0x1a0 [ 124.244951][T10010] __x64_sys_write+0x40/0x50 [ 124.249529][T10010] x64_sys_call+0x27fe/0x2ff0 [ 124.254201][T10010] do_syscall_64+0xd2/0x200 [ 124.258694][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.264574][T10010] [ 124.266879][T10010] Reported by Kernel Concurrency Sanitizer on: [ 124.273023][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.3.1130 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(voluntary) [ 124.285160][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.295202][T10010] ==================================================================