last executing test programs: 4.98528311s ago: executing program 3 (id=2260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) (fail_nth: 8) 4.254643971s ago: executing program 3 (id=2267): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x111b1064c6b38e7c, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000340)={0x3e, 0x1, 0xa, 0x7, 0xfffffffd, 0x81}) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x88, 0xc000067}, 0x2c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0x10, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) socket$kcm(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xf}, {0x0, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x800) 3.744646828s ago: executing program 2 (id=2274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}, 0x0) 3.58711613s ago: executing program 2 (id=2276): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") creat(&(0x7f0000000200)='./file2\x00', 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x7be, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cc}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}], 0x3}, 0x8810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x1a400000}, 0x18) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYRESHEX=r4], 0x10}}, 0x0) r9 = gettid() syz_open_procfs(r9, &(0x7f0000000080)='attr/sockcreate\x00') close(r8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$eJzs3V1rHFUcB+D/2d2kL2lNKoLWXhgo2IKaNGlFEcEW650XvhS8KhiTtJRu29BEsLViC/Ub6AcQvBNEvCwiRb3x1jvBDyDFIm1uvFuZzUy6bXfTvGw6tfM8sM2cORnOmSy/npmzM7MBVNZo9k8tYndEzKWI4Y66RuSVo0u/d/vWpenFW5emU7Ra7/+TIuXrit9P+c+hfOOtEfH7zymerN/f7vyFi6enms3Z83l5fOHM3Pj8hYsvnTozdXL25OzZyYlXJl4+dHDy0IG+7OfOiPh17Gjj6ok393w//c2uz3/89lqKw7Ejr+/cj34ZjdHlv0mn7O/6ar8bK0k935/Otzg1SuwQa1K8fwMR8XQMRz3uvHnD8cW7pXYO2FStFNECKirJP1RUcRyQnf8Wr3KPSICH5eaRpQmA22lpbm9xOf+NpbnB2NqeG9i+mKJzWidFRD9m5rI25p5Pw9krNmkeDuju8pWIeKbb+J/a2Rxpz+Jn+a/dlf9aRLyT/8zWv7fO9kfvKcs/PDwbyf+HHfn/aJ3tyz8AAAAAAAD0z/UjEfFit8//asvX/0SX63+GIuJwH9p/8Od/tRt9aAbo4uaRiNcjorj2b7Ej/7mRel7a2b4eYCCdONWcPRART0TE/hjYkpUnVmhjdM9vAz3rOq7/y15Z+8W1gHk/bjS23L3NzNTC1Eb2GVhy80rEs41u+U/L43/qMv5nY//cKttoHX3jl151D84/sFlaX0fs6zr+33lyRVr5+Rzj7eOB8eKo4H6fHr/2Q6/25R/Kk43/21fO/0jqfF7P/Nrb+OzvPzeQ/+7H/4PpWPuRM4P5uk+mFhbOT0QMprfvXz+59j7D46jIQ5GXLP/793Y//1/p+H9bRFxeZZvHfnrraq864z+UJ8v/zJrG/7Uv7P3gq397tb+68f9Qe0zfn68x/wcrW21Ay+4nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwf1SJiR6Ta2PJyrTY2FjEUEU/F9lrz3PzCCyfOfXx2Jqtrf/9/rfim3+Glciq+/3+kozx5T/lgROyKiC/r29rlselzzZmydx4AAAAAAAAAAAAAAAAAAAAeEUM97v/P/FUvu3fApmuU3QGgNPIP1SX/UF3yD9Ul/1Bd8g/VJf9QXfIP1SX/UF311nfHy+4DAAAAAADQN7ueu/5HiojLr21rvzKDed1AqT0DNtvhsjsAlMYjfqC6XPoH1eUcH0gPqN+67i0BAAAAAAAAAAAAgH7Zt9v9/1BVtbI7AJSm9/3/ngwAjzv3/0N1OccH3P8PAAAAAAAAAAAAAI+++QsXT081m7Pn17uwZWObW7BQnYVIfUjcQ1oo+38mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg8F8AAAD//8rF+L8=") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3.424666363s ago: executing program 3 (id=2279): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_usbip_server_init(0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='inode_foreign_history\x00', r1, 0x0, 0xffffffff80000001}, 0xb5) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x81fd) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x606c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, 0x0) fcntl$lock(r7, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x1}) 2.708903412s ago: executing program 1 (id=2289): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000004c0)=r3, 0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0xe}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = syz_clone(0x8000100, &(0x7f0000000040)="2ab7d86a56dd710b90b7f20336fa328a1f4923f0ff70b786beebda23ac56beb2187595ca980e30042a97185b75924847e8996664a73756fa10d5469a1ff09fa17a89163392a8", 0x46, &(0x7f00000000c0), 0x0, &(0x7f0000000140)="a0126effb846c714b7f89bb18a0670d1fcce644f9c1e78727d9ad71ae28b660517c03c1aa83e7cb98c9ab45bbb570fa86de6367249570f46761b2988fa6f83630bb75011963d058107490d3e0face55c32030690691f98dbb6bdb0f3215b05a2207aa3bcbe0decf547f0418817ec1533ce90ad093703eeb1a18de8ba91c08124f91ae79025ba459c86b3cfa93e07fe6ea5dd79903e3ccc7b0de1d6cc7e1e7feb9cb8eb707ea70e35d1d62dcaed") r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) close(r6) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000240)={0x6, 0xa2}) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0xcf5) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000000)={[{@nogrpid}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x28}}, {@minixdf}, {@jqfmt_vfsold}, {@quota}]}, 0x3, 0x444, &(0x7f0000000640)="$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") ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2000000, 0x0, 0x0, 0x10, "0062ba7d8200000000f7ffffff00"}) r7 = syz_open_pts(r5, 0x121500) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff0000000061100000000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x3) r8 = syz_pidfd_open(r4, 0x0) setns(r8, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 2.527262195s ago: executing program 2 (id=2290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) syz_pidfd_open(r3, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000001}, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 2.315710568s ago: executing program 4 (id=2291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900008500000004000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.224605189s ago: executing program 4 (id=2292): socket$netlink(0x10, 0x3, 0xf) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0xfffffffffffffd32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0xff, 0x5e, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x2438, 0x81, 0x800, 0x6, 0x8, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 2.1587293s ago: executing program 4 (id=2293): r0 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x204004, &(0x7f00000004c0)={[{@dioread_nolock}, {@i_version}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") link(&(0x7f0000001b80)='./file1\x00', &(0x7f0000001bc0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141842, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000069116400000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000a00)='dlm_recv\x00', r4, 0x0, 0x1}, 0x18) move_mount(r1, &(0x7f0000001b00)='./file1\x00', r0, &(0x7f0000001b40)='./file1\x00', 0x80) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000015c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0xb3, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010100000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c64000980140000800600010002000000080002"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) pwrite64(r1, &(0x7f00000007c0)='c', 0xfdef, 0xfecc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000280)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x1d, 0x1, 0xffffffffffffffff, @void, @value}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 2.15740328s ago: executing program 1 (id=2294): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) (async) write$nci(r5, &(0x7f0000000240)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) (async) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) close_range(r9, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000940)='sys_enter\x00', r11}, 0x18) (async) shmdt(0x0) (async) r12 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r12, 0x0) ioctl$VT_RESIZE(r12, 0x5609, &(0x7f00000004c0)={0xff81, 0x3, 0x3}) (async) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xb, 0x4) (async) r13 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) 1.802188675s ago: executing program 1 (id=2297): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) ftruncate(r0, 0x81ff) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c6ea65d9b1e1358b56adeb0ed4d1708febcd0c8fca8720c5c16fe5a1db7f02979c92976259f56b6bc5322254e034e4edbfed6afd338057dfdf185b0e59fe8d93e8e4cfa8477f2cb0f3af54a9c718146a8396a9bdecdace195bae03dd1c26147cd6deba544cf8065a348905f3d0f8573603e032d006284797b96f3def0bd82f9275b037b2080d66829bb762f4e6aa90c1d640e424111cb45be6f24b0ea3b99a0d470db55918ee14a65fa6bf617c1dbe9cb310d7b5fac52fa65ab7a4d331b81739e9dcf4f81afbbae01145ea36dd74f4ea6ace2ddc5a3c070b9f11ccd3c5edc1f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800", @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffff7ffffe9}, 0x18) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') unshare(0x22020600) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x10400) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f00000003c0)=""/4096, 0x1000) 1.791686225s ago: executing program 4 (id=2298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, 0xa3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x17, &(0x7f00000007c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x30cd6d9b}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x1e}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @generic={0x3, 0xe, 0x9, 0x5, 0x4}, @map_idx={0x18, 0x4ab14e2ffbfad4ae, 0x5, 0x0, 0xd}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000380)='syzkaller\x00', 0xfffffb17, 0x61, &(0x7f0000000440)=""/97, 0x41000, 0x42, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xa, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r2], &(0x7f0000000900)=[{0x3, 0x3, 0x5, 0x3}], 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x200980) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) 1.560553188s ago: executing program 2 (id=2300): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x9}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500e3ff2200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r5, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x40002161, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r10, &(0x7f0000000100), 0xfffffd79) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r11, 0x0, 0x58) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) ioctl$FICLONERANGE(r12, 0x4020940d, &(0x7f00000000c0)={{r12}, 0x0, 0x1ff, 0x10100000}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_j1939(r12, &(0x7f0000000140)={0x1d, r13, 0x0, {0x1, 0xf0, 0x4}, 0xfd}, 0x18) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0xfb, 0x52, 0x4, 0xff, "5c8d1750f633c9954aa69495dc4e4aa1", "15f9aa58e1be81862610c498694fd34a3d39b087532c7b17e876ce7d739624ae3a05d13971b2f1cd8b0ee5f2295cdfaaa80c028bf9ab0ced7a19dd2d89"}, 0x52, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 1.503044009s ago: executing program 4 (id=2301): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000780)=[{r4, 0x3230}], 0x1, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x400, 0x40, 0x4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, r6, 0x431, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xb5, 0x6d2, 0x23, @dev={0xfe, 0x80, '\x00', 0x23}, @mcast1, 0x20, 0x20, 0x10, 0x51}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x4, 0x1a, 0x95, 0x7, 0x2, @empty, @private0, 0x7, 0x40, 0x5, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x70, 0x1, 0x400000, 0x40000000, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xb, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r10}, 0x10) 1.318863642s ago: executing program 2 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3004810, &(0x7f0000000480), 0x0, 0x50c, &(0x7f0000000c40)="$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") 1.201897503s ago: executing program 2 (id=2303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) setresuid(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getitimer(0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d0f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (fail_nth: 3) 932.431057ms ago: executing program 1 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x200000000000000, 0x1001f0) 861.027188ms ago: executing program 3 (id=2306): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_usbip_server_init(0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='inode_foreign_history\x00', r1, 0x0, 0xffffffff80000001}, 0xb5) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(0x0, 0x0) ftruncate(r2, 0x81fd) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x606c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, 0x0) fcntl$lock(r7, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x1}) 643.064101ms ago: executing program 4 (id=2307): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) accept(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @local}) sendmsg$can_bcm(r0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x88441) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x5, &(0x7f0000000080)={0x5, 0x31, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x20, 0x0}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) mount(0x0, 0x0, 0x0, 0x30800, &(0x7f0000000340)='\'\x00') r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) pidfd_getfd(r9, r10, 0x0) 611.983601ms ago: executing program 1 (id=2308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) 464.684343ms ago: executing program 1 (id=2310): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES64=0xffffffffffffffff, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) syz_open_pts(r3, 0x50000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6b, 0x6b, 0x5, [@datasec={0xa, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x80000000, 0x9}, {0x4, 0x5, 0x10}, {0x3, 0x6, 0xfffffffd}, {0x2, 0x100, 0x1}, {0x1, 0x8, 0xf}], "c8c348"}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x70, 0x6}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x1}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000000480)=""/207, 0x89, 0xcf, 0x0, 0x6, 0x0, @void, @value}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0xb9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8, 0x0, 0x4}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mremap(&(0x7f0000cd4000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000d85000/0x4000)=nil) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r10, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f0000000200)=""/105, 0x69, 0x1, &(0x7f0000000080)) getitimer(0x0, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) 121.370468ms ago: executing program 0 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r2, 0x0, 0x0, 0x74) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 120.013688ms ago: executing program 3 (id=2322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf251b0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) 106.419359ms ago: executing program 0 (id=2323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 99.666428ms ago: executing program 3 (id=2324): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) shutdown(r0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x10080, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000001c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0xc01, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r6, &(0x7f0000004200)='t', 0x1) socket(0x2000000000000021, 0x2, 0x10000000000002) sendfile(r6, r3, 0x0, 0x3ffff) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)) recvmsg(r3, &(0x7f0000000600)={&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/85, 0x55}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000003c0)=""/20, 0x14}], 0x3}, 0xb6e831300b6ed5d4) sendfile(r6, r3, 0x0, 0x7ffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 81.267819ms ago: executing program 0 (id=2325): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 7.25056ms ago: executing program 0 (id=2326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r4, 0x0, 0x2, 0x2}}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 6.46438ms ago: executing program 0 (id=2327): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0xe, 0x8, @vifc_lcl_ifindex=r0, @multicast2}, 0x10) futex(0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0xc5fffffd) 0s ago: executing program 0 (id=2328): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x0, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x2, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101102, 0x5dd8, 0x0, 0x3, 0x0, 0x3, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x270, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x27d, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x230, 0x2, [@m_nat={0x22c, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x5, 0x5, 0x1}, @broadcast, @broadcast, 0xffffff00, 0x1}}]}, {0x1dc, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r10}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r3, 0x4, 0x4, 0xf7, 0x800, 0x40, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x6, 0x6}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000001c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x49, r11}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r13}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf251b0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) kernel console output (not intermixed with test programs): [ 161.029485][ T8772] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1861'. [ 161.086122][ T29] audit: type=1326 audit(1748146215.298:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 161.160463][ T29] audit: type=1326 audit(1748146215.318:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 161.191728][ T8782] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1862'. [ 161.208023][ T8785] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 161.217538][ T8785] SELinux: failed to load policy [ 161.237288][ T8782] batadv1: entered promiscuous mode [ 161.242633][ T8782] batadv1: entered allmulticast mode [ 161.260994][ T8786] sctp: [Deprecated]: syz.3.1860 (pid 8786) Use of int in max_burst socket option. [ 161.260994][ T8786] Use struct sctp_assoc_value instead [ 161.452757][ T8797] loop0: detected capacity change from 0 to 128 [ 161.469405][ T8799] loop2: detected capacity change from 0 to 2048 [ 161.491565][ T8799] EXT4-fs: Ignoring removed i_version option [ 161.534111][ T8799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.613597][ T8799] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.652211][ T8799] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1870: bg 0: block 345: padding at end of block bitmap is not set [ 161.667629][ T8809] loop3: detected capacity change from 0 to 512 [ 161.676527][ T8809] ext4: Unknown parameter 'noacl' [ 161.694285][ T8799] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 161.706808][ T8799] EXT4-fs (loop2): This should not happen!! Data will be lost [ 161.706808][ T8799] [ 161.715895][ T8809] serio: Serial port ptm0 [ 161.831877][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.846736][ T8815] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 161.894732][ T8815] SELinux: failed to load policy [ 161.914913][ T8817] loop2: detected capacity change from 0 to 512 [ 161.936721][ T8817] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.962932][ T8817] EXT4-fs (loop2): mount failed [ 162.063490][ T8823] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 162.073717][ T8823] SELinux: failed to load policy [ 162.179398][ T8829] loop3: detected capacity change from 0 to 512 [ 162.195562][ T8829] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.205123][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.216155][ T8829] EXT4-fs (loop3): orphan cleanup on readonly fs [ 162.222817][ T8829] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.1880: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 162.245544][ T8829] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.1880: Bad quota inode: 3, type: 0 [ 162.257654][ T8829] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 162.272337][ T8829] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 162.279435][ T8829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.304887][ T8832] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 162.311589][ T8832] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 162.319093][ T8832] vhci_hcd vhci_hcd.0: Device attached [ 162.327421][ T8829] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.1880: deleted inode referenced: 15 [ 162.413625][ T8832] SELinux: failed to load policy [ 162.420075][ T8833] vhci_hcd: connection closed [ 162.420471][ T6197] vhci_hcd: stop threads [ 162.429558][ T6197] vhci_hcd: release socket [ 162.434051][ T6197] vhci_hcd: disconnect device [ 162.461176][ T8839] loop0: detected capacity change from 0 to 512 [ 162.469408][ T8839] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.486574][ T8839] EXT4-fs (loop0): orphan cleanup on readonly fs [ 162.493840][ T8839] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.1883: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 162.528515][ T8839] EXT4-fs error (device loop0): ext4_quota_enable:7129: comm syz.0.1883: Bad quota inode: 3, type: 0 [ 162.541094][ T8839] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 162.555792][ T8839] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 162.697895][ T8843] lo speed is unknown, defaulting to 1000 [ 162.777417][ T8842] loop1: detected capacity change from 0 to 2048 [ 162.822261][ T8842] EXT4-fs: Ignoring removed i_version option [ 162.829465][ T8839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.865903][ T8842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.932127][ T8842] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.969552][ T8839] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.1883: deleted inode referenced: 15 [ 162.995348][ T8848] loop2: detected capacity change from 0 to 512 [ 163.037136][ T8848] ext4: Unknown parameter 'noacl' [ 163.136639][ T8842] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1884: bg 0: block 345: padding at end of block bitmap is not set [ 163.157085][ T8848] serio: Serial port ptm0 [ 163.340265][ T8842] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 163.352863][ T8842] EXT4-fs (loop1): This should not happen!! Data will be lost [ 163.352863][ T8842] [ 163.405863][ T8852] loop4: detected capacity change from 0 to 2048 [ 163.437225][ T8852] EXT4-fs: Ignoring removed i_version option [ 164.454301][ T8855] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 164.460952][ T8855] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.468554][ T8855] vhci_hcd vhci_hcd.0: Device attached [ 164.751218][ T8859] SELinux: failed to load policy [ 164.757589][ T8852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.818888][ T8856] vhci_hcd: connection closed [ 164.819216][ T6197] vhci_hcd: stop threads [ 164.828219][ T6197] vhci_hcd: release socket [ 164.832685][ T6197] vhci_hcd: disconnect device [ 164.854714][ T8852] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.944468][ T8839] lo speed is unknown, defaulting to 1000 [ 164.991783][ T8852] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1886: bg 0: block 345: padding at end of block bitmap is not set [ 165.016294][ T8852] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 165.028882][ T8852] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.028882][ T8852] [ 165.186333][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.269483][ T8866] loop4: detected capacity change from 0 to 2048 [ 165.283298][ T8866] EXT4-fs: Ignoring removed i_version option [ 165.326658][ T8866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.339345][ T8866] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.380446][ T8866] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1888: bg 0: block 345: padding at end of block bitmap is not set [ 165.396681][ T8866] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 165.409264][ T8866] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.409264][ T8866] [ 165.425690][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.485047][ T8870] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 165.515836][ T8873] 9pnet_rdma: rdma_create_trans (8873): problem binding to privport: 13 [ 165.540746][ T8870] SELinux: failed to load policy [ 165.644974][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.713719][ T8878] loop2: detected capacity change from 0 to 2048 [ 165.728290][ T8878] EXT4-fs: Ignoring removed i_version option [ 165.745458][ T8878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.759327][ T8878] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.784767][ T8878] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1892: bg 0: block 345: padding at end of block bitmap is not set [ 165.800789][ T8878] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 165.813372][ T8878] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.813372][ T8878] [ 165.831758][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 165.831774][ T29] audit: type=1326 audit(1748146220.038:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 165.881182][ T8882] loop4: detected capacity change from 0 to 512 [ 165.892698][ T29] audit: type=1326 audit(1748146220.058:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 165.916294][ T29] audit: type=1326 audit(1748146220.058:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 165.939739][ T29] audit: type=1326 audit(1748146220.058:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 165.966865][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.974044][ T8882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.990615][ T8882] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.005232][ T8882] EXT4-fs error (device loop4): ext4_get_first_dir_block:3538: inode #12: comm syz.4.1893: directory missing '.' [ 166.017526][ T29] audit: type=1400 audit(1748146220.218:2237): avc: denied { write } for pid=8881 comm="syz.4.1893" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 166.039233][ T29] audit: type=1400 audit(1748146220.218:2238): avc: denied { rename } for pid=8881 comm="syz.4.1893" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.043764][ T8882] EXT4-fs (loop4): Remounting filesystem read-only [ 166.061412][ T29] audit: type=1400 audit(1748146220.218:2239): avc: denied { reparent } for pid=8881 comm="syz.4.1893" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.061450][ T29] audit: type=1400 audit(1748146220.218:2240): avc: denied { add_name } for pid=8881 comm="syz.4.1893" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 166.113510][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.194259][ T8894] loop2: detected capacity change from 0 to 8192 [ 166.201552][ T8896] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 166.211026][ T8896] SELinux: failed to load policy [ 166.221553][ T8898] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 166.231222][ T8894] loop2: p2 p3 p4 [ 166.231988][ T8898] SELinux: failed to load policy [ 166.242711][ T8894] loop2: p2 start 452985600 is beyond EOD, truncated [ 166.249455][ T8894] loop2: p3 size 33554432 extends beyond EOD, truncated [ 166.257163][ T8894] loop2: p4 start 8388607 is beyond EOD, truncated [ 166.293883][ T3794] udevd[3794]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 166.312084][ T29] audit: type=1326 audit(1748146220.518:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 166.336242][ T29] audit: type=1326 audit(1748146220.518:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.2.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 166.392297][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.485414][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.492939][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.500360][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.508975][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.516560][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.524257][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.531667][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.539163][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.546634][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.554085][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.561552][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.569066][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.576583][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.584017][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.591582][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.591620][ T8918] lo: left promiscuous mode [ 166.599009][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.599034][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.599062][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.603552][ T8918] lo: left allmulticast mode [ 166.630435][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.637965][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.645492][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.653112][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.660521][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.667956][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.675392][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.682835][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.690237][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.697710][ T2969] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 166.722038][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.729313][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.764488][ T2969] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 166.798697][ T8918] bridge_slave_0: left allmulticast mode [ 166.802032][ T8923] fido_id[8923]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.804441][ T8918] bridge_slave_0: left promiscuous mode [ 166.824078][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.864009][ T8927] loop4: detected capacity change from 0 to 128 [ 166.880315][ T8928] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 166.890269][ T8928] SELinux: failed to load policy [ 167.056666][ T8918] bridge_slave_1: left allmulticast mode [ 167.062431][ T8918] bridge_slave_1: left promiscuous mode [ 167.068441][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.127837][ T8918] bond0: (slave bond_slave_0): Releasing backup interface [ 167.181303][ T8918] bond0: (slave bond_slave_1): Releasing backup interface [ 167.238086][ T8918] team0: Port device team_slave_0 removed [ 167.254179][ T8918] team0: Port device team_slave_1 removed [ 167.254781][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.262729][ T8918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.276982][ T8936] loop1: detected capacity change from 0 to 4096 [ 167.308433][ T8918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.317555][ T8918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.326766][ T8918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.351851][ T8936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.417247][ T8957] loop0: detected capacity change from 0 to 512 [ 167.424194][ T8957] ext4: Unknown parameter 'noacl' [ 167.502617][ T8918] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.511030][ T8918] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.519505][ T8918] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.527924][ T8918] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.632088][ T23] syz1: Port: 1 Link DOWN [ 167.647944][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.797566][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.805144][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.812601][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.820482][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.827943][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.835650][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.843203][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.850761][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.858306][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.865818][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.873460][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.880996][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.888542][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.896628][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.927552][ T8976] loop4: detected capacity change from 0 to 2048 [ 167.934620][ T8976] EXT4-fs: Ignoring removed i_version option [ 167.969591][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.977106][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.984777][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 167.992564][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.000008][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.007610][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.015130][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.022592][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.030009][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.037527][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.043965][ T8983] loop1: detected capacity change from 0 to 512 [ 168.045147][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.051842][ T8983] ext4: Unknown parameter 'noacl' [ 168.058821][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.058850][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.066987][ T8984] serio: Serial port ptm0 [ 168.071241][ T23] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 168.091614][ T8976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.108578][ T23] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz0 [ 168.132387][ T8976] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.167575][ T8976] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1923: bg 0: block 345: padding at end of block bitmap is not set [ 168.185020][ T8976] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 168.197541][ T8976] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.197541][ T8976] [ 168.211291][ T8987] fido_id[8987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.252319][ T8922] kernel write not supported for file /949/attr/exec (pid: 8922 comm: kworker/0:10) [ 168.255011][ T8993] loop2: detected capacity change from 0 to 512 [ 168.265015][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.332500][ T8999] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 168.339050][ T8999] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.346648][ T8999] vhci_hcd vhci_hcd.0: Device attached [ 168.378291][ T8993] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 168.406250][ T8993] EXT4-fs (loop2): mount failed [ 168.455786][ T8999] SELinux: failed to load policy [ 168.461720][ T9000] vhci_hcd: connection closed [ 168.462756][ T6197] vhci_hcd: stop threads [ 168.471741][ T6197] vhci_hcd: release socket [ 168.476364][ T6197] vhci_hcd: disconnect device [ 168.490236][ T9015] loop2: detected capacity change from 0 to 512 [ 168.497333][ T9015] ext4: Unknown parameter 'noacl' [ 168.504382][ T9017] serio: Serial port ptm0 [ 168.542693][ T23] vhci_hcd: vhci_device speed not set [ 168.551568][ T9021] loop2: detected capacity change from 0 to 128 [ 168.689573][ T9040] loop4: detected capacity change from 0 to 512 [ 168.730661][ T9040] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 168.747153][ T9040] EXT4-fs (loop4): mount failed [ 168.755242][ T9047] loop2: detected capacity change from 0 to 512 [ 168.781180][ T9047] ext4: Unknown parameter 'noacl' [ 168.790331][ T9051] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 168.802679][ T9049] loop3: detected capacity change from 0 to 1024 [ 168.812840][ T9049] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 168.823834][ T9049] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 168.835314][ T9051] SELinux: failed to load policy [ 168.841194][ T9049] JBD2: no valid journal superblock found [ 168.847007][ T9049] EXT4-fs (loop3): Could not load journal inode [ 168.856567][ T9053] serio: Serial port ptm1 [ 168.880291][ T9049] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 168.934229][ T9056] FAULT_INJECTION: forcing a failure. [ 168.934229][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 168.947027][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.2.1956 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 168.947056][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.947070][ T9056] Call Trace: [ 168.947076][ T9056] [ 168.947084][ T9056] __dump_stack+0x1d/0x30 [ 168.947106][ T9056] dump_stack_lvl+0xe8/0x140 [ 168.947127][ T9056] dump_stack+0x15/0x1b [ 168.947143][ T9056] should_fail_ex+0x265/0x280 [ 168.947234][ T9056] should_failslab+0x8c/0xb0 [ 168.947266][ T9056] kmem_cache_alloc_noprof+0x50/0x310 [ 168.947292][ T9056] ? __send_signal_locked+0x154/0x760 [ 168.947353][ T9056] __send_signal_locked+0x154/0x760 [ 168.947389][ T9056] send_signal_locked+0x34e/0x3c0 [ 168.947429][ T9056] do_notify_parent_cldstop+0x23f/0x2a0 [ 168.947453][ T9056] do_signal_stop+0x4fc/0x5a0 [ 168.947474][ T9056] get_signal+0x71e/0xf70 [ 168.947495][ T9056] ? _raw_spin_unlock+0x26/0x50 [ 168.947528][ T9056] arch_do_signal_or_restart+0x97/0x480 [ 168.947648][ T9056] syscall_exit_to_user_mode+0x68/0xb0 [ 168.947670][ T9056] do_syscall_64+0xdd/0x1a0 [ 168.947693][ T9056] ? clear_bhb_loop+0x40/0x90 [ 168.947780][ T9056] ? clear_bhb_loop+0x40/0x90 [ 168.947875][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.947896][ T9056] RIP: 0033:0x7f75b132e969 [ 168.947911][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.947929][ T9056] RSP: 002b:00007f75af997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000022 [ 168.947948][ T9056] RAX: fffffffffffffdfe RBX: 00007f75b1555fa0 RCX: 00007f75b132e969 [ 168.947960][ T9056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.948035][ T9056] RBP: 00007f75af997090 R08: 0000000000000000 R09: 0000000000000000 [ 168.948047][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.948059][ T9056] R13: 0000000000000000 R14: 00007f75b1555fa0 R15: 00007ffdb7cd59a8 [ 168.948078][ T9056] [ 169.158948][ T9067] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 169.168449][ T9067] SELinux: failed to load policy [ 169.201230][ T9074] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 169.210808][ T9074] SELinux: failed to load policy [ 169.682357][ T9086] loop1: detected capacity change from 0 to 512 [ 169.703019][ T9086] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.717838][ T9086] EXT4-fs (loop1): mount failed [ 169.738298][ T9089] loop2: detected capacity change from 0 to 512 [ 169.755143][ T9089] ext4: Unknown parameter 'noacl' [ 169.787901][ T9093] SELinux: policydb version -652113389 does not match my version range 15-34 [ 169.790140][ T9091] loop4: detected capacity change from 0 to 512 [ 169.817313][ T9093] SELinux: failed to load policy [ 169.851099][ T9091] EXT4-fs (loop4): 1 orphan inode deleted [ 169.865353][ T6197] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 169.866525][ T9091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.896726][ T9091] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.914069][ T9091] EXT4-fs (loop4): shut down requested (0) [ 169.940558][ T9109] sctp: [Deprecated]: syz.0.1972 (pid 9109) Use of int in max_burst socket option. [ 169.940558][ T9109] Use struct sctp_assoc_value instead [ 169.955292][ T9110] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 169.956926][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.961870][ T9110] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 169.978381][ T9110] vhci_hcd vhci_hcd.0: Device attached [ 170.079376][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.086053][ T9110] SELinux: failed to load policy [ 170.086983][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.099372][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.099624][ T9111] vhci_hcd: connection closed [ 170.109346][ T6197] vhci_hcd: stop threads [ 170.118405][ T6197] vhci_hcd: release socket [ 170.122888][ T6197] vhci_hcd: disconnect device [ 170.127787][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.135314][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.142749][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.150233][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.157668][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.165193][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.172693][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.173833][ T9123] loop4: detected capacity change from 0 to 512 [ 170.180085][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.180109][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.180136][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.186453][ T8947] vhci_hcd: vhci_device speed not set [ 170.193836][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.210443][ T9123] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.242242][ T9125] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 170.251845][ T9125] SELinux: failed to load policy [ 170.256321][ T9123] EXT4-fs (loop4): orphan cleanup on readonly fs [ 170.258293][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.265975][ T9123] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.1979: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 170.270510][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.288944][ T9123] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.1979: Bad quota inode: 3, type: 0 [ 170.295105][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.307298][ T9123] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 170.313319][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.327876][ T9123] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 170.331023][ T9123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.335320][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.358106][ T9123] EXT4-fs error (device loop4): ext4_lookup:1793: inode #2: comm syz.4.1979: deleted inode referenced: 15 [ 170.361761][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.361817][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.388112][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.395577][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.403149][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.410599][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.418049][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.425543][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.432972][ T3392] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 170.441241][ T3392] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 170.492097][ T9128] fido_id[9128]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.545901][ T9133] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 170.581185][ T9137] loop3: detected capacity change from 0 to 512 [ 170.587769][ T9137] ext4: Unknown parameter 'noacl' [ 170.777246][ T9138] lo speed is unknown, defaulting to 1000 [ 171.022478][ T9146] loop3: detected capacity change from 0 to 2048 [ 171.029984][ T9146] EXT4-fs: Ignoring removed i_version option [ 171.106588][ T9146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.119326][ T9146] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.158294][ T9146] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1987: bg 0: block 345: padding at end of block bitmap is not set [ 171.175971][ T9146] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 171.188502][ T9146] EXT4-fs (loop3): This should not happen!! Data will be lost [ 171.188502][ T9146] [ 171.297258][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 171.297272][ T29] audit: type=1326 audit(1748146225.508:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.504552][ T9159] serio: Serial port ptm0 [ 171.548426][ T9162] sctp: [Deprecated]: syz.0.1991 (pid 9162) Use of int in max_burst socket option. [ 171.548426][ T9162] Use struct sctp_assoc_value instead [ 171.591666][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.609883][ T29] audit: type=1326 audit(1748146225.548:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.633537][ T29] audit: type=1326 audit(1748146225.548:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.656954][ T29] audit: type=1326 audit(1748146225.548:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.680391][ T29] audit: type=1326 audit(1748146225.548:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.703951][ T29] audit: type=1326 audit(1748146225.548:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.727480][ T29] audit: type=1326 audit(1748146225.548:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.750961][ T29] audit: type=1326 audit(1748146225.548:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.774473][ T29] audit: type=1326 audit(1748146225.548:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.797926][ T29] audit: type=1326 audit(1748146225.548:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9153 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 171.928526][ T9171] loop0: detected capacity change from 0 to 512 [ 171.946777][ T9170] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 171.953325][ T9170] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.960806][ T9170] vhci_hcd vhci_hcd.0: Device attached [ 171.972263][ T9166] SELinux: policydb version -652113389 does not match my version range 15-34 [ 171.995162][ T9171] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.013813][ T9166] sel_write_load: 1 callbacks suppressed [ 172.013825][ T9166] SELinux: failed to load policy [ 172.026116][ T9171] EXT4-fs (loop0): mount failed [ 172.162943][ T8947] vhci_hcd: vhci_device speed not set [ 172.198897][ T9170] SELinux: failed to load policy [ 172.212848][ T9172] vhci_hcd: connection closed [ 172.232497][ T8947] usb 5-1: new full-speed USB device number 10 using vhci_hcd [ 172.251863][ T331] vhci_hcd: stop threads [ 172.256223][ T331] vhci_hcd: release socket [ 172.260833][ T331] vhci_hcd: disconnect device [ 172.282157][ T8945] kernel write not supported for file /865/attr/exec (pid: 8945 comm: kworker/1:12) [ 172.387113][ T9197] loop0: detected capacity change from 0 to 1024 [ 172.496917][ T9202] sctp: [Deprecated]: syz.0.2007 (pid 9202) Use of int in max_burst socket option. [ 172.496917][ T9202] Use struct sctp_assoc_value instead [ 172.835808][ T9229] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 172.842350][ T9229] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.849817][ T9229] vhci_hcd vhci_hcd.0: Device attached [ 172.865873][ T9234] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 172.875155][ T9234] SELinux: failed to load policy [ 172.900257][ T9229] SELinux: failed to load policy [ 172.906273][ T9231] vhci_hcd: connection reset by peer [ 172.911891][ T331] vhci_hcd: stop threads [ 172.916220][ T331] vhci_hcd: release socket [ 172.920704][ T331] vhci_hcd: disconnect device [ 172.979032][ T9237] loop3: detected capacity change from 0 to 1764 [ 172.985817][ T9237] iso9660: Unknown parameter 'ÀþÉ' [ 172.998067][ T9237] netlink: 'syz.3.2023': attribute type 13 has an invalid length. [ 173.006024][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2023'. [ 173.324325][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.428042][ T9243] sctp: [Deprecated]: syz.4.2025 (pid 9243) Use of int in max_burst socket option. [ 173.428042][ T9243] Use struct sctp_assoc_value instead [ 173.472357][ T9247] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 173.474769][ T9245] loop2: detected capacity change from 0 to 2048 [ 173.480184][ T9247] SELinux: failed to load policy [ 173.489037][ T9245] EXT4-fs: Ignoring removed i_version option [ 173.524627][ T9245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.547700][ T9245] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.573947][ T9245] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2026: bg 0: block 345: padding at end of block bitmap is not set [ 173.614571][ T9245] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 173.627453][ T9245] EXT4-fs (loop2): This should not happen!! Data will be lost [ 173.627453][ T9245] [ 173.657858][ T9265] loop0: detected capacity change from 0 to 512 [ 173.694242][ T9267] FAULT_INJECTION: forcing a failure. [ 173.694242][ T9267] name failslab, interval 1, probability 0, space 0, times 0 [ 173.705632][ T9265] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 173.706968][ T9267] CPU: 0 UID: 0 PID: 9267 Comm: syz.3.2034 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 173.707088][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.707105][ T9267] Call Trace: [ 173.707192][ T9267] [ 173.707201][ T9267] __dump_stack+0x1d/0x30 [ 173.707230][ T9267] dump_stack_lvl+0xe8/0x140 [ 173.707257][ T9267] dump_stack+0x15/0x1b [ 173.707279][ T9267] should_fail_ex+0x265/0x280 [ 173.707327][ T9267] should_failslab+0x8c/0xb0 [ 173.707446][ T9267] __kmalloc_cache_node_noprof+0x54/0x320 [ 173.707477][ T9267] ? __get_vm_area_node+0x106/0x1d0 [ 173.707538][ T9267] __get_vm_area_node+0x106/0x1d0 [ 173.707573][ T9267] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 173.707609][ T9267] ? sel_write_load+0x158/0x380 [ 173.707638][ T9267] ? _parse_integer+0x27/0x40 [ 173.707734][ T9267] ? __rcu_read_unlock+0x4f/0x70 [ 173.707770][ T9267] ? sel_write_load+0x158/0x380 [ 173.707794][ T9267] vmalloc_noprof+0x5e/0x70 [ 173.707827][ T9267] ? sel_write_load+0x158/0x380 [ 173.707851][ T9267] sel_write_load+0x158/0x380 [ 173.707883][ T9267] ? __pfx_sel_write_load+0x10/0x10 [ 173.707960][ T9267] vfs_write+0x266/0x8d0 [ 173.707996][ T9267] ? __rcu_read_unlock+0x4f/0x70 [ 173.708076][ T9267] ? __fget_files+0x184/0x1c0 [ 173.708120][ T9267] ksys_write+0xda/0x1a0 [ 173.708222][ T9267] __x64_sys_write+0x40/0x50 [ 173.708338][ T9267] x64_sys_call+0x2cdd/0x2fb0 [ 173.708370][ T9267] do_syscall_64+0xd0/0x1a0 [ 173.708404][ T9267] ? clear_bhb_loop+0x40/0x90 [ 173.708435][ T9267] ? clear_bhb_loop+0x40/0x90 [ 173.708465][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.708571][ T9267] RIP: 0033:0x7f3b132ce969 [ 173.708592][ T9267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.708616][ T9267] RSP: 002b:00007f3b11937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.708642][ T9267] RAX: ffffffffffffffda RBX: 00007f3b134f5fa0 RCX: 00007f3b132ce969 [ 173.708670][ T9267] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000007 [ 173.708687][ T9267] RBP: 00007f3b11937090 R08: 0000000000000000 R09: 0000000000000000 [ 173.708704][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.708729][ T9267] R13: 0000000000000000 R14: 00007f3b134f5fa0 R15: 00007ffeaafe4368 [ 173.708754][ T9267] [ 173.708765][ T9267] syz.3.2034: vmalloc error: size 101, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 173.730913][ T9265] EXT4-fs (loop0): mount failed [ 173.733971][ T9267] ,cpuset=/,mems_allowed=0 [ 173.978528][ T9267] CPU: 0 UID: 0 PID: 9267 Comm: syz.3.2034 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 173.978642][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.978657][ T9267] Call Trace: [ 173.978665][ T9267] [ 173.978674][ T9267] __dump_stack+0x1d/0x30 [ 173.978700][ T9267] dump_stack_lvl+0xe8/0x140 [ 173.978734][ T9267] dump_stack+0x15/0x1b [ 173.978827][ T9267] warn_alloc+0x12b/0x1a0 [ 173.978864][ T9267] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 173.978970][ T9267] ? _parse_integer+0x27/0x40 [ 173.979075][ T9267] ? __rcu_read_unlock+0x4f/0x70 [ 173.979107][ T9267] ? sel_write_load+0x158/0x380 [ 173.979130][ T9267] vmalloc_noprof+0x5e/0x70 [ 173.979200][ T9267] ? sel_write_load+0x158/0x380 [ 173.979222][ T9267] sel_write_load+0x158/0x380 [ 173.979325][ T9267] ? __pfx_sel_write_load+0x10/0x10 [ 173.979348][ T9267] vfs_write+0x266/0x8d0 [ 173.979380][ T9267] ? __rcu_read_unlock+0x4f/0x70 [ 173.979406][ T9267] ? __fget_files+0x184/0x1c0 [ 173.979474][ T9267] ksys_write+0xda/0x1a0 [ 173.979502][ T9267] __x64_sys_write+0x40/0x50 [ 173.979529][ T9267] x64_sys_call+0x2cdd/0x2fb0 [ 173.979555][ T9267] do_syscall_64+0xd0/0x1a0 [ 173.979607][ T9267] ? clear_bhb_loop+0x40/0x90 [ 173.979635][ T9267] ? clear_bhb_loop+0x40/0x90 [ 173.979685][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.979822][ T9267] RIP: 0033:0x7f3b132ce969 [ 173.979838][ T9267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.979881][ T9267] RSP: 002b:00007f3b11937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.979901][ T9267] RAX: ffffffffffffffda RBX: 00007f3b134f5fa0 RCX: 00007f3b132ce969 [ 173.979918][ T9267] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000007 [ 173.979935][ T9267] RBP: 00007f3b11937090 R08: 0000000000000000 R09: 0000000000000000 [ 173.979952][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.979968][ T9267] R13: 0000000000000000 R14: 00007f3b134f5fa0 R15: 00007ffeaafe4368 [ 173.980067][ T9267] [ 173.980085][ T9267] Mem-Info: [ 173.987088][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.992557][ T9267] active_anon:9553 inactive_anon:11 isolated_anon:0 [ 173.992557][ T9267] active_file:18579 inactive_file:2281 isolated_file:0 [ 173.992557][ T9267] unevictable:0 dirty:270 writeback:7 [ 173.992557][ T9267] slab_reclaimable:3271 slab_unreclaimable:33034 [ 173.992557][ T9267] mapped:29769 shmem:684 pagetables:1118 [ 173.992557][ T9267] sec_pagetables:0 bounce:0 [ 173.992557][ T9267] kernel_misc_reclaimable:0 [ 173.992557][ T9267] free:1848828 free_pcp:8331 free_cma:0 [ 174.009439][ T9272] loop4: detected capacity change from 0 to 2048 [ 174.013246][ T9267] Node 0 active_anon:38560kB inactive_anon:44kB active_file:74316kB inactive_file:9124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119076kB dirty:1080kB writeback:28kB shmem:3084kB writeback_tmp:0kB kernel_stack:4000kB pagetables:4472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.022371][ T9272] EXT4-fs: Ignoring removed i_version option [ 174.026323][ T9267] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.115485][ T9272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.117937][ T9267] lowmem_reserve[]: 0 [ 174.138945][ T9272] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.146004][ T9267] 2884 7863 7863 [ 174.176764][ T9272] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2036: bg 0: block 345: padding at end of block bitmap is not set [ 174.178030][ T9267] [ 174.187249][ T9272] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 174.189063][ T9267] Node 0 DMA32 free:2950028kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953560kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 174.192170][ T9272] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.192170][ T9272] [ 174.201129][ T9267] lowmem_reserve[]: 0 0 4978 4978 [ 174.201230][ T9267] Node 0 Normal free:4429924kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:38444kB inactive_anon:44kB active_file:74316kB inactive_file:9124kB unevictable:0kB writepending:1224kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:29472kB local_pcp:10964kB free_cma:0kB [ 174.447082][ T9267] lowmem_reserve[]: 0 0 0 0 [ 174.451640][ T9267] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.464572][ T9267] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 2*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950028kB [ 174.480933][ T9267] Node 0 Normal: 99*4kB (UME) 25*8kB (M) 469*16kB (M) 428*32kB (UME) 319*64kB (UME) 139*128kB (UM) 46*256kB (UME) 32*512kB (UM) 26*1024kB (UM) 13*2048kB (UME) 1047*4096kB (UM) = 4429924kB [ 174.499860][ T9267] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 174.509187][ T9267] 21711 total pagecache pages [ 174.513943][ T9267] 57 pages in swap cache [ 174.518204][ T9267] Free swap = 124776kB [ 174.522392][ T9267] Total swap = 124996kB [ 174.526591][ T9267] 2097051 pages RAM [ 174.530426][ T9267] 0 pages HighMem/MovableOnly [ 174.535219][ T9267] 80260 pages reserved [ 174.574724][ T9279] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 174.581286][ T9279] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 174.588785][ T9279] vhci_hcd vhci_hcd.0: Device attached [ 174.596616][ T9277] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 174.608324][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.633759][ T9277] SELinux: failed to load policy [ 174.661066][ T9285] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 174.680707][ T9285] SELinux: failed to load policy [ 174.687453][ T9279] SELinux: failed to load policy [ 174.693304][ T9280] vhci_hcd: connection closed [ 174.694752][ T331] vhci_hcd: stop threads [ 174.703848][ T331] vhci_hcd: release socket [ 174.708322][ T331] vhci_hcd: disconnect device [ 174.714495][ T9290] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2040'. [ 174.723824][ T9290] team0: No ports can be present during mode change [ 174.735792][ T9292] loop0: detected capacity change from 0 to 512 [ 174.743041][ T9292] EXT4-fs: Ignoring removed oldalloc option [ 174.749134][ T9292] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.756189][ T9292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.765803][ T9292] EXT4-fs (loop0): orphan cleanup on readonly fs [ 174.774171][ T9292] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2042: Failed to acquire dquot type 1 [ 174.788018][ T9292] EXT4-fs (loop0): 1 truncate cleaned up [ 174.795704][ T9292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.811080][ T9292] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 174.820807][ T9297] loop4: detected capacity change from 0 to 512 [ 174.823224][ T9292] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.2042: Abort forced by user [ 174.831783][ T9297] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.844504][ T9292] EXT4-fs (loop0): Remounting filesystem read-only [ 174.851107][ T9292] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 174.859599][ T9292] ext4 filesystem being remounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.865593][ T9297] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 174.879852][ T9297] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2043: attempt to clear invalid blocks 2 len 1 [ 174.893549][ T9297] EXT4-fs (loop4): Remounting filesystem read-only [ 174.900355][ T9297] EXT4-fs (loop4): 1 truncate cleaned up [ 174.906904][ T9297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.907400][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.944353][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.022090][ T9301] infiniband syz2: set down [ 175.026696][ T9301] infiniband syz2: added veth0_to_bond [ 175.038454][ T9301] RDS/IB: syz2: added [ 175.042691][ T9301] smc: adding ib device syz2 with port count 1 [ 175.048917][ T9301] smc: ib device syz2 port 1 has pnetid [ 175.236122][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2048'. [ 175.284130][ T9316] sctp: [Deprecated]: syz.2.2047 (pid 9316) Use of int in max_burst socket option. [ 175.284130][ T9316] Use struct sctp_assoc_value instead [ 175.327139][ T9319] loop1: detected capacity change from 0 to 2048 [ 175.334930][ T9319] EXT4-fs: Ignoring removed i_version option [ 175.355551][ T9319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.377550][ T9319] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.393880][ T9329] serio: Serial port ptm0 [ 175.398408][ T9331] loop0: detected capacity change from 0 to 512 [ 175.414284][ T9319] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2051: bg 0: block 345: padding at end of block bitmap is not set [ 175.429523][ T9319] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 175.429594][ T9331] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.2055: corrupted in-inode xattr: invalid ea_ino [ 175.442029][ T9319] EXT4-fs (loop1): This should not happen!! Data will be lost [ 175.442029][ T9319] [ 175.456979][ T9331] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2055: couldn't read orphan inode 15 (err -117) [ 175.478851][ T9331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.505485][ T9337] SELinux: policydb version -652113389 does not match my version range 15-34 [ 175.527163][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.528088][ T9337] SELinux: failed to load policy [ 175.566509][ T9340] loop0: detected capacity change from 0 to 2048 [ 175.577336][ T9340] EXT4-fs: Ignoring removed i_version option [ 175.612312][ T9345] loop2: detected capacity change from 0 to 512 [ 175.624630][ T9340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.636910][ T9340] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.649672][ T9345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.655147][ T9340] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2058: bg 0: block 345: padding at end of block bitmap is not set [ 175.672582][ T9345] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.677334][ T9340] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 175.699328][ T9340] EXT4-fs (loop0): This should not happen!! Data will be lost [ 175.699328][ T9340] [ 175.714728][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.734939][ T9352] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 175.744466][ T9352] SELinux: failed to load policy [ 175.869556][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.900430][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.923513][ T9365] serio: Serial port ptm1 [ 176.014365][ T9374] tmpfs: Bad value for 'mpol' [ 176.036383][ T9371] sctp: [Deprecated]: syz.1.2068 (pid 9371) Use of int in max_burst socket option. [ 176.036383][ T9371] Use struct sctp_assoc_value instead [ 176.128777][ T9382] loop3: detected capacity change from 0 to 512 [ 176.135936][ T9382] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.146909][ T9382] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 176.156161][ T9382] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 176.164657][ T9382] System zones: 0-2, 18-18, 34-34 [ 176.170069][ T9382] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 176.185125][ T9382] EXT4-fs (loop3): 1 truncate cleaned up [ 176.191178][ T9382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.205994][ T9382] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.2073: path /380/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 176.226233][ T9382] EXT4-fs (loop3): Remounting filesystem read-only [ 176.248510][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.249632][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.265005][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.272519][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.280104][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.287663][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.295092][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.302600][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.310006][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.317442][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.324519][ T9387] loop3: detected capacity change from 0 to 2048 [ 176.324959][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.334488][ T9387] EXT4-fs: Ignoring removed i_version option [ 176.338692][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.352094][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.359563][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.367080][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.374730][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.382150][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.389670][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.397113][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.404562][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.411953][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.412119][ T9390] loop2: detected capacity change from 0 to 2048 [ 176.419427][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.433271][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.438649][ T9390] ext4: Unknown parameter 'noacl' [ 176.440665][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.453275][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.460725][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.468181][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.475743][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.483187][ T8922] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 176.492015][ T9387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.504255][ T8922] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 176.514184][ T9387] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.541160][ T9393] loop2: detected capacity change from 0 to 2048 [ 176.543019][ T9394] fido_id[9394]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 176.575713][ T9393] EXT4-fs: Ignoring removed i_version option [ 176.584825][ T9387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2075: bg 0: block 345: padding at end of block bitmap is not set [ 176.599531][ T9387] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 176.612105][ T9387] EXT4-fs (loop3): This should not happen!! Data will be lost [ 176.612105][ T9387] [ 176.615234][ T9393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.634091][ T9393] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.646754][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 176.646835][ T29] audit: type=1326 audit(1748146230.858:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b132ce969 code=0x7ffc0000 [ 176.659621][ T9393] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2077: bg 0: block 345: padding at end of block bitmap is not set [ 176.695245][ T9393] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 176.707780][ T9393] EXT4-fs (loop2): This should not happen!! Data will be lost [ 176.707780][ T9393] [ 176.708437][ T29] audit: type=1326 audit(1748146230.858:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b132ce969 code=0x7ffc0000 [ 176.740952][ T29] audit: type=1326 audit(1748146230.858:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f3b132ce969 code=0x7ffc0000 [ 176.764609][ T29] audit: type=1326 audit(1748146230.858:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b132ce969 code=0x7ffc0000 [ 176.788175][ T29] audit: type=1326 audit(1748146230.858:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b132ce969 code=0x7ffc0000 [ 176.818596][ T29] audit: type=1326 audit(1748146231.028:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 176.842053][ T29] audit: type=1326 audit(1748146231.028:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 176.847987][ T9402] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 176.865478][ T29] audit: type=1326 audit(1748146231.028:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9392 comm="syz.2.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 176.882737][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.909985][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.933966][ T9404] loop4: detected capacity change from 0 to 512 [ 176.961532][ T9404] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.967559][ T29] audit: type=1400 audit(1748146231.168:2549): avc: denied { mounton } for pid=9408 comm="syz.3.2080" path="/proc/920/task" dev="proc" ino=23947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 176.996466][ T9404] EXT4-fs (loop4): orphan cleanup on readonly fs [ 177.013033][ T9404] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.2082: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 177.032860][ T9404] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.2082: Bad quota inode: 3, type: 0 [ 177.087639][ T9404] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 177.102586][ T9404] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 177.114060][ T29] audit: type=1326 audit(1748146231.228:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9412 comm="syz.0.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81170e969 code=0x7ffc0000 [ 177.161220][ T9404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.234290][ T9404] EXT4-fs error (device loop4): ext4_lookup:1793: inode #2: comm syz.4.2082: deleted inode referenced: 15 [ 177.340566][ T9420] sctp: [Deprecated]: syz.0.2085 (pid 9420) Use of int in max_burst socket option. [ 177.340566][ T9420] Use struct sctp_assoc_value instead [ 177.357907][ T8947] usb 5-1: enqueue for inactive port 0 [ 177.363705][ T8947] usb 5-1: enqueue for inactive port 0 [ 177.435464][ T8947] vhci_hcd: vhci_device speed not set [ 177.528864][ T9427] FAULT_INJECTION: forcing a failure. [ 177.528864][ T9427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.542012][ T9427] CPU: 1 UID: 0 PID: 9427 Comm: +}[@ Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 177.542076][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.542093][ T9427] Call Trace: [ 177.542101][ T9427] [ 177.542110][ T9427] __dump_stack+0x1d/0x30 [ 177.542157][ T9427] dump_stack_lvl+0xe8/0x140 [ 177.542184][ T9427] dump_stack+0x15/0x1b [ 177.542206][ T9427] should_fail_ex+0x265/0x280 [ 177.542244][ T9427] should_fail+0xb/0x20 [ 177.542353][ T9427] should_fail_usercopy+0x1a/0x20 [ 177.542380][ T9427] strncpy_from_user+0x25/0x230 [ 177.542416][ T9427] ? kmem_cache_alloc_noprof+0x186/0x310 [ 177.542521][ T9427] ? getname_flags+0x80/0x3b0 [ 177.542556][ T9427] getname_flags+0xae/0x3b0 [ 177.542590][ T9427] user_path_at+0x28/0x130 [ 177.542612][ T9427] __se_sys_mount+0x25b/0x2e0 [ 177.542697][ T9427] __x64_sys_mount+0x67/0x80 [ 177.542733][ T9427] x64_sys_call+0xd36/0x2fb0 [ 177.542755][ T9427] do_syscall_64+0xd0/0x1a0 [ 177.542778][ T9427] ? clear_bhb_loop+0x40/0x90 [ 177.542808][ T9427] ? clear_bhb_loop+0x40/0x90 [ 177.542876][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.542904][ T9427] RIP: 0033:0x7ff81170e969 [ 177.542923][ T9427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.542948][ T9427] RSP: 002b:00007ff80fd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 177.542967][ T9427] RAX: ffffffffffffffda RBX: 00007ff811935fa0 RCX: 00007ff81170e969 [ 177.542980][ T9427] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 177.543004][ T9427] RBP: 00007ff80fd77090 R08: 0000200000000300 R09: 0000000000000000 [ 177.543016][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.543029][ T9427] R13: 0000000000000000 R14: 00007ff811935fa0 R15: 00007ffe68a93448 [ 177.543081][ T9427] [ 177.690230][ T9425] lo speed is unknown, defaulting to 1000 [ 177.748691][ T9428] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 177.987907][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 177.995501][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.003034][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.023363][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.030806][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.038265][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.045704][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.053128][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.060678][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.068175][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.075657][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.083203][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.090720][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.098176][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.165365][ T9439] loop0: detected capacity change from 0 to 2048 [ 178.182681][ T9439] EXT4-fs: Ignoring removed i_version option [ 178.237109][ T9439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.258172][ T9439] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.269649][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.277120][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.284561][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.291961][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.299469][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.306899][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.314336][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.321790][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.329298][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.336746][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.342213][ T9439] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2091: bg 0: block 345: padding at end of block bitmap is not set [ 178.344169][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.365943][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.373389][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.380787][ T8922] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 178.402592][ T8922] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 178.444189][ T9439] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 178.456740][ T9439] EXT4-fs (loop0): This should not happen!! Data will be lost [ 178.456740][ T9439] [ 178.477184][ T9442] fido_id[9442]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.537822][ T9451] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 178.588059][ T9451] sel_write_load: 1 callbacks suppressed [ 178.588078][ T9451] SELinux: failed to load policy [ 178.598960][ T9457] loop1: detected capacity change from 0 to 2048 [ 178.607676][ T9457] EXT4-fs: Ignoring removed i_version option [ 178.635408][ T9457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.658597][ T9457] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.760614][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.785965][ T9457] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2097: bg 0: block 345: padding at end of block bitmap is not set [ 178.807083][ T9457] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 178.819605][ T9457] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.819605][ T9457] [ 178.873878][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.202349][ T9494] loop0: detected capacity change from 0 to 2048 [ 179.231168][ T9494] EXT4-fs: Ignoring removed i_version option [ 179.267099][ T9494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.278214][ T9502] loop1: detected capacity change from 0 to 128 [ 179.303462][ T9494] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.322990][ T9494] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2113: bg 0: block 345: padding at end of block bitmap is not set [ 179.339530][ T9494] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 179.352037][ T9494] EXT4-fs (loop0): This should not happen!! Data will be lost [ 179.352037][ T9494] [ 179.450525][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.541759][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 179.551493][ T9510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2118'. [ 179.561221][ T9510] netlink: 'syz.2.2118': attribute type 12 has an invalid length. [ 179.730618][ T9517] sctp: [Deprecated]: syz.3.2120 (pid 9517) Use of int in max_burst socket option. [ 179.730618][ T9517] Use struct sctp_assoc_value instead [ 180.006593][ T9524] loop3: detected capacity change from 0 to 512 [ 180.014908][ T9524] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #32: comm syz.3.2124: iget: special inode unallocated [ 180.031261][ T9524] EXT4-fs (loop3): no journal found [ 180.036531][ T9524] EXT4-fs (loop3): can't get journal size [ 180.044198][ T9524] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 180.054412][ T9524] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.2124: iget: special inode unallocated [ 180.074104][ T9524] EXT4-fs (loop3): failed to initialize system zone (-117) [ 180.081448][ T9524] EXT4-fs (loop3): mount failed [ 180.165956][ T9532] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 180.213023][ T9532] SELinux: failed to load policy [ 180.273340][ T9563] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 180.383273][ T9563] SELinux: failed to load policy [ 180.480015][ T9593] loop1: detected capacity change from 0 to 512 [ 180.614527][ T9593] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 180.649729][ T9593] EXT4-fs (loop1): mount failed [ 180.704105][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2129'. [ 180.719531][ T9598] loop1: detected capacity change from 0 to 512 [ 180.732088][ T9598] EXT4-fs: Ignoring removed i_version option [ 180.762627][ T9598] EXT4-fs (loop1): 1 orphan inode deleted [ 180.844339][ T9536] lo speed is unknown, defaulting to 1000 [ 180.896870][ T9604] loop0: detected capacity change from 0 to 2048 [ 180.913219][ T9604] EXT4-fs: Ignoring removed i_version option [ 180.927323][ T9604] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.977425][ T9604] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2131: bg 0: block 345: padding at end of block bitmap is not set [ 181.020055][ T9604] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 181.032559][ T9604] EXT4-fs (loop0): This should not happen!! Data will be lost [ 181.032559][ T9604] [ 181.175934][ T9617] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 181.188084][ T9617] SELinux: failed to load policy [ 181.203791][ T9618] sctp: [Deprecated]: syz.3.2134 (pid 9618) Use of int in max_burst socket option. [ 181.203791][ T9618] Use struct sctp_assoc_value instead [ 181.412645][ T9625] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 181.419243][ T9625] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 181.426691][ T9625] vhci_hcd vhci_hcd.0: Device attached [ 181.470378][ T9625] SELinux: failed to load policy [ 181.476035][ T9626] vhci_hcd: connection closed [ 181.476226][ T6197] vhci_hcd: stop threads [ 181.485378][ T6197] vhci_hcd: release socket [ 181.489942][ T6197] vhci_hcd: disconnect device [ 181.504209][ T9629] FAULT_INJECTION: forcing a failure. [ 181.504209][ T9629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 181.517576][ T9629] CPU: 1 UID: 0 PID: 9629 Comm: syz.4.2139 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 181.517618][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.517631][ T9629] Call Trace: [ 181.517637][ T9629] [ 181.517644][ T9629] __dump_stack+0x1d/0x30 [ 181.517703][ T9629] dump_stack_lvl+0xe8/0x140 [ 181.517721][ T9629] dump_stack+0x15/0x1b [ 181.517774][ T9629] should_fail_ex+0x265/0x280 [ 181.517842][ T9629] should_fail_alloc_page+0xf2/0x100 [ 181.517872][ T9629] __alloc_frozen_pages_noprof+0xff/0x360 [ 181.517974][ T9629] alloc_pages_mpol+0xb3/0x250 [ 181.518029][ T9629] vma_alloc_folio_noprof+0x1aa/0x300 [ 181.518053][ T9629] do_wp_page+0x673/0x23e0 [ 181.518098][ T9629] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 181.518129][ T9629] ? __rcu_read_lock+0x37/0x50 [ 181.518212][ T9629] handle_mm_fault+0x6dc/0x2ae0 [ 181.518302][ T9629] ? mas_walk+0xf2/0x120 [ 181.518425][ T9629] do_user_addr_fault+0x636/0x1090 [ 181.518476][ T9629] ? fpregs_assert_state_consistent+0x84/0xa0 [ 181.518511][ T9629] exc_page_fault+0x54/0xc0 [ 181.518536][ T9629] asm_exc_page_fault+0x26/0x30 [ 181.518565][ T9629] RIP: 0033:0x7fbe32830cc3 [ 181.518582][ T9629] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 181.518598][ T9629] RSP: 002b:00007fbe30fd64a0 EFLAGS: 00010202 [ 181.518612][ T9629] RAX: 0000000000000400 RBX: 00007fbe30fd6540 RCX: 00007fbe28bb7000 [ 181.518623][ T9629] RDX: 00007fbe30fd66e0 RSI: 0000000000000000 RDI: 00007fbe30fd65e0 [ 181.518634][ T9629] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000ac [ 181.518645][ T9629] R10: 00000000000000c2 R11: 00007fbe30fd6540 R12: 0000000000000001 [ 181.518704][ T9629] R13: 00007fbe32a0bfc0 R14: 0000000000000020 R15: 00007fbe30fd65e0 [ 181.518722][ T9629] [ 181.518731][ T9629] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 181.708832][ T9631] loop1: detected capacity change from 0 to 2048 [ 181.716604][ T9629] loop4: detected capacity change from 0 to 1024 [ 181.720924][ T9631] EXT4-fs: Ignoring removed i_version option [ 181.726726][ T9629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 181.742396][ T9629] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.757195][ T9629] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 181.769686][ T9629] EXT4-fs (loop4): orphan cleanup on readonly fs [ 181.779357][ T9629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz.4.2139: Invalid inode table block 0 in block_group 0 [ 181.790425][ T9634] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 181.792401][ T9629] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 181.802869][ T9634] SELinux: failed to load policy [ 181.811506][ T9629] EXT4-fs error (device loop4): ext4_quota_write:7324: inode #3: comm syz.4.2139: mark_inode_dirty error [ 181.820032][ T9631] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.827161][ T9629] __quota_error: 61 callbacks suppressed [ 181.827176][ T9629] Quota error (device loop4): write_blk: dquota write failed [ 181.850592][ T9629] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 181.855692][ T9631] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2140: bg 0: block 345: padding at end of block bitmap is not set [ 181.860563][ T9629] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2139: Failed to acquire dquot type 0 [ 181.877668][ T9631] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 181.891047][ T9629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz.4.2139: Invalid inode table block 0 in block_group 0 [ 181.898584][ T9631] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.898584][ T9631] [ 181.915027][ T9629] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 181.930661][ T9629] EXT4-fs error (device loop4): ext4_ext_truncate:4457: inode #15: comm syz.4.2139: mark_inode_dirty error [ 181.943728][ T9629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz.4.2139: Invalid inode table block 0 in block_group 0 [ 181.956609][ T9629] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 181.966251][ T29] audit: type=1326 audit(1748146236.168:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0afe969 code=0x7ffc0000 [ 181.989859][ T29] audit: type=1326 audit(1748146236.168:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa4e0afe969 code=0x7ffc0000 [ 182.013336][ T29] audit: type=1326 audit(1748146236.168:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0afe969 code=0x7ffc0000 [ 182.025206][ T9629] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 182.047849][ T9629] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz.4.2139: Invalid inode table block 0 in block_group 0 [ 182.061439][ T29] audit: type=1326 audit(1748146236.178:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.1.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0afe969 code=0x7ffc0000 [ 182.091578][ T9629] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 182.113094][ T9629] EXT4-fs error (device loop4): ext4_truncate:4255: inode #15: comm syz.4.2139: mark_inode_dirty error [ 182.134437][ T9629] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 182.144787][ T9644] loop2: detected capacity change from 0 to 2048 [ 182.151644][ T9644] EXT4-fs: Ignoring removed i_version option [ 182.158760][ T9629] EXT4-fs (loop4): 1 truncate cleaned up [ 182.173031][ T9647] serio: Serial port ptm0 [ 182.178177][ T9644] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.210779][ T9644] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2145: bg 0: block 345: padding at end of block bitmap is not set [ 182.225342][ T9644] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 182.237937][ T9644] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.237937][ T9644] [ 182.251042][ T29] audit: type=1326 audit(1748146236.458:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9643 comm="syz.2.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 182.276231][ T29] audit: type=1326 audit(1748146236.488:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9643 comm="syz.2.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 182.299649][ T29] audit: type=1326 audit(1748146236.488:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9643 comm="syz.2.2145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 182.330891][ T9657] loop1: detected capacity change from 0 to 512 [ 182.333183][ T9657] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (40960 > 6144). [ 182.333298][ T9657] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.333374][ T9657] EXT4-fs (loop1): mount failed [ 182.374053][ T9661] loop1: detected capacity change from 0 to 512 [ 182.382894][ T9661] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.383855][ T9661] EXT4-fs (loop1): orphan cleanup on readonly fs [ 182.383887][ T9661] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.2149: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 182.384177][ T9661] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.2149: Bad quota inode: 3, type: 0 [ 182.384378][ T9661] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 182.384415][ T9661] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 182.417293][ T9661] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.2149: deleted inode referenced: 15 [ 182.651044][ T9678] loop2: detected capacity change from 0 to 2048 [ 182.659362][ T9678] EXT4-fs: Ignoring removed i_version option [ 182.695537][ T9678] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.848121][ T9684] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 182.870925][ T9678] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2155: bg 0: block 345: padding at end of block bitmap is not set [ 182.887215][ T9678] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 182.899720][ T9678] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.899720][ T9678] [ 182.957270][ T9679] lo speed is unknown, defaulting to 1000 [ 182.990632][ T9686] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 182.997195][ T9686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 183.004842][ T9686] vhci_hcd vhci_hcd.0: Device attached [ 183.037758][ T9692] loop3: detected capacity change from 0 to 128 [ 183.048164][ T9692] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.152570][ T9686] SELinux: failed to load policy [ 183.159458][ T9689] vhci_hcd: connection closed [ 183.159719][ T6197] vhci_hcd: stop threads [ 183.168891][ T6197] vhci_hcd: release socket [ 183.173456][ T6197] vhci_hcd: disconnect device [ 183.198879][ T9696] SELinux: policydb version -652113389 does not match my version range 15-34 [ 183.210351][ T9696] SELinux: failed to load policy [ 183.215397][ T8945] vhci_hcd: vhci_device speed not set [ 183.395440][ T9699] SELinux: policydb version -652113389 does not match my version range 15-34 [ 183.407849][ T9699] SELinux: failed to load policy [ 183.450065][ T9701] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 183.459595][ T9701] SELinux: failed to load policy [ 183.877168][ T9714] netlink: 'syz.3.2167': attribute type 29 has an invalid length. [ 183.897263][ T9715] loop2: detected capacity change from 0 to 2048 [ 183.904352][ T9715] EXT4-fs: Ignoring removed i_version option [ 183.924249][ T9715] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.975828][ T9715] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2166: bg 0: block 345: padding at end of block bitmap is not set [ 183.992229][ T9721] loop3: detected capacity change from 0 to 512 [ 184.005542][ T9715] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 184.018065][ T9715] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.018065][ T9715] [ 184.043219][ T9721] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.067184][ T9721] EXT4-fs (loop3): mount failed [ 184.072221][ T9725] loop0: detected capacity change from 0 to 512 [ 184.138163][ T9725] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.195113][ T9725] EXT4-fs (loop0): mount failed [ 184.196218][ T9734] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 184.209676][ T9734] SELinux: failed to load policy [ 184.288024][ T9738] loop4: detected capacity change from 0 to 2048 [ 184.433581][ T9745] FAULT_INJECTION: forcing a failure. [ 184.433581][ T9745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.433742][ T9738] loop4: p1 < > p4 [ 184.446736][ T9745] CPU: 1 UID: 0 PID: 9745 Comm: syz.3.2179 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 184.446815][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.446832][ T9745] Call Trace: [ 184.446841][ T9745] [ 184.446851][ T9745] __dump_stack+0x1d/0x30 [ 184.446991][ T9745] dump_stack_lvl+0xe8/0x140 [ 184.447017][ T9745] dump_stack+0x15/0x1b [ 184.447046][ T9745] should_fail_ex+0x265/0x280 [ 184.447091][ T9745] should_fail+0xb/0x20 [ 184.447157][ T9745] should_fail_usercopy+0x1a/0x20 [ 184.447184][ T9745] _copy_to_user+0x20/0xa0 [ 184.447214][ T9745] simple_read_from_buffer+0xb5/0x130 [ 184.447278][ T9745] proc_fail_nth_read+0x100/0x140 [ 184.447318][ T9745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.447353][ T9745] vfs_read+0x19d/0x6f0 [ 184.447386][ T9745] ? __rcu_read_unlock+0x4f/0x70 [ 184.447415][ T9745] ? __fget_files+0x184/0x1c0 [ 184.447468][ T9745] ksys_read+0xda/0x1a0 [ 184.447504][ T9745] __x64_sys_read+0x40/0x50 [ 184.447555][ T9745] x64_sys_call+0x2d77/0x2fb0 [ 184.447584][ T9745] do_syscall_64+0xd0/0x1a0 [ 184.447606][ T9745] ? clear_bhb_loop+0x40/0x90 [ 184.447631][ T9745] ? clear_bhb_loop+0x40/0x90 [ 184.447731][ T9745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.447759][ T9745] RIP: 0033:0x7f3b132cd37c [ 184.447779][ T9745] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 184.447865][ T9745] RSP: 002b:00007f3b11937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.447889][ T9745] RAX: ffffffffffffffda RBX: 00007f3b134f5fa0 RCX: 00007f3b132cd37c [ 184.447906][ T9745] RDX: 000000000000000f RSI: 00007f3b119370a0 RDI: 0000000000000004 [ 184.447922][ T9745] RBP: 00007f3b11937090 R08: 0000000000000000 R09: 0000000000000000 [ 184.447938][ T9745] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 184.447954][ T9745] R13: 0000000000000000 R14: 00007f3b134f5fa0 R15: 00007ffeaafe4368 [ 184.447978][ T9745] [ 184.458342][ T9747] loop0: detected capacity change from 0 to 512 [ 184.467644][ T9738] loop4: p4 size 8388608 extends beyond EOD, [ 184.647143][ T9747] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 184.649606][ T9738] truncated [ 184.703409][ T9747] EXT4-fs (loop0): 1 truncate cleaned up [ 184.924564][ T9757] sctp: [Deprecated]: syz.2.2181 (pid 9757) Use of int in max_burst socket option. [ 184.924564][ T9757] Use struct sctp_assoc_value instead [ 185.091584][ T9767] loop2: detected capacity change from 0 to 2048 [ 185.098593][ T9767] EXT4-fs: Ignoring removed i_version option [ 185.150214][ T9767] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.172331][ T9772] siw: device registration error -23 [ 185.181226][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'. [ 185.200595][ T9767] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2184: bg 0: block 345: padding at end of block bitmap is not set [ 185.223913][ T9767] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 185.236570][ T9767] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.236570][ T9767] [ 185.320273][ T9784] FAULT_INJECTION: forcing a failure. [ 185.320273][ T9784] name failslab, interval 1, probability 0, space 0, times 0 [ 185.333127][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: syz.0.2189 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 185.333185][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.333203][ T9784] Call Trace: [ 185.333211][ T9784] [ 185.333272][ T9784] __dump_stack+0x1d/0x30 [ 185.333304][ T9784] dump_stack_lvl+0xe8/0x140 [ 185.333330][ T9784] dump_stack+0x15/0x1b [ 185.333385][ T9784] should_fail_ex+0x265/0x280 [ 185.333484][ T9784] ? audit_log_d_path+0x8d/0x150 [ 185.333586][ T9784] should_failslab+0x8c/0xb0 [ 185.333627][ T9784] __kmalloc_cache_noprof+0x4c/0x320 [ 185.333657][ T9784] audit_log_d_path+0x8d/0x150 [ 185.333758][ T9784] audit_log_d_path_exe+0x42/0x70 [ 185.333791][ T9784] audit_log_task+0x1e9/0x250 [ 185.333821][ T9784] audit_seccomp+0x61/0x100 [ 185.333912][ T9784] ? __seccomp_filter+0x68c/0x10d0 [ 185.333948][ T9784] __seccomp_filter+0x69d/0x10d0 [ 185.333980][ T9784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 185.334034][ T9784] ? vfs_write+0x75e/0x8d0 [ 185.334079][ T9784] __secure_computing+0x82/0x150 [ 185.334108][ T9784] syscall_trace_enter+0xcf/0x1e0 [ 185.334143][ T9784] do_syscall_64+0xaa/0x1a0 [ 185.334174][ T9784] ? clear_bhb_loop+0x40/0x90 [ 185.334196][ T9784] ? clear_bhb_loop+0x40/0x90 [ 185.334230][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.334252][ T9784] RIP: 0033:0x7ff81170e969 [ 185.334283][ T9784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.334312][ T9784] RSP: 002b:00007ff80fd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 185.334331][ T9784] RAX: ffffffffffffffda RBX: 00007ff811935fa0 RCX: 00007ff81170e969 [ 185.334345][ T9784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.334359][ T9784] RBP: 00007ff80fd77090 R08: 0000000000000000 R09: 0000000000000000 [ 185.334371][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.334431][ T9784] R13: 0000000000000000 R14: 00007ff811935fa0 R15: 00007ffe68a93448 [ 185.334458][ T9784] [ 185.604808][ T9790] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 185.617923][ T9790] SELinux: failed to load policy [ 185.633956][ T9788] SELinux: policydb version -652113389 does not match my version range 15-34 [ 185.653466][ T9788] SELinux: failed to load policy [ 185.666814][ T9792] sctp: [Deprecated]: syz.3.2194 (pid 9792) Use of int in max_burst socket option. [ 185.666814][ T9792] Use struct sctp_assoc_value instead [ 185.849008][ T9804] loop2: detected capacity change from 0 to 1024 [ 185.885163][ T9804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2198'. [ 185.962084][ T9813] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 185.970034][ T9815] loop2: detected capacity change from 0 to 2048 [ 185.979750][ T9815] EXT4-fs: Ignoring removed i_version option [ 185.997726][ T9815] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.031176][ T9815] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2203: bg 0: block 345: padding at end of block bitmap is not set [ 186.048427][ T9815] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 186.061003][ T9815] EXT4-fs (loop2): This should not happen!! Data will be lost [ 186.061003][ T9815] [ 186.090075][ T9822] sctp: [Deprecated]: syz.1.2205 (pid 9822) Use of int in max_burst socket option. [ 186.090075][ T9822] Use struct sctp_assoc_value instead [ 186.219531][ T9838] netlink: 'syz.2.2210': attribute type 15 has an invalid length. [ 186.266208][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2212'. [ 186.290338][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'. [ 186.297065][ T9848] loop4: detected capacity change from 0 to 512 [ 186.313196][ T9848] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.328298][ T9848] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.342038][ T9848] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #3: comm syz.4.2213: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 186.371909][ T9848] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.2213: Bad quota inode: 3, type: 0 [ 186.394677][ T9856] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 186.404643][ T9856] SELinux: failed to load policy [ 186.410162][ T9848] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 186.424971][ T9848] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 186.450493][ T9848] EXT4-fs error (device loop4): ext4_lookup:1793: inode #2: comm syz.4.2213: deleted inode referenced: 15 [ 186.578820][ T9862] sctp: [Deprecated]: syz.0.2218 (pid 9862) Use of int in max_burst socket option. [ 186.578820][ T9862] Use struct sctp_assoc_value instead [ 186.581418][ T9864] loop2: detected capacity change from 0 to 2048 [ 186.605037][ T9864] EXT4-fs: Ignoring removed i_version option [ 186.637173][ T9864] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.659874][ T9864] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2219: bg 0: block 345: padding at end of block bitmap is not set [ 186.685073][ T9864] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 186.697756][ T9864] EXT4-fs (loop2): This should not happen!! Data will be lost [ 186.697756][ T9864] [ 186.802396][ T9874] SELinux: policydb version -652113389 does not match my version range 15-34 [ 186.813690][ T9874] SELinux: failed to load policy [ 186.821240][ T9875] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 186.871336][ T9880] netlink: 'syz.0.2223': attribute type 1 has an invalid length. [ 186.879190][ T9880] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2223'. [ 186.894582][ T9882] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 186.901144][ T9882] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.908648][ T9882] vhci_hcd vhci_hcd.0: Device attached [ 186.920448][ T9869] lo speed is unknown, defaulting to 1000 [ 186.994932][ T9882] SELinux: failed to load policy [ 187.000717][ T9883] vhci_hcd: connection closed [ 187.000981][ T9564] vhci_hcd: stop threads [ 187.010003][ T9564] vhci_hcd: release socket [ 187.014558][ T9564] vhci_hcd: disconnect device [ 187.024042][ T9886] loop1: detected capacity change from 0 to 128 [ 187.031459][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 187.031491][ T29] audit: type=1107 audit(1748146241.228:2785): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 187.566276][ T9898] loop3: detected capacity change from 0 to 512 [ 187.586336][ T9898] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (40960 > 6144). [ 187.608370][ T9898] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.623371][ T9898] EXT4-fs (loop3): mount failed [ 187.654520][ T9902] loop2: detected capacity change from 0 to 2048 [ 187.671053][ T9902] EXT4-fs: Ignoring removed i_version option [ 187.722330][ T9902] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.754899][ T29] audit: type=1400 audit(1748146241.958:2786): avc: denied { map } for pid=9907 comm="syz.0.2235" path="socket:[25796]" dev="sockfs" ino=25796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.778073][ T29] audit: type=1400 audit(1748146241.968:2787): avc: denied { read } for pid=9907 comm="syz.0.2235" path="socket:[25796]" dev="sockfs" ino=25796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.836042][ T9902] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2233: bg 0: block 345: padding at end of block bitmap is not set [ 187.890777][ T9902] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 187.903334][ T9902] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.903334][ T9902] [ 187.942241][ T9911] sctp: [Deprecated]: syz.3.2236 (pid 9911) Use of int in max_burst socket option. [ 187.942241][ T9911] Use struct sctp_assoc_value instead [ 187.962271][ T29] audit: type=1326 audit(1748146242.168:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 187.985770][ T29] audit: type=1326 audit(1748146242.168:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 188.009222][ T29] audit: type=1326 audit(1748146242.168:2790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 188.032868][ T29] audit: type=1326 audit(1748146242.168:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.2.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b132e969 code=0x7ffc0000 [ 188.096100][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.103696][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.105913][ T9917] serio: Serial port ptm0 [ 188.111115][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.117102][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.130607][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.138039][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.145499][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.153032][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.160442][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.167943][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.175401][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.182993][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.190678][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.198297][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.316325][ T9931] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 188.326285][ T9931] SELinux: failed to load policy [ 188.331404][ T9932] serio: Serial port ptm0 [ 188.448400][ T9938] can0: slcan on ptm0. [ 188.474790][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.482243][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.489696][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.497139][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.504653][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.512111][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.519560][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.527002][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.534440][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.541847][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.549452][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.556885][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.564537][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.571966][ T8945] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 188.580142][ T8945] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz0 [ 188.642589][ T9938] can0 (unregistered): slcan off ptm0. [ 188.656240][ T9950] fido_id[9950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.769706][ T9966] loop2: detected capacity change from 0 to 512 [ 188.788017][ T9966] EXT4-fs: Ignoring removed nobh option [ 188.820965][ T9966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.838673][ T9966] EXT4-fs (loop2): orphan cleanup on readonly fs [ 188.845796][ T9966] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 188.860531][ T9966] EXT4-fs (loop2): 1 truncate cleaned up [ 188.941801][ T9971] SELinux: Context Ü is not valid (left unmapped). [ 188.970638][ T9971] dvmrp1: entered allmulticast mode [ 188.989013][ T9971] loop0: detected capacity change from 0 to 512 [ 189.001235][ T29] audit: type=1400 audit(1748146243.208:2792): avc: denied { create } for pid=9964 comm="syz.0.2254" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=DC [ 189.082199][ T29] audit: type=1400 audit(1748146243.208:2793): avc: denied { associate } for pid=9964 comm="syz.0.2254" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=DC [ 189.156853][ T9997] loop2: detected capacity change from 0 to 2048 [ 189.176635][ T9997] EXT4-fs: Ignoring removed i_version option [ 189.196614][ T9999] FAULT_INJECTION: forcing a failure. [ 189.196614][ T9999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.209922][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz.3.2260 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 189.209958][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.209974][ T9999] Call Trace: [ 189.209982][ T9999] [ 189.209991][ T9999] __dump_stack+0x1d/0x30 [ 189.210011][ T9999] dump_stack_lvl+0xe8/0x140 [ 189.210030][ T9999] dump_stack+0x15/0x1b [ 189.210129][ T9999] should_fail_ex+0x265/0x280 [ 189.210172][ T9999] should_fail+0xb/0x20 [ 189.210306][ T9999] should_fail_usercopy+0x1a/0x20 [ 189.210332][ T9999] strncpy_from_user+0x25/0x230 [ 189.210365][ T9999] ? _raw_spin_unlock+0x26/0x50 [ 189.210452][ T9999] strncpy_from_user_nofault+0x68/0xf0 [ 189.210494][ T9999] bpf_probe_read_user_str+0x2a/0x70 [ 189.210536][ T9999] bpf_prog_1f2a558f99cc9b3e+0x3e/0x44 [ 189.210558][ T9999] bpf_trace_run2+0x104/0x1c0 [ 189.210649][ T9999] ? free_modprobe_argv+0x44/0x50 [ 189.210680][ T9999] ? free_modprobe_argv+0x44/0x50 [ 189.210708][ T9999] kfree+0x26f/0x310 [ 189.210732][ T9999] ? wait_for_common+0x194/0x1e0 [ 189.210799][ T9999] free_modprobe_argv+0x44/0x50 [ 189.210824][ T9999] ? __pfx_free_modprobe_argv+0x10/0x10 [ 189.210846][ T9999] call_usermodehelper_exec+0xbe/0x2c0 [ 189.210891][ T9999] __request_module+0x283/0x3e0 [ 189.210970][ T9999] crypto_alg_mod_lookup+0xa1/0x490 [ 189.211009][ T9999] crypto_alloc_tfm_node+0xb5/0x2b0 [ 189.211048][ T9999] ? tls_set_sw_offload+0x284/0xba0 [ 189.211133][ T9999] crypto_alloc_aead+0x2d/0x40 [ 189.211163][ T9999] tls_set_sw_offload+0x65a/0xba0 [ 189.211201][ T9999] tls_setsockopt+0xa02/0xce0 [ 189.211232][ T9999] sock_common_setsockopt+0x69/0x80 [ 189.211281][ T9999] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 189.211367][ T9999] __sys_setsockopt+0x184/0x200 [ 189.211395][ T9999] __x64_sys_setsockopt+0x64/0x80 [ 189.211420][ T9999] x64_sys_call+0x2bd5/0x2fb0 [ 189.211455][ T9999] do_syscall_64+0xd0/0x1a0 [ 189.211485][ T9999] ? clear_bhb_loop+0x40/0x90 [ 189.211512][ T9999] ? clear_bhb_loop+0x40/0x90 [ 189.211553][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.211591][ T9999] RIP: 0033:0x7f3b132ce969 [ 189.211686][ T9999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.211706][ T9999] RSP: 002b:00007f3b11937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 189.211748][ T9999] RAX: ffffffffffffffda RBX: 00007f3b134f5fa0 RCX: 00007f3b132ce969 [ 189.211822][ T9999] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 189.211836][ T9999] RBP: 00007f3b11937090 R08: 0000000000000038 R09: 0000000000000000 [ 189.211852][ T9999] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 189.211877][ T9999] R13: 0000000000000000 R14: 00007f3b134f5fa0 R15: 00007ffeaafe4368 [ 189.211903][ T9999] [ 189.494479][ T9997] EXT4-fs mount: 32 callbacks suppressed [ 189.494511][ T9997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.546475][T10007] loop1: detected capacity change from 0 to 128 [ 189.553639][ T9997] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.588959][ T9997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2259: bg 0: block 345: padding at end of block bitmap is not set [ 189.663578][ T9997] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 189.676126][ T9997] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.676126][ T9997] [ 189.741954][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.921129][ T23] IPVS: starting estimator thread 0... [ 189.936101][T10027] netlink: 'syz.3.2267': attribute type 13 has an invalid length. [ 189.980283][T10025] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.004447][T10032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.013199][T10028] IPVS: using max 2112 ests per chain, 105600 per kthread [ 190.099523][T10032] loop0: detected capacity change from 0 to 8192 [ 190.133587][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.140844][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.165226][T10039] loop2: detected capacity change from 0 to 512 [ 190.175149][T10039] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.263061][T10027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.273853][T10039] EXT4-fs (loop2): 1 truncate cleaned up [ 190.279998][T10039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.305530][T10027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.351869][T10049] sctp: [Deprecated]: syz.0.2273 (pid 10049) Use of int in max_burst socket option. [ 190.351869][T10049] Use struct sctp_assoc_value instead [ 190.418087][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.436013][T10027] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.444993][T10027] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.453994][T10027] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.463013][T10027] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.495749][T10027] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.504839][T10027] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.513848][T10027] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.522856][T10027] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 190.577195][T10054] loop1: detected capacity change from 0 to 2048 [ 190.590135][T10056] loop2: detected capacity change from 0 to 512 [ 190.605153][T10054] EXT4-fs: Ignoring removed i_version option [ 190.617158][T10058] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 190.623712][T10058] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.631279][T10058] vhci_hcd vhci_hcd.0: Device attached [ 190.642796][T10056] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.663177][T10054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.675653][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.683020][T10054] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.704015][T10056] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 190.723804][T10058] SELinux: failed to load policy [ 190.743017][T10056] EXT4-fs (loop2): 1 truncate cleaned up [ 190.750016][T10054] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2275: bg 0: block 345: padding at end of block bitmap is not set [ 190.750839][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.765396][T10056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.772156][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.792100][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.792306][T10054] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 190.799900][T10059] vhci_hcd: connection closed [ 190.812022][T10054] EXT4-fs (loop1): This should not happen!! Data will be lost [ 190.812022][T10054] [ 190.812386][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.816864][ T8959] vhci_hcd: vhci_device speed not set [ 190.826545][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.846793][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.854304][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.861814][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.869298][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.876748][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.884189][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.891614][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.892532][ T8959] usb 1-1: new full-speed USB device number 7 using vhci_hcd [ 190.899134][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.907918][ T6197] vhci_hcd: stop threads [ 190.913912][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 190.918135][ T6197] vhci_hcd: release socket [ 190.918152][ T6197] vhci_hcd: disconnect device [ 190.951844][ T8959] usb 1-1: enqueue for inactive port 0 [ 190.958760][T10068] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 190.965343][T10068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.972841][T10068] vhci_hcd vhci_hcd.0: Device attached [ 190.980471][ T8959] usb 1-1: enqueue for inactive port 0 [ 190.988789][ T8959] usb 1-1: enqueue for inactive port 0 [ 190.993031][T10056] EXT4-fs: Ignoring removed orlov option [ 190.996104][T10073] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 191.009810][T10073] SELinux: failed to load policy [ 191.010405][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.024123][T10056] EXT4-fs (loop2): can't enable nombcache during remount [ 191.032322][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.039873][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.047305][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.054722][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.062130][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.062478][ T8959] vhci_hcd: vhci_device speed not set [ 191.069598][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.082333][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.089818][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.097230][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.104741][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.112191][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.119685][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.127102][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.134578][ T23] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 191.142764][ T23] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz0 [ 191.153877][ T3392] vhci_hcd: vhci_device speed not set [ 191.186581][T10074] fido_id[10074]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 191.212657][ T3392] usb 7-1: new full-speed USB device number 5 using vhci_hcd [ 191.222014][T10078] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 191.241452][T10078] SELinux: failed to load policy [ 191.344053][T10089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2286'. [ 191.388228][T10092] SELinux: policydb table sizes (1347623514,-1421792149) do not match mine (8,7) [ 191.434073][T10096] sctp: [Deprecated]: syz.1.2289 (pid 10096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.434073][T10096] Use struct sctp_sack_info instead [ 191.462507][T10092] SELinux: failed to load policy [ 191.474391][T10096] loop1: detected capacity change from 0 to 512 [ 191.574357][T10096] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.584283][T10096] EXT4-fs (loop1): #clusters per group too big: 8298 [ 191.592640][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.770668][T10096] lo speed is unknown, defaulting to 1000 [ 191.872497][T10106] serio: Serial port ptm2 [ 191.877703][T10069] vhci_hcd: connection reset by peer [ 191.884545][ T9590] vhci_hcd: stop threads [ 191.888853][ T9590] vhci_hcd: release socket [ 191.893426][ T9590] vhci_hcd: disconnect device [ 191.991937][T10111] loop4: detected capacity change from 0 to 2048 [ 192.023233][T10111] EXT4-fs: Ignoring removed i_version option [ 192.074573][T10111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.101222][T10111] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.122734][T10111] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2293: bg 0: block 345: padding at end of block bitmap is not set [ 192.127426][T10119] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 192.144005][T10111] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 192.165600][T10111] EXT4-fs (loop4): This should not happen!! Data will be lost [ 192.165600][T10111] [ 192.184328][T10122] futex_wake_op: syz.0.2296 tries to shift op by -1; fix this program [ 192.194556][T10122] loop0: detected capacity change from 0 to 128 [ 192.201402][T10122] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.225130][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 192.225144][ T29] audit: type=1326 audit(1748146246.438:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3296e969 code=0x7ffc0000 [ 192.234838][T10122] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 192.264800][ T29] audit: type=1326 audit(1748146246.468:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fbe3296e969 code=0x7ffc0000 [ 192.288264][ T29] audit: type=1326 audit(1748146246.468:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3296e969 code=0x7ffc0000 [ 192.311839][ T29] audit: type=1326 audit(1748146246.468:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3296e969 code=0x7ffc0000 [ 192.375018][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.426501][ T29] audit: type=1326 audit(1748146246.638:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3296e969 code=0x7ffc0000 [ 192.450205][ T29] audit: type=1326 audit(1748146246.638:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe3296d2d0 code=0x7ffc0000 [ 192.474061][ T29] audit: type=1326 audit(1748146246.638:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3296e969 code=0x7ffc0000 [ 192.490785][T10133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.497565][ T29] audit: type=1326 audit(1748146246.638:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fbe3296e969 code=0x7ffc0000 [ 192.529489][ T29] audit: type=1326 audit(1748146246.638:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3296e969 code=0x7ffc0000 [ 192.553142][ T29] audit: type=1326 audit(1748146246.638:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10130 comm="syz.4.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe3296e969 code=0x7ffc0000 [ 192.571485][T10133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.668134][ T3389] IPVS: starting estimator thread 0... [ 192.680014][T10133] loop0: detected capacity change from 0 to 256 [ 192.772542][T10139] IPVS: using max 2448 ests per chain, 122400 per kthread [ 192.848785][T10145] loop2: detected capacity change from 0 to 512 [ 192.874282][T10145] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.917333][T10145] EXT4-fs (loop2): mount failed [ 192.982173][T10148] pim6reg1: entered promiscuous mode [ 192.987583][T10148] pim6reg1: entered allmulticast mode [ 193.278515][T10150] loop1: detected capacity change from 0 to 1024 [ 193.307243][T10154] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 193.313873][T10154] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 193.321352][T10154] vhci_hcd vhci_hcd.0: Device attached [ 193.321478][T10150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.353522][T10157] sctp: [Deprecated]: syz.0.2305 (pid 10157) Use of int in max_burst socket option. [ 193.353522][T10157] Use struct sctp_assoc_value instead [ 193.418782][T10150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.491934][T10154] SELinux: failed to load policy [ 193.511196][T10161] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP) [ 193.526019][T10155] vhci_hcd: connection closed [ 193.526926][ T6197] vhci_hcd: stop threads [ 193.536076][ T6197] vhci_hcd: release socket [ 193.540572][ T6197] vhci_hcd: disconnect device [ 193.550299][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.595974][T10163] loop0: detected capacity change from 0 to 2048 [ 193.603385][T10163] EXT4-fs: Ignoring removed i_version option [ 193.647779][T10163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.662844][T10163] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.679814][T10163] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2309: bg 0: block 345: padding at end of block bitmap is not set [ 193.696280][T10163] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 193.708792][T10163] EXT4-fs (loop0): This should not happen!! Data will be lost [ 193.708792][T10163] [ 193.736325][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.985346][T10194] sctp: [Deprecated]: syz.0.2319 (pid 10194) Use of int in max_burst socket option. [ 193.985346][T10194] Use struct sctp_assoc_value instead [ 194.075447][T10204] loop3: detected capacity change from 0 to 128 [ 194.117713][T10208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2326'. [ 194.168591][T10213] tipc: Started in network mode [ 194.173540][T10213] tipc: Node identity ac14140f, cluster identity 4711 [ 194.180525][T10213] tipc: New replicast peer: 255.255.255.255 [ 194.186896][T10213] tipc: Enabled bearer , priority 10 [ 194.194160][T10213] netlink: 572 bytes leftover after parsing attributes in process `syz.0.2328'. [ 194.309258][T10210] ================================================================== [ 194.317427][T10210] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 194.325739][T10210] [ 194.328081][T10210] write to 0xffff888106ba8d28 of 4 bytes by task 10204 on cpu 1: [ 194.335824][T10210] writeback_single_inode+0x14a/0x3e0 [ 194.341269][T10210] sync_inode_metadata+0x5b/0x90 [ 194.346261][T10210] __generic_file_fsync+0xf8/0x140 [ 194.351485][T10210] fat_file_fsync+0x49/0x100 [ 194.356122][T10210] vfs_fsync_range+0x10a/0x130 [ 194.361003][T10210] generic_file_write_iter+0x1b8/0x2f0 [ 194.366493][T10210] iter_file_splice_write+0x5ef/0x970 [ 194.371894][T10210] direct_splice_actor+0x153/0x2a0 [ 194.377032][T10210] splice_direct_to_actor+0x30f/0x680 [ 194.382434][T10210] do_splice_direct+0xda/0x150 [ 194.387235][T10210] do_sendfile+0x380/0x640 [ 194.391684][T10210] __x64_sys_sendfile64+0x105/0x150 [ 194.396914][T10210] x64_sys_call+0xb39/0x2fb0 [ 194.401537][T10210] do_syscall_64+0xd0/0x1a0 [ 194.406085][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.412014][T10210] [ 194.414352][T10210] read to 0xffff888106ba8d28 of 4 bytes by task 10210 on cpu 0: [ 194.421997][T10210] __mark_inode_dirty+0x18e/0x760 [ 194.427073][T10210] fat_update_time+0x1ec/0x200 [ 194.431860][T10210] touch_atime+0x145/0x330 [ 194.436315][T10210] filemap_splice_read+0x629/0x6b0 [ 194.441474][T10210] splice_direct_to_actor+0x26f/0x680 [ 194.446884][T10210] do_splice_direct+0xda/0x150 [ 194.451690][T10210] do_sendfile+0x380/0x640 [ 194.456118][T10210] __x64_sys_sendfile64+0x105/0x150 [ 194.461348][T10210] x64_sys_call+0xb39/0x2fb0 [ 194.465973][T10210] do_syscall_64+0xd0/0x1a0 [ 194.470515][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.476437][T10210] [ 194.478778][T10210] value changed: 0x00000038 -> 0x00000002 [ 194.484517][T10210] [ 194.486858][T10210] Reported by Kernel Concurrency Sanitizer on: [ 194.493113][T10210] CPU: 0 UID: 0 PID: 10210 Comm: syz.3.2324 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(voluntary) [ 194.505627][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.515692][T10210] ================================================================== [ 195.232501][ T23] tipc: Node number set to 2886997007 [ 196.242533][ T3392] usb 7-1: enqueue for inactive port 0 [ 196.248106][ T3392] usb 7-1: enqueue for inactive port 0 [ 196.322499][ T3392] vhci_hcd: vhci_device speed not set