last executing test programs: 4.208642111s ago: executing program 3 (id=3780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x280000, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000000)=0x0) io_cancel(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, r4, &(0x7f0000000100)="098df67fa8fbb83a62998a3edc4bfa846825268713fcb09584bbb996b658eca5be7f31f9099d689da3f7b523d9b75ebefdd47cee3d90929ca5cc27eb404e1844bff8d82a01bc521107b2aee41ba35b9233583e266040f23fbfdcabbf36a0fe1eff046b4a8180310665b3453d683ea172bcc512b893efe5b3d57a201772ded106d4b50b9e47aea33f1795dea33c13c3dde118c407f21405e5981eeaf3fb0f350b1d5a3dc4af22bd10fba56a4451062398f47f024202a67b7f7872a9c8db546d105545566dc1c079a196008f6c42188a", 0xcf, 0x0, 0x0, 0x0, r5}, &(0x7f0000000200)) splice(r4, 0x0, r6, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000001500)={0x20000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0xd}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f00000003c0)=""/30, &(0x7f0000001440)=[0xffffffffffffffff], 0x1, {r6}}, 0x58) tkill(r8, 0x3d) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r9, 0x5607, 0x4) ioctl$VT_ACTIVATE(r9, 0x5606, 0x4) vmsplice(r6, &(0x7f0000000380)=[{0x0}, {&(0x7f00000002c0)="40288f34bcf7367c6993649e41118758375f199400b0a9755e1b624228bf", 0x1e}, {&(0x7f0000002040)}], 0x3, 0x6) write(r3, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x3e163d19dfa7e90d}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008011}, 0x8000) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) 3.430635924s ago: executing program 1 (id=3782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x11f002, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0xe, 0x1001f0) fallocate(r1, 0x3, 0x9, 0x10000) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000400)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x19, 0xb, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2c20000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="34000000580000032cbd7000fedbdf250008000200aad09fb3000000000000000210436087863db8673030a4213560724ceb1dcf65ee19f37e5b0516399e0e7f6bddf6f6e4d15f5b1217b2aa", @ANYRES32=r4, @ANYBLOB="0800010001000000080001000100000008000200", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x40800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x940c, 0x3002, 0x220, 0x2c0, 0x330, 0x3d8, 0x3d8, 0x330, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xff, 0xff000000, 0xffffff00], 'wg2\x00', 'ip_vti0\x00', {}, {0xff}, 0x87, 0x2, 0x2, 0x2c}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x538f, 0xff, 0x1, 0x1, 'syz1\x00', 0x4}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x22, 0x9, 0x0, 0x9, 0x1, 0x3, 0x6, 0x0, 0x20}, {0x3}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0x0, 0xff, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'veth1_vlan\x00', 'macvtap0\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 3.299535926s ago: executing program 3 (id=3784): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) 2.834806154s ago: executing program 4 (id=3786): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)=ANY=[], 0x58) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000340)="89", 0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xfc, 0x8, 0x10, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x700, 0x101, 0xf}}) ptrace(0x10, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x31, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9be}}, @ldst={0x2, 0x0, 0x6, 0x0, 0x4, 0x30, 0x4}, @map_idx={0x18, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcf8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x3, 0x8, 0x5, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='GPL\x00', 0x400, 0x5d, &(0x7f00000012c0)=""/93, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x1, 0x6, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000000)={0x0, 0x300}) 2.780450244s ago: executing program 1 (id=3789): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = open(0x0, 0x1c5142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x3, 0x8000, 0x2, 0xb, 0xc, "af"}}, 0x119) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000b00000000000000070000000c0001800500020001"], 0x20}}, 0x0) 2.681572906s ago: executing program 4 (id=3790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x415}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 2.516898599s ago: executing program 2 (id=3791): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x11f002, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0xe, 0x1001f0) fallocate(r1, 0x3, 0x9, 0x10000) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES8=r2], 0x50) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x19, 0xb, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2c20000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) 2.398963981s ago: executing program 2 (id=3792): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000280)={'system_u:object_r:ssh_keysign_exec_t:s0', 0x20, 'system_u:object_r:usbtty_device_t:s0', 0x20, 0x8, 0x20, '/usr/sbin/ntpd\x00'}, 0x71) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000001180)='pids.events\x00', 0x5000000, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x84d03, 0x0) 2.321607692s ago: executing program 2 (id=3793): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) unshare(0x40000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r8}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) 2.213862744s ago: executing program 3 (id=3794): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000802000021", @ANYRESOCT], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000078c0)=[{{&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000007c0)=""/138, 0x8a}, 0x11}, {{&(0x7f0000000580)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d80)=""/245, 0xf5}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000000e80)=""/170, 0xaa}, {&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001000)=""/210, 0xd2}, {&(0x7f0000001100)=""/210, 0xd2}], 0x7, &(0x7f0000001280)=""/54, 0x36}, 0x4}, {{0x0, 0x0, &(0x7f00000014c0)}, 0xfffffffa}, {{&(0x7f0000001640)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002980)=[{&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000002880)=""/205, 0xcd}], 0x5, &(0x7f0000000640)=""/232, 0xe8}, 0x8}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000002b80)=""/88, 0x58}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/165, 0xa5}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/111, 0x6f}, {&(0x7f0000005d80)=""/131, 0x83}], 0x8, &(0x7f0000005ec0)=""/180, 0xb4}, 0x2}, {{&(0x7f0000005f80)=@nfc, 0x80, &(0x7f0000006000)}, 0x8000}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000006040)=""/141, 0x8d}, {&(0x7f0000006100)=""/212, 0xd4}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000007c40)=""/128, 0x80}, {&(0x7f0000006300)}, {&(0x7f0000006340)=""/93, 0x5d}, {&(0x7f00000063c0)=""/39, 0x27}], 0x7, &(0x7f0000006480)=""/4096, 0x1000}, 0x81}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007480)}, {&(0x7f00000074c0)=""/17, 0x11}], 0x2, &(0x7f0000007540)=""/42, 0x2a}, 0x7}, {{&(0x7f0000007580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000007840)=[{&(0x7f0000007600)=""/121, 0x79}, {&(0x7f0000007680)=""/114, 0x72}, {&(0x7f0000007700)=""/103, 0x67}, {&(0x7f0000007780)=""/138, 0x8a}], 0x4, &(0x7f0000007880)=""/49, 0x31}, 0xffff8000}], 0x9, 0x40000000, &(0x7f0000007b00)={0x0, 0x989680}) r2 = fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000008003a00ca1007e3"], 0x44}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast}}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e080045"], 0x0) unshare(0x20000400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) pwrite64(r5, &(0x7f00000002c0)='2', 0x1, 0x8080c61) fallocate(r5, 0x3, 0x2, 0x8000c62) 1.680862252s ago: executing program 4 (id=3796): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x90, 0x30, 0xffff, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(r1, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1.604461304s ago: executing program 1 (id=3797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x7, &(0x7f0000000300)=[{0x6, 0x2, 0x6, 0xfffffe00}, {0x40, 0x2, 0x9, 0x9}, {0x2, 0xf7, 0x7, 0x4}, {0x7, 0x1, 0x9, 0x490}, {0x4, 0x6, 0x2, 0x6}, {0x0, 0x4, 0x80, 0x8}, {0x8, 0x9, 0x3, 0x6ed4}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x800}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000100100000000000000000000000000000000000000003c293f05ff3d5939bcae9a52a37d2fe1bfbb60919a1d3158a191c658b981c076fb18c4c8bf03968b87cb22b6668a3d0ae574e84ddf02ad"], 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01070000000000000000200000"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 1.469819456s ago: executing program 2 (id=3798): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 1.146760221s ago: executing program 0 (id=3800): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)=ANY=[], 0x58) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000340)="89", 0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="b501000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc40806d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03b1d1ca4cb3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc391a65c674a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b450ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bcab12fcc661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc0284c5a5d51f0e115ab159e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb775505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6dde4ab67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b418528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03e0d36c62785f32ecc294a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac00000000000080014573789425c4c22da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767c0700783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c4d885723734a3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac809c227aa25842f75981bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fcd097728955cf04fec692b01fadfc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dd"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xfc, 0x8, 0x10, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x700, 0x101, 0xf}}) ptrace(0x10, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x31, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9be}}, @ldst={0x2, 0x0, 0x6, 0x0, 0x4, 0x30, 0x4}, @map_idx={0x18, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcf8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x3, 0x8, 0x5, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='GPL\x00', 0x400, 0x5d, &(0x7f00000012c0)=""/93, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x1, 0x6, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000000)={0x0, 0x300}) 1.106559022s ago: executing program 3 (id=3801): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xda, 0x5, 0x13, @mcast1, @mcast2, 0x8, 0x8000, 0x81d2, 0x7fffffff}}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) 1.092712543s ago: executing program 1 (id=3802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x11f002, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0xe, 0x1001f0) fallocate(r1, 0x3, 0x9, 0x10000) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES8=r2], 0x50) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x19, 0xb, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2c20000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) 1.033609543s ago: executing program 0 (id=3803): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x90, 0x30, 0xffff, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 1.021530793s ago: executing program 3 (id=3804): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0xe, 0x1001f0) fallocate(r1, 0x3, 0x9, 0x10000) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES8=r2], 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x19, 0xb, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2c20000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x940c, 0x3002, 0x220, 0x2c0, 0x330, 0x3d8, 0x3d8, 0x330, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xff, 0xff000000, 0xffffff00], 'wg2\x00', 'ip_vti0\x00', {}, {0xff}, 0x87, 0x2, 0x2, 0x2c}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x538f, 0xff, 0x1, 0x1, 'syz1\x00', 0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0x0, 0xff, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'veth1_vlan\x00', 'macvtap0\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 998.882864ms ago: executing program 2 (id=3805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 697.451209ms ago: executing program 4 (id=3806): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x11f002, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0xe, 0x1001f0) fallocate(r1, 0x3, 0x9, 0x10000) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000400)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x19, 0xb, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2c20000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="34000000580000032cbd7000fedbdf250008000200aad09fb3000000000000000210436087863db8673030a4213560724ceb1dcf65ee19f37e5b0516399e0e7f6bddf6f6e4d15f5b1217b2aa", @ANYRES32=r4, @ANYBLOB="0800010001000000080001000100000008000200", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4880}, 0x40800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x940c, 0x3002, 0x220, 0x2c0, 0x330, 0x3d8, 0x3d8, 0x330, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xff, 0xff000000, 0xffffff00], 'wg2\x00', 'ip_vti0\x00', {}, {0xff}, 0x87, 0x2, 0x2, 0x2c}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x538f, 0xff, 0x1, 0x1, 'syz1\x00', 0x4}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x22, 0x9, 0x0, 0x9, 0x1, 0x3, 0x6, 0x0, 0x20}, {0x3}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0x0, 0xff, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'veth1_vlan\x00', 'macvtap0\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 638.80211ms ago: executing program 1 (id=3807): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0xe, 0x1001f0) fallocate(r1, 0x3, 0x9, 0x10000) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES8=r2], 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x19, 0xb, &(0x7f0000000680)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x2c20000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) 565.958551ms ago: executing program 2 (id=3808): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r0 = open(0x0, 0x1c5142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x3, 0x8000, 0x2, 0xb, 0xc, "af"}}, 0x119) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa08000600"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000b00000000000000070000000c0001800500020001"], 0x20}}, 0x0) 491.077732ms ago: executing program 3 (id=3809): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) unshare(0x2040400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4) unshare(0x26000400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 486.112082ms ago: executing program 4 (id=3810): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800}, 0x18) clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0}) futex_waitv(&(0x7f0000000f00)=[{0x3, &(0x7f00000001c0)=0x1, 0x2}, {0x8, &(0x7f0000000200)=0x7, 0x2}, {0x4, &(0x7f0000000300)=0x7cfbdc1c, 0x2}, {0x2, &(0x7f0000000340)=0x2, 0x2}, {0x200, &(0x7f0000000380)=0xbb, 0x82}, {0xfffffffffffffff2, &(0x7f00000003c0)=0x2, 0x82}, {0x381, &(0x7f0000000400)=0x4, 0x82}, {0x6, &(0x7f0000000440)=0x8, 0x2}, {0x10, &(0x7f0000000480)=0x7, 0x2}, {0x8, &(0x7f0000000540)=0x3, 0x82}, {0x3b, &(0x7f0000000580)=0x7, 0x2}, {0x5, &(0x7f00000005c0)=0x6, 0x82}, {0xfffffffffffffffb, &(0x7f0000000600)=0x8}, {0xfff, &(0x7f0000000640)=0x2, 0x82}, {0x3, &(0x7f0000000680)=0x5, 0x2}, {0x80000000, &(0x7f00000006c0)=0x9, 0x82}, {0x80, &(0x7f0000000700)=0x2, 0x2}, {0x1000, &(0x7f0000000740), 0x82}, {0x2, &(0x7f0000000780)=0xfc4, 0x2}, {0x7f, &(0x7f00000007c0)=0x4, 0x2}, {0x4, &(0x7f0000000940)=0x4}, {0x5, &(0x7f0000000980)=0x2, 0x2}, {0x987e, &(0x7f00000009c0)=0xdd, 0x2}, {0x0, &(0x7f0000000a00)=0x9, 0x82}, {0x4, &(0x7f0000000a40), 0x82}, {0x3, &(0x7f0000000a80)=0x4, 0x2}, {0x0, &(0x7f0000000ac0)=0x2, 0x82}, {0x62, &(0x7f0000000b00)=0xa65, 0x82}, {0x1, &(0x7f0000000b40)=0x5, 0x82}, {0x10, &(0x7f0000000b80)=0x4, 0x82}, {0x8, &(0x7f0000000bc0)=0x9, 0x82}, {0xd27b, &(0x7f0000000c40)=0x6, 0x82}, {0x7, &(0x7f0000000c80)=0x4, 0x82}, {0x6, &(0x7f0000000cc0), 0x82}, {0x7, &(0x7f0000000d00)=0x3, 0x82}, {0x10000, &(0x7f0000000d40)=0x4, 0x82}, {0x9, &(0x7f0000000d80)=0x2, 0x82}, {0x5, &(0x7f0000000dc0)=0x4, 0x2}, {0x7, &(0x7f0000000e00)=0x100, 0x2}, {0x1, &(0x7f0000000e40)=0x9, 0x82}, {0xfffffffffffffc61, &(0x7f0000000e80)=0x4}, {0x6, &(0x7f0000000ec0)=0x580, 0x2}], 0x2a, 0x0, &(0x7f0000001340)={r1, r2+60000000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r3, 0x0, 0x51}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r3, 0x0, 0x10000000000000}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x434, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=r4], 0x1, 0x2bc, &(0x7f0000000700)="$eJzs3EFrE1sUwPHzkr4mTWmTBw9BQT3oRjdDGz+ABmlBDCi1KepCmNqJhoxJmQmViNhsxK2fo7h0J6hfoBtx495dEQQ3XYgjncm0SZvWSds0qf3/oNyTOfdwb9tbOFOYWbv7+km56BpFsyaxpEpMpCHrIpmNqOmf5hjz42Fp1ZDLoz++nL1z7/7NXD4/NaM6nZu9klXV8fPvnz5/c+FjbXTu7fi7hKxmHqx9z35dPbV6eu3X7OOSqyVXK9WamjpfrdbMedvShZJbNlRv25bpWlqquJbTli/a1cXFupqVhbHUomO5rpqVupatutaqWnPqaj4ySxU1DEPHUnKyDUWYU1iZmTFzu6a9+KHuCD030umi4+QanZOFlSPYEwAAGDB79/9Br797/5+fC8bo/X/Yle7Z/4vQ//dIo+1Tx/5/fPf5GDyJP85wnJyZav79tqP/BwAAAAAAAAAAAAAAAAAAAADgOFj3vLTneelwDL8SIpIUkfBzv/eJ3tjn7/9qn7aLQ9by4F5SxH61VFgqBGOQzxWlJLZYMiFp+emfh6Ygnr6Rn5pQX0Y+2MvN+uWlQtx/MsmvD2U61Z/7bzKo1/b6fyXVun5W0vL/Vv3G4QzXz3asH5ZLF1vqDUnLp4dSFVsW/HO9Vf9iUvX6rfy2+hF/HgAAAAAAfwNDN+24f/fz/oSk7MwH9V38f2Db/fWQnInyikoAAAAAAHBgbv1Z2bRty9lHkBCRA5TvPxiSPiwaOYjLQGxjW3BNRAZgG0cVJEWah0T9K7Huzuq3zfJIi3qRDq1I338sXQQdXhcMAAAA4Fjbavq7KPr8soc7AgAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5In6PrBw/o5UmNijvGW5+JF/gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA+R0AAP//034XJA==") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01020000000000"], 0x44}}, 0x0) 376.846704ms ago: executing program 4 (id=3811): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 369.636064ms ago: executing program 1 (id=3812): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000802000021", @ANYRESOCT], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000078c0)=[{{&(0x7f0000000100)=@tipc=@name, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000007c0)=""/138, 0x8a}, 0x11}, {{&(0x7f0000000580)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000d80)=""/245, 0xf5}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000000e80)=""/170, 0xaa}, {&(0x7f00000008c0)=""/111, 0x6f}, {&(0x7f0000000f40)=""/160, 0xa0}, {&(0x7f0000001000)=""/210, 0xd2}, {&(0x7f0000001100)=""/210, 0xd2}], 0x7, &(0x7f0000001280)=""/54, 0x36}, 0x4}, {{0x0, 0x0, &(0x7f00000014c0)}, 0xfffffffa}, {{&(0x7f0000001640)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002980)=[{&(0x7f00000016c0)=""/73, 0x49}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/242, 0xf2}, {&(0x7f0000002880)=""/205, 0xcd}], 0x5, &(0x7f0000000640)=""/232, 0xe8}, 0x8}, {{&(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000002b80)=""/88, 0x58}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/165, 0xa5}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/111, 0x6f}, {&(0x7f0000005d80)=""/131, 0x83}], 0x8, &(0x7f0000005ec0)=""/180, 0xb4}, 0x2}, {{&(0x7f0000005f80)=@nfc, 0x80, &(0x7f0000006000)}, 0x8000}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f0000006040)=""/141, 0x8d}, {&(0x7f0000006100)=""/212, 0xd4}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000007c40)=""/128, 0x80}, {&(0x7f0000006300)}, {&(0x7f0000006340)=""/93, 0x5d}, {&(0x7f00000063c0)=""/39, 0x27}], 0x7, &(0x7f0000006480)=""/4096, 0x1000}, 0x81}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007480)}, {&(0x7f00000074c0)=""/17, 0x11}], 0x2, &(0x7f0000007540)=""/42, 0x2a}, 0x7}, {{&(0x7f0000007580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000007840)=[{&(0x7f0000007600)=""/121, 0x79}, {&(0x7f0000007680)=""/114, 0x72}, {&(0x7f0000007700)=""/103, 0x67}, {&(0x7f0000007780)=""/138, 0x8a}], 0x4, &(0x7f0000007880)=""/49, 0x31}, 0xffff8000}], 0x9, 0x40000000, &(0x7f0000007b00)={0x0, 0x989680}) r2 = fsopen(&(0x7f00000003c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000008003a00ca1007e3"], 0x44}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @broadcast}}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e080045"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) pwrite64(r5, &(0x7f00000002c0)='2', 0x1, 0x8080c61) fallocate(r5, 0x3, 0x2, 0x8000c62) 209.905297ms ago: executing program 0 (id=3813): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)=ANY=[], 0x58) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000340)="89", 0x1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xfc, 0x8, 0x10, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x700, 0x101, 0xf}}) ptrace(0x10, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x31, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9be}}, @ldst={0x2, 0x0, 0x6, 0x0, 0x4, 0x30, 0x4}, @map_idx={0x18, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcf8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x3, 0x8, 0x5, 0xffffffffffffffff, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='GPL\x00', 0x400, 0x5d, &(0x7f00000012c0)=""/93, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x1, 0x6, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000000)={0x0, 0x300}) 138.280348ms ago: executing program 0 (id=3814): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xda, 0x5, 0x13, @mcast1, @mcast2, 0x8, 0x8000, 0x81d2, 0x7fffffff}}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) 125.201758ms ago: executing program 0 (id=3815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x7, &(0x7f0000000300)=[{0x6, 0x2, 0x6, 0xfffffe00}, {0x40, 0x2, 0x9, 0x9}, {0x2, 0xf7, 0x7, 0x4}, {0x7, 0x1, 0x9, 0x490}, {0x4, 0x6, 0x2, 0x6}, {0x0, 0x4, 0x80, 0x8}, {0x8, 0x9, 0x3, 0x6ed4}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000080000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x800}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000100100000000000000000000000000000000000000003c293f05ff3d5939bcae9a52a37d2fe1bfbb60919a1d3158a191c658b981c076fb18c4c8bf03968b87cb22b6668a3d0ae574e84ddf02ad"], 0x48) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01070000000000000000200000"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 0s ago: executing program 0 (id=3816): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x90, 0x30, 0xffff, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bind$netlink(r1, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): n device team0 [ 264.708436][ T29] audit: type=1326 audit(1753463780.910:35133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.3.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 264.738965][ T29] audit: type=1326 audit(1753463780.910:35134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.3.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 264.742206][ T791] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.762581][ T29] audit: type=1326 audit(1753463780.990:35135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.3.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 264.769669][ T791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.800945][ T29] audit: type=1326 audit(1753463780.990:35136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13550 comm="syz.3.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 264.812567][T13411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.835235][T13411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.840649][ T791] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.852917][ T791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.903073][T13553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.919659][T13553] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.963079][T13569] loop2: detected capacity change from 0 to 512 [ 265.136816][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.247952][T13411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.403839][T13569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.417834][T13569] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.451548][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.526644][T13411] veth0_vlan: entered promiscuous mode [ 265.536501][T13411] veth1_vlan: entered promiscuous mode [ 265.557113][T13411] veth0_macvtap: entered promiscuous mode [ 265.582552][T13411] veth1_macvtap: entered promiscuous mode [ 265.590547][T13593] loop2: detected capacity change from 0 to 8192 [ 265.605829][T13411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.621737][T13411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.638923][T13411] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.647763][T13411] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.656649][T13411] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.665470][T13411] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.957059][T13600] loop1: detected capacity change from 0 to 512 [ 265.969582][T13600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.985706][T13600] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.990874][T13604] program syz.3.3285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.005762][T13606] loop2: detected capacity change from 0 to 512 [ 266.036883][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.042482][T13606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.058618][T13606] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.073087][T13609] loop3: detected capacity change from 0 to 128 [ 266.086747][T13606] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3284: iget: bad i_size value: 2533274857506816 [ 266.100817][T13606] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3284: iget: bad i_size value: 2533274857506816 [ 266.101580][T13609] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3286'. [ 266.173674][T13618] loop4: detected capacity change from 0 to 1024 [ 266.200954][T13620] loop3: detected capacity change from 0 to 128 [ 266.217217][T13618] netlink: 'syz.4.3244': attribute type 1 has an invalid length. [ 266.237616][T13620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3288'. [ 266.297604][T13624] loop3: detected capacity change from 0 to 256 [ 266.314039][T13624] FAT-fs (loop3): codepage cp861 not found [ 266.351468][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.741900][T13641] program syz.1.3294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.744971][T13642] random: crng reseeded on system resumption [ 267.761304][T13637] loop4: detected capacity change from 0 to 512 [ 267.777405][T13637] EXT4-fs (loop4): too many log groups per flexible block group [ 267.785223][T13637] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 267.807143][T13648] loop0: detected capacity change from 0 to 512 [ 267.815732][T13637] EXT4-fs (loop4): mount failed [ 267.832381][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'. [ 267.855466][T13653] loop3: detected capacity change from 0 to 512 [ 267.862033][T13646] loop1: detected capacity change from 0 to 512 [ 267.864025][T13648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.884170][T13648] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.887043][T13656] loop4: detected capacity change from 0 to 512 [ 267.903628][T13646] EXT4-fs (loop1): too many log groups per flexible block group [ 267.910191][T13653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.911420][T13646] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 267.930946][T13653] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.941962][T13646] EXT4-fs (loop1): mount failed [ 267.948538][T13656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.949025][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.961320][T13656] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.995213][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.012309][T13411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.030435][T13666] random: crng reseeded on system resumption [ 268.057631][T13671] loop4: detected capacity change from 0 to 512 [ 268.064931][T13673] loop1: detected capacity change from 0 to 1024 [ 268.071753][T13673] EXT4-fs: Ignoring removed orlov option [ 268.079612][T13671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.085993][T13673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.092555][T13671] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.118252][T13673] netlink: 'syz.1.3303': attribute type 3 has an invalid length. [ 268.149974][T13671] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.3301: iget: bad i_size value: 2533274857506816 [ 268.170782][T13671] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.3301: iget: bad i_size value: 2533274857506816 [ 268.322246][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 268.322274][ T29] audit: type=1400 audit(1753463784.620:35524): avc: denied { open } for pid=13672 comm="syz.1.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.348095][ T29] audit: type=1400 audit(1753463784.620:35525): avc: denied { perfmon } for pid=13672 comm="syz.1.3303" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.369300][ T29] audit: type=1400 audit(1753463784.620:35526): avc: denied { kernel } for pid=13672 comm="syz.1.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.441931][ T29] audit: type=1400 audit(1753463784.690:35527): avc: denied { tracepoint } for pid=13672 comm="syz.1.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.462158][ T29] audit: type=1400 audit(1753463784.700:35528): avc: denied { recv } for pid=13668 comm="syz.3.3300" saddr=10.128.0.163 src=30036 daddr=10.128.1.107 dest=49538 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 268.488011][ T29] audit: type=1400 audit(1753463784.720:35529): avc: denied { add_name } for pid=13672 comm="syz.1.3303" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.509149][ T29] audit: type=1400 audit(1753463784.720:35530): avc: denied { create } for pid=13672 comm="syz.1.3303" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 268.529783][ T29] audit: type=1400 audit(1753463784.720:35531): avc: denied { read write } for pid=13672 comm="syz.1.3303" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 268.553558][ T29] audit: type=1400 audit(1753463784.720:35532): avc: denied { open } for pid=13672 comm="syz.1.3303" path="/16/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 268.576796][ T29] audit: type=1400 audit(1753463784.730:35533): avc: denied { map_create } for pid=13672 comm="syz.1.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 268.599005][T13411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.638349][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.658832][T13688] program syz.1.3305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.686043][T13690] random: crng reseeded on system resumption [ 268.902568][T13697] loop3: detected capacity change from 0 to 512 [ 268.916944][T13697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.929767][T13697] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.958421][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.043152][T13704] loop2: detected capacity change from 0 to 512 [ 269.056578][T13704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.069163][T13704] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.096870][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.119990][T13709] loop2: detected capacity change from 0 to 512 [ 269.136547][T13709] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.176715][T13713] loop2: detected capacity change from 0 to 512 [ 269.187495][T13713] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.206503][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3313'. [ 269.219691][T13717] loop3: detected capacity change from 0 to 512 [ 269.235600][T13717] EXT4-fs (loop3): too many log groups per flexible block group [ 269.243430][T13717] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 269.252331][T13717] EXT4-fs (loop3): mount failed [ 269.265268][T13724] loop2: detected capacity change from 0 to 512 [ 269.278075][T13724] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.297318][T13728] loop3: detected capacity change from 0 to 512 [ 269.297508][T13724] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3315: iget: bad i_size value: 2533274857506816 [ 269.316725][T13728] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.387872][T13735] loop0: detected capacity change from 0 to 128 [ 269.401472][T13735] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3318'. [ 269.433369][T13740] loop0: detected capacity change from 0 to 1024 [ 269.531359][T13747] loop4: detected capacity change from 0 to 512 [ 269.551885][T13749] loop0: detected capacity change from 0 to 512 [ 269.561340][T13747] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.594189][T13749] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.631999][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.641269][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.655470][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3326'. [ 270.606908][T13765] loop0: detected capacity change from 0 to 512 [ 270.693471][T13752] loop2: detected capacity change from 0 to 512 [ 270.722226][T13761] loop4: detected capacity change from 0 to 512 [ 270.725686][T13765] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.747717][T13761] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.766078][T13752] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.846341][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3328'. [ 270.862478][T13779] loop0: detected capacity change from 0 to 512 [ 270.869906][T13779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 270.881854][T13779] EXT4-fs (loop0): 1 truncate cleaned up [ 270.980362][T13789] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 270.980362][T13789] program syz.1.3331 not setting count and/or reply_len properly [ 271.020765][T13793] loop2: detected capacity change from 0 to 512 [ 271.038943][T13793] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.050212][T13796] loop3: detected capacity change from 0 to 1024 [ 271.147764][T13806] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 271.147764][T13806] program syz.3.3337 not setting count and/or reply_len properly [ 271.167135][T13806] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3337'. [ 271.183670][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3337'. [ 271.198948][T13808] loop1: detected capacity change from 0 to 1024 [ 271.208646][T13808] netlink: 'syz.1.3335': attribute type 1 has an invalid length. [ 271.228043][T13791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.239966][T13812] loop3: detected capacity change from 0 to 512 [ 271.246219][T13791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.247135][T13812] EXT4-fs: Ignoring removed oldalloc option [ 271.261673][T13812] EXT4-fs: dax option not supported [ 271.292680][T13817] loop3: detected capacity change from 0 to 512 [ 271.306633][T13817] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.692770][T13826] loop3: detected capacity change from 0 to 512 [ 271.997717][T13826] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.041459][T13844] loop2: detected capacity change from 0 to 1024 [ 272.137793][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.152871][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.487509][T13852] loop2: detected capacity change from 0 to 512 [ 272.530637][T13852] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.682191][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3350'. [ 272.723244][T13862] loop0: detected capacity change from 0 to 512 [ 272.736709][T13862] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.815507][T13870] loop2: detected capacity change from 0 to 512 [ 272.960915][T13874] loop0: detected capacity change from 0 to 1024 [ 272.991485][T13874] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 273.279713][T13879] loop4: detected capacity change from 0 to 512 [ 273.301931][T13879] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.460594][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 273.460610][ T29] audit: type=1326 audit(1753463789.360:36134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 273.490538][ T29] audit: type=1326 audit(1753463789.360:36135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 273.514177][ T29] audit: type=1326 audit(1753463789.360:36136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 273.538175][ T29] audit: type=1326 audit(1753463789.360:36137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 273.561966][ T29] audit: type=1326 audit(1753463789.360:36138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 273.585631][ T29] audit: type=1326 audit(1753463789.360:36139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 273.609282][ T29] audit: type=1326 audit(1753463789.360:36140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 273.633689][ T29] audit: type=1326 audit(1753463789.370:36141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 273.657484][ T29] audit: type=1326 audit(1753463789.370:36142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 273.681150][ T29] audit: type=1326 audit(1753463789.370:36143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.3.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 273.812827][T13896] loop0: detected capacity change from 0 to 512 [ 273.847889][T13896] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.860877][T13900] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 273.860877][T13900] program syz.4.3359 not setting count and/or reply_len properly [ 274.107147][T13903] loop3: detected capacity change from 0 to 512 [ 274.188744][T13903] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.479991][T13912] random: crng reseeded on system resumption [ 274.566055][T13917] netlink: 'syz.0.3364': attribute type 1 has an invalid length. [ 274.566543][T13918] loop1: detected capacity change from 0 to 128 [ 274.590261][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 274.619054][T13916] loop3: detected capacity change from 0 to 512 [ 274.624467][T13918] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3363'. [ 274.664445][T13916] EXT4-fs (loop3): too many log groups per flexible block group [ 274.672325][T13916] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 274.718734][T13924] program syz.1.3366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.734523][T13916] EXT4-fs (loop3): mount failed [ 274.821468][T13928] loop3: detected capacity change from 0 to 512 [ 274.829709][T13928] EXT4-fs: Ignoring removed oldalloc option [ 274.836460][T13928] EXT4-fs: dax option not supported [ 274.912265][T13931] loop1: detected capacity change from 0 to 1024 [ 274.921325][T13931] netlink: 'syz.1.3367': attribute type 1 has an invalid length. [ 274.954640][T13934] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 274.954640][T13934] program syz.3.3370 not setting count and/or reply_len properly [ 275.059734][T13943] loop3: detected capacity change from 0 to 512 [ 275.390612][T13949] loop2: detected capacity change from 0 to 512 [ 275.422175][T13949] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.479764][T13943] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.539482][T13957] random: crng reseeded on system resumption [ 275.591182][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'. [ 275.600174][T13963] program syz.3.3377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.613075][T13959] loop1: detected capacity change from 0 to 512 [ 275.620714][T13961] loop0: detected capacity change from 0 to 128 [ 275.634438][T13961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3376'. [ 275.646540][T13959] EXT4-fs (loop1): too many log groups per flexible block group [ 275.654287][T13959] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 275.663748][T13965] loop3: detected capacity change from 0 to 512 [ 275.664109][T13959] EXT4-fs (loop1): mount failed [ 275.687833][T13965] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.763536][T13974] loop1: detected capacity change from 0 to 512 [ 275.774199][T13976] loop3: detected capacity change from 0 to 256 [ 275.776051][T13978] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 275.776051][T13978] program syz.2.3382 not setting count and/or reply_len properly [ 275.801738][T13974] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.825643][T13976] FAT-fs (loop3): codepage cp861 not found [ 275.882466][T13986] loop0: detected capacity change from 0 to 512 [ 275.941448][T13986] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.979729][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3386'. [ 276.886990][T14005] program syz.3.3388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.918125][T13987] vlan2: entered promiscuous mode [ 276.927394][T14007] program syz.1.3390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.136787][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3392'. [ 277.181248][T14015] loop1: detected capacity change from 0 to 512 [ 277.196495][T14015] EXT4-fs (loop1): too many log groups per flexible block group [ 277.204268][T14015] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 277.211321][T14015] EXT4-fs (loop1): mount failed [ 277.602652][T14023] loop3: detected capacity change from 0 to 512 [ 277.631225][T14023] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.777558][T14030] loop0: detected capacity change from 0 to 512 [ 277.798449][T14030] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.850361][T14036] loop1: detected capacity change from 0 to 512 [ 277.862877][T14034] loop4: detected capacity change from 0 to 512 [ 277.955394][T14036] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.967587][T14034] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.019014][T14044] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 278.019014][T14044] program syz.0.3396 not setting count and/or reply_len properly [ 278.076561][T14047] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3398'. [ 278.077047][T14049] loop4: detected capacity change from 0 to 256 [ 278.102115][T14047] loop1: detected capacity change from 0 to 1024 [ 278.126189][T14049] FAT-fs (loop4): codepage cp861 not found [ 278.134494][T14047] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.177468][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3400'. [ 278.281920][T14047] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.289256][T14047] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.184381][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 279.184399][ T29] audit: type=1326 audit(1753463795.470:36612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14042 comm="syz.3.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 279.214821][ T29] audit: type=1326 audit(1753463795.470:36613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14042 comm="syz.3.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 279.214995][T14060] loop2: detected capacity change from 0 to 512 [ 279.238357][ T29] audit: type=1326 audit(1753463795.470:36614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14042 comm="syz.3.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 279.316662][T14060] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.324936][T14047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.335455][T14072] program syz.0.3402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.342137][T14047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.375020][ T29] audit: type=1326 audit(1753463795.650:36615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 279.398860][ T29] audit: type=1326 audit(1753463795.650:36616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 279.422978][ T29] audit: type=1326 audit(1753463795.650:36617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 279.446707][ T29] audit: type=1326 audit(1753463795.660:36618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 279.470608][ T29] audit: type=1326 audit(1753463795.660:36619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 279.494445][ T29] audit: type=1326 audit(1753463795.660:36620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 279.518125][ T29] audit: type=1326 audit(1753463795.660:36621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.3.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 279.552586][T14047] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.561840][T14047] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.570992][T14047] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.579970][T14047] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.689809][T14087] loop2: detected capacity change from 0 to 1024 [ 280.837496][T14098] loop0: detected capacity change from 0 to 512 [ 280.922300][T14103] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 280.922300][T14103] program syz.4.3410 not setting count and/or reply_len properly [ 280.961632][T14098] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.978661][T14111] random: crng reseeded on system resumption [ 281.059499][T14114] program syz.3.3415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.151221][T14118] loop0: detected capacity change from 0 to 256 [ 281.407232][T14127] loop4: detected capacity change from 0 to 512 [ 281.427839][T14127] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.531361][T14118] FAT-fs (loop0): codepage cp861 not found [ 281.726594][T14137] loop3: detected capacity change from 0 to 512 [ 281.742519][T14137] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.309078][T14148] loop4: detected capacity change from 0 to 4096 [ 282.494912][T14158] loop2: detected capacity change from 0 to 512 [ 282.506703][T14158] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.562389][T14162] loop2: detected capacity change from 0 to 512 [ 282.587382][T14162] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.609171][T14166] program syz.1.3426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.645255][T14170] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 282.645255][T14170] program syz.1.3428 not setting count and/or reply_len properly [ 282.663879][T14170] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3428'. [ 282.681046][T14170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3428'. [ 282.711910][T14174] loop1: detected capacity change from 0 to 512 [ 282.727547][T14174] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.435494][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'. [ 283.466992][T14196] loop1: detected capacity change from 0 to 128 [ 283.477587][T14196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3436'. [ 283.756049][T14201] loop4: detected capacity change from 0 to 512 [ 283.842887][T14201] EXT4-fs mount: 72 callbacks suppressed [ 283.842932][T14201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.862021][T14201] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.893284][T14202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.913763][T14202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.966895][T14211] loop2: detected capacity change from 0 to 512 [ 283.967879][T14209] loop1: detected capacity change from 0 to 512 [ 283.986473][T14211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.997194][T14209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.011680][T14211] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.024875][T14209] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.049209][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.056449][T14217] loop3: detected capacity change from 0 to 1024 [ 284.081484][T14217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.093767][T14219] loop2: detected capacity change from 0 to 512 [ 284.094524][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.103635][T14217] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.124689][T14219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.137456][T14219] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.159845][T14225] loop1: detected capacity change from 0 to 512 [ 284.168528][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.186742][T14225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.200783][T14225] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.216631][T14225] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3442: bg 0: block 328: padding at end of block bitmap is not set [ 284.250793][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.261920][ T29] kauditd_printk_skb: 602 callbacks suppressed [ 284.261937][ T29] audit: type=1400 audit(1753463800.520:37224): avc: denied { create } for pid=14224 comm="syz.1.3442" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 284.288866][ T29] audit: type=1400 audit(1753463800.540:37225): avc: denied { create } for pid=14224 comm="syz.1.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.312010][ T29] audit: type=1400 audit(1753463800.540:37226): avc: denied { bind } for pid=14224 comm="syz.1.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.331607][ T29] audit: type=1400 audit(1753463800.540:37227): avc: denied { write } for pid=14224 comm="syz.1.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 284.352522][T13411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.381269][ T29] audit: type=1326 audit(1753463800.680:37228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 284.404966][ T29] audit: type=1326 audit(1753463800.680:37229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 284.428807][ T29] audit: type=1326 audit(1753463800.680:37230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 284.453021][ T29] audit: type=1326 audit(1753463800.680:37231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 284.476911][ T29] audit: type=1326 audit(1753463800.680:37232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 284.500685][ T29] audit: type=1326 audit(1753463800.710:37233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.4.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 284.633745][T14241] loop0: detected capacity change from 0 to 1024 [ 284.719991][T14243] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3447'. [ 284.777054][T14245] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.784403][T14245] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.824047][T14245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.834577][T14245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.863970][T14245] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.873023][T14245] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.882480][T14245] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.891744][T14245] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.902109][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.952303][T14250] FAULT_INJECTION: forcing a failure. [ 284.952303][T14250] name failslab, interval 1, probability 0, space 0, times 0 [ 284.965231][T14250] CPU: 0 UID: 0 PID: 14250 Comm: syz.0.3450 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 284.965317][T14250] Tainted: [W]=WARN [ 284.965325][T14250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.965342][T14250] Call Trace: [ 284.965349][T14250] [ 284.965358][T14250] __dump_stack+0x1d/0x30 [ 284.965451][T14250] dump_stack_lvl+0xe8/0x140 [ 284.965470][T14250] dump_stack+0x15/0x1b [ 284.965486][T14250] should_fail_ex+0x265/0x280 [ 284.965516][T14250] should_failslab+0x8c/0xb0 [ 284.965537][T14250] kmem_cache_alloc_noprof+0x50/0x310 [ 284.965641][T14250] ? __proc_create+0x265/0x500 [ 284.965739][T14250] __proc_create+0x265/0x500 [ 284.965762][T14250] proc_create_reg+0x87/0xe0 [ 284.965782][T14250] ? __pfx_bcm_proc_show+0x10/0x10 [ 284.965806][T14250] proc_create_net_single+0x51/0xe0 [ 284.965919][T14250] bcm_connect+0x1ca/0x2b0 [ 284.965943][T14250] ? __pfx_bcm_connect+0x10/0x10 [ 284.965963][T14250] __sys_connect+0x1f2/0x2b0 [ 284.966006][T14250] __x64_sys_connect+0x3f/0x50 [ 284.966090][T14250] x64_sys_call+0x1daa/0x2fb0 [ 284.966193][T14250] do_syscall_64+0xd2/0x200 [ 284.966212][T14250] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 284.966255][T14250] ? clear_bhb_loop+0x40/0x90 [ 284.966283][T14250] ? clear_bhb_loop+0x40/0x90 [ 284.966378][T14250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.966403][T14250] RIP: 0033:0x7fe5cca3e9a9 [ 284.966421][T14250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.966444][T14250] RSP: 002b:00007fe5cb09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 284.966474][T14250] RAX: ffffffffffffffda RBX: 00007fe5ccc65fa0 RCX: 00007fe5cca3e9a9 [ 284.966490][T14250] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000004 [ 284.966501][T14250] RBP: 00007fe5cb09f090 R08: 0000000000000000 R09: 0000000000000000 [ 284.966512][T14250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.966522][T14250] R13: 0000000000000000 R14: 00007fe5ccc65fa0 R15: 00007ffd0eb03558 [ 284.966608][T14250] [ 285.191958][T14251] loop3: detected capacity change from 0 to 1024 [ 285.216438][T14251] netlink: 'syz.3.3449': attribute type 1 has an invalid length. [ 285.242125][T14257] loop2: detected capacity change from 0 to 512 [ 285.247726][T14258] loop4: detected capacity change from 0 to 512 [ 285.256761][T14257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.271920][T14257] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.286786][T14258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.299819][T14258] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.323244][T14258] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.3453: iget: bad i_size value: 2533274857506816 [ 285.323587][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.340002][T14258] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.3453: iget: bad i_size value: 2533274857506816 [ 285.376723][T14266] loop2: detected capacity change from 0 to 512 [ 285.383829][T14266] EXT4-fs: Ignoring removed oldalloc option [ 285.390456][T14266] EXT4-fs: dax option not supported [ 285.450737][T14270] loop2: detected capacity change from 0 to 512 [ 285.466998][T14270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.480566][T14270] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.501570][T14270] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3456: iget: bad i_size value: 2533274857506816 [ 285.515750][T14270] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3456: iget: bad i_size value: 2533274857506816 [ 285.517249][T13411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.621540][T14276] loop4: detected capacity change from 0 to 1024 [ 285.665737][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.690468][T14279] loop2: detected capacity change from 0 to 512 [ 285.707006][T14279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.720037][T14279] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.775042][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.791866][T14285] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 285.791866][T14285] program syz.3.3461 not setting count and/or reply_len properly [ 285.811149][T14285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3461'. [ 285.869257][T14291] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3462'. [ 285.906269][T14297] loop2: detected capacity change from 0 to 512 [ 286.155495][T14304] loop1: detected capacity change from 0 to 512 [ 286.299605][T14297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.314968][T14304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.327885][T14304] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.392320][T14314] loop3: detected capacity change from 0 to 512 [ 286.433408][T14316] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 286.433408][T14316] program syz.0.3468 not setting count and/or reply_len properly [ 286.453468][T14314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.466679][T14314] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.480668][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3469'. [ 286.498085][T14314] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.3467: iget: bad i_size value: 2533274857506816 [ 286.530369][T14314] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.3467: iget: bad i_size value: 2533274857506816 [ 286.630314][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.705481][T14328] loop1: detected capacity change from 0 to 512 [ 286.717435][T14332] FAULT_INJECTION: forcing a failure. [ 286.717435][T14332] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 286.730841][T14332] CPU: 1 UID: 0 PID: 14332 Comm: syz.0.3472 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 286.730884][T14332] Tainted: [W]=WARN [ 286.730892][T14332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.730946][T14332] Call Trace: [ 286.730954][T14332] [ 286.730962][T14332] __dump_stack+0x1d/0x30 [ 286.730983][T14332] dump_stack_lvl+0xe8/0x140 [ 286.731005][T14332] dump_stack+0x15/0x1b [ 286.731024][T14332] should_fail_ex+0x265/0x280 [ 286.731082][T14332] should_fail_alloc_page+0xf2/0x100 [ 286.731105][T14332] __alloc_frozen_pages_noprof+0xff/0x360 [ 286.731141][T14332] alloc_pages_mpol+0xb3/0x250 [ 286.731206][T14332] folio_alloc_mpol_noprof+0x39/0x80 [ 286.731241][T14332] shmem_get_folio_gfp+0x3cf/0xd60 [ 286.731299][T14332] shmem_fault+0xf6/0x250 [ 286.731333][T14332] __do_fault+0xbc/0x200 [ 286.731360][T14332] handle_mm_fault+0xd69/0x2be0 [ 286.731384][T14332] ? __rcu_read_lock+0x37/0x50 [ 286.731411][T14332] __get_user_pages+0x1036/0x1fb0 [ 286.731518][T14332] faultin_page_range+0x10f/0x5b0 [ 286.731542][T14332] madvise_do_behavior+0x120/0x1f20 [ 286.731608][T14332] ? kstrtoull+0x111/0x140 [ 286.731640][T14332] ? kstrtouint+0x76/0xc0 [ 286.731666][T14332] ? 0xffffffff81000000 [ 286.731681][T14332] ? get_pid_task+0x96/0xd0 [ 286.731706][T14332] ? proc_fail_nth_write+0x12d/0x160 [ 286.731748][T14332] ? down_read+0x77/0xe0 [ 286.731780][T14332] do_madvise+0x103/0x190 [ 286.731815][T14332] __x64_sys_madvise+0x64/0x80 [ 286.731870][T14332] x64_sys_call+0x2455/0x2fb0 [ 286.731894][T14332] do_syscall_64+0xd2/0x200 [ 286.731986][T14332] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 286.732018][T14332] ? clear_bhb_loop+0x40/0x90 [ 286.732043][T14332] ? clear_bhb_loop+0x40/0x90 [ 286.732070][T14332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.732093][T14332] RIP: 0033:0x7fe5cca3e9a9 [ 286.732147][T14332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.732169][T14332] RSP: 002b:00007fe5cb09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 286.732225][T14332] RAX: ffffffffffffffda RBX: 00007fe5ccc65fa0 RCX: 00007fe5cca3e9a9 [ 286.732286][T14332] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 286.732298][T14332] RBP: 00007fe5cb09f090 R08: 0000000000000000 R09: 0000000000000000 [ 286.732309][T14332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.732320][T14332] R13: 0000000000000000 R14: 00007fe5ccc65fa0 R15: 00007ffd0eb03558 [ 286.732344][T14332] [ 287.026351][T14328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.057176][T14337] loop4: detected capacity change from 0 to 256 [ 287.064451][T14328] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.083324][T14338] loop0: detected capacity change from 0 to 128 [ 287.096418][T14338] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3473'. [ 287.123877][T14337] FAT-fs (loop4): codepage cp861 not found [ 287.131063][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.173535][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.189191][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.206660][T14341] loop0: detected capacity change from 0 to 512 [ 287.217864][T14341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.230488][T14341] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.284093][T14349] loop3: detected capacity change from 0 to 1024 [ 287.296450][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.463920][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 287.490569][T14357] loop1: detected capacity change from 0 to 512 [ 287.511073][T14349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.527621][T14357] EXT4-fs (loop1): too many log groups per flexible block group [ 287.535515][T14357] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 287.637429][T14357] EXT4-fs (loop1): mount failed [ 287.646863][T14349] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.759828][T14366] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 287.759828][T14366] program syz.0.3479 not setting count and/or reply_len properly [ 287.802534][T14371] loop0: detected capacity change from 0 to 128 [ 287.887623][T14377] loop2: detected capacity change from 0 to 512 [ 287.960091][T14377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.973749][T14377] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.139736][T14386] loop4: detected capacity change from 0 to 128 [ 288.185192][T14387] loop1: detected capacity change from 0 to 512 [ 288.229024][T14387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.241997][T14387] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.265800][T14392] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3487'. [ 288.464357][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.503984][T14397] loop2: detected capacity change from 0 to 512 [ 288.524265][T14397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.539847][T14397] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.565940][T14397] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3488: iget: bad i_size value: 2533274857506816 [ 288.594496][T14397] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.3488: iget: bad i_size value: 2533274857506816 [ 288.612709][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.808272][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.989801][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3493'. [ 289.055222][T14411] loop3: detected capacity change from 0 to 512 [ 289.070391][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 289.086767][T14416] loop0: detected capacity change from 0 to 512 [ 289.086850][T14411] EXT4-fs (loop3): too many log groups per flexible block group [ 289.100899][T14411] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 289.101866][T14421] loop9: detected capacity change from 0 to 4 [ 289.114412][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.114722][T14411] EXT4-fs (loop3): mount failed [ 289.124677][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 289.125114][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.143054][T14416] EXT4-fs (loop0): too many log groups per flexible block group [ 289.147751][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 289.147955][T14421] loop9: unable to read partition table [ 289.155531][T14416] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 289.162580][T14416] EXT4-fs (loop0): mount failed [ 289.181687][T14421] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 289.181687][T14421] ) failed (rc=-5) [ 289.202170][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.213533][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 289.223850][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 289.267831][T14429] loop0: detected capacity change from 0 to 256 [ 289.276646][ T29] kauditd_printk_skb: 853 callbacks suppressed [ 289.276666][ T29] audit: type=1400 audit(1753463805.580:38087): avc: denied { module_request } for pid=14428 comm="syz.0.3498" kmod="nls_cp861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 289.290668][T14429] FAT-fs (loop0): codepage cp861 not found [ 289.307725][ T29] audit: type=1326 audit(1753463805.580:38088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 289.334665][ T29] audit: type=1326 audit(1753463805.580:38089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 289.358481][ T29] audit: type=1400 audit(1753463805.610:38090): avc: denied { create } for pid=14424 comm="syz.3.3497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 289.380801][ T29] audit: type=1326 audit(1753463805.610:38091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 289.404646][ T29] audit: type=1326 audit(1753463805.610:38092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 289.428649][ T29] audit: type=1326 audit(1753463805.610:38093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 289.452352][ T29] audit: type=1326 audit(1753463805.610:38094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 289.476227][ T29] audit: type=1326 audit(1753463805.610:38095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 289.499894][ T29] audit: type=1326 audit(1753463805.610:38096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14430 comm="syz.2.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 289.530516][T14431] loop2: detected capacity change from 0 to 128 [ 289.544521][T14431] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3499'. [ 289.570311][T14438] random: crng reseeded on system resumption [ 290.883889][T14450] loop2: detected capacity change from 0 to 128 [ 290.895528][T14450] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3505'. [ 291.357983][T14464] loop2: detected capacity change from 0 to 1024 [ 291.358911][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3508'. [ 291.380028][T14466] loop4: detected capacity change from 0 to 512 [ 291.395639][T14466] EXT4-fs (loop4): too many log groups per flexible block group [ 291.403419][T14466] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 291.403673][T14468] loop0: detected capacity change from 0 to 512 [ 291.410820][T14466] EXT4-fs (loop4): mount failed [ 291.438718][T14468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.454253][T14468] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.471098][T14477] loop2: detected capacity change from 0 to 1024 [ 291.505345][T14477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.518964][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.528697][T14477] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.540879][T14480] loop1: detected capacity change from 0 to 128 [ 291.552267][T14480] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3512'. [ 291.579213][T14483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14483 comm=,&#^% [ 291.591689][T14483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=14483 comm=,&#^% [ 291.627609][T14489] random: crng reseeded on system resumption [ 291.656985][T14475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.668486][T14475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.778614][T14500] loop3: detected capacity change from 0 to 128 [ 291.789395][T14500] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3518'. [ 291.815979][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3519'. [ 291.843854][T14504] loop3: detected capacity change from 0 to 1024 [ 291.856163][T14504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 291.868577][T14504] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.882034][T14504] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.3520: lblock 3 mapped to illegal pblock 3 (length 3) [ 291.896531][T14504] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 291.908857][T14504] EXT4-fs (loop3): This should not happen!! Data will be lost [ 291.908857][T14504] [ 291.937188][ T12] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 291.951885][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 291.964399][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 291.964399][ T12] [ 291.975280][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 291.997931][T14509] loop3: detected capacity change from 0 to 1024 [ 292.497331][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.556842][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 292.635626][T14523] loop2: detected capacity change from 0 to 128 [ 292.714423][T14532] program syz.4.3530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.747140][T14534] loop4: detected capacity change from 0 to 512 [ 292.766604][T14534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.780998][T14534] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.814685][T13411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.947952][T14544] loop1: detected capacity change from 0 to 512 [ 293.022027][T14544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.034670][T14544] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.421439][T14558] loop0: detected capacity change from 0 to 1024 [ 293.436830][T14558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.451661][T14558] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.500920][T14567] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 293.500920][T14567] program syz.4.3538 not setting count and/or reply_len properly [ 293.586190][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.615965][T14578] loop1: detected capacity change from 0 to 512 [ 293.625808][T14580] program syz.4.3543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.637976][T14578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.650992][T14578] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.667011][T14578] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.3541: iget: bad i_size value: 2533274857506816 [ 293.680843][T14578] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.3541: iget: bad i_size value: 2533274857506816 [ 293.845276][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.868946][T14593] loop1: detected capacity change from 0 to 512 [ 293.887437][T14593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.900215][T14593] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.935277][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.956762][T14600] loop1: detected capacity change from 0 to 512 [ 293.967248][T14600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.026947][T14606] loop3: detected capacity change from 0 to 512 [ 294.046913][T14606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.059699][T14606] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.091226][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.124737][T14538] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 294.335896][ T29] kauditd_printk_skb: 915 callbacks suppressed [ 294.335915][ T29] audit: type=1400 audit(1753463810.580:39010): avc: denied { write } for pid=14611 comm="syz.3.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.362760][ T29] audit: type=1400 audit(1753463810.580:39011): avc: denied { read } for pid=14611 comm="syz.3.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.383659][ T29] audit: type=1400 audit(1753463810.580:39012): avc: denied { append } for pid=14611 comm="syz.3.3551" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 294.406888][ T29] audit: type=1400 audit(1753463810.580:39013): avc: denied { connect } for pid=14611 comm="syz.3.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.426864][ T29] audit: type=1326 audit(1753463810.600:39014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14589 comm="syz.2.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4686fd5967 code=0x7ffc0000 [ 294.450581][ T29] audit: type=1326 audit(1753463810.600:39015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14589 comm="syz.2.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4686f7ab89 code=0x7ffc0000 [ 294.474259][ T29] audit: type=1326 audit(1753463810.600:39016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14589 comm="syz.2.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 294.498448][ T29] audit: type=1326 audit(1753463810.600:39017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14589 comm="syz.2.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4686fd5967 code=0x7ffc0000 [ 294.522157][ T29] audit: type=1326 audit(1753463810.600:39018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14589 comm="syz.2.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4686f7ab89 code=0x7ffc0000 [ 294.545805][ T29] audit: type=1326 audit(1753463810.600:39019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14589 comm="syz.2.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4686fde9a9 code=0x7ffc0000 [ 294.869669][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.909406][T14622] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14622 comm=syz.0.3553 [ 294.922032][T14622] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14622 comm=syz.0.3553 [ 295.043353][T14629] loop4: detected capacity change from 0 to 256 [ 295.052343][T14627] __nla_validate_parse: 2 callbacks suppressed [ 295.052362][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 295.070196][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.085549][T14629] FAT-fs (loop4): codepage cp861 not found [ 295.103606][T14632] loop0: detected capacity change from 0 to 1024 [ 295.105340][T14634] random: crng reseeded on system resumption [ 295.177656][T14639] FAULT_INJECTION: forcing a failure. [ 295.177656][T14639] name failslab, interval 1, probability 0, space 0, times 0 [ 295.190444][T14639] CPU: 0 UID: 0 PID: 14639 Comm: syz.1.3561 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 295.190487][T14639] Tainted: [W]=WARN [ 295.190494][T14639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.190506][T14639] Call Trace: [ 295.190513][T14639] [ 295.190520][T14639] __dump_stack+0x1d/0x30 [ 295.190541][T14639] dump_stack_lvl+0xe8/0x140 [ 295.190620][T14639] dump_stack+0x15/0x1b [ 295.190637][T14639] should_fail_ex+0x265/0x280 [ 295.190667][T14639] ? ip_fib_metrics_init+0x64/0x470 [ 295.190764][T14639] should_failslab+0x8c/0xb0 [ 295.190793][T14639] __kmalloc_cache_noprof+0x4c/0x320 [ 295.190827][T14639] ip_fib_metrics_init+0x64/0x470 [ 295.190886][T14639] ? __kmalloc_noprof+0x1dd/0x3e0 [ 295.190909][T14639] ? fib_create_info+0xbb1/0x1980 [ 295.190929][T14639] fib_create_info+0xbe3/0x1980 [ 295.190966][T14639] fib_table_insert+0x60/0xeb0 [ 295.190992][T14639] ? __rcu_read_unlock+0x4f/0x70 [ 295.191018][T14639] ? should_fail_ex+0xdb/0x280 [ 295.191088][T14639] ? ip_rt_ioctl+0x724/0x950 [ 295.191125][T14639] ? should_failslab+0x8c/0xb0 [ 295.191148][T14639] ? __kmalloc_cache_noprof+0x189/0x320 [ 295.191172][T14639] ? fib_new_table+0xad/0x1c0 [ 295.191238][T14639] ip_rt_ioctl+0x38d/0x950 [ 295.191279][T14639] inet_ioctl+0x33f/0x3a0 [ 295.191308][T14639] sock_do_ioctl+0x73/0x220 [ 295.191415][T14639] sock_ioctl+0x41b/0x610 [ 295.191521][T14639] ? __pfx_sock_ioctl+0x10/0x10 [ 295.191550][T14639] __se_sys_ioctl+0xce/0x140 [ 295.191586][T14639] __x64_sys_ioctl+0x43/0x50 [ 295.191621][T14639] x64_sys_call+0x19a8/0x2fb0 [ 295.191648][T14639] do_syscall_64+0xd2/0x200 [ 295.191716][T14639] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 295.191748][T14639] ? clear_bhb_loop+0x40/0x90 [ 295.191772][T14639] ? clear_bhb_loop+0x40/0x90 [ 295.191868][T14639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.191907][T14639] RIP: 0033:0x7fbadda6e9a9 [ 295.191990][T14639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.192008][T14639] RSP: 002b:00007fbadc0cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.192026][T14639] RAX: ffffffffffffffda RBX: 00007fbaddc95fa0 RCX: 00007fbadda6e9a9 [ 295.192038][T14639] RDX: 0000200000000840 RSI: 000000000000890b RDI: 0000000000000003 [ 295.192081][T14639] RBP: 00007fbadc0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 295.192109][T14639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.192162][T14639] R13: 0000000000000000 R14: 00007fbaddc95fa0 R15: 00007fffa7a9f978 [ 295.192181][T14639] [ 295.228540][T14640] loop3: detected capacity change from 0 to 512 [ 295.268818][T14643] loop1: detected capacity change from 0 to 2048 [ 295.308982][T14640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.483214][T14640] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.618843][T14643] loop1: p1 < > p3 [ 295.626874][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.639272][T14643] loop1: p3 size 134217728 extends beyond EOD, truncated [ 295.729853][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 295.776681][T14657] team0: Device gre1 is of different type [ 295.824780][T14659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14659 comm=syz.1.3567 [ 295.837477][T14659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14659 comm=syz.1.3567 [ 295.911100][T14661] loop2: detected capacity change from 0 to 2048 [ 295.945541][T14661] loop2: p1 < > p3 [ 295.946731][T14665] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 295.946731][T14665] program syz.4.3569 not setting count and/or reply_len properly [ 295.951727][T14661] loop2: p3 size 134217728 extends beyond EOD, truncated [ 295.978844][T14664] loop3: detected capacity change from 0 to 128 [ 295.993976][T14667] random: crng reseeded on system resumption [ 295.997229][T14664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3564'. [ 296.038473][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'. [ 296.047491][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'. [ 296.057813][T14671] FAULT_INJECTION: forcing a failure. [ 296.057813][T14671] name failslab, interval 1, probability 0, space 0, times 0 [ 296.070626][T14671] CPU: 1 UID: 0 PID: 14671 Comm: syz.2.3572 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 296.070746][T14671] Tainted: [W]=WARN [ 296.070754][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.070770][T14671] Call Trace: [ 296.070778][T14671] [ 296.070787][T14671] __dump_stack+0x1d/0x30 [ 296.070815][T14671] dump_stack_lvl+0xe8/0x140 [ 296.070848][T14671] dump_stack+0x15/0x1b [ 296.070869][T14671] should_fail_ex+0x265/0x280 [ 296.070907][T14671] should_failslab+0x8c/0xb0 [ 296.071076][T14671] __kmalloc_noprof+0xa5/0x3e0 [ 296.071171][T14671] ? bpf_test_init+0xa9/0x160 [ 296.071207][T14671] bpf_test_init+0xa9/0x160 [ 296.071239][T14671] bpf_prog_test_run_xdp+0x274/0x910 [ 296.071273][T14671] ? kstrtouint+0x76/0xc0 [ 296.071319][T14671] ? __rcu_read_unlock+0x4f/0x70 [ 296.071346][T14671] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 296.071458][T14671] bpf_prog_test_run+0x227/0x390 [ 296.071552][T14671] __sys_bpf+0x3dc/0x790 [ 296.071589][T14671] __x64_sys_bpf+0x41/0x50 [ 296.071626][T14671] x64_sys_call+0x2478/0x2fb0 [ 296.071709][T14671] do_syscall_64+0xd2/0x200 [ 296.071728][T14671] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 296.071753][T14671] ? clear_bhb_loop+0x40/0x90 [ 296.071826][T14671] ? clear_bhb_loop+0x40/0x90 [ 296.071898][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.071926][T14671] RIP: 0033:0x7f4686fde9a9 [ 296.072006][T14671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.072025][T14671] RSP: 002b:00007f4685647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.072044][T14671] RAX: ffffffffffffffda RBX: 00007f4687205fa0 RCX: 00007f4686fde9a9 [ 296.072056][T14671] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 296.072069][T14671] RBP: 00007f4685647090 R08: 0000000000000000 R09: 0000000000000000 [ 296.072080][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.072154][T14671] R13: 0000000000000000 R14: 00007f4687205fa0 R15: 00007fff825ce978 [ 296.072175][T14671] [ 296.299668][T14675] loop4: detected capacity change from 0 to 512 [ 296.318717][T14673] loop3: detected capacity change from 0 to 512 [ 296.325844][T14673] journal_path: Non-blockdev passed as './bus' [ 296.330183][T14678] loop2: detected capacity change from 0 to 512 [ 296.332091][T14673] EXT4-fs: error: could not find journal device path [ 296.347487][T14675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.367727][T14675] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.372709][T14684] loop0: detected capacity change from 0 to 512 [ 296.386893][T14678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.408992][T14684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.421734][T14686] loop3: detected capacity change from 0 to 512 [ 296.423424][T14684] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.430685][T13411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.482594][T14684] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.3576: iget: bad i_size value: 2533274857506816 [ 296.641734][T14686] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.664711][T14699] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.3576: iget: bad i_size value: 2533274857506816 [ 296.982330][T14706] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 296.982330][T14706] program syz.3.3580 not setting count and/or reply_len properly [ 297.007320][T14708] random: crng reseeded on system resumption [ 297.087735][T14712] loop3: detected capacity change from 0 to 1024 [ 297.094620][T14714] loop0: detected capacity change from 0 to 512 [ 297.102298][T14712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.121528][T14714] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.160326][T14711] loop4: detected capacity change from 0 to 8192 [ 297.245459][T14720] program syz.0.3585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.386950][T14733] loop2: detected capacity change from 0 to 512 [ 297.409049][T14735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14735 comm=syz.4.3590 [ 297.421835][T14735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14735 comm=syz.4.3590 [ 297.846360][T14749] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 297.846360][T14749] program syz.4.3593 not setting count and/or reply_len properly [ 298.138285][T14761] program syz.3.3597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.148576][T14777] loop4: detected capacity change from 0 to 512 [ 299.211073][T14777] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.295124][T14784] loop3: detected capacity change from 0 to 512 [ 299.323906][T14784] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.375410][ T29] kauditd_printk_skb: 1021 callbacks suppressed [ 299.375429][ T29] audit: type=1326 audit(1753463815.680:40041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 299.377788][T14792] loop3: detected capacity change from 0 to 128 [ 299.381789][ T29] audit: type=1326 audit(1753463815.680:40042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 299.410690][T14792] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3605'. [ 299.411873][ T29] audit: type=1326 audit(1753463815.680:40043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 299.444782][T14793] loop2: detected capacity change from 0 to 512 [ 299.468681][ T29] audit: type=1326 audit(1753463815.680:40044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 299.487547][T14793] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.498948][ T29] audit: type=1326 audit(1753463815.680:40045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 299.533597][ T29] audit: type=1326 audit(1753463815.680:40046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 299.533706][ T29] audit: type=1326 audit(1753463815.680:40047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 299.581357][ T29] audit: type=1326 audit(1753463815.680:40048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 299.605157][ T29] audit: type=1326 audit(1753463815.680:40049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5e5e1e9e3 code=0x7ffc0000 [ 299.628953][ T29] audit: type=1326 audit(1753463815.680:40050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14790 comm="syz.3.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd5e5e1d45f code=0x7ffc0000 [ 299.686456][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3608'. [ 299.702282][T14801] loop3: detected capacity change from 0 to 512 [ 299.711120][T14803] loop4: detected capacity change from 0 to 1024 [ 299.720039][T14801] EXT4-fs (loop3): too many log groups per flexible block group [ 299.727924][T14801] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 299.735840][T14801] EXT4-fs (loop3): mount failed [ 299.755867][T14803] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.805931][T14803] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.813148][T14809] loop3: detected capacity change from 0 to 512 [ 299.813242][T14803] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.829989][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3609'. [ 299.839128][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3609'. [ 299.846397][T14809] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.881128][T14803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.891694][T14803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.980312][T14803] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.989463][T14803] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.998553][T14803] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.007468][T14803] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.392590][T14824] random: crng reseeded on system resumption [ 300.410845][T14817] vlan2: entered promiscuous mode [ 300.549110][T14837] loop1: detected capacity change from 0 to 512 [ 300.584022][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3617'. [ 300.597925][T14840] loop4: detected capacity change from 0 to 512 [ 300.606326][T14837] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.624778][T14840] EXT4-fs (loop4): too many log groups per flexible block group [ 300.632552][T14840] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 300.664443][T14840] EXT4-fs (loop4): mount failed [ 301.295555][T14867] loop3: detected capacity change from 0 to 1024 [ 301.306460][T14867] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.371002][T14871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3623'. [ 301.380132][T14871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3623'. [ 301.545685][T14873] loop0: detected capacity change from 0 to 512 [ 301.556328][T14873] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.598620][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3625'. [ 301.612269][T14879] loop0: detected capacity change from 0 to 512 [ 301.619569][T14881] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 301.619569][T14881] program syz.4.3627 not setting count and/or reply_len properly [ 301.627236][T14879] EXT4-fs (loop0): too many log groups per flexible block group [ 301.637993][T14881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3627'. [ 301.644812][T14879] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 301.660896][T14879] EXT4-fs (loop0): mount failed [ 301.668628][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3627'. [ 301.716914][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3630'. [ 301.728857][T14889] loop0: detected capacity change from 0 to 512 [ 301.745449][T14889] EXT4-fs (loop0): too many log groups per flexible block group [ 301.753190][T14889] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 301.760241][T14889] EXT4-fs (loop0): mount failed [ 302.280232][T14901] loop2: detected capacity change from 0 to 512 [ 302.376712][T14907] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14907 comm=syz.3.3634 [ 302.389385][T14907] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14907 comm=syz.3.3634 [ 302.566028][T14913] loop4: detected capacity change from 0 to 256 [ 302.584222][T14914] vlan2: entered promiscuous mode [ 302.589513][T14914] syz_tun: entered promiscuous mode [ 302.608523][T14916] loop3: detected capacity change from 0 to 512 [ 302.652342][T14913] FAT-fs (loop4): codepage cp861 not found [ 302.662974][T14916] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.312120][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3638'. [ 303.482070][T14928] loop0: detected capacity change from 0 to 512 [ 303.519787][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'. [ 303.559128][T14936] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 303.559128][T14936] program syz.4.3640 not setting count and/or reply_len properly [ 303.605752][T14928] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 303.657619][T14934] loop2: detected capacity change from 0 to 512 [ 303.681419][T14937] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3640'. [ 303.723715][T14928] EXT4-fs (loop0): 1 truncate cleaned up [ 303.732444][T14934] EXT4-fs (loop2): too many log groups per flexible block group [ 303.740198][T14934] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 303.766629][T14934] EXT4-fs (loop2): mount failed [ 303.826372][T14945] loop2: detected capacity change from 0 to 512 [ 303.836929][T14945] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.871626][T14949] loop1: detected capacity change from 0 to 512 [ 303.899716][T14954] netlink: 'syz.2.3644': attribute type 25 has an invalid length. [ 303.907800][T14954] netlink: 'syz.2.3644': attribute type 5 has an invalid length. [ 304.015388][T14960] loop4: detected capacity change from 0 to 512 [ 304.026249][T14960] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.059173][T14960] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.3646: iget: bad i_size value: 2533274857506816 [ 304.085440][T14960] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.3646: iget: bad i_size value: 2533274857506816 [ 304.281166][T14978] loop2: detected capacity change from 0 to 128 [ 304.438343][T14982] program syz.2.3651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.449437][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 304.449450][ T29] audit: type=1400 audit(1753463820.710:40484): avc: denied { read write } for pid=14968 comm="syz.3.3649" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.479620][ T29] audit: type=1400 audit(1753463820.710:40485): avc: denied { open } for pid=14968 comm="syz.3.3649" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.503319][ T29] audit: type=1326 audit(1753463820.720:40486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5cca35967 code=0x7ffc0000 [ 304.527036][ T29] audit: type=1326 audit(1753463820.720:40487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5cc9dab89 code=0x7ffc0000 [ 304.550570][ T29] audit: type=1326 audit(1753463820.720:40488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe5cca3e9a9 code=0x7ffc0000 [ 304.574353][ T29] audit: type=1326 audit(1753463820.730:40489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5cca35967 code=0x7ffc0000 [ 304.598153][ T29] audit: type=1326 audit(1753463820.730:40490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5cc9dab89 code=0x7ffc0000 [ 304.622026][ T29] audit: type=1326 audit(1753463820.730:40491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe5cca3e9a9 code=0x7ffc0000 [ 304.645841][ T29] audit: type=1400 audit(1753463820.730:40492): avc: denied { read append } for pid=14981 comm="syz.2.3651" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 304.670645][ T29] audit: type=1400 audit(1753463820.730:40493): avc: denied { open } for pid=14981 comm="syz.2.3651" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 304.702987][T14975] loop3: detected capacity change from 0 to 512 [ 304.729060][T14975] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.751465][T14988] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 304.751465][T14988] program syz.2.3652 not setting count and/or reply_len properly [ 304.851704][T14990] loop2: detected capacity change from 0 to 512 [ 304.869855][T14990] EXT4-fs (loop2): too many log groups per flexible block group [ 304.877720][T14990] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 304.885931][T14990] EXT4-fs (loop2): mount failed [ 304.964121][T14997] netlink: 'syz.1.3655': attribute type 3 has an invalid length. [ 305.035416][T15001] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 305.035416][T15001] program syz.2.3657 not setting count and/or reply_len properly [ 305.096142][T15003] loop1: detected capacity change from 0 to 512 [ 305.108550][T15003] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 305.161516][T15008] vlan2: entered promiscuous mode [ 305.166682][T15008] syz_tun: entered promiscuous mode [ 305.692753][T15003] EXT4-fs (loop1): 1 truncate cleaned up [ 305.723444][T15015] loop3: detected capacity change from 0 to 1024 [ 306.528587][T15015] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.588993][T15029] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 306.588993][T15029] program syz.0.3663 not setting count and/or reply_len properly [ 306.606848][T15030] __nla_validate_parse: 6 callbacks suppressed [ 306.606861][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3661'. [ 306.626660][T15029] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3663'. [ 306.673980][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3663'. [ 306.695338][T15030] loop4: detected capacity change from 0 to 512 [ 306.703910][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3658'. [ 306.706043][T15030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 306.712958][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3658'. [ 306.738147][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3658'. [ 306.947235][T15039] loop2: detected capacity change from 0 to 512 [ 307.010215][T15030] EXT4-fs (loop4): 1 truncate cleaned up [ 307.031750][T15039] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.151735][T15051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3666'. [ 307.204905][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 307.209170][T15055] loop3: detected capacity change from 0 to 128 [ 307.220666][T15055] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 307.232532][T15055] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 307.239174][T15055] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 307.247003][T15055] vhci_hcd vhci_hcd.0: Device attached [ 307.248804][T15053] loop1: detected capacity change from 0 to 512 [ 307.258142][T15056] vhci_hcd: connection closed [ 307.259519][ T110] vhci_hcd: stop threads [ 307.268658][ T110] vhci_hcd: release socket [ 307.273108][ T110] vhci_hcd: disconnect device [ 307.286565][T15053] EXT4-fs (loop1): too many log groups per flexible block group [ 307.294616][T15053] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 307.302068][T15053] EXT4-fs (loop1): mount failed [ 307.462151][T15068] loop2: detected capacity change from 0 to 1024 [ 307.633564][T15074] loop4: detected capacity change from 0 to 512 [ 307.668032][T15074] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.688178][T15068] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.862040][T15080] loop3: detected capacity change from 0 to 512 [ 307.876289][T15080] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.261051][T15088] loop3: detected capacity change from 0 to 512 [ 308.390138][T15094] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 308.390138][T15094] program syz.0.3675 not setting count and/or reply_len properly [ 308.427211][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'. [ 308.464828][T15094] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3675'. [ 308.484442][T15096] loop1: detected capacity change from 0 to 512 [ 308.515061][T15088] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.548792][T15096] EXT4-fs (loop1): too many log groups per flexible block group [ 308.556641][T15096] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 308.565421][T15098] loop0: detected capacity change from 0 to 1024 [ 308.586030][T15096] EXT4-fs (loop1): mount failed [ 308.596551][T15098] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.618574][T15110] loop1: detected capacity change from 0 to 512 [ 308.637004][T15110] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.694730][T15119] loop1: detected capacity change from 0 to 512 [ 308.705998][T15119] EXT4-fs (loop1): too many log groups per flexible block group [ 308.713890][T15119] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 308.720889][T15119] EXT4-fs (loop1): mount failed [ 308.762479][T15123] random: crng reseeded on system resumption [ 309.037713][T15132] loop1: detected capacity change from 0 to 512 [ 309.057033][T15132] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.429781][T15139] loop2: detected capacity change from 0 to 1024 [ 309.448529][T15139] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.462390][ T29] kauditd_printk_skb: 1141 callbacks suppressed [ 309.462404][ T29] audit: type=1326 audit(1753463825.760:41635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 309.492627][ T29] audit: type=1326 audit(1753463825.760:41636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 309.516453][ T29] audit: type=1326 audit(1753463825.760:41637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 309.517850][T15150] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 309.517850][T15150] program syz.4.3689 not setting count and/or reply_len properly [ 309.540355][ T29] audit: type=1326 audit(1753463825.790:41638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 309.540396][ T29] audit: type=1326 audit(1753463825.790:41639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 309.605392][ T29] audit: type=1326 audit(1753463825.790:41640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 309.629475][ T29] audit: type=1326 audit(1753463825.860:41641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5cca35967 code=0x7ffc0000 [ 309.653053][ T29] audit: type=1326 audit(1753463825.860:41642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5cc9dab89 code=0x7ffc0000 [ 309.676659][ T29] audit: type=1326 audit(1753463825.860:41643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15142 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe5cca3e9a9 code=0x7ffc0000 [ 309.700532][ T29] audit: type=1326 audit(1753463825.880:41644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.3.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 309.758040][T15155] loop4: detected capacity change from 0 to 512 [ 309.789590][T15155] EXT4-fs (loop4): too many log groups per flexible block group [ 309.797388][T15155] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 309.807843][T15155] EXT4-fs (loop4): mount failed [ 309.824204][T15163] random: crng reseeded on system resumption [ 309.857393][T15167] loop3: detected capacity change from 0 to 256 [ 309.872069][T15169] loop4: detected capacity change from 0 to 512 [ 309.890187][T15167] FAT-fs (loop3): codepage cp861 not found [ 309.987816][T15169] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.036958][T15175] loop4: detected capacity change from 0 to 1024 [ 310.824040][T15174] loop1: detected capacity change from 0 to 512 [ 310.961056][T15174] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.985262][T15175] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.019433][T15189] loop0: detected capacity change from 0 to 1764 [ 311.025759][T15192] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 311.025759][T15192] program syz.3.3700 not setting count and/or reply_len properly [ 311.026454][T15189] iso9660: Bad value for 'map' [ 311.196192][T15208] random: crng reseeded on system resumption [ 311.315285][T15212] loop3: detected capacity change from 0 to 512 [ 311.337678][T15212] EXT4-fs (loop3): too many log groups per flexible block group [ 311.345588][T15212] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 311.353285][T15212] EXT4-fs (loop3): mount failed [ 311.406411][T15218] loop4: detected capacity change from 0 to 512 [ 311.406440][T15213] loop1: detected capacity change from 0 to 512 [ 311.427176][T15213] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.440277][T15218] EXT4-fs (loop4): too many log groups per flexible block group [ 311.448035][T15218] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 311.455668][T15218] EXT4-fs (loop4): mount failed [ 311.538398][T15236] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 311.538398][T15236] program syz.0.3712 not setting count and/or reply_len properly [ 311.752611][T15241] loop0: detected capacity change from 0 to 512 [ 312.467541][T15255] loop2: detected capacity change from 0 to 512 [ 312.601316][T15255] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.728324][T15263] random: crng reseeded on system resumption [ 312.885572][T15269] __nla_validate_parse: 20 callbacks suppressed [ 312.885592][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'. [ 312.985613][T15271] vlan2: entered promiscuous mode [ 313.400027][T15275] loop1: detected capacity change from 0 to 512 [ 313.693251][T15279] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 313.693251][T15279] program syz.4.3723 not setting count and/or reply_len properly [ 313.935702][T15279] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3723'. [ 313.946028][T11392] EXT4-fs unmount: 75 callbacks suppressed [ 313.946045][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.962441][T15275] EXT4-fs (loop1): too many log groups per flexible block group [ 313.970337][T15275] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 313.982705][T15275] EXT4-fs (loop1): mount failed [ 313.986629][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3723'. [ 314.028768][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 314.042867][T15285] loop2: detected capacity change from 0 to 512 [ 314.065428][T15285] EXT4-fs (loop2): too many log groups per flexible block group [ 314.073167][T15285] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 314.073460][T15293] loop1: detected capacity change from 0 to 512 [ 314.081417][T15285] EXT4-fs (loop2): mount failed [ 314.099932][T15293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.113254][T15293] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.140559][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3727'. [ 314.154530][T15300] loop0: detected capacity change from 0 to 512 [ 314.161912][T15300] ext4: Bad value for 'init_itable' [ 314.168938][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.181373][T15300] loop0: detected capacity change from 0 to 2048 [ 314.196713][T15300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.213860][T15300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3727'. [ 314.227436][T15307] random: crng reseeded on system resumption [ 314.548498][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 314.548575][ T29] audit: type=1400 audit(1753463830.850:42377): avc: denied { execute } for pid=15299 comm="syz.0.3727" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=42536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 314.617717][ T29] audit: type=1326 audit(1753463830.890:42378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 314.641794][ T29] audit: type=1326 audit(1753463830.890:42379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 314.665671][ T29] audit: type=1326 audit(1753463830.890:42380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 314.760352][ T29] audit: type=1326 audit(1753463831.030:42381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 314.784225][ T29] audit: type=1326 audit(1753463831.040:42382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 314.808226][ T29] audit: type=1326 audit(1753463831.040:42383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 314.832163][ T29] audit: type=1326 audit(1753463831.040:42384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5e5e15967 code=0x7ffc0000 [ 314.855850][ T29] audit: type=1326 audit(1753463831.040:42385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5e5dbab89 code=0x7ffc0000 [ 314.879674][ T29] audit: type=1326 audit(1753463831.040:42386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15282 comm="syz.3.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 314.928876][T15317] loop1: detected capacity change from 0 to 512 [ 315.429539][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.443309][T15317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.455962][T15317] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.481232][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 315.688696][T15326] bond1: entered promiscuous mode [ 315.693819][T15326] bond1: entered allmulticast mode [ 315.720630][T15335] loop3: detected capacity change from 0 to 512 [ 315.740318][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.775871][T15335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.788824][T15335] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.829162][T15341] loop2: detected capacity change from 0 to 512 [ 315.850803][T15341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.863825][T15341] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.911734][T15326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.306889][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'. [ 316.393207][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.402824][T15351] loop0: detected capacity change from 0 to 512 [ 316.407373][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.429838][T15351] EXT4-fs (loop0): too many log groups per flexible block group [ 316.437585][T15351] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 316.459608][T15351] EXT4-fs (loop0): mount failed [ 316.465841][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'. [ 316.478358][T15361] loop2: detected capacity change from 0 to 512 [ 316.497389][T15365] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 316.497389][T15365] program syz.4.3742 not setting count and/or reply_len properly [ 316.515940][T15359] loop3: detected capacity change from 0 to 1024 [ 316.526457][T15361] EXT4-fs (loop2): too many log groups per flexible block group [ 316.534340][T15361] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 316.543677][T15361] EXT4-fs (loop2): mount failed [ 316.557463][T15370] random: crng reseeded on system resumption [ 316.572619][T15359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.589574][T15359] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.501747][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'. [ 317.576626][T15389] loop0: detected capacity change from 0 to 512 [ 317.677190][T15389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 317.692824][T15389] EXT4-fs (loop0): 1 truncate cleaned up [ 317.699354][T15389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.718444][T15395] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 317.718444][T15395] program syz.4.3749 not setting count and/or reply_len properly [ 317.886722][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.934077][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.946617][T15407] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 317.946617][T15407] program syz.0.3754 not setting count and/or reply_len properly [ 318.138508][T15415] loop2: detected capacity change from 0 to 512 [ 318.237730][T15412] random: crng reseeded on system resumption [ 318.290006][T15415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.302815][T15415] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.386980][T15414] loop0: detected capacity change from 0 to 512 [ 318.402313][T15427] __nla_validate_parse: 3 callbacks suppressed [ 318.402332][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3755'. [ 318.415222][T15414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.431383][T15414] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.434856][T15427] loop3: detected capacity change from 0 to 512 [ 318.469204][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.484188][T15427] EXT4-fs (loop3): too many log groups per flexible block group [ 318.491950][T15427] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 318.500385][T15427] EXT4-fs (loop3): mount failed [ 318.569465][T15439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3761'. [ 318.747607][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.015216][T15449] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 319.015216][T15449] program syz.3.3764 not setting count and/or reply_len properly [ 319.032787][T15449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3764'. [ 319.048378][T15449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 319.072682][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 319.222320][T15453] loop0: detected capacity change from 0 to 512 [ 319.231331][T15453] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 319.410178][T15456] loop3: detected capacity change from 0 to 1024 [ 319.452835][T15453] EXT4-fs (loop0): 1 truncate cleaned up [ 319.463520][T15456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.477933][T15453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.525933][T15456] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.571486][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 319.571504][ T29] audit: type=1326 audit(1753463835.870:42612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.602854][T15469] loop4: detected capacity change from 0 to 128 [ 319.603819][ T29] audit: type=1326 audit(1753463835.870:42613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.613409][T15469] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3769'. [ 319.632982][ T29] audit: type=1326 audit(1753463835.870:42614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.665890][ T29] audit: type=1326 audit(1753463835.870:42615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.689929][ T29] audit: type=1326 audit(1753463835.870:42616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.713652][ T29] audit: type=1326 audit(1753463835.870:42617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.737497][ T29] audit: type=1326 audit(1753463835.870:42618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.761226][ T29] audit: type=1326 audit(1753463835.870:42619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.785070][ T29] audit: type=1326 audit(1753463835.870:42620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.808640][ T29] audit: type=1326 audit(1753463835.870:42621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.4.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668840e9a9 code=0x7ffc0000 [ 319.868085][T15477] loop4: detected capacity change from 0 to 512 [ 319.879414][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.890863][T15479] loop2: detected capacity change from 0 to 256 [ 319.906155][T15477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.909017][T15479] FAT-fs (loop2): codepage cp861 not found [ 320.032495][T15477] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.060938][T13411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.965105][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.517478][T15493] loop0: detected capacity change from 0 to 512 [ 322.427360][T15507] sg_write: data in/out 63969/14 bytes for SCSI command 0x0-- guessing data in; [ 322.427360][T15507] program syz.1.3779 not setting count and/or reply_len properly [ 323.075384][T15509] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3779'. [ 323.128689][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3779'. [ 323.152772][T15493] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 323.368762][T15519] loop1: detected capacity change from 0 to 512 [ 323.491237][T15526] loop0: detected capacity change from 0 to 128 [ 323.685061][T15519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.725862][T15526] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3783'. [ 323.730284][T15519] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.840024][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.857910][T15540] loop2: detected capacity change from 0 to 512 [ 323.876028][T15542] loop0: detected capacity change from 0 to 1024 [ 323.899653][T15540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.917851][T15540] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.932760][T15542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.946971][T15542] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.984961][T15547] loop1: detected capacity change from 0 to 1024 [ 324.030341][T15547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.043385][T15547] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.098080][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.139328][T15560] loop2: detected capacity change from 0 to 512 [ 324.173641][T15560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.186511][T15560] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.216324][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.565884][T15569] loop2: detected capacity change from 0 to 512 [ 324.619301][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 324.619318][ T29] audit: type=1326 audit(1753463840.920:42765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.657993][ T29] audit: type=1326 audit(1753463840.950:42766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.681789][ T29] audit: type=1326 audit(1753463840.960:42767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.705578][ T29] audit: type=1326 audit(1753463840.960:42768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.729733][ T29] audit: type=1326 audit(1753463840.960:42769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.753474][ T29] audit: type=1326 audit(1753463840.960:42770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.777315][ T29] audit: type=1326 audit(1753463840.960:42771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.801310][ T29] audit: type=1326 audit(1753463840.960:42772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.824911][ T29] audit: type=1326 audit(1753463840.960:42773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.848641][ T29] audit: type=1326 audit(1753463840.960:42774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.3.3794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e5e1e9a9 code=0x7ffc0000 [ 324.850960][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3794'. [ 324.885556][T15569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.898147][T15569] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.931157][T15571] loop3: detected capacity change from 0 to 512 [ 324.938420][T15571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 324.949874][T11392] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.954589][T15571] EXT4-fs (loop3): 1 truncate cleaned up [ 324.965462][T15571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.013403][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.150484][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.202648][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3797'. [ 325.281807][T15585] loop1: detected capacity change from 0 to 512 [ 325.326103][T15585] EXT4-fs (loop1): too many log groups per flexible block group [ 325.333823][T15585] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 325.342563][T15585] EXT4-fs (loop1): mount failed [ 325.399233][T15589] loop0: detected capacity change from 0 to 128 [ 325.420330][T15589] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3799'. [ 325.509687][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.551628][T15596] loop1: detected capacity change from 0 to 512 [ 325.559255][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3801'. [ 325.566343][T15596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.581159][T15596] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.767947][T15609] loop3: detected capacity change from 0 to 512 [ 325.780643][T15607] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 325.780643][T15607] program syz.2.3805 not setting count and/or reply_len properly [ 325.933124][T15609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.977783][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.003317][T15614] loop4: detected capacity change from 0 to 512 [ 326.022670][T15609] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.058962][T15614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.073565][T15614] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.108358][T12370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.117648][T15619] loop2: detected capacity change from 0 to 1024 [ 326.129607][T13411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.140612][T15621] loop1: detected capacity change from 0 to 512 [ 326.140995][T15619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.159444][T15619] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.176672][T15621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.194038][T15629] loop4: detected capacity change from 0 to 128 [ 326.204608][T15629] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3810'. [ 326.207271][T15621] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.244811][T15632] loop4: detected capacity change from 0 to 512 [ 326.246104][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.262251][T15632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.340943][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 326.353763][T15639] loop1: detected capacity change from 0 to 512 [ 326.360883][T15639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 326.373648][T15639] EXT4-fs (loop1): 1 truncate cleaned up [ 326.418055][T15639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.458058][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3814'. [ 326.504973][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3815'. [ 326.519459][T15649] loop0: detected capacity change from 0 to 512 [ 326.535604][T15649] EXT4-fs (loop0): too many log groups per flexible block group [ 326.543386][T15649] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 326.550437][T15649] EXT4-fs (loop0): mount failed [ 326.566223][T15632] ================================================================== [ 326.574364][T15632] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 326.581608][T15632] [ 326.583954][T15632] write to 0xffff8881006136ac of 4 bytes by task 15647 on cpu 0: [ 326.591784][T15632] __xa_set_mark+0x172/0x1a0 [ 326.596392][T15632] __folio_mark_dirty+0x3af/0x4d0 [ 326.601445][T15632] mark_buffer_dirty+0x11e/0x210 [ 326.606407][T15632] block_write_end+0x12e/0x210 [ 326.611204][T15632] ext4_write_end+0x13a/0x730 [ 326.615996][T15632] ext4_da_write_end+0x70/0x810 [ 326.620907][T15632] generic_perform_write+0x312/0x490 [ 326.626206][T15632] ext4_buffered_write_iter+0x1ee/0x3c0 [ 326.631867][T15632] ext4_file_write_iter+0x383/0xf00 [ 326.637080][T15632] iter_file_splice_write+0x5ef/0x970 [ 326.642506][T15632] direct_splice_actor+0x153/0x2a0 [ 326.647643][T15632] splice_direct_to_actor+0x30f/0x680 [ 326.653100][T15632] do_splice_direct+0xda/0x150 [ 326.657911][T15632] do_sendfile+0x380/0x650 [ 326.662355][T15632] __x64_sys_sendfile64+0x105/0x150 [ 326.667575][T15632] x64_sys_call+0xb39/0x2fb0 [ 326.672210][T15632] do_syscall_64+0xd2/0x200 [ 326.676734][T15632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.682663][T15632] [ 326.685004][T15632] read to 0xffff8881006136ac of 4 bytes by task 15632 on cpu 1: [ 326.692827][T15632] xas_find_marked+0x5dc/0x620 [ 326.697622][T15632] find_get_entry+0x5d/0x380 [ 326.702234][T15632] filemap_get_folios_tag+0x92/0x210 [ 326.707543][T15632] file_write_and_wait_range+0x1ea/0x2c0 [ 326.713262][T15632] generic_buffers_fsync_noflush+0x45/0x120 [ 326.719202][T15632] ext4_sync_file+0x1ab/0x690 [ 326.723911][T15632] vfs_fsync_range+0x10a/0x130 [ 326.728709][T15632] ext4_buffered_write_iter+0x34f/0x3c0 [ 326.734279][T15632] ext4_file_write_iter+0xdbf/0xf00 [ 326.739589][T15632] iter_file_splice_write+0x5ef/0x970 [ 326.745161][T15632] direct_splice_actor+0x153/0x2a0 [ 326.750302][T15632] splice_direct_to_actor+0x30f/0x680 [ 326.755722][T15632] do_splice_direct+0xda/0x150 [ 326.760506][T15632] do_sendfile+0x380/0x650 [ 326.764940][T15632] __x64_sys_sendfile64+0x105/0x150 [ 326.770160][T15632] x64_sys_call+0xb39/0x2fb0 [ 326.774770][T15632] do_syscall_64+0xd2/0x200 [ 326.779293][T15632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.785212][T15632] [ 326.787545][T15632] value changed: 0x04000021 -> 0x0e000021 [ 326.793267][T15632] [ 326.795596][T15632] Reported by Kernel Concurrency Sanitizer on: [ 326.801756][T15632] CPU: 1 UID: 0 PID: 15632 Comm: syz.4.3811 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 326.815846][T15632] Tainted: [W]=WARN [ 326.819658][T15632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.829733][T15632] ================================================================== [ 326.846099][T15647] ================================================================== [ 326.854246][T15647] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 326.862110][T15647] [ 326.864467][T15647] write to 0xffffea000427e298 of 8 bytes by task 15632 on cpu 0: [ 326.872211][T15647] __filemap_remove_folio+0x1a5/0x2a0 [ 326.877895][T15647] folio_unmap_invalidate+0x1dd/0x360 [ 326.883309][T15647] invalidate_inode_pages2_range+0x27c/0x3d0 [ 326.889331][T15647] filemap_invalidate_pages+0x16d/0x1a0 [ 326.894942][T15647] kiocb_invalidate_pages+0x6e/0x80 [ 326.900200][T15647] __iomap_dio_rw+0x5d4/0x1250 [ 326.905037][T15647] iomap_dio_rw+0x40/0x90 [ 326.909419][T15647] ext4_file_write_iter+0xad9/0xf00 [ 326.914664][T15647] iter_file_splice_write+0x5ef/0x970 [ 326.920082][T15647] direct_splice_actor+0x153/0x2a0 [ 326.925426][T15647] splice_direct_to_actor+0x30f/0x680 [ 326.930899][T15647] do_splice_direct+0xda/0x150 [ 326.935709][T15647] do_sendfile+0x380/0x650 [ 326.940168][T15647] __x64_sys_sendfile64+0x105/0x150 [ 326.945598][T15647] x64_sys_call+0xb39/0x2fb0 [ 326.950396][T15647] do_syscall_64+0xd2/0x200 [ 326.954938][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.960899][T15647] [ 326.963249][T15647] read to 0xffffea000427e298 of 8 bytes by task 15647 on cpu 1: [ 326.970917][T15647] folio_mapping+0xa1/0x120 [ 326.975473][T15647] folio_wait_writeback+0x43/0x140 [ 326.980643][T15647] file_write_and_wait_range+0x20b/0x2c0 [ 326.986332][T15647] generic_buffers_fsync_noflush+0x45/0x120 [ 326.992283][T15647] ext4_sync_file+0x1ab/0x690 [ 326.997018][T15647] vfs_fsync_range+0x10a/0x130 [ 327.001886][T15647] ext4_buffered_write_iter+0x34f/0x3c0 [ 327.007483][T15647] ext4_file_write_iter+0x383/0xf00 [ 327.012737][T15647] iter_file_splice_write+0x5ef/0x970 [ 327.018144][T15647] direct_splice_actor+0x153/0x2a0 [ 327.023289][T15647] splice_direct_to_actor+0x30f/0x680 [ 327.028694][T15647] do_splice_direct+0xda/0x150 [ 327.033485][T15647] do_sendfile+0x380/0x650 [ 327.037929][T15647] __x64_sys_sendfile64+0x105/0x150 [ 327.043243][T15647] x64_sys_call+0xb39/0x2fb0 [ 327.047852][T15647] do_syscall_64+0xd2/0x200 [ 327.052376][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.058296][T15647] [ 327.060636][T15647] value changed: 0xffff8881006136a0 -> 0x0000000000000000 [ 327.067846][T15647] [ 327.070178][T15647] Reported by Kernel Concurrency Sanitizer on: [ 327.076343][T15647] CPU: 1 UID: 0 PID: 15647 Comm: syz.4.3811 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 327.090446][T15647] Tainted: [W]=WARN [ 327.094271][T15647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.104450][T15647] ================================================================== [ 327.145992][T13277] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.176638][T13411] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.244020][T12020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.