last executing test programs: 3.233664349s ago: executing program 0 (id=569): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$eJzs3E1oXNUeAPD/nXz26zXvvb6+176+Z2oVg8WkTavNQpCKggsFsYK6DElaatNGmhRsqTIFqUspuBeXbl24VTdFXAlu61KQQpFu2griyJ25dzIzmUmaSTJjmt8Pbuace2fuOeeee+6ce07mBrBlDad/kkr4VkTsjohC4xuGKy/3716denD36lQUS6VTvyblj91L45lsN7Eji4wUIgofJYsbasxfvnJucnZ25mIWH1s4/97Y/OUrz5wdzNZMTCS9bRaqSXppue7t/3DuwL5X3rnx2lR1z3lqteVYL8Mx3CwrZU+ud2Jdtqsm3Ha90XHp+Z9WV1+5/e+Onliu8oodzBmw0UqlUmmg9eZiqdG1JWuATSsGu50DoDvyL/r0/jdfmnUE+jem+9F1d05WboDSct/PlojHyivzcZC+hvvb9TQcEW8Xf/ssXWKDxiEAAGp9czLvCTb0/4YqMyO/X7r5Qvr6t2wOZSgi/h4R/4iIf0bEnoj4V0TsjYh/R8R/GvbfExGlZdIfbohX069OQhVur1NRm0r7f89nc1vpsjj3VQ0N9WSxXRF5h3nmSHZMRqJv4PTZ2Zmjy6Tx7Us/ftJqW23/L13SPOR9wSwft3sbBuimJxcm2yvtUneuRezvXSx/pf+b9EYk1ZmAJCL2RcT+Vex3qCZ89ukvDlQjffXvW7n8ZaWm82jrMM9U+jziqUr9F6Na/qibREzq5ifPT56ZOTNzYXxi4vixoyeeG392bDBmZ46MpWfBkaZpfP/D9ddbpb9i+b/6ufEjL5/4+lTWstYurf/tNed/5PO3i+UfSiKS6nzt/OrTuP7Txy3vado9//uTN8vh/L70/cmFhYtHI/qTV5euH1/8bB5PX6NYKf/Iocbzv5xu+RqXH4n/RkR6Ev8vIv4flTvENO8HI+LxiDi0TPm/e/GJd9sv/8ZKyz8d9eWv1Hxd/S/O17cKJNncYN2m/kgDPecO3nrQ4uLxcPV/vBwaydY0v/4ldZeIVjnNv+3SNX+s+egBAADA5lCIiJ01Y0k7o1AYHa2MAe2J7YXZufmFw6fnLl2YTrdFDEVfIR/pqowH9yX5+OdQTXy8IX4sGzf+tGdbOT46NTc73dWSAzvKbT4pjEa81VPT/lO/rM8QM/BX5vdasHUt1/7TTvzeGx3MDNBRD//9f/ODDc0I0HE17b/VL/yLbfzfF7AJPPT3f9LyeTbAI2PlB/0YM4TNr6Qtw5a2qvZ/2EMA4VHSG29Uw4Wu5gToNP1/2JJW/F3/mgKlgeabBmPpm2Nw+R32RHvZ2NYkra4E0p5VV1Lf1s6n8omelu+Jwup2OBD1a/rbrNPTazwaxYvzZ/Yunvz5s0XWeJxL2f/Kr3cNftmRdtos0PFLEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb4MwAA///GJdfC") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000280)=""/5, 0x0, 0x0, 0x10004, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.912129524s ago: executing program 0 (id=571): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$eJzs3E1oXNUeAPD/nXz26zXvvb6+176+Z2oVg8WkTavNQpCKggsFsYK6DElaatNGmhRsqTIFqUspuBeXbl24VTdFXAlu61KQQpFu2griyJ25dzIzmUmaSTJjmt8Pbuace2fuOeeee+6ce07mBrBlDad/kkr4VkTsjohC4xuGKy/3716denD36lQUS6VTvyblj91L45lsN7Eji4wUIgofJYsbasxfvnJucnZ25mIWH1s4/97Y/OUrz5wdzNZMTCS9bRaqSXppue7t/3DuwL5X3rnx2lR1z3lqteVYL8Mx3CwrZU+ud2Jdtqsm3Ha90XHp+Z9WV1+5/e+Onliu8oodzBmw0UqlUmmg9eZiqdG1JWuATSsGu50DoDvyL/r0/jdfmnUE+jem+9F1d05WboDSct/PlojHyivzcZC+hvvb9TQcEW8Xf/ssXWKDxiEAAGp9czLvCTb0/4YqMyO/X7r5Qvr6t2wOZSgi/h4R/4iIf0bEnoj4V0TsjYh/R8R/GvbfExGlZdIfbohX069OQhVur1NRm0r7f89nc1vpsjj3VQ0N9WSxXRF5h3nmSHZMRqJv4PTZ2Zmjy6Tx7Us/ftJqW23/L13SPOR9wSwft3sbBuimJxcm2yvtUneuRezvXSx/pf+b9EYk1ZmAJCL2RcT+Vex3qCZ89ukvDlQjffXvW7n8ZaWm82jrMM9U+jziqUr9F6Na/qibREzq5ifPT56ZOTNzYXxi4vixoyeeG392bDBmZ46MpWfBkaZpfP/D9ddbpb9i+b/6ufEjL5/4+lTWstYurf/tNed/5PO3i+UfSiKS6nzt/OrTuP7Txy3vado9//uTN8vh/L70/cmFhYtHI/qTV5euH1/8bB5PX6NYKf/Iocbzv5xu+RqXH4n/RkR6Ev8vIv4flTvENO8HI+LxiDi0TPm/e/GJd9sv/8ZKyz8d9eWv1Hxd/S/O17cKJNncYN2m/kgDPecO3nrQ4uLxcPV/vBwaydY0v/4ldZeIVjnNv+3SNX+s+egBAADA5lCIiJ01Y0k7o1AYHa2MAe2J7YXZufmFw6fnLl2YTrdFDEVfIR/pqowH9yX5+OdQTXy8IX4sGzf+tGdbOT46NTc73dWSAzvKbT4pjEa81VPT/lO/rM8QM/BX5vdasHUt1/7TTvzeGx3MDNBRD//9f/ODDc0I0HE17b/VL/yLbfzfF7AJPPT3f9LyeTbAI2PlB/0YM4TNr6Qtw5a2qvZ/2EMA4VHSG29Uw4Wu5gToNP1/2JJW/F3/mgKlgeabBmPpm2Nw+R32RHvZ2NYkra4E0p5VV1Lf1s6n8omelu+Jwup2OBD1a/rbrNPTazwaxYvzZ/Yunvz5s0XWeJxL2f/Kr3cNftmRdtos0PFLEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb4MwAA///GJdfC") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="184504006800000000000000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.720815227s ago: executing program 3 (id=573): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000005c0)={[{@nolazytime}, {}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r3 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000040)={0x0, 0x3634}) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000000000900010073797a30"], 0xc8}}, 0x0) 2.48394048s ago: executing program 0 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500002000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x10000}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000140)={0x0, 0xfec9, 0x2, 0x1, 0xeb}, &(0x7f0000000040), &(0x7f0000000280)) 2.410870052s ago: executing program 1 (id=580): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="184504006800000000000000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.409851742s ago: executing program 3 (id=581): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$eJzs3E1oXNUeAPD/nXz26zXvvb6+176+Z2oVg8WkTavNQpCKggsFsYK6DElaatNGmhRsqTIFqUspuBeXbl24VTdFXAlu61KQQpFu2griyJ25dzIzmUmaSTJjmt8Pbuace2fuOeeee+6ce07mBrBlDad/kkr4VkTsjohC4xuGKy/3716denD36lQUS6VTvyblj91L45lsN7Eji4wUIgofJYsbasxfvnJucnZ25mIWH1s4/97Y/OUrz5wdzNZMTCS9bRaqSXppue7t/3DuwL5X3rnx2lR1z3lqteVYL8Mx3CwrZU+ud2Jdtqsm3Ha90XHp+Z9WV1+5/e+Onliu8oodzBmw0UqlUmmg9eZiqdG1JWuATSsGu50DoDvyL/r0/jdfmnUE+jem+9F1d05WboDSct/PlojHyivzcZC+hvvb9TQcEW8Xf/ssXWKDxiEAAGp9czLvCTb0/4YqMyO/X7r5Qvr6t2wOZSgi/h4R/4iIf0bEnoj4V0TsjYh/R8R/GvbfExGlZdIfbohX069OQhVur1NRm0r7f89nc1vpsjj3VQ0N9WSxXRF5h3nmSHZMRqJv4PTZ2Zmjy6Tx7Us/ftJqW23/L13SPOR9wSwft3sbBuimJxcm2yvtUneuRezvXSx/pf+b9EYk1ZmAJCL2RcT+Vex3qCZ89ukvDlQjffXvW7n8ZaWm82jrMM9U+jziqUr9F6Na/qibREzq5ifPT56ZOTNzYXxi4vixoyeeG392bDBmZ46MpWfBkaZpfP/D9ddbpb9i+b/6ufEjL5/4+lTWstYurf/tNed/5PO3i+UfSiKS6nzt/OrTuP7Txy3vado9//uTN8vh/L70/cmFhYtHI/qTV5euH1/8bB5PX6NYKf/Iocbzv5xu+RqXH4n/RkR6Ev8vIv4flTvENO8HI+LxiDi0TPm/e/GJd9sv/8ZKyz8d9eWv1Hxd/S/O17cKJNncYN2m/kgDPecO3nrQ4uLxcPV/vBwaydY0v/4ldZeIVjnNv+3SNX+s+egBAADA5lCIiJ01Y0k7o1AYHa2MAe2J7YXZufmFw6fnLl2YTrdFDEVfIR/pqowH9yX5+OdQTXy8IX4sGzf+tGdbOT46NTc73dWSAzvKbT4pjEa81VPT/lO/rM8QM/BX5vdasHUt1/7TTvzeGx3MDNBRD//9f/ODDc0I0HE17b/VL/yLbfzfF7AJPPT3f9LyeTbAI2PlB/0YM4TNr6Qtw5a2qvZ/2EMA4VHSG29Uw4Wu5gToNP1/2JJW/F3/mgKlgeabBmPpm2Nw+R32RHvZ2NYkra4E0p5VV1Lf1s6n8omelu+Jwup2OBD1a/rbrNPTazwaxYvzZ/Yunvz5s0XWeJxL2f/Kr3cNftmRdtos0PFLEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb4MwAA///GJdfC") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000280)=""/5, 0x0, 0x0, 0x10004, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.267892314s ago: executing program 2 (id=583): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) (fail_nth: 2) 2.061572647s ago: executing program 1 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.061123887s ago: executing program 2 (id=585): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) 2.032619708s ago: executing program 3 (id=587): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0x301, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000040)=""/103, 0x67}], 0x1000000000000212, 0xc002a0, 0xcbea) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000380)={r3, 0xfff, 0x9}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") pwrite64(0xffffffffffffffff, &(0x7f0000000280)='2', 0x1, 0x8080c64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.761421562s ago: executing program 2 (id=588): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0xa) unshare(0x6a040000) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTATFS(r0, &(0x7f0000000600)={0x43, 0x9, 0x1, {0x2, 0x3ff, 0x2, 0x4e36, 0x10001, 0x6, 0x9, 0x80, 0xeb}}, 0x43) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = syz_clone(0xa000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r3, 0x0) get_robust_list(r3, &(0x7f0000000380)=&(0x7f0000000340), &(0x7f00000003c0)=0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r5 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}}, 0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00"/119], 0x88}, 0x1, 0x7}, 0x0) (fail_nth: 3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) fcntl$dupfd(r8, 0x0, r8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000300), 0x7, 0x200000) 1.649161984s ago: executing program 2 (id=591): socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x5, 0x8001}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400050990e30824f91ed5d69f1a22b0000100039042abd7000eaffffff000003e40ded756289e3fb38fa38ef71f60445d81fcf761ecfd97bb79bb708e6c1e5e3d2f09cbe09edad7245b923c7dfa7d8281511def3614cbbdab38e8c3185578d93e64b911d254b7370e3352144495b62f4aa30d012624aef", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028006000e000010000008000300ac1414bb"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r5 = getpgrp(0xffffffffffffffff) migrate_pages(r5, 0x4, &(0x7f0000000040)=0xa5, &(0x7f0000000380)=0xb) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x401, 0x7, 0xa, 0x60, 0xa0}, {0x800, 0x80000001, 0x993b, 0xfffffffffffffff7, 0x80000000, 0x7fffffff, 0x9, 0x8}, {0xffffffffffffffff, 0x9, 0x0, 0x3}, 0x1, 0x6e6bb4, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x4d5, 0x6c}, 0xa, @in=@loopback, 0x3505, 0x3, 0x5e0cb218ac1489d9, 0x8, 0x8, 0xffff, 0x7}}, 0xe8) 1.648754174s ago: executing program 4 (id=592): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = inotify_init() r3 = creat(0x0, 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0xad}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x2, &(0x7f0000000180), 0xfe) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a0000000000000000000000000000000004000000000001"], 0x88}, 0x1, 0x7}, 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r9}, 0x18) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$rds(r10, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r10, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timerfd_gettime(r3, &(0x7f00000001c0)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.648280984s ago: executing program 3 (id=593): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = inotify_init() r3 = creat(0x0, 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0xad}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x2, &(0x7f0000000180), 0xfe) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00"/119], 0x88}, 0x1, 0x7}, 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r9}, 0x18) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmsg$rds(r10, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r10, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timerfd_gettime(r3, &(0x7f00000001c0)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.615509834s ago: executing program 2 (id=594): bpf$MAP_CREATE(0x0, 0x0, 0x48) symlink(&(0x7f0000000780)='./file0/../file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800ad000085000000b6000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfffff92a, @loopback, 0xfffffffa}}, 0x8, 0x0, 0x7, 0x9, 0x1}, &(0x7f0000000140)=0x98) chroot(&(0x7f0000000000)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = gettid() r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$inet6_sctp(0xa, 0x5, 0x84) fsync(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = msgget(0x0, 0x20) msgctl$IPC_RMID(r4, 0x0) r5 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000dde000/0x4000)=nil) shmat(r5, &(0x7f0000ffb000/0x3000)=nil, 0x2000) r6 = dup(0xffffffffffffffff) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[], 0x53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) 1.614136614s ago: executing program 0 (id=595): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="184504006800000000000000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000280)=""/5, 0x0, 0x0, 0x10004, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) alarm(0x81) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.069981603s ago: executing program 0 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r0) (fail_nth: 2) 981.231934ms ago: executing program 3 (id=597): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000280)=""/5, 0x0, 0x0, 0x10004, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 980.676674ms ago: executing program 4 (id=598): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) 755.532128ms ago: executing program 0 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0xd5b65745a5d4b961, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x1, 0xb}, 0x2, 0x0, 0x2, 0x866b0e1552d3324f, 0x2, 0x82, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000700)) lstat(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) stat(0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe69, 0x0, &(0x7f0000000040), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) getresgid(0x0, &(0x7f0000000140)=0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000200)='.\x02\x00', 0x30814, &(0x7f0000000580)=ANY=[@ANYRES8=r4, @ANYRESHEX, @ANYRES32=r4, @ANYRES8=0x0, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x20a, &(0x7f0000000c80)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r7, 0x0, 0x0) close(r7) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',fscache,cache=n']) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 754.851438ms ago: executing program 2 (id=600): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) tgkill(0x0, 0x0, 0x1000021) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x0, 0x5, 0x0, 0x9, 0x10000}}, {0x4}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r3 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x208c81, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') mkdirat(r4, &(0x7f0000002040)='./bus\x00', 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32b2d5c0e79cbeec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) read$rfkill(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000010104000000000000000005000000a0000180060003400002000006000340000400002c00018014000300fc01000000000000000000000000000114000400ff0100000000080000000000000000010c0002800540010021000000060003400003000006000340000200000c00028005000100880000000c00028005000100210000002c00018014000300ff01000000000000000000000000000114000400ff010000000000000000000000000001"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x40880) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r8, &(0x7f0000000700)=[{&(0x7f0000000000)=""/84, 0x54}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 754.302908ms ago: executing program 4 (id=601): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) close(r0) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180), 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x6}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (fail_nth: 2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) 684.244489ms ago: executing program 1 (id=602): r0 = socket(0x10, 0x3, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050400000400000000000700000033", 0xfffffffffffffdfc, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = shmget$private(0x0, 0x3000, 0x28d, &(0x7f00003e4000/0x3000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x0, 0xff7e, 0x0, 0xffffffffffffffff, 0x2280}) setuid(0xee01) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0xc, r7, 0x21}, 0x10) shmctl$IPC_STAT(r1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x8, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0x14, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200080000004407020000f8ffffffb703000008000000b704f8000000000085000000c3ec0000952d114a0d46dbc09bf8403e26088a740b57e2a3ac434d33ef7ff0baebd4999ffe79aefaaf8c4768dbdbba6d15467fb79abc7d9c986778728d6c146842c9069bfb359c99b1fcea472a4fa86a40eb96ca0104d92a02d5ebe557380f70bbb54cd2bbdfd9df6e3910a29b886deea2015b557e27bd7fa01cb9852c61dc6a1996b99074de7d3f6357501c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r10, 0x0, 0xf7}, 0x18) unlink(&(0x7f0000000180)='./file1\x00') 609.32555ms ago: executing program 1 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xf}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x0, 0x0, 0x5, 0x800000007, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 555.457941ms ago: executing program 4 (id=604): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r0, 0x301, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000040)=""/103, 0x67}], 0x1000000000000212, 0xc002a0, 0xcbea) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000380)={r3, 0xfff, 0x9}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") pwrite64(0xffffffffffffffff, &(0x7f0000000280)='2', 0x1, 0x8080c64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 323.894875ms ago: executing program 4 (id=605): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001f80)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) (fail_nth: 2) 256.290586ms ago: executing program 1 (id=606): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0x1, 0x260, &(0x7f0000000980)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x101}, 0x18) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_RMID(r2, 0x0) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 255.651426ms ago: executing program 3 (id=607): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="184504006800000000000000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000280)=""/5, 0x0, 0x0, 0x10004, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) alarm(0x81) bpf$MAP_CREATE(0x0, 0x0, 0x50) 203.981426ms ago: executing program 4 (id=608): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffca8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x200140) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000280)=0x7) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8f15e151d2e2b248}, 0xc, &(0x7f0000000100)={&(0x7f0000001900)={0x704, 0x3e, 0x200, 0x70bd25, 0x25dfdbff, {0x16}, [@typed={0x4, 0xe2}, @nested={0x30, 0x12c, 0x0, 0x1, [@nested={0x4, 0xcb}, @typed={0x8, 0x102, 0x0, 0x0, @u32=0x7}, @typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x107}, @typed={0x8, 0x6e, 0x0, 0x0, @fd=r3}]}, @nested={0x62, 0x0, 0x0, 0x1, [@nested={0x4, 0xf9}, @generic="52ad8f6e8176c4bb220f790b4a830a61eb7a7fc67be0ddbb4dbc507ebd85c123092d49c61d27ce74720ae896da0b539a10ced6fe04660e1ffc3ae4157b8c9d3bef57931dcd682b0a8b9d", @typed={0x8, 0xba, 0x0, 0x0, @u32=0x169e}, @nested={0x4, 0x90}, @nested={0x4, 0x10e}]}, @nested={0x4, 0x2e}, @generic="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"]}, 0x704}, 0x1, 0x0, 0x0, 0x4890}, 0x8000) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 0s ago: executing program 1 (id=609): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000001140)=ANY=[@ANYRES8=0x0, @ANYBLOB="dc284539a2b560e2f41df26c9d226d3a37186fb09a9356f48975", @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x529, &(0x7f0000001500)="$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") fstatfs(r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xda27, 0x48000) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000380)='rxrpc\x00', &(0x7f00000003c0)=@secondary) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x34}}, 0x41) add_key$keyring(&(0x7f0000000340), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{}, {0x1d}]}, 0x10) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x100008, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000040)=')', &(0x7f0000000080)=""/59}, 0x20) setitimer(0x1, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0xf) r6 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") futimesat(r6, &(0x7f0000000000)='./file1\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@noswap}]}) kernel console output (not intermixed with test programs): detected capacity change from 0 to 512 [ 41.496942][ T3925] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.137: corrupted xattr block 95: invalid header [ 41.534606][ T3925] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.137: bg 0: block 7: invalid block bitmap [ 41.547429][ T3925] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 41.557204][ T3925] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.137: corrupted xattr block 95: invalid header [ 41.579379][ T3925] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 41.588438][ T3925] EXT4-fs (loop4): 1 orphan inode deleted [ 41.610890][ T3925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.611311][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 41.652428][ T3947] loop2: detected capacity change from 0 to 512 [ 41.670175][ T3949] lo speed is unknown, defaulting to 1000 [ 41.678072][ T3947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.687958][ T3947] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 41.709816][ T3950] loop1: detected capacity change from 0 to 512 [ 41.729416][ T3950] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.145: corrupted xattr block 95: invalid header [ 41.743250][ T3947] lo speed is unknown, defaulting to 1000 [ 41.751843][ T3950] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.145: bg 0: block 7: invalid block bitmap [ 41.764360][ T3950] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 41.773322][ T3950] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.145: corrupted xattr block 95: invalid header [ 41.786964][ T3950] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 41.796875][ T3950] EXT4-fs (loop1): 1 orphan inode deleted [ 41.804887][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.804933][ T3950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.959014][ T3959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 41.961343][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.220177][ T3959] syz.4.148 (3959) used greatest stack depth: 10576 bytes left [ 42.747713][ T3966] lo speed is unknown, defaulting to 1000 [ 42.755184][ T3969] lo speed is unknown, defaulting to 1000 [ 42.885812][ T3976] loop3: detected capacity change from 0 to 128 [ 42.963422][ T3976] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.060876][ T3982] loop4: detected capacity change from 0 to 512 [ 43.080459][ T3982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.090334][ T3982] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 43.125715][ T3982] lo speed is unknown, defaulting to 1000 [ 43.279016][ T3976] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.318278][ T3986] loop9: detected capacity change from 0 to 7 [ 43.359629][ T3986] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.483177][ T3986] Buffer I/O error on dev loop9, logical block 0, async page read [ 43.491076][ T3986] loop9: unable to read partition table [ 43.497375][ T3986] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 43.497375][ T3986] ) failed (rc=-5) [ 43.593441][ T3996] lo speed is unknown, defaulting to 1000 [ 43.604985][ T3995] loop4: detected capacity change from 0 to 128 [ 43.620360][ T3995] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.664289][ T4001] loop0: detected capacity change from 0 to 512 [ 43.690832][ T4001] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.159: corrupted xattr block 95: invalid header [ 43.709666][ T3995] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.738853][ T4001] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.159: bg 0: block 7: invalid block bitmap [ 43.753209][ T4001] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 43.769303][ T4001] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.159: corrupted xattr block 95: invalid header [ 43.812304][ T4001] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 43.838950][ T4001] EXT4-fs (loop0): 1 orphan inode deleted [ 43.845202][ T4001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.861037][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.904863][ T4009] loop3: detected capacity change from 0 to 512 [ 43.919935][ T4009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.944687][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.955475][ T4009] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.162: invalid block [ 44.003265][ T4009] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.162: invalid indirect mapped block 4294967295 (level 1) [ 44.028181][ T4017] loop4: detected capacity change from 0 to 2048 [ 44.041046][ T4009] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.162: invalid indirect mapped block 4294967295 (level 1) [ 44.057330][ T4009] EXT4-fs (loop3): 2 truncates cleaned up [ 44.065709][ T4009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.079856][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.094827][ T4017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.149961][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.173692][ T4009] ALSA: seq fatal error: cannot create timer (-19) [ 44.217431][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.283391][ T4035] loop0: detected capacity change from 0 to 8192 [ 44.294489][ T4037] lo speed is unknown, defaulting to 1000 [ 44.334560][ T4039] lo speed is unknown, defaulting to 1000 [ 44.356562][ T4042] loop4: detected capacity change from 0 to 512 [ 44.364375][ T4040] loop3: detected capacity change from 0 to 512 [ 44.376781][ T4042] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.172: corrupted xattr block 95: invalid header [ 44.406527][ T4042] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.172: bg 0: block 7: invalid block bitmap [ 44.419764][ T4040] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.3.171: corrupted xattr block 95: invalid header [ 44.428566][ T4042] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 44.448656][ T4040] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.171: bg 0: block 7: invalid block bitmap [ 44.479693][ T4040] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 44.484998][ T4042] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.172: corrupted xattr block 95: invalid header [ 44.518063][ T4042] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 44.527212][ T4040] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #11: comm syz.3.171: corrupted xattr block 95: invalid header [ 44.527688][ T4042] EXT4-fs (loop4): 1 orphan inode deleted [ 44.562523][ T4040] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 44.577869][ T4042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.587327][ T4040] EXT4-fs (loop3): 1 orphan inode deleted [ 44.605851][ T4040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.714728][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.722176][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.758880][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.766509][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.774925][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.823827][ T4059] loop9: detected capacity change from 0 to 7 [ 44.830708][ T4059] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.840266][ T4059] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.848095][ T4059] loop9: unable to read partition table [ 44.854402][ T4059] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 44.854402][ T4059] ) failed (rc=-5) [ 44.895071][ T4062] loop1: detected capacity change from 0 to 512 [ 44.919321][ T4062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.929826][ T4062] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.179: invalid block [ 44.942382][ T4062] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.179: invalid indirect mapped block 4294967295 (level 1) [ 44.957371][ T4062] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.179: invalid indirect mapped block 4294967295 (level 1) [ 44.972437][ T4062] EXT4-fs (loop1): 2 truncates cleaned up [ 44.982825][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.019897][ T4067] loop3: detected capacity change from 0 to 512 [ 45.033130][ T4067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.042988][ T4067] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 45.085493][ T4062] ALSA: seq fatal error: cannot create timer (-19) [ 45.100936][ T4071] loop0: detected capacity change from 0 to 2048 [ 45.140724][ T4067] lo speed is unknown, defaulting to 1000 [ 45.159196][ T4071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.196539][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.289818][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.299112][ T4066] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.180'. [ 45.308168][ T4066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 45.431546][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.385163][ T4084] lo speed is unknown, defaulting to 1000 [ 46.424427][ T4090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.431941][ T4090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.439970][ T4090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.447387][ T4090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.475097][ T4088] siw: device registration error -23 [ 46.512015][ T4085] lo speed is unknown, defaulting to 1000 [ 46.571225][ T4088] lo speed is unknown, defaulting to 1000 [ 46.579264][ T4093] loop2: detected capacity change from 0 to 512 [ 46.595303][ T4093] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.2.185: corrupted xattr block 95: invalid header [ 46.596512][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 46.596525][ T29] audit: type=1400 audit(1753028352.219:1605): avc: denied { read } for pid=4094 comm="syz.4.186" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.638553][ T29] audit: type=1400 audit(1753028352.219:1606): avc: denied { open } for pid=4094 comm="syz.4.186" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.644019][ T4093] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.185: bg 0: block 7: invalid block bitmap [ 46.688614][ T4093] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 46.697425][ T29] audit: type=1400 audit(1753028352.239:1607): avc: denied { ioctl } for pid=4094 comm="syz.4.186" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.728633][ T4093] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #11: comm syz.2.185: corrupted xattr block 95: invalid header [ 46.757052][ T4092] lo speed is unknown, defaulting to 1000 [ 46.779098][ T4093] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 46.799409][ T4093] EXT4-fs (loop2): 1 orphan inode deleted [ 46.820696][ T4093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.840196][ T4101] loop0: detected capacity change from 0 to 128 [ 46.861292][ T4101] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.873616][ T4101] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.893303][ T4099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 46.985806][ T4108] loop1: detected capacity change from 0 to 512 [ 46.997779][ T4108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.011224][ T4108] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.189: invalid block [ 47.033595][ T4108] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.189: invalid indirect mapped block 4294967295 (level 1) [ 47.079169][ T4108] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.189: invalid indirect mapped block 4294967295 (level 1) [ 47.104938][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.121482][ T4108] EXT4-fs (loop1): 2 truncates cleaned up [ 47.127810][ T4108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.140469][ T29] audit: type=1400 audit(1753028352.769:1608): avc: denied { mounton } for pid=4114 comm="syz.0.192" path="/33/bus" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.177365][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.194297][ T4108] ALSA: seq fatal error: cannot create timer (-19) [ 47.207932][ T29] audit: type=1326 audit(1753028352.829:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 47.231273][ T29] audit: type=1326 audit(1753028352.829:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 47.254650][ T29] audit: type=1326 audit(1753028352.829:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 47.277997][ T29] audit: type=1326 audit(1753028352.829:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 47.301383][ T29] audit: type=1326 audit(1753028352.829:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 47.345869][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.388187][ T4129] loop1: detected capacity change from 0 to 512 [ 47.396716][ T4129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.438454][ T4129] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.196: invalid block [ 47.461096][ T4129] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.196: invalid indirect mapped block 4294967295 (level 1) [ 47.509583][ T4137] loop3: detected capacity change from 0 to 128 [ 47.519568][ T4137] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.532131][ T4129] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.196: invalid indirect mapped block 4294967295 (level 1) [ 47.546439][ T4129] EXT4-fs (loop1): 2 truncates cleaned up [ 47.552530][ T4129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.578887][ T4129] ALSA: seq fatal error: cannot create timer (-19) [ 47.596529][ T29] audit: type=1326 audit(1753028353.209:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4128 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 47.626815][ T4137] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.673073][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.837580][ T4145] loop2: detected capacity change from 0 to 512 [ 47.859288][ T4145] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.869182][ T4145] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 47.915497][ T4145] lo speed is unknown, defaulting to 1000 [ 48.175675][ T4155] lo speed is unknown, defaulting to 1000 [ 48.189823][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.206051][ T4159] lo speed is unknown, defaulting to 1000 [ 48.213203][ T4160] loop4: detected capacity change from 0 to 512 [ 48.225467][ T4160] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.206: corrupted xattr block 95: invalid header [ 48.247280][ T4163] loop0: detected capacity change from 0 to 512 [ 48.250260][ T4160] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.206: bg 0: block 7: invalid block bitmap [ 48.285407][ T4163] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.208: corrupted xattr block 95: invalid header [ 48.297364][ T4160] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 48.318826][ T4160] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.206: corrupted xattr block 95: invalid header [ 48.332620][ T4163] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.208: bg 0: block 7: invalid block bitmap [ 48.333974][ T4160] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 48.383393][ T4160] EXT4-fs (loop4): 1 orphan inode deleted [ 48.385847][ T4163] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 48.389962][ T4160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.398346][ T4163] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.208: corrupted xattr block 95: invalid header [ 48.424635][ T4163] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 48.467249][ T4163] EXT4-fs (loop0): 1 orphan inode deleted [ 48.473656][ T4163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.537000][ T4176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.212'. [ 48.546093][ T4176] netlink: 5575 bytes leftover after parsing attributes in process `syz.2.212'. [ 48.555136][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 48.564247][ T4171] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.210'. [ 48.573342][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 48.584714][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.625662][ T4182] netlink: 132 bytes leftover after parsing attributes in process `syz.4.213'. [ 48.634828][ T4182] netlink: 5575 bytes leftover after parsing attributes in process `syz.4.213'. [ 48.639533][ T4187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 48.643986][ T4182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 48.691399][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.697082][ T4189] loop9: detected capacity change from 0 to 7 [ 48.710752][ T4189] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.741126][ T4189] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.749069][ T4193] bond0: entered promiscuous mode [ 48.749086][ T4193] bond0: entered allmulticast mode [ 48.749233][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.754116][ T4189] loop9: unable to read partition table [ 48.772811][ T4189] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 48.772811][ T4189] ) failed (rc=-5) [ 48.787399][ T4193] bond0 (unregistering): Released all slaves [ 48.812972][ T4197] loop9: detected capacity change from 0 to 7 [ 48.819989][ T4197] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.836432][ T4197] Buffer I/O error on dev loop9, logical block 0, async page read [ 48.844367][ T4197] loop9: unable to read partition table [ 48.855359][ T4196] lo speed is unknown, defaulting to 1000 [ 48.877875][ T4197] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 48.877875][ T4197] ) failed (rc=-5) [ 48.894428][ T4199] loop1: detected capacity change from 0 to 512 [ 48.906281][ T4199] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.908616][ T4203] loop2: detected capacity change from 0 to 128 [ 48.927087][ T4203] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.940061][ T4203] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.975976][ T4199] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 48.995836][ T4199] EXT4-fs (loop1): 1 truncate cleaned up [ 49.005737][ T4196] loop0: detected capacity change from 0 to 512 [ 49.015473][ T4199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.038199][ T4196] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.220: corrupted xattr block 95: invalid header [ 49.040590][ T4199] random: crng reseeded on system resumption [ 49.058347][ T4196] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.220: bg 0: block 7: invalid block bitmap [ 49.077629][ T4196] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 49.086547][ T4210] loop4: detected capacity change from 0 to 512 [ 49.087189][ T4196] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.220: corrupted xattr block 95: invalid header [ 49.106746][ T4196] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 49.114091][ T4210] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.116174][ T4196] EXT4-fs (loop0): 1 orphan inode deleted [ 49.127533][ T4210] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 49.159599][ T4210] EXT4-fs (loop4): 1 truncate cleaned up [ 49.176514][ T4210] random: crng reseeded on system resumption [ 49.225638][ T4217] ALSA: seq fatal error: cannot create timer (-19) [ 49.304298][ T4228] loop2: detected capacity change from 0 to 512 [ 49.324478][ T4228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.336832][ T4228] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 49.354639][ T4228] EXT4-fs (loop2): 1 truncate cleaned up [ 49.363916][ T4228] random: crng reseeded on system resumption [ 49.890701][ T4269] bond0: entered promiscuous mode [ 49.895810][ T4269] bond0: entered allmulticast mode [ 49.908399][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.920661][ T4269] bond0 (unregistering): Released all slaves [ 49.944928][ T4276] loop9: detected capacity change from 0 to 7 [ 49.959931][ T4276] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.978127][ T4276] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.986075][ T4276] loop9: unable to read partition table [ 49.992098][ T4276] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 49.992098][ T4276] ) failed (rc=-5) [ 50.060247][ T4281] loop4: detected capacity change from 0 to 1024 [ 50.113672][ T4289] lo speed is unknown, defaulting to 1000 [ 50.164137][ T4294] loop1: detected capacity change from 0 to 512 [ 50.172847][ T4294] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.251: corrupted xattr block 95: invalid header [ 50.187000][ T4294] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.251: bg 0: block 7: invalid block bitmap [ 50.200947][ T4294] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 50.209949][ T4294] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.251: corrupted xattr block 95: invalid header [ 50.223881][ T4294] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 50.232965][ T4294] EXT4-fs (loop1): 1 orphan inode deleted [ 50.475617][ T4315] bond0: entered promiscuous mode [ 50.480916][ T4315] bond0: entered allmulticast mode [ 50.486412][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.501959][ T4315] bond0 (unregistering): Released all slaves [ 50.509899][ T4319] loop9: detected capacity change from 0 to 7 [ 50.516257][ T4319] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.535605][ T4319] Buffer I/O error on dev loop9, logical block 0, async page read [ 50.543599][ T4319] loop9: unable to read partition table [ 50.550920][ T4319] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 50.550920][ T4319] ) failed (rc=-5) [ 50.679082][ T4331] loop4: detected capacity change from 0 to 512 [ 50.746362][ T4331] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.265: corrupted xattr block 95: invalid header [ 50.768883][ T4331] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.265: bg 0: block 7: invalid block bitmap [ 50.789524][ T4331] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 50.800655][ T4331] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.265: corrupted xattr block 95: invalid header [ 50.829214][ T4331] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 50.850795][ T4341] siw: device registration error -23 [ 50.869337][ T4341] lo speed is unknown, defaulting to 1000 [ 51.065938][ T4331] EXT4-fs (loop4): 1 orphan inode deleted [ 51.220300][ T4347] lo speed is unknown, defaulting to 1000 [ 51.283980][ T4351] loop4: detected capacity change from 0 to 512 [ 51.301132][ T4351] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.270: corrupted xattr block 95: invalid header [ 51.316143][ T4351] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.270: bg 0: block 7: invalid block bitmap [ 51.328853][ T4351] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 51.337681][ T4351] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.270: corrupted xattr block 95: invalid header [ 51.358143][ T4351] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 51.367686][ T4351] EXT4-fs (loop4): 1 orphan inode deleted [ 51.405737][ T4359] loop9: detected capacity change from 0 to 7 [ 51.422334][ T4359] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.445235][ T4359] Buffer I/O error on dev loop9, logical block 0, async page read [ 51.453176][ T4359] loop9: unable to read partition table [ 51.459055][ T4359] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 51.459055][ T4359] ) failed (rc=-5) [ 51.527459][ T4366] bond1: entered promiscuous mode [ 51.532574][ T4366] bond1: entered allmulticast mode [ 51.555305][ T4370] loop1: detected capacity change from 0 to 512 [ 51.561781][ T4366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.569425][ T4371] loop9: detected capacity change from 0 to 7 [ 51.575759][ T4371] loop9: unable to read partition table [ 51.575989][ T4370] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.585214][ T4373] loop4: detected capacity change from 0 to 128 [ 51.598724][ T4370] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 51.598877][ T4371] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 51.598877][ T4371] ) failed (rc=-5) [ 51.613643][ T4370] EXT4-fs (loop1): 1 truncate cleaned up [ 51.636037][ T4373] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.669899][ T4366] bond1 (unregistering): Released all slaves [ 51.685501][ T4370] random: crng reseeded on system resumption [ 51.855651][ T4385] loop0: detected capacity change from 0 to 512 [ 51.863282][ T4385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.882826][ T4385] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.282: invalid block [ 51.901443][ T4385] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.282: invalid indirect mapped block 4294967295 (level 1) [ 51.916470][ T4388] loop4: detected capacity change from 0 to 512 [ 51.920866][ T4385] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.282: invalid indirect mapped block 4294967295 (level 1) [ 51.937235][ T4385] EXT4-fs (loop0): 2 truncates cleaned up [ 51.944338][ T4388] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.283: corrupted xattr block 95: invalid header [ 52.021019][ T4393] ALSA: seq fatal error: cannot create timer (-19) [ 52.034295][ T4388] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.283: bg 0: block 7: invalid block bitmap [ 52.046734][ T4388] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 52.060664][ T29] kauditd_printk_skb: 1510 callbacks suppressed [ 52.060679][ T29] audit: type=1326 audit(1753028357.659:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 52.066508][ T4396] loop3: detected capacity change from 0 to 2048 [ 52.066944][ T29] audit: type=1326 audit(1753028357.659:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 52.119912][ T29] audit: type=1326 audit(1753028357.659:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 52.143244][ T29] audit: type=1326 audit(1753028357.659:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 52.166736][ T29] audit: type=1326 audit(1753028357.659:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 52.189938][ T29] audit: type=1326 audit(1753028357.659:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 52.213328][ T29] audit: type=1326 audit(1753028357.659:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 52.236615][ T29] audit: type=1326 audit(1753028357.659:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4384 comm="syz.0.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 52.312911][ T4404] siw: device registration error -23 [ 52.331072][ T4404] lo speed is unknown, defaulting to 1000 [ 52.626709][ T4407] __nla_validate_parse: 9 callbacks suppressed [ 52.626726][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 52.662324][ T4388] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.283: corrupted xattr block 95: invalid header [ 52.690501][ T4388] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 52.699685][ T4388] EXT4-fs (loop4): 1 orphan inode deleted [ 52.702220][ T4412] loop9: detected capacity change from 0 to 7 [ 52.733768][ T4412] loop9: unable to read partition table [ 52.756241][ T4412] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 52.756241][ T4412] ) failed (rc=-5) [ 52.771618][ T4415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 52.887793][ T4428] loop4: detected capacity change from 0 to 512 [ 52.909708][ T4428] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.295: corrupted xattr block 95: invalid header [ 52.925149][ T4434] loop3: detected capacity change from 0 to 512 [ 52.932962][ T4434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.948940][ T4428] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.295: bg 0: block 7: invalid block bitmap [ 52.993075][ T4434] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.297: invalid block [ 53.004982][ T4428] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 53.005296][ T4434] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.297: invalid indirect mapped block 4294967295 (level 1) [ 53.028332][ T4434] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.297: invalid indirect mapped block 4294967295 (level 1) [ 53.042965][ T4434] EXT4-fs (loop3): 2 truncates cleaned up [ 53.058766][ T4428] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.295: corrupted xattr block 95: invalid header [ 53.076891][ T4441] loop0: detected capacity change from 0 to 512 [ 53.106721][ T4428] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 53.117664][ T4441] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.299: corrupted xattr block 95: invalid header [ 53.138596][ T4428] EXT4-fs (loop4): 1 orphan inode deleted [ 53.145265][ T4441] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.299: bg 0: block 7: invalid block bitmap [ 53.165966][ T4441] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 53.198012][ T4441] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.299: corrupted xattr block 95: invalid header [ 53.219647][ T29] audit: type=1326 audit(1753028358.839:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e7b2e9a9 code=0x7ffc0000 [ 53.242998][ T29] audit: type=1326 audit(1753028358.839:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e7b2e9a9 code=0x7ffc0000 [ 53.285290][ T4452] loop4: detected capacity change from 0 to 512 [ 53.292031][ T4441] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 53.292638][ T4452] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.309654][ T4441] EXT4-fs (loop0): 1 orphan inode deleted [ 53.345860][ T4457] loop3: detected capacity change from 0 to 512 [ 53.358316][ T4452] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 53.372635][ T4457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.374313][ T4459] loop9: detected capacity change from 0 to 7 [ 53.387368][ T4459] loop9: unable to read partition table [ 53.393132][ T4459] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 53.393132][ T4459] ) failed (rc=-5) [ 53.409476][ T4462] loop2: detected capacity change from 0 to 128 [ 53.411324][ T4452] EXT4-fs (loop4): 1 truncate cleaned up [ 53.432418][ T4452] random: crng reseeded on system resumption [ 53.446076][ T4457] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.305: invalid block [ 53.458431][ T4457] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.305: invalid indirect mapped block 4294967295 (level 1) [ 53.473183][ T4457] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.305: invalid indirect mapped block 4294967295 (level 1) [ 53.489233][ T4457] EXT4-fs (loop3): 2 truncates cleaned up [ 53.524203][ T4457] ALSA: seq fatal error: cannot create timer (-19) [ 53.630100][ T4474] loop3: detected capacity change from 0 to 1024 [ 53.647188][ T4485] loop4: detected capacity change from 0 to 512 [ 53.662281][ T4485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.715091][ T4485] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.317: invalid block [ 53.743276][ T4485] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.317: invalid indirect mapped block 4294967295 (level 1) [ 53.759190][ T4485] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.317: invalid indirect mapped block 4294967295 (level 1) [ 53.773623][ T4485] EXT4-fs (loop4): 2 truncates cleaned up [ 53.803489][ T4485] ALSA: seq fatal error: cannot create timer (-19) [ 53.871479][ T4503] loop0: detected capacity change from 0 to 512 [ 53.892156][ T4503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.919776][ T4503] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.322: invalid block [ 53.952383][ T4503] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.322: invalid indirect mapped block 4294967295 (level 1) [ 53.979893][ T4503] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.322: invalid indirect mapped block 4294967295 (level 1) [ 53.994256][ T4503] EXT4-fs (loop0): 2 truncates cleaned up [ 54.036849][ T4503] ALSA: seq fatal error: cannot create timer (-19) [ 54.085075][ T4512] loop0: detected capacity change from 0 to 512 [ 54.102056][ T4512] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.325: corrupted xattr block 95: invalid header [ 54.118913][ T4512] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.325: bg 0: block 7: invalid block bitmap [ 54.142790][ T4512] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 54.163718][ T4512] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.325: corrupted xattr block 95: invalid header [ 54.188899][ T4512] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 54.198021][ T4512] EXT4-fs (loop0): 1 orphan inode deleted [ 54.241706][ T4524] loop0: detected capacity change from 0 to 512 [ 54.260761][ T4524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.320280][ T4524] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.330: invalid block [ 54.327010][ T4533] loop4: detected capacity change from 0 to 128 [ 54.347676][ T4524] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.330: invalid indirect mapped block 4294967295 (level 1) [ 54.385077][ T4538] loop1: detected capacity change from 0 to 512 [ 54.393433][ T4538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.410668][ T4524] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.330: invalid indirect mapped block 4294967295 (level 1) [ 54.425433][ T4538] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.336: invalid block [ 54.458637][ T4538] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.336: invalid indirect mapped block 4294967295 (level 1) [ 54.475444][ T4524] EXT4-fs (loop0): 2 truncates cleaned up [ 54.520010][ T4538] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.336: invalid indirect mapped block 4294967295 (level 1) [ 54.536555][ T4538] EXT4-fs (loop1): 2 truncates cleaned up [ 54.564011][ T4524] ALSA: seq fatal error: cannot create timer (-19) [ 54.613148][ T4538] ALSA: seq fatal error: cannot create timer (-19) [ 54.674471][ T4556] lo speed is unknown, defaulting to 1000 [ 54.751964][ T4570] loop4: detected capacity change from 0 to 512 [ 54.773163][ T4570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.784284][ T4570] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.346: invalid block [ 54.796702][ T4570] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.346: invalid indirect mapped block 4294967295 (level 1) [ 54.812823][ T4570] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.346: invalid indirect mapped block 4294967295 (level 1) [ 54.839333][ T4570] EXT4-fs (loop4): 2 truncates cleaned up [ 54.864792][ T4570] ALSA: seq fatal error: cannot create timer (-19) [ 54.873321][ T4577] loop3: detected capacity change from 0 to 512 [ 54.892836][ T4577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.915579][ T4577] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.349: invalid block [ 54.950511][ T4577] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.349: invalid indirect mapped block 4294967295 (level 1) [ 54.964742][ T4577] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.349: invalid indirect mapped block 4294967295 (level 1) [ 54.985926][ T4577] EXT4-fs (loop3): 2 truncates cleaned up [ 55.002872][ T4577] ALSA: seq fatal error: cannot create timer (-19) [ 55.048673][ T4590] netlink: 7 bytes leftover after parsing attributes in process `syz.4.352'. [ 55.064741][ T4590] netlink: 7 bytes leftover after parsing attributes in process `syz.4.352'. [ 55.109357][ T4590] bond0: entered promiscuous mode [ 55.114437][ T4590] bond0: entered allmulticast mode [ 55.119860][ T4590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.129562][ T4590] bond0 (unregistering): Released all slaves [ 55.156318][ T4597] loop9: detected capacity change from 0 to 7 [ 55.168607][ T4597] buffer_io_error: 6 callbacks suppressed [ 55.168619][ T4597] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.186864][ T4592] loop3: detected capacity change from 0 to 2048 [ 55.198767][ T4597] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.206649][ T4597] loop9: unable to read partition table [ 55.218657][ T4597] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 55.218657][ T4597] ) failed (rc=-5) [ 55.335715][ T4615] loop4: detected capacity change from 0 to 1024 [ 55.359435][ T4617] loop9: detected capacity change from 0 to 7 [ 55.374115][ T4617] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.383992][ T4617] Buffer I/O error on dev loop9, logical block 0, async page read [ 55.391842][ T4617] loop9: unable to read partition table [ 55.397874][ T4617] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 55.397874][ T4617] ) failed (rc=-5) [ 55.561442][ T4636] loop4: detected capacity change from 0 to 1024 [ 56.359020][ T4623] siw: device registration error -23 [ 56.375332][ T4623] lo speed is unknown, defaulting to 1000 [ 56.527597][ T4648] loop0: detected capacity change from 0 to 2048 [ 56.634356][ T4671] loop0: detected capacity change from 0 to 128 [ 56.765328][ T4673] lo speed is unknown, defaulting to 1000 [ 56.834780][ T4671] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.042931][ T4678] loop4: detected capacity change from 0 to 512 [ 57.051161][ T4678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.064762][ T4680] loop2: detected capacity change from 0 to 512 [ 57.080504][ T4680] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.2.381: corrupted xattr block 95: invalid header [ 57.081081][ T4678] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.380: invalid block [ 57.094522][ T4680] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.381: bg 0: block 7: invalid block bitmap [ 57.106602][ T4678] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.380: invalid indirect mapped block 4294967295 (level 1) [ 57.133104][ T4678] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.380: invalid indirect mapped block 4294967295 (level 1) [ 57.147784][ T4678] EXT4-fs (loop4): 2 truncates cleaned up [ 57.148984][ T4680] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 57.163110][ T4680] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #11: comm syz.2.381: corrupted xattr block 95: invalid header [ 57.181011][ T4689] loop9: detected capacity change from 0 to 7 [ 57.187436][ T4689] Buffer I/O error on dev loop9, logical block 0, async page read [ 57.196892][ T4680] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 57.208646][ T4689] Buffer I/O error on dev loop9, logical block 0, async page read [ 57.216509][ T4689] loop9: unable to read partition table [ 57.222617][ T4689] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 57.222617][ T4689] ) failed (rc=-5) [ 57.246724][ T4680] EXT4-fs (loop2): 1 orphan inode deleted [ 57.260132][ T4678] ALSA: seq fatal error: cannot create timer (-19) [ 57.268234][ T29] kauditd_printk_skb: 4410 callbacks suppressed [ 57.268246][ T29] audit: type=1326 audit(1753028362.889:7545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e5cde9a9 code=0x7ffc0000 [ 57.339486][ T29] audit: type=1326 audit(1753028362.889:7546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f10e5cde9a9 code=0x7ffc0000 [ 57.362950][ T29] audit: type=1326 audit(1753028362.889:7547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e5cde9a9 code=0x7ffc0000 [ 57.376316][ T4700] loop0: detected capacity change from 0 to 128 [ 57.386300][ T29] audit: type=1326 audit(1753028362.889:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e5cde9a9 code=0x7ffc0000 [ 57.415909][ T29] audit: type=1326 audit(1753028362.889:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e5cde9a9 code=0x7ffc0000 [ 57.439528][ T29] audit: type=1326 audit(1753028362.889:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4677 comm="syz.4.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e5cde9a9 code=0x7ffc0000 [ 57.538119][ T4708] loop2: detected capacity change from 0 to 512 [ 57.551107][ T4712] loop0: detected capacity change from 0 to 128 [ 57.560072][ T4708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.579522][ T4712] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.593230][ T4708] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.391: invalid block [ 57.605297][ T4708] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.391: invalid indirect mapped block 4294967295 (level 1) [ 57.619654][ T4708] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.391: invalid indirect mapped block 4294967295 (level 1) [ 57.640609][ T4708] EXT4-fs (loop2): 2 truncates cleaned up [ 57.691575][ T4723] loop4: detected capacity change from 0 to 512 [ 57.708272][ T4723] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.708464][ T4708] ALSA: seq fatal error: cannot create timer (-19) [ 57.718306][ T4723] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 57.752027][ T4723] lo speed is unknown, defaulting to 1000 [ 57.801148][ T4728] loop0: detected capacity change from 0 to 128 [ 57.827378][ T29] audit: type=1326 audit(1753028363.449:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 57.831573][ T4728] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.850802][ T29] audit: type=1326 audit(1753028363.449:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 57.884424][ T29] audit: type=1326 audit(1753028363.449:7553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 57.907865][ T29] audit: type=1326 audit(1753028363.449:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.2.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 57.940300][ T4729] loop3: detected capacity change from 0 to 512 [ 57.948418][ T4729] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.3.397: corrupted xattr block 95: invalid header [ 57.962459][ T4729] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.397: bg 0: block 7: invalid block bitmap [ 57.976720][ T4729] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 57.985638][ T4729] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #11: comm syz.3.397: corrupted xattr block 95: invalid header [ 58.000942][ T4729] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 58.011675][ T4729] EXT4-fs (loop3): 1 orphan inode deleted [ 58.027388][ T4735] loop2: detected capacity change from 0 to 512 [ 58.038324][ T4735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.062446][ T4735] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.399: invalid block [ 58.076975][ T4735] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.399: invalid indirect mapped block 4294967295 (level 1) [ 58.096918][ T4738] loop3: detected capacity change from 0 to 512 [ 58.100077][ T4735] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.399: invalid indirect mapped block 4294967295 (level 1) [ 58.125357][ T4735] EXT4-fs (loop2): 2 truncates cleaned up [ 58.131878][ T4738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.152449][ T4735] ALSA: seq fatal error: cannot create timer (-19) [ 58.154043][ T4738] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.400: invalid block [ 58.184044][ T4738] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.400: invalid indirect mapped block 4294967295 (level 1) [ 58.216177][ T4746] loop9: detected capacity change from 0 to 7 [ 58.249164][ T4738] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.400: invalid indirect mapped block 4294967295 (level 1) [ 58.263524][ T4746] Buffer I/O error on dev loop9, logical block 0, async page read [ 58.279636][ T4746] Buffer I/O error on dev loop9, logical block 0, async page read [ 58.287541][ T4746] loop9: unable to read partition table [ 58.300101][ T4738] EXT4-fs (loop3): 2 truncates cleaned up [ 58.313151][ T4746] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 58.313151][ T4746] ) failed (rc=-5) [ 58.362190][ T4738] ALSA: seq fatal error: cannot create timer (-19) [ 58.384597][ T4750] loop2: detected capacity change from 0 to 2048 [ 58.448484][ T4761] bond0: entered promiscuous mode [ 58.453634][ T4761] bond0: entered allmulticast mode [ 58.459621][ T4761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.483240][ T4761] bond0 (unregistering): Released all slaves [ 58.521237][ T4755] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.406'. [ 58.530413][ T4755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 58.569937][ T4768] loop3: detected capacity change from 0 to 128 [ 58.580309][ T4768] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.784325][ T4780] loop3: detected capacity change from 0 to 512 [ 58.800245][ T4780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.810674][ T4780] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.413: invalid block [ 58.823276][ T4780] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.413: invalid indirect mapped block 4294967295 (level 1) [ 58.837759][ T4780] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.413: invalid indirect mapped block 4294967295 (level 1) [ 58.852127][ T4780] EXT4-fs (loop3): 2 truncates cleaned up [ 58.960207][ T4780] ALSA: seq fatal error: cannot create timer (-19) [ 59.761018][ T4790] siw: device registration error -23 [ 59.766525][ T4789] siw: device registration error -23 [ 59.786831][ T4790] lo speed is unknown, defaulting to 1000 [ 59.814588][ T4789] lo speed is unknown, defaulting to 1000 [ 59.880389][ T4795] loop3: detected capacity change from 0 to 512 [ 59.913566][ T4795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.941841][ T4795] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.416: invalid block [ 60.026076][ T4795] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.416: invalid indirect mapped block 4294967295 (level 1) [ 60.061555][ T4795] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.416: invalid indirect mapped block 4294967295 (level 1) [ 60.071708][ T4804] loop2: detected capacity change from 0 to 128 [ 60.090695][ T4804] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.098458][ T4795] EXT4-fs (loop3): 2 truncates cleaned up [ 60.145944][ T4795] ALSA: seq fatal error: cannot create timer (-19) [ 60.191250][ T4816] netlink: 7 bytes leftover after parsing attributes in process `syz.3.423'. [ 60.200913][ T4816] netlink: 7 bytes leftover after parsing attributes in process `syz.3.423'. [ 60.241210][ T4816] bond1: entered promiscuous mode [ 60.242601][ T4824] loop0: detected capacity change from 0 to 512 [ 60.246280][ T4816] bond1: entered allmulticast mode [ 60.261877][ T4824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.339635][ T4816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.351731][ T4828] loop9: detected capacity change from 0 to 7 [ 60.357947][ T4828] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.365876][ T4828] Buffer I/O error on dev loop9, logical block 0, async page read [ 60.373811][ T4828] loop9: unable to read partition table [ 60.385818][ T4816] bond1 (unregistering): Released all slaves [ 60.392045][ T4828] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 60.392045][ T4828] ) failed (rc=-5) [ 60.399637][ T4824] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.427: invalid block [ 60.417379][ T4824] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.427: invalid indirect mapped block 4294967295 (level 1) [ 60.431744][ T4824] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.427: invalid indirect mapped block 4294967295 (level 1) [ 60.461526][ T4831] loop4: detected capacity change from 0 to 512 [ 60.470467][ T4831] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.480343][ T4831] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 60.492582][ T4824] EXT4-fs (loop0): 2 truncates cleaned up [ 60.502444][ T4832] siw: device registration error -23 [ 60.525386][ T4832] lo speed is unknown, defaulting to 1000 [ 60.801467][ T4824] ALSA: seq fatal error: cannot create timer (-19) [ 60.966990][ T4839] loop3: detected capacity change from 0 to 512 [ 60.974634][ T4839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.985300][ T4839] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.430: invalid block [ 61.010877][ T4831] lo speed is unknown, defaulting to 1000 [ 61.047412][ T4839] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.430: invalid indirect mapped block 4294967295 (level 1) [ 61.107416][ T4839] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.430: invalid indirect mapped block 4294967295 (level 1) [ 61.141885][ T4845] lo speed is unknown, defaulting to 1000 [ 61.190688][ T4839] EXT4-fs (loop3): 2 truncates cleaned up [ 61.220295][ T4849] loop1: detected capacity change from 0 to 2048 [ 61.287176][ T4839] ALSA: seq fatal error: cannot create timer (-19) [ 61.353037][ T4872] loop3: detected capacity change from 0 to 128 [ 61.383930][ T4875] loop2: detected capacity change from 0 to 512 [ 61.390517][ T4872] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.415996][ T4878] loop1: detected capacity change from 0 to 128 [ 61.423310][ T4875] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.2.441: corrupted xattr block 95: invalid header [ 61.463088][ T4875] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.441: bg 0: block 7: invalid block bitmap [ 61.486786][ T4875] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 61.507741][ T4875] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #11: comm syz.2.441: corrupted xattr block 95: invalid header [ 61.549124][ T4875] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 61.578704][ T4875] EXT4-fs (loop2): 1 orphan inode deleted [ 61.644446][ T4890] loop0: detected capacity change from 0 to 2048 [ 61.737074][ T4904] loop2: detected capacity change from 0 to 512 [ 61.744612][ T4904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.786419][ T4904] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.449: invalid block [ 61.799019][ T4904] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.449: invalid indirect mapped block 4294967295 (level 1) [ 61.813339][ T4904] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.449: invalid indirect mapped block 4294967295 (level 1) [ 61.827718][ T4904] EXT4-fs (loop2): 2 truncates cleaned up [ 62.586346][ T29] kauditd_printk_skb: 1148 callbacks suppressed [ 62.592683][ T29] audit: type=1326 audit(1753028367.479:8703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f894bb5ab89 code=0x7ffc0000 [ 62.615921][ T29] audit: type=1326 audit(1753028368.189:8704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f894bbb5967 code=0x7ffc0000 [ 62.618912][ T4904] ALSA: seq fatal error: cannot create timer (-19) [ 62.639231][ T29] audit: type=1326 audit(1753028368.189:8705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f894bb5ab89 code=0x7ffc0000 [ 62.668909][ T29] audit: type=1326 audit(1753028368.189:8706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f894bbb5967 code=0x7ffc0000 [ 62.692232][ T29] audit: type=1326 audit(1753028368.189:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f894bb5ab89 code=0x7ffc0000 [ 62.715526][ T29] audit: type=1326 audit(1753028368.189:8708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f894bbb5967 code=0x7ffc0000 [ 62.738888][ T29] audit: type=1326 audit(1753028368.189:8709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f894bb5ab89 code=0x7ffc0000 [ 62.762128][ T29] audit: type=1326 audit(1753028368.189:8710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f894bbb5967 code=0x7ffc0000 [ 62.785571][ T29] audit: type=1326 audit(1753028368.189:8711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f894bb5ab89 code=0x7ffc0000 [ 62.808870][ T29] audit: type=1326 audit(1753028368.189:8712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.1.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f894bbb5967 code=0x7ffc0000 [ 62.862656][ T4902] siw: device registration error -23 [ 62.877959][ T4902] lo speed is unknown, defaulting to 1000 [ 62.972260][ T4918] loop2: detected capacity change from 0 to 512 [ 62.981508][ T4918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.004804][ T4918] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.452: invalid block [ 63.022039][ T4918] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.452: invalid indirect mapped block 4294967295 (level 1) [ 63.037038][ T4918] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.452: invalid indirect mapped block 4294967295 (level 1) [ 63.051632][ T4918] EXT4-fs (loop2): 2 truncates cleaned up [ 63.088949][ T4918] ALSA: seq fatal error: cannot create timer (-19) [ 63.103735][ T4929] loop0: detected capacity change from 0 to 1024 [ 63.110340][ T4922] loop4: detected capacity change from 0 to 2048 [ 63.367876][ T4950] siw: device registration error -23 [ 63.386877][ T4950] lo speed is unknown, defaulting to 1000 [ 63.518916][ T4949] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.461'. [ 63.528022][ T4949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'. [ 63.593134][ T4953] loop1: detected capacity change from 0 to 512 [ 63.617976][ T4953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.665397][ T4959] loop4: detected capacity change from 0 to 512 [ 63.682767][ T4959] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.693031][ T4953] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.462: invalid block [ 63.705790][ T4953] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.462: invalid indirect mapped block 4294967295 (level 1) [ 63.720117][ T4953] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.462: invalid indirect mapped block 4294967295 (level 1) [ 63.734778][ T4959] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 63.750016][ T4953] EXT4-fs (loop1): 2 truncates cleaned up [ 63.755932][ T4959] EXT4-fs (loop4): 1 truncate cleaned up [ 63.773786][ T4959] random: crng reseeded on system resumption [ 63.818046][ T4966] loop1: detected capacity change from 0 to 1024 [ 63.858700][ T4971] loop1: detected capacity change from 0 to 512 [ 63.868464][ T4971] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.467: corrupted xattr block 95: invalid header [ 63.882736][ T4971] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.467: bg 0: block 7: invalid block bitmap [ 63.895257][ T4971] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 63.904648][ T4971] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.467: corrupted xattr block 95: invalid header [ 63.922076][ T4971] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 63.931324][ T4971] EXT4-fs (loop1): 1 orphan inode deleted [ 63.945930][ T4976] loop4: detected capacity change from 0 to 512 [ 63.959323][ T4976] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.970913][ T4976] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 64.002158][ T4976] EXT4-fs (loop4): 1 truncate cleaned up [ 64.008943][ T4980] loop1: detected capacity change from 0 to 512 [ 64.016308][ T4980] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.027796][ T4976] random: crng reseeded on system resumption [ 64.044294][ T4980] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.470: invalid block [ 64.056387][ T4979] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.468'. [ 64.059225][ T4980] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.470: invalid indirect mapped block 4294967295 (level 1) [ 64.065416][ T4979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 64.097774][ T4980] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.470: invalid indirect mapped block 4294967295 (level 1) [ 64.123673][ T4980] EXT4-fs (loop1): 2 truncates cleaned up [ 64.174162][ T4994] loop1: detected capacity change from 0 to 128 [ 64.200452][ T4994] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.345890][ T4998] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.476'. [ 64.355099][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 64.440850][ T5007] loop1: detected capacity change from 0 to 1024 [ 64.470658][ T5012] loop9: detected capacity change from 0 to 7 [ 64.477331][ T5012] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.485681][ T5012] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.493648][ T5012] loop9: unable to read partition table [ 64.499941][ T5012] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 64.499941][ T5012] ) failed (rc=-5) [ 64.539601][ T5015] loop9: detected capacity change from 0 to 7 [ 64.545911][ T5015] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.554030][ T5015] Buffer I/O error on dev loop9, logical block 0, async page read [ 64.561879][ T5015] loop9: unable to read partition table [ 64.585539][ T5016] loop0: detected capacity change from 0 to 512 [ 64.592657][ T5015] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 64.592657][ T5015] ) failed (rc=-5) [ 64.606736][ T5016] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.616665][ T5016] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 64.670890][ T5013] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.479'. [ 64.680290][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 64.704483][ T5016] lo speed is unknown, defaulting to 1000 [ 65.117808][ T5036] loop1: detected capacity change from 0 to 128 [ 65.126715][ T5036] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.319588][ T3304] EXT4-fs unmount: 125 callbacks suppressed [ 65.319601][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.341319][ T5045] loop0: detected capacity change from 0 to 128 [ 65.355393][ T5045] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.384280][ T5045] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.389072][ T5049] bond0: entered promiscuous mode [ 65.399710][ T5049] bond0: entered allmulticast mode [ 65.405387][ T5049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.416362][ T5049] bond0 (unregistering): Released all slaves [ 65.433236][ T5054] loop9: detected capacity change from 0 to 7 [ 65.433870][ T5051] bond1: entered promiscuous mode [ 65.444454][ T5051] bond1: entered allmulticast mode [ 65.449092][ T5054] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.449862][ T5051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.465517][ T5054] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.473500][ T5054] loop9: unable to read partition table [ 65.479702][ T5054] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 65.479702][ T5054] ) failed (rc=-5) [ 65.494631][ T5051] bond1 (unregistering): Released all slaves [ 65.590847][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.624867][ T5067] loop0: detected capacity change from 0 to 512 [ 65.632114][ T5067] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.642508][ T5060] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.494'. [ 65.651584][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.494'. [ 65.658210][ T5067] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.497: invalid block [ 65.673593][ T5067] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.497: invalid indirect mapped block 4294967295 (level 1) [ 65.687733][ T5067] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.497: invalid indirect mapped block 4294967295 (level 1) [ 65.702228][ T5067] EXT4-fs (loop0): 2 truncates cleaned up [ 65.708265][ T5067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.729558][ T5067] ALSA: seq fatal error: cannot create timer (-19) [ 65.754694][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.801007][ T5075] loop2: detected capacity change from 0 to 512 [ 65.818538][ T5075] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.828386][ T5075] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 65.882269][ T5075] lo speed is unknown, defaulting to 1000 [ 66.009017][ T5081] loop4: detected capacity change from 0 to 1024 [ 66.041549][ T5081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.088049][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.134412][ T5087] loop4: detected capacity change from 0 to 512 [ 66.141496][ T5087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.167250][ T5087] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.502: invalid block [ 66.201540][ T5087] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.502: invalid indirect mapped block 4294967295 (level 1) [ 66.227146][ T5087] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.502: invalid indirect mapped block 4294967295 (level 1) [ 66.243038][ T5087] EXT4-fs (loop4): 2 truncates cleaned up [ 66.249813][ T5087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.282956][ T5092] netlink: 7 bytes leftover after parsing attributes in process `syz.0.504'. [ 66.292416][ T5092] netlink: 7 bytes leftover after parsing attributes in process `syz.0.504'. [ 66.302168][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.319637][ T5092] bond0: entered promiscuous mode [ 66.324852][ T5092] bond0: entered allmulticast mode [ 66.330453][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.340822][ T5092] bond0 (unregistering): Released all slaves [ 66.404393][ T5098] loop1: detected capacity change from 0 to 128 [ 66.412016][ T5092] loop9: detected capacity change from 0 to 7 [ 66.418260][ T5092] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.449223][ T5092] Buffer I/O error on dev loop9, logical block 0, async page read [ 66.457069][ T5092] loop9: unable to read partition table [ 66.468269][ T5092] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 66.468269][ T5092] ) failed (rc=-5) [ 66.567428][ T5098] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.587922][ T5106] loop0: detected capacity change from 0 to 512 [ 66.598741][ T5098] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.613836][ T5106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.615220][ T5109] loop2: detected capacity change from 0 to 128 [ 66.623694][ T5106] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.509: invalid block [ 66.659630][ T5106] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.509: invalid indirect mapped block 4294967295 (level 1) [ 66.676395][ T5112] siw: device registration error -23 [ 66.699375][ T5112] lo speed is unknown, defaulting to 1000 [ 66.785179][ T5106] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.509: invalid indirect mapped block 4294967295 (level 1) [ 66.852954][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.886154][ T5106] EXT4-fs (loop0): 2 truncates cleaned up [ 66.908036][ T5106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.936978][ T5115] lo speed is unknown, defaulting to 1000 [ 67.024427][ T5109] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.036819][ T5109] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.057843][ T5106] ALSA: seq fatal error: cannot create timer (-19) [ 67.092105][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.101624][ T5124] loop1: detected capacity change from 0 to 512 [ 67.121535][ T5124] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.1.511: corrupted xattr block 95: invalid header [ 67.136322][ T5124] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.511: bg 0: block 7: invalid block bitmap [ 67.149343][ T5124] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 67.159667][ T5124] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #11: comm syz.1.511: corrupted xattr block 95: invalid header [ 67.174009][ T5124] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 67.183192][ T5132] loop0: detected capacity change from 0 to 512 [ 67.193069][ T5127] loop4: detected capacity change from 0 to 2048 [ 67.193511][ T5124] EXT4-fs (loop1): 1 orphan inode deleted [ 67.205789][ T5132] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.207633][ T5124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.229691][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.232666][ T5127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.239365][ T5132] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.513: invalid block [ 67.268191][ T5132] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.513: invalid indirect mapped block 4294967295 (level 1) [ 67.289686][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.311682][ T5137] loop2: detected capacity change from 0 to 512 [ 67.329184][ T5137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.340944][ T5132] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.513: invalid indirect mapped block 4294967295 (level 1) [ 67.349879][ T5137] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.515: invalid block [ 67.368960][ T5132] EXT4-fs (loop0): 2 truncates cleaned up [ 67.375113][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.388561][ T5137] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.515: invalid indirect mapped block 4294967295 (level 1) [ 67.390856][ T5132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.416530][ T5137] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.515: invalid indirect mapped block 4294967295 (level 1) [ 67.431902][ T5137] EXT4-fs (loop2): 2 truncates cleaned up [ 67.438162][ T5137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.486667][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.505355][ T5147] loop2: detected capacity change from 0 to 512 [ 67.512705][ T5147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.533381][ T5132] ALSA: seq fatal error: cannot create timer (-19) [ 67.566325][ T5147] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.519: invalid block [ 67.569249][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.579351][ T5147] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.519: invalid indirect mapped block 4294967295 (level 1) [ 67.602099][ T5147] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.519: invalid indirect mapped block 4294967295 (level 1) [ 67.616281][ T5147] EXT4-fs (loop2): 2 truncates cleaned up [ 67.622831][ T5147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.657132][ T29] kauditd_printk_skb: 1375 callbacks suppressed [ 67.657144][ T29] audit: type=1326 audit(1753028373.279:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 67.687358][ T29] audit: type=1326 audit(1753028373.279:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 67.688375][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.710756][ T29] audit: type=1326 audit(1753028373.279:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 67.710827][ T29] audit: type=1326 audit(1753028373.279:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 67.766558][ T29] audit: type=1326 audit(1753028373.279:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 67.789943][ T29] audit: type=1326 audit(1753028373.279:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5146 comm="syz.2.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4f94e9a9 code=0x7ffc0000 [ 67.848878][ T5161] loop9: detected capacity change from 0 to 7 [ 67.856595][ T5161] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.864922][ T5161] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.872780][ T5161] loop9: unable to read partition table [ 67.879082][ T5161] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 67.879082][ T5161] ) failed (rc=-5) [ 68.035915][ T29] audit: type=1326 audit(1753028373.659:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 68.045818][ T5171] loop0: detected capacity change from 0 to 1024 [ 68.067152][ T29] audit: type=1326 audit(1753028373.659:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 68.090780][ T29] audit: type=1326 audit(1753028373.659:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 68.114233][ T29] audit: type=1326 audit(1753028373.659:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.0.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a24ce9a9 code=0x7ffc0000 [ 68.140431][ T5171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.160890][ T5176] loop2: detected capacity change from 0 to 2048 [ 68.167923][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.184278][ T5183] loop0: detected capacity change from 0 to 128 [ 68.184299][ T5176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.209175][ T5183] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.221702][ T5183] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.222237][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.273008][ T5189] loop2: detected capacity change from 0 to 512 [ 68.281095][ T5189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.299549][ T5189] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.529: invalid block [ 68.328651][ T5189] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.529: invalid indirect mapped block 4294967295 (level 1) [ 68.357725][ T5189] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.529: invalid indirect mapped block 4294967295 (level 1) [ 68.389409][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.412040][ T5189] EXT4-fs (loop2): 2 truncates cleaned up [ 68.418089][ T5189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.492659][ T5199] loop1: detected capacity change from 0 to 128 [ 68.517630][ T5199] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.530155][ T5199] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.594152][ T5203] siw: device registration error -23 [ 68.612669][ T5203] lo speed is unknown, defaulting to 1000 [ 68.712466][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.960727][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.083419][ T5211] loop4: detected capacity change from 0 to 512 [ 69.131191][ T5213] loop0: detected capacity change from 0 to 1024 [ 69.151384][ T5213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.189319][ T5215] loop4: detected capacity change from 0 to 2048 [ 69.248860][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.270702][ T5215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.294820][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.307093][ T5228] loop0: detected capacity change from 0 to 512 [ 69.327943][ T5230] loop4: detected capacity change from 0 to 512 [ 69.342763][ T5228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.349315][ T5230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.362345][ T5228] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.540: invalid block [ 69.368314][ T5230] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.542: invalid block [ 69.388623][ T5228] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.540: invalid indirect mapped block 4294967295 (level 1) [ 69.403793][ T5231] __nla_validate_parse: 4 callbacks suppressed [ 69.403807][ T5231] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.541'. [ 69.410648][ T5230] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.542: invalid indirect mapped block 4294967295 (level 1) [ 69.419064][ T5231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 69.447033][ T5230] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.542: invalid indirect mapped block 4294967295 (level 1) [ 69.461059][ T5228] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.540: invalid indirect mapped block 4294967295 (level 1) [ 69.461625][ T5230] EXT4-fs (loop4): 2 truncates cleaned up [ 69.481253][ T5230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.493508][ T5228] EXT4-fs (loop0): 2 truncates cleaned up [ 69.497060][ T5239] loop2: detected capacity change from 0 to 128 [ 69.511730][ T5239] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.524354][ T5239] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.525025][ T5228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.570493][ T5230] ALSA: seq fatal error: cannot create timer (-19) [ 69.587642][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.611917][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.626815][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.629150][ T5250] FAULT_INJECTION: forcing a failure. [ 69.629150][ T5250] name failslab, interval 1, probability 0, space 0, times 1 [ 69.648469][ T5250] CPU: 0 UID: 0 PID: 5250 Comm: syz.2.548 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 69.648499][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.648514][ T5250] Call Trace: [ 69.648520][ T5250] [ 69.648526][ T5250] __dump_stack+0x1d/0x30 [ 69.648555][ T5250] dump_stack_lvl+0xe8/0x140 [ 69.648634][ T5250] dump_stack+0x15/0x1b [ 69.648643][ T5250] should_fail_ex+0x265/0x280 [ 69.648660][ T5250] should_failslab+0x8c/0xb0 [ 69.648673][ T5250] __kmalloc_noprof+0xa5/0x3e0 [ 69.648687][ T5250] ? io_cache_alloc_new+0x2a/0xb0 [ 69.648783][ T5250] ? __io_alloc_req_refill+0xda/0x1d0 [ 69.648797][ T5250] io_cache_alloc_new+0x2a/0xb0 [ 69.648811][ T5250] io_sendmsg_prep+0x2df/0x5e0 [ 69.648829][ T5250] io_submit_sqes+0x5e5/0xfd0 [ 69.648848][ T5250] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 69.648905][ T5250] ? 0xffffffff81000000 [ 69.648916][ T5250] ? __rcu_read_unlock+0x4f/0x70 [ 69.648976][ T5250] ? get_pid_task+0x96/0xd0 [ 69.648987][ T5250] ? proc_fail_nth_write+0x12d/0x160 [ 69.649010][ T5250] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.649027][ T5250] ? vfs_write+0x75e/0x8e0 [ 69.649046][ T5250] ? __rcu_read_unlock+0x4f/0x70 [ 69.649117][ T5250] ? __fget_files+0x184/0x1c0 [ 69.649127][ T5250] ? fput+0x8f/0xc0 [ 69.649141][ T5250] __x64_sys_io_uring_enter+0x78/0x90 [ 69.649206][ T5250] x64_sys_call+0x28c8/0x2fb0 [ 69.649218][ T5250] do_syscall_64+0xd2/0x200 [ 69.649300][ T5250] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.649328][ T5250] ? clear_bhb_loop+0x40/0x90 [ 69.649340][ T5250] ? clear_bhb_loop+0x40/0x90 [ 69.649460][ T5250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.649471][ T5250] RIP: 0033:0x7f2d4f94e9a9 [ 69.649480][ T5250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.649490][ T5250] RSP: 002b:00007f2d4dfb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 69.649517][ T5250] RAX: ffffffffffffffda RBX: 00007f2d4fb75fa0 RCX: 00007f2d4f94e9a9 [ 69.649523][ T5250] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000005 [ 69.649530][ T5250] RBP: 00007f2d4dfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.649537][ T5250] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 69.649544][ T5250] R13: 0000000000000000 R14: 00007f2d4fb75fa0 R15: 00007fff2c564bc8 [ 69.649554][ T5250] [ 69.911308][ T5253] loop4: detected capacity change from 0 to 1024 [ 69.925417][ T5254] SELinux: ebitmap: truncated map [ 69.933330][ T5258] loop2: detected capacity change from 0 to 128 [ 69.940222][ T5254] SELinux: failed to load policy [ 69.948877][ T5258] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.961176][ T5253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.974310][ T5258] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.986655][ T5256] vhci_hcd: invalid port number 96 [ 69.991883][ T5256] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 69.998130][ T5264] SELinux: ebitmap: truncated map [ 70.007842][ T5264] SELinux: failed to load policy [ 70.015783][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.031014][ T5266] loop1: detected capacity change from 0 to 512 [ 70.041729][ T5268] smc: net device bond0 applied user defined pnetid SYZ0 [ 70.052804][ T5266] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.078814][ T5268] capability: warning: `syz.0.555' uses 32-bit capabilities (legacy support in use) [ 70.079293][ T5266] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.554: bg 0: block 248: padding at end of block bitmap is not set [ 70.092410][ T5274] loop4: detected capacity change from 0 to 512 [ 70.110840][ T5266] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.554: Failed to acquire dquot type 1 [ 70.122997][ T5266] EXT4-fs (loop1): 1 truncate cleaned up [ 70.146747][ T5266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.163516][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.169204][ T5268] loop0: detected capacity change from 0 to 128 [ 70.179073][ T5274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.201781][ T5277] loop3: detected capacity change from 0 to 164 [ 70.209052][ T5274] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.556: invalid block [ 70.222105][ T5277] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 70.231229][ T5274] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.556: invalid indirect mapped block 4294967295 (level 1) [ 70.246391][ T5274] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.556: invalid indirect mapped block 4294967295 (level 1) [ 70.261405][ T5274] EXT4-fs (loop4): 2 truncates cleaned up [ 70.267495][ T5274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.290106][ T5274] ALSA: seq fatal error: cannot create timer (-19) [ 70.318252][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.472562][ T5290] siw: device registration error -23 [ 70.486629][ T5290] lo speed is unknown, defaulting to 1000 [ 71.211024][ T5266] syz.1.554 (5266) used greatest stack depth: 9576 bytes left [ 71.216843][ T5292] lo speed is unknown, defaulting to 1000 [ 71.253547][ T5295] loop0: detected capacity change from 0 to 2048 [ 71.260480][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.270134][ T5295] EXT4-fs (loop0): inodes count not valid: 6 vs 32 [ 71.296397][ T5302] loop1: detected capacity change from 0 to 128 [ 71.303469][ T5300] loop2: detected capacity change from 0 to 1024 [ 71.320136][ T5300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.351131][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.431663][ T5309] FAULT_INJECTION: forcing a failure. [ 71.431663][ T5309] name failslab, interval 1, probability 0, space 0, times 0 [ 71.444339][ T5309] CPU: 1 UID: 0 PID: 5309 Comm: syz.2.565 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 71.444432][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.444442][ T5309] Call Trace: [ 71.444448][ T5309] [ 71.444454][ T5309] __dump_stack+0x1d/0x30 [ 71.444472][ T5309] dump_stack_lvl+0xe8/0x140 [ 71.444488][ T5309] dump_stack+0x15/0x1b [ 71.444524][ T5309] should_fail_ex+0x265/0x280 [ 71.444631][ T5309] should_failslab+0x8c/0xb0 [ 71.444654][ T5309] kmem_cache_alloc_node_noprof+0x57/0x320 [ 71.444682][ T5309] ? alloc_vmap_area+0x231/0xe50 [ 71.444708][ T5309] alloc_vmap_area+0x231/0xe50 [ 71.444753][ T5309] ? should_failslab+0x8c/0xb0 [ 71.444782][ T5309] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 71.444869][ T5309] __get_vm_area_node+0x173/0x1d0 [ 71.444896][ T5309] __vmalloc_node_range_noprof+0x273/0xe00 [ 71.444927][ T5309] ? sel_write_load+0x158/0x380 [ 71.445024][ T5309] ? __rcu_read_unlock+0x4f/0x70 [ 71.445050][ T5309] ? sel_write_load+0x158/0x380 [ 71.445075][ T5309] vmalloc_noprof+0x82/0xc0 [ 71.445101][ T5309] ? sel_write_load+0x158/0x380 [ 71.445150][ T5309] sel_write_load+0x158/0x380 [ 71.445176][ T5309] ? __pfx_sel_write_load+0x10/0x10 [ 71.445202][ T5309] vfs_write+0x266/0x8e0 [ 71.445233][ T5309] ? __rcu_read_unlock+0x4f/0x70 [ 71.445332][ T5309] ? __fget_files+0x184/0x1c0 [ 71.445349][ T5309] ksys_write+0xda/0x1a0 [ 71.445380][ T5309] __x64_sys_write+0x40/0x50 [ 71.445503][ T5309] x64_sys_call+0x2cdd/0x2fb0 [ 71.445521][ T5309] do_syscall_64+0xd2/0x200 [ 71.445540][ T5309] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.445566][ T5309] ? clear_bhb_loop+0x40/0x90 [ 71.445605][ T5309] ? clear_bhb_loop+0x40/0x90 [ 71.445627][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.445648][ T5309] RIP: 0033:0x7f2d4f94e9a9 [ 71.445664][ T5309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.445680][ T5309] RSP: 002b:00007f2d4dfb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.445721][ T5309] RAX: ffffffffffffffda RBX: 00007f2d4fb75fa0 RCX: 00007f2d4f94e9a9 [ 71.445734][ T5309] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 71.445746][ T5309] RBP: 00007f2d4dfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.445758][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.445769][ T5309] R13: 0000000000000000 R14: 00007f2d4fb75fa0 R15: 00007fff2c564bc8 [ 71.445784][ T5309] [ 71.445820][ T5309] syz.2.565: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 71.591816][ T5313] loop4: detected capacity change from 0 to 128 [ 71.595568][ T5309] ,cpuset=/,mems_allowed=0 [ 71.595597][ T5309] CPU: 1 UID: 0 PID: 5309 Comm: syz.2.565 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 71.595666][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.595714][ T5309] Call Trace: [ 71.595720][ T5309] [ 71.595726][ T5309] __dump_stack+0x1d/0x30 [ 71.595747][ T5309] dump_stack_lvl+0xe8/0x140 [ 71.595765][ T5309] dump_stack+0x15/0x1b [ 71.595782][ T5309] warn_alloc+0x12b/0x1a0 [ 71.595855][ T5309] __vmalloc_node_range_noprof+0x297/0xe00 [ 71.595888][ T5309] ? __rcu_read_unlock+0x4f/0x70 [ 71.595911][ T5309] ? sel_write_load+0x158/0x380 [ 71.595958][ T5309] vmalloc_noprof+0x82/0xc0 [ 71.595985][ T5309] ? sel_write_load+0x158/0x380 [ 71.596106][ T5309] sel_write_load+0x158/0x380 [ 71.596131][ T5309] ? __pfx_sel_write_load+0x10/0x10 [ 71.596155][ T5309] vfs_write+0x266/0x8e0 [ 71.596185][ T5309] ? __rcu_read_unlock+0x4f/0x70 [ 71.596254][ T5309] ? __fget_files+0x184/0x1c0 [ 71.596329][ T5309] ksys_write+0xda/0x1a0 [ 71.596435][ T5309] __x64_sys_write+0x40/0x50 [ 71.596465][ T5309] x64_sys_call+0x2cdd/0x2fb0 [ 71.596521][ T5309] do_syscall_64+0xd2/0x200 [ 71.596539][ T5309] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.596565][ T5309] ? clear_bhb_loop+0x40/0x90 [ 71.596643][ T5309] ? clear_bhb_loop+0x40/0x90 [ 71.596732][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.596753][ T5309] RIP: 0033:0x7f2d4f94e9a9 [ 71.596767][ T5309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.596784][ T5309] RSP: 002b:00007f2d4dfb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.596813][ T5309] RAX: ffffffffffffffda RBX: 00007f2d4fb75fa0 RCX: 00007f2d4f94e9a9 [ 71.596826][ T5309] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000003 [ 71.596887][ T5309] RBP: 00007f2d4dfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.596954][ T5309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.596965][ T5309] R13: 0000000000000000 R14: 00007f2d4fb75fa0 R15: 00007fff2c564bc8 [ 71.596982][ T5309] [ 71.597014][ T5309] Mem-Info: [ 71.619499][ T5313] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.621515][ T5309] active_anon:10269 inactive_anon:0 isolated_anon:0 [ 71.621515][ T5309] active_file:6178 inactive_file:2276 isolated_file:0 [ 71.621515][ T5309] unevictable:0 dirty:55 writeback:0 [ 71.621515][ T5309] slab_reclaimable:2936 slab_unreclaimable:13677 [ 71.621515][ T5309] mapped:32229 shmem:6697 pagetables:964 [ 71.621515][ T5309] sec_pagetables:0 bounce:0 [ 71.621515][ T5309] kernel_misc_reclaimable:0 [ 71.621515][ T5309] free:1901338 free_pcp:5713 free_cma:0 [ 71.628417][ T5313] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.645559][ T5309] Node 0 active_anon:41424kB inactive_anon:0kB active_file:24712kB inactive_file:9104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129148kB dirty:220kB writeback:0kB shmem:27020kB writeback_tmp:0kB kernel_stack:3264kB pagetables:3856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 71.857855][ T5319] loop0: detected capacity change from 0 to 512 [ 71.877372][ T5309] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 71.887010][ T5319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.893838][ T5309] lowmem_reserve[]: 0 2882 7860 7860 [ 71.893869][ T5309] Node 0 DMA32 free:2947720kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951348kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 71.903862][ T5319] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.569: invalid block [ 71.909869][ T5309] lowmem_reserve[]: 0 0 4978 4978 [ 71.909901][ T5309] Node 0 [ 71.920128][ T5319] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.569: invalid indirect mapped block 4294967295 (level 1) [ 71.925834][ T5309] Normal free:4633964kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15556kB inactive_anon:0kB active_file:24712kB inactive_file:9104kB unevictable:0kB writepending:220kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:52648kB local_pcp:12152kB free_cma:0kB [ 71.929103][ T5319] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.569: invalid indirect mapped block 4294967295 (level 1) [ 71.931948][ T5309] lowmem_reserve[]: 0 0 0 0 [ 71.944627][ T5319] EXT4-fs (loop0): 2 truncates cleaned up [ 71.988558][ T5309] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 71.999494][ T5319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.027768][ T5309] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 72.223034][ T5309] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947720kB [ 72.239259][ T5309] Node 0 Normal: 83*4kB (UME) 67*8kB (UME) 13*16kB (UE) 105*32kB (UME) 42*64kB (UE) 33*128kB (UM) 33*256kB (UE) 40*512kB (UM) 34*1024kB (UME) 22*2048kB (UME) 1102*4096kB (UM) = 4633940kB [ 72.257891][ T5309] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 72.267288][ T5309] 8671 total pagecache pages [ 72.271867][ T5309] 0 pages in swap cache [ 72.276322][ T5309] Free swap = 124996kB [ 72.280486][ T5309] Total swap = 124996kB [ 72.284617][ T5309] 2097051 pages RAM [ 72.288433][ T5309] 0 pages HighMem/MovableOnly [ 72.293109][ T5309] 80814 pages reserved [ 72.319088][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.319937][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.353752][ T5327] loop3: detected capacity change from 0 to 1024 [ 72.362350][ T5333] loop0: detected capacity change from 0 to 512 [ 72.371641][ T5327] EXT4-fs: Ignoring removed orlov option [ 72.377688][ T5333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.388168][ T5333] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.571: invalid block [ 72.396021][ T5329] loop2: detected capacity change from 0 to 2048 [ 72.414460][ T5327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.426507][ T5333] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.571: invalid indirect mapped block 4294967295 (level 1) [ 72.428385][ T5333] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.571: invalid indirect mapped block 4294967295 (level 1) [ 72.454629][ T5341] loop4: detected capacity change from 0 to 1024 [ 72.462279][ T5333] EXT4-fs (loop0): 2 truncates cleaned up [ 72.463353][ T5329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.468380][ T5333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.494309][ T5341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.527677][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.536104][ T5333] ALSA: seq fatal error: cannot create timer (-19) [ 72.565587][ T5351] loop2: detected capacity change from 0 to 128 [ 72.579047][ T5351] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.622527][ T5358] loop1: detected capacity change from 0 to 512 [ 72.630187][ T5358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.662125][ T5358] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.580: invalid block [ 72.675003][ T5358] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.580: invalid indirect mapped block 4294967295 (level 1) [ 72.698243][ T5363] loop3: detected capacity change from 0 to 512 [ 72.704716][ T5355] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.579'. [ 72.708740][ T5358] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.580: invalid indirect mapped block 4294967295 (level 1) [ 72.713815][ T5355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.579'. [ 72.736763][ T5364] loop4: detected capacity change from 0 to 128 [ 72.740174][ T5363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.752839][ T5364] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.764924][ T5358] EXT4-fs (loop1): 2 truncates cleaned up [ 72.774654][ T5363] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.581: invalid block [ 72.791430][ T5358] ALSA: seq fatal error: cannot create timer (-19) [ 72.798363][ T5363] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.581: invalid indirect mapped block 4294967295 (level 1) [ 72.799769][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 72.799781][ T29] audit: type=1326 audit(1753028378.429:10461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 72.814502][ T5370] FAULT_INJECTION: forcing a failure. [ 72.814502][ T5370] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.818786][ T29] audit: type=1326 audit(1753028378.449:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 72.841904][ T5370] CPU: 1 UID: 0 PID: 5370 Comm: syz.2.583 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 72.841932][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.841944][ T5370] Call Trace: [ 72.841949][ T5370] [ 72.841956][ T5370] __dump_stack+0x1d/0x30 [ 72.842038][ T5370] dump_stack_lvl+0xe8/0x140 [ 72.842057][ T5370] dump_stack+0x15/0x1b [ 72.842079][ T5370] should_fail_ex+0x265/0x280 [ 72.842110][ T5370] should_fail+0xb/0x20 [ 72.842136][ T5370] should_fail_usercopy+0x1a/0x20 [ 72.842234][ T5370] _copy_from_user+0x1c/0xb0 [ 72.842295][ T5370] __copy_msghdr+0x244/0x300 [ 72.842408][ T5370] ___sys_sendmsg+0x109/0x1d0 [ 72.842451][ T5370] __x64_sys_sendmsg+0xd4/0x160 [ 72.842487][ T5370] x64_sys_call+0x2999/0x2fb0 [ 72.842544][ T5370] do_syscall_64+0xd2/0x200 [ 72.842563][ T5370] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.842589][ T5370] ? clear_bhb_loop+0x40/0x90 [ 72.842610][ T5370] ? clear_bhb_loop+0x40/0x90 [ 72.842658][ T5370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.842678][ T5370] RIP: 0033:0x7f2d4f94e9a9 [ 72.842693][ T5370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.842709][ T5370] RSP: 002b:00007f2d4dfb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.842728][ T5370] RAX: ffffffffffffffda RBX: 00007f2d4fb75fa0 RCX: 00007f2d4f94e9a9 [ 72.842773][ T5370] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 72.842785][ T5370] RBP: 00007f2d4dfb7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.842796][ T5370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.842808][ T5370] R13: 0000000000000000 R14: 00007f2d4fb75fa0 R15: 00007fff2c564bc8 [ 72.842825][ T5370] [ 72.858861][ T5363] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.581: invalid indirect mapped block 4294967295 (level 1) [ 72.878481][ T29] audit: type=1326 audit(1753028378.469:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 72.934335][ T5363] EXT4-fs (loop3): 2 truncates cleaned up [ 72.938808][ T29] audit: type=1326 audit(1753028378.469:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 72.968400][ T5363] ALSA: seq fatal error: cannot create timer (-19) [ 72.972936][ T29] audit: type=1326 audit(1753028378.469:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 73.155524][ T29] audit: type=1326 audit(1753028378.469:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 73.178924][ T29] audit: type=1326 audit(1753028378.469:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894bbbe9a9 code=0x7ffc0000 [ 73.202600][ T29] audit: type=1326 audit(1753028378.609:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e7b2e9a9 code=0x7ffc0000 [ 73.226197][ T29] audit: type=1326 audit(1753028378.609:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd3e7b2e9a9 code=0x7ffc0000 [ 73.243719][ T5376] lo speed is unknown, defaulting to 1000 [ 73.249578][ T29] audit: type=1326 audit(1753028378.609:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.3.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e7b2e9a9 code=0x7ffc0000 [ 73.296620][ T5380] loop3: detected capacity change from 0 to 1024 [ 73.492385][ T5401] loop1: detected capacity change from 0 to 512 [ 73.514387][ T5401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.524286][ T5401] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 73.594641][ T5402] loop0: detected capacity change from 0 to 512 [ 73.603474][ T5402] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.683210][ T5402] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.595: invalid block [ 73.740792][ T5402] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.595: invalid indirect mapped block 4294967295 (level 1) [ 73.832262][ T5402] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.595: invalid indirect mapped block 4294967295 (level 1) [ 73.878976][ T5402] EXT4-fs (loop0): 2 truncates cleaned up [ 73.897052][ T5390] lo speed is unknown, defaulting to 1000 [ 73.949026][ T5402] ALSA: seq fatal error: cannot create timer (-19) [ 73.989384][ T5409] FAULT_INJECTION: forcing a failure. [ 73.989384][ T5409] name failslab, interval 1, probability 0, space 0, times 0 [ 74.002127][ T5409] CPU: 1 UID: 0 PID: 5409 Comm: syz.0.596 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 74.002219][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.002247][ T5409] Call Trace: [ 74.002252][ T5409] [ 74.002257][ T5409] __dump_stack+0x1d/0x30 [ 74.002275][ T5409] dump_stack_lvl+0xe8/0x140 [ 74.002293][ T5409] dump_stack+0x15/0x1b [ 74.002307][ T5409] should_fail_ex+0x265/0x280 [ 74.002482][ T5409] should_failslab+0x8c/0xb0 [ 74.002505][ T5409] __kvmalloc_node_noprof+0x123/0x4e0 [ 74.002561][ T5409] ? __nf_hook_entries_try_shrink+0x260/0x450 [ 74.002593][ T5409] __nf_hook_entries_try_shrink+0x260/0x450 [ 74.002626][ T5409] __nf_unregister_net_hook+0x2d1/0x3b0 [ 74.002714][ T5409] nf_unregister_net_hooks+0xab/0xe0 [ 74.002789][ T5409] nf_ct_netns_do_put+0x1c6/0x260 [ 74.002816][ T5409] ? __pfx_nft_masq_ipv4_destroy+0x10/0x10 [ 74.002842][ T5409] nf_ct_netns_put+0xea/0x1f0 [ 74.002938][ T5409] nft_masq_ipv4_destroy+0x22/0x30 [ 74.002967][ T5409] __nft_release_table+0x30d/0xa20 [ 74.003050][ T5409] nft_rcv_nl_event+0x334/0x3d0 [ 74.003166][ T5409] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 74.003199][ T5409] blocking_notifier_call_chain+0x9b/0x1f0 [ 74.003307][ T5409] netlink_release+0xaa9/0xf20 [ 74.003327][ T5409] sock_close+0x68/0x150 [ 74.003373][ T5409] ? __pfx_sock_close+0x10/0x10 [ 74.003461][ T5409] __fput+0x29b/0x650 [ 74.003483][ T5409] fput_close_sync+0x6e/0x120 [ 74.003509][ T5409] __x64_sys_close+0x56/0xf0 [ 74.003534][ T5409] x64_sys_call+0x2747/0x2fb0 [ 74.003553][ T5409] do_syscall_64+0xd2/0x200 [ 74.003580][ T5409] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.003607][ T5409] ? clear_bhb_loop+0x40/0x90 [ 74.003629][ T5409] ? clear_bhb_loop+0x40/0x90 [ 74.003678][ T5409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.003735][ T5409] RIP: 0033:0x7fb9a24ce9a9 [ 74.003749][ T5409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.003765][ T5409] RSP: 002b:00007fb9a0b2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 74.003838][ T5409] RAX: ffffffffffffffda RBX: 00007fb9a26f5fa0 RCX: 00007fb9a24ce9a9 [ 74.003849][ T5409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 74.003859][ T5409] RBP: 00007fb9a0b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.003903][ T5409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.003916][ T5409] R13: 0000000000000000 R14: 00007fb9a26f5fa0 R15: 00007fff79c751f8 [ 74.003935][ T5409] [ 74.290035][ T5413] loop3: detected capacity change from 0 to 512 [ 74.296874][ T5413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.301837][ T5417] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.349387][ T5417] FAULT_INJECTION: forcing a failure. [ 74.349387][ T5417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.362534][ T5417] CPU: 1 UID: 0 PID: 5417 Comm: syz.4.601 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 74.362589][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.362601][ T5417] Call Trace: [ 74.362608][ T5417] [ 74.362615][ T5417] __dump_stack+0x1d/0x30 [ 74.362637][ T5417] dump_stack_lvl+0xe8/0x140 [ 74.362656][ T5417] dump_stack+0x15/0x1b [ 74.362671][ T5417] should_fail_ex+0x265/0x280 [ 74.362754][ T5417] should_fail+0xb/0x20 [ 74.362781][ T5417] should_fail_usercopy+0x1a/0x20 [ 74.362927][ T5417] strncpy_from_user+0x25/0x230 [ 74.362948][ T5417] ? kmem_cache_alloc_noprof+0x186/0x310 [ 74.363021][ T5417] ? getname_flags+0x80/0x3b0 [ 74.363045][ T5417] getname_flags+0xae/0x3b0 [ 74.363066][ T5417] do_sys_openat2+0x60/0x110 [ 74.363094][ T5417] __x64_sys_openat+0xf2/0x120 [ 74.363150][ T5417] x64_sys_call+0x1af/0x2fb0 [ 74.363172][ T5417] do_syscall_64+0xd2/0x200 [ 74.363192][ T5417] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.363232][ T5417] ? clear_bhb_loop+0x40/0x90 [ 74.363253][ T5417] ? clear_bhb_loop+0x40/0x90 [ 74.363350][ T5417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.363370][ T5417] RIP: 0033:0x7f10e5cde9a9 [ 74.363385][ T5417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.363412][ T5417] RSP: 002b:00007f10e433f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 74.363488][ T5417] RAX: ffffffffffffffda RBX: 00007f10e5f05fa0 RCX: 00007f10e5cde9a9 [ 74.363500][ T5417] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 74.363534][ T5417] RBP: 00007f10e433f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.363547][ T5417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.363580][ T5417] R13: 0000000000000000 R14: 00007f10e5f05fa0 R15: 00007ffcfe825bd8 [ 74.363598][ T5417] [ 74.364357][ T5413] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.597: invalid block [ 74.380834][ T5419] loop9: detected capacity change from 0 to 7 [ 74.406559][ T5424] lo speed is unknown, defaulting to 1000 [ 74.406891][ T5419] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.431738][ T5413] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.597: invalid indirect mapped block 4294967295 (level 1) [ 74.436462][ T5419] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.506650][ T5413] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.597: invalid indirect mapped block 4294967295 (level 1) [ 74.513051][ T5419] loop9: unable to read partition table [ 74.523490][ T5431] loop4: detected capacity change from 0 to 1024 [ 74.574346][ T5428] loop0: detected capacity change from 0 to 256 [ 74.580931][ T5419] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 74.580931][ T5419] ) failed (rc=-5) [ 74.643218][ T5428] 9p: Unknown Cache mode or invalid value n [ 74.654776][ T5413] EXT4-fs (loop3): 2 truncates cleaned up [ 74.707196][ T5413] ALSA: seq fatal error: cannot create timer (-19) [ 74.747779][ T5439] loop1: detected capacity change from 0 to 128 [ 74.757592][ T5439] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.760282][ T5442] loop4: detected capacity change from 0 to 128 [ 74.784448][ T5442] FAULT_INJECTION: forcing a failure. [ 74.784448][ T5442] name failslab, interval 1, probability 0, space 0, times 0 [ 74.797225][ T5442] CPU: 1 UID: 0 PID: 5442 Comm: syz.4.605 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 74.797250][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.797260][ T5442] Call Trace: [ 74.797266][ T5442] [ 74.797273][ T5442] __dump_stack+0x1d/0x30 [ 74.797294][ T5442] dump_stack_lvl+0xe8/0x140 [ 74.797321][ T5442] dump_stack+0x15/0x1b [ 74.797335][ T5442] should_fail_ex+0x265/0x280 [ 74.797362][ T5442] should_failslab+0x8c/0xb0 [ 74.797381][ T5442] __kmalloc_noprof+0xa5/0x3e0 [ 74.797462][ T5442] ? io_cache_alloc_new+0x2a/0xb0 [ 74.797480][ T5442] io_cache_alloc_new+0x2a/0xb0 [ 74.797536][ T5442] io_sendmsg_prep+0x2df/0x5e0 [ 74.797564][ T5442] io_submit_sqes+0x5e5/0xfd0 [ 74.797599][ T5442] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 74.797626][ T5442] ? 0xffffffff81000000 [ 74.797637][ T5442] ? __rcu_read_unlock+0x4f/0x70 [ 74.797657][ T5442] ? get_pid_task+0x96/0xd0 [ 74.797679][ T5442] ? proc_fail_nth_write+0x12d/0x160 [ 74.797710][ T5442] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.797742][ T5442] ? vfs_write+0x75e/0x8e0 [ 74.797974][ T5442] ? __rcu_read_unlock+0x4f/0x70 [ 74.797996][ T5442] ? __fget_files+0x184/0x1c0 [ 74.798014][ T5442] ? fput+0x8f/0xc0 [ 74.798114][ T5442] __x64_sys_io_uring_enter+0x78/0x90 [ 74.798144][ T5442] x64_sys_call+0x28c8/0x2fb0 [ 74.798223][ T5442] do_syscall_64+0xd2/0x200 [ 74.798243][ T5442] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.798269][ T5442] ? clear_bhb_loop+0x40/0x90 [ 74.798291][ T5442] ? clear_bhb_loop+0x40/0x90 [ 74.798380][ T5442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.798402][ T5442] RIP: 0033:0x7f10e5cde9a9 [ 74.798417][ T5442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.798437][ T5442] RSP: 002b:00007f10e433f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 74.798458][ T5442] RAX: ffffffffffffffda RBX: 00007f10e5f05fa0 RCX: 00007f10e5cde9a9 [ 74.798471][ T5442] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 74.798487][ T5442] RBP: 00007f10e433f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.798536][ T5442] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 74.798549][ T5442] R13: 0000000000000000 R14: 00007f10e5f05fa0 R15: 00007ffcfe825bd8 [ 74.798568][ T5442] [ 74.800273][ T5444] loop3: detected capacity change from 0 to 512 [ 75.041424][ T5444] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.055744][ T5444] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.607: invalid block [ 75.084047][ T5444] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.607: invalid indirect mapped block 4294967295 (level 1) [ 75.095501][ T5450] loop1: detected capacity change from 0 to 128 [ 75.108161][ T5444] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.607: invalid indirect mapped block 4294967295 (level 1) [ 75.123552][ T5444] EXT4-fs (loop3): 2 truncates cleaned up [ 75.123552][ T5450] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 75.123678][ T5444] ================================================================== [ 75.123712][ T5444] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 75.123753][ T5444] [ 75.123761][ T5444] write to 0xffffffff88e326ea of 28 bytes by task 5450 on cpu 0: [ 75.123780][ T5444] vsnprintf+0x2ce/0x890 [ 75.123804][ T5444] pointer+0x833/0xcf0 [ 75.123824][ T5444] vsnprintf+0x491/0x890 [ 75.123844][ T5444] vscnprintf+0x41/0x90 [ 75.123866][ T5444] printk_sprint+0x30/0x2d0 [ 75.123886][ T5444] vprintk_store+0x599/0x860 [ 75.123903][ T5444] vprintk_emit+0x178/0x650 [ 75.123919][ T5444] vprintk_default+0x26/0x30 [ 75.123936][ T5444] vprintk+0x1d/0x30 [ 75.123958][ T5444] _printk+0x79/0xa0 [ 75.123986][ T5444] _fat_msg+0xa4/0xd0 [ 75.124004][ T5444] fat_fill_super+0x17c7/0x1ce0 [ 75.124030][ T5444] vfat_fill_super+0x24/0x30 [ 75.124062][ T5444] get_tree_bdev_flags+0x291/0x300 [ 75.124096][ T5444] get_tree_bdev+0x1f/0x30 [ 75.124127][ T5444] vfat_get_tree+0x1c/0x30 [ 75.124159][ T5444] vfs_get_tree+0x54/0x1d0 [ 75.124190][ T5444] do_new_mount+0x207/0x680 [ 75.124226][ T5444] path_mount+0x4a4/0xb20 [ 75.124254][ T5444] __se_sys_mount+0x28f/0x2e0 [ 75.124286][ T5444] __x64_sys_mount+0x67/0x80 [ 75.124317][ T5444] x64_sys_call+0xd36/0x2fb0 [ 75.124340][ T5444] do_syscall_64+0xd2/0x200 [ 75.124358][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.124377][ T5444] [ 75.124384][ T5444] read to 0xffffffff88e326f8 of 8 bytes by task 5444 on cpu 1: [ 75.124399][ T5444] data_push_tail+0xfd/0x420 [ 75.124431][ T5444] data_alloc+0xbf/0x2b0 [ 75.124458][ T5444] prb_reserve+0x808/0xaf0 [ 75.124489][ T5444] vprintk_store+0x56d/0x860 [ 75.124508][ T5444] vprintk_emit+0x178/0x650 [ 75.124526][ T5444] vprintk_default+0x26/0x30 [ 75.124543][ T5444] vprintk+0x1d/0x30 [ 75.124568][ T5444] _printk+0x79/0xa0 [ 75.124592][ T5444] __ext4_msg+0x18f/0x1a0 [ 75.124611][ T5444] ext4_orphan_cleanup+0x938/0xa00 [ 75.124634][ T5444] ext4_fill_super+0x3171/0x34e0 [ 75.124655][ T5444] get_tree_bdev_flags+0x291/0x300 [ 75.124705][ T5444] get_tree_bdev+0x1f/0x30 [ 75.124736][ T5444] ext4_get_tree+0x1c/0x30 [ 75.124757][ T5444] vfs_get_tree+0x54/0x1d0 [ 75.124789][ T5444] do_new_mount+0x207/0x680 [ 75.124821][ T5444] path_mount+0x4a4/0xb20 [ 75.124851][ T5444] __se_sys_mount+0x28f/0x2e0 [ 75.124885][ T5444] __x64_sys_mount+0x67/0x80 [ 75.124916][ T5444] x64_sys_call+0xd36/0x2fb0 [ 75.124940][ T5444] do_syscall_64+0xd2/0x200 [ 75.124961][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.124984][ T5444] [ 75.124989][ T5444] value changed: 0x00000000ffffe091 -> 0x65727574616e6769 [ 75.125002][ T5444] [ 75.125008][ T5444] Reported by Kernel Concurrency Sanitizer on: [ 75.125022][ T5444] CPU: 1 UID: 0 PID: 5444 Comm: syz.3.607 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 75.125053][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.125068][ T5444] ================================================================== [ 75.209287][ T5450] FAT-fs (loop1): FAT read failed (blocknr 128) [ 75.384029][ T5455] loop4: detected capacity change from 0 to 2048 [ 75.488428][ T5444] ALSA: seq fatal error: cannot create timer (-19) [ 75.516453][ T41] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)