last executing test programs: 3m47.348451242s ago: executing program 1 (id=957): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @remote}, 0x12) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_io_uring_setup(0x3fed, &(0x7f0000000380), &(0x7f0000000080), &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x81440c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x488, &(0x7f0000002000)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) 3m45.342888275s ago: executing program 1 (id=968): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000bc0)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001bc0)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)="644bc70b5137bd270a7827f12d5c8e58783d93a355b538e9ce68dd037a1cbe8ff0c3ce552efffd9153aaf9176e604131e20b96009fa0958ca60c7c854fa8067751dba6a67cad0a2a89287e155e54430daa2905cc4d041afb5fb46b74868187f7afdb66363ac19ddc634d163a6b6ff6099ec529f0af084afd1c9fa54fc127aa7964a90b00b09a88e63174e5354ac66b99862033b6b5fdd69e03d13ac73d1b598c45bf7ca3819fb94708", 0xa9}, {&(0x7f0000000440)="b59ab5b5605cfd10e340419732036259ca30dbb7bcdd58192e7733f24e6f3f6d10a9a08583a54e6f4a249b34f1d1865353927c9a5e9abd5dedaf1b67c9315604e2ddb9a19fcfa1d7c3576e39378562bf3b5d57d46059409638f8a66e74e5fbb8612e082186448e06e0b1eedea331b6bc7a799d2c6005924c6bae59e26a728bd320fe1fbd", 0x84}, {&(0x7f0000000500)="45adafaa4c01ab52a575862f348c3e52fd0de073d851f6e1350b511d487155f3b588836741c50af22d176f366a9740dc5eb6f07aed2a64d3746a4bb4dc7176707a821fb4ad529a9c03ae52b8f1f0a720b1e41633ef477cfdbe3137c650c56f6fed6f64912743dbe48f6d1b3fa05d65791ddc86b198b13537b82822a519e1cf0dd54bceaec981c9c33136a301", 0x8c}], 0x3}}], 0x2, 0x4048055) 3m45.28059793s ago: executing program 1 (id=969): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000003dd67b1100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x6}}, 0x20) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) unshare(0x2c060000) unshare(0x2c020400) 3m44.9062977s ago: executing program 1 (id=971): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0300", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) io_setup(0x7, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/76}, 0x20) io_submit(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000040), 0x22, 0x65f, &(0x7f0000002980)="$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") sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc002, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) recvmsg$can_j1939(r5, &(0x7f0000000240)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f00000002c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000005c0)=""/186, 0xba}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000780)=""/72, 0x48}], 0x6, &(0x7f0000000100)=""/62, 0x3e}, 0x40) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6b2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x10000000000]}) 3m43.876745253s ago: executing program 1 (id=976): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000700)={[{@nolazytime}, {@abort}, {@jqfmt_vfsv0}], [{@obj_type={'obj_type', 0x3d, 'T\b\x00C\x00'}}, {@uid_eq}]}, 0x1, 0x576, &(0x7f0000000140)="$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") getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@setneightbl={0x70, 0x43, 0x1, 0x70bd28, 0x25dfdbfe, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x8}, @NDTA_NAME={0x14, 0x1, 'kmem_cache_free\x00'}, @NDTA_PARMS={0xc, 0x6, 0x0, 0x1, [@NDTPA_QUEUE_LEN={0x8, 0x8, 0xfff}]}, @NDTA_THRESH2={0x8, 0x3, 0x10}, @NDTA_THRESH2={0x8}, @NDTA_PARMS={0x20, 0x6, 0x0, 0x1, [@NDTPA_QUEUE_LEN={0x8, 0x8, 0x800}, @NDTPA_APP_PROBES={0x8, 0x9, 0x9ad}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x4}]}]}, 0x70}}, 0x40080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 3m43.464967387s ago: executing program 1 (id=978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(0x0) 3m43.456974787s ago: executing program 32 (id=978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(0x0) 4.111723857s ago: executing program 0 (id=2009): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d00000000000000000000000000000000010000840000000051b7e472"], &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) setgroups(0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 3.849151109s ago: executing program 0 (id=2013): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x522, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x1e, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4810) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x58, 0x5}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000010018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7, 0x0, 0x40}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 3.529301325s ago: executing program 0 (id=2016): open(0x0, 0x80242, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="60100000010501"], 0x1060}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004480)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.494820388s ago: executing program 0 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 3.432025932s ago: executing program 0 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) 2.335166591s ago: executing program 0 (id=2035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000280)={0x2004800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x6}, &(0x7f0000000100)=""/228, 0xe4, &(0x7f0000000200)=""/6, &(0x7f0000000240)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x2, 0x4, 0x9, 0x68, 0x3, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xa5, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa0100fe, @remote}, {0x4f20, 0x4e22, 0x91, 0x0, @gue={{0x2, 0x0, 0x3, 0x2, 0x0, @val=0x80}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b35c112fa17932138ee8f6a6d2afdde33d5a4ff97f976b3ac6d8c10e10601d52cd3b5a4a38a054f2fba0b015c2eda7adba64f9cc4a250be4bc5185bd6691ecdac2d862bc9ca9725cfa1cba3babc13c16deb20c6c21024632724db85202581179fefc02f0f431933bd89"}}}}, 0xb3) sendmmsg$inet6(r3, &(0x7f0000008680)=[{{&(0x7f0000001b00)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c, 0x0, 0x0, &(0x7f0000003d40)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], 0x28}}], 0x1, 0x24008000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r11, 0x10f, 0x85) 2.169470554s ago: executing program 3 (id=2038): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x4018}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffeffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/233, 0xfffffffffffffff7}], 0x15, 0x0, 0x0, 0x2000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000040)=0x10, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0a00e32894cfa2000002800000ff0f000007e4b3576e425ad4fe09a625f81caca22b57a7461158c9d376982b57aed154cd376d05e3c381e2b4c8b73a87b81a757124842ffb17857813f6ac9124d4e7d8ddddc63769d5ed931522a80c0869a8f02c573626f3774863c4b2c8fb2175b8a88f8fc3dfdc7ed12ec80506024142fdeece85c122e50992c5d581ac050cadfa2593965c27d8083e288f2bd127d70e55c085022c643c957eb54ffa0f36d53cb1f49929a00217f37443f0d860619a82ba0d4d2ce213fdad3a7d989a39010b16d0480c550e7363973b3204e423f909afbd0cbac0ea712ef31dd76da75f30558872665deaa721e3874b05fb175286edac754f805b1cc9316cd0d87b0ec551e4480ef7ae36c1bb00"/289], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x78, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1be6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000080)={0x2, 0x4d}, 0xc) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0x2, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x20048083) sendmsg$rds(r2, &(0x7f0000000f40)={&(0x7f00000008c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000a40)=""/88, 0x58}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/236, 0xec}, {&(0x7f0000000dc0)=""/248, 0xf8}], 0x5, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="fffffefb7175420e714aa818e97176ef23e979191242720680f38ae80d409f8f40ebf032e80e5da6e89da1e66821a609fdef7a26a07defa9a135268d650c45c1d40a34bfe965052d75b18b8cb6997adcbfcc13dccd004ec5ea1547bcb2193345a39a3583e047f904534134"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004) 2.087187832s ago: executing program 3 (id=2041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (fail_nth: 1) 1.250231649s ago: executing program 2 (id=2047): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a62", 0x39}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a", 0x54}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055b0e2843cb487ed4657c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d183b2958886a77e1f2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21654af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb5f20e8db56962aeca814ad530c1413e502b92f3e51eaf75ec5b595b19e4945a1a821a8c47f804465f9e04d0ec9aff13036fe4f3a56b324e9ea795cc89d0f30433f3fa8aa7cc4dd93197840d644c6e48329c266316227ea917708cde40163a6b092d3c722a71e9f21255315cb87a74916d56da0479e7e8865b289fc8095a8477e7fee5eda0c55ec6d53c7aac85f6171717935832962f6db7889683497f3f5a4aa6c6af16908cc4c853536c4f624a75cae053c053f8490c028c15bf043adf4729306a4069324be546a83f71c16a15b86f1d6cb5505808acf055c982d", 0x1b0}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.213762042s ago: executing program 2 (id=2048): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000001000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000fffdffff95000000000000001801000020208c3f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000af0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x400000000000000}, 0x18) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2b80, 0x1}, &(0x7f0000000340)=0x9, &(0x7f0000000380), 0xffffffffffff63b1, 0x7, 0x3, 0xffffffffffffffff, 0x10, 0x3ff}}], 0xe8}, 0x0) 1.164973956s ago: executing program 3 (id=2049): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4008051) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, 0x1, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7ff}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x54) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3b8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_SET_WDS_PEER(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r8, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000980)=0xb) r9 = semget$private(0x0, 0x1, 0x4a9) semctl$SEM_STAT(r9, 0x1, 0x12, &(0x7f00000009c0)=""/4096) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r7) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000001c80)={&(0x7f00000019c0), 0xc, &(0x7f0000001c40)={&(0x7f0000001a40)={0x1e8, r10, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x44}, {0x6, 0x16, 0x80}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0xfffffff5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xfffffe01}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xd}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x62f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfc00}, {0x8, 0xb, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0xfff}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x9}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r11 = socket$inet6(0xa, 0x3, 0x6570) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r12, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x50, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x4}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0xa4, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x78, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1c58f2ab}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbcd5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x24008880) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r0) sendmsg$IEEE802154_LIST_PHY(r13, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x14, r14, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000002100), 0x4) 1.11855223s ago: executing program 2 (id=2050): r0 = socket(0x2b, 0x80801, 0x1) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 1.057456215s ago: executing program 3 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) recvmsg$can_j1939(r2, &(0x7f00000008c0)={&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/206, 0xce}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000800)=""/191, 0xbf}], 0x4, &(0x7f0000000580)=""/24, 0x18}, 0x80000040) r3 = socket(0x1a, 0x80000, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="8bfed547f72fef202c84c680fd9d86ea53a567c0bd22a497a013bca6bc229ab07e2a802a6a5cea41c6955a71b876eb045b8786d408df768292134f65ba60103bd9fe20882dce", 0x46}, {&(0x7f0000000340)="80b62995b98d03d1658543600c21f0b7d6e7beb49b4105ca29c78fd36cf74bfd7c01b243bf0f33da698952c0aaf5066572108ee4429239db09f3677ec35629380b5ba5c973c9b1dd29a72fe48bb09956e5448f902cca994e179d922902d3d60e2d03b1f21b69a6c7b70aa405a8fde0a7bae272c4a9661ebcd983bf2e6305abe2515bc14e48cc80a731fbae929546399391e565a97b706cb432a0c799195ae6b3061b692349c507074715161379a534666ceda2591e7609242889e887f1bb57bd20938d406af6590113118ff03cf8ca797ecbf8be2fc4290bd6da1c13d2caa5c37bfaa920837286ee7395862312758bb88e241d0ff072d8e9bf7fbe98a53148", 0xff}, {&(0x7f0000000180)="ce81548507b2a468db26d909995d063b4527d978c9610470cef427f1886e045e7d13b3d0931062e57cb9661aef54da2b47b7210e2a054ae9b042a8d952b1985ef6b783860a", 0x45}], 0x3, &(0x7f0000000280)}, 0x91) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1.056868595s ago: executing program 2 (id=2053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$binfmt_misc(r4, &(0x7f0000000640)="df", 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.019103248s ago: executing program 2 (id=2054): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xffffbfff, 0x0, 0xfffffffffffffffd, 0x1) pipe2$9p(0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 986.152621ms ago: executing program 3 (id=2055): bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00'], 0x1c}}, 0x0) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x1, 0x3f, &(0x7f00000004c0)=""/77, &(0x7f0000001ffc)=0x4d) r5 = getpid() syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) gettid() r6 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r6, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = getpid() ptrace$setregs(0xf, r7, 0x0, &(0x7f00000004c0)="0115c4d52b4a390ead29a8eefb6b216455b5ec72c6a93c11377c2b4dc997e929b10044c1f2761099d05d43d1943deaf290f308b5cfbc2c83fa93e3c43d529f2fe18380d39b05c4605b6bdd9cbf3eff8f86d5e6633949c8547b560706ef5fdf9860dba3c45eb81ca14aa9c186244543d6a930c4b17ae85975c88398f20b37b01bb56ed159bd515df07da339c7ac137919f11a0803a2f8eb2c1967fd92aec687a6bc77ea1c4bb293") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 953.307613ms ago: executing program 4 (id=2056): open(0x0, 0x80242, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="60100000010501"], 0x1060}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$nl_route_sched(r2, 0x0, 0x0) 896.093378ms ago: executing program 4 (id=2057): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="db1503feffff1a00000018000180145963ce78925f509b25358ba15debee1d4c748c13c61ea5fdea6d445a547225a9b695cb0e86cdcd83d7d9fae7c5a47cf39691ebd93b3010922fc2908a65ce413549f5da0cd3dd9c1974"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00ff2e52e39cfcdbdf25394a6d51"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket(0x23, 0x80805, 0x0) listen(r5, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010100}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket(0x40000000015, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd4b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f0000000540)=[{}], 0x8, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) set_mempolicy(0x0, &(0x7f0000000280)=0x6, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 869.72295ms ago: executing program 5 (id=2059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f00000003c0), &(0x7f0000004040)}, 0x20) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x41a1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r4, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 815.679765ms ago: executing program 4 (id=2060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f00000003c0), &(0x7f0000004040)}, 0x20) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x41a1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (fail_nth: 1) fallocate(r4, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 389.863179ms ago: executing program 5 (id=2061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010026bd7000fbdbdf2500fc0000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c000400ffffff7f9e0d000008000d0007000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000851}, 0x40080) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010026bd7000fbdbdf2500fc0000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c000400ffffff7f9e0d000008000d0007000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000851}, 0x40080) (async) 382.06252ms ago: executing program 4 (id=2062): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read(r0, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000140)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1fc, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c00018006000180"], 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x7}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000300)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x8, 0x0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="c56bea0f180000000000000002200000000000004eb649d1433e62396e18110000", @ANYRES32=r6, @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r10}, 0x18) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x3, 0x2}}) 277.849698ms ago: executing program 5 (id=2063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$int_out(r1, 0x2, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x3}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) 277.141188ms ago: executing program 4 (id=2064): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x6000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1000000020, 0x6]}}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[], 0x15) r10 = dup(r9) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) 166.802837ms ago: executing program 2 (id=2065): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000576ff1e1db61ed87e00000095000000000000005ecc69612c3df19ff6d656"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x65, &(0x7f00000001c0)=""/101, 0x41000, 0x23, '\x00', r2, @fallback=0x8, r3, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xe, 0x7, 0x80000001}, 0x10, 0x0, r0, 0x6, 0x0, &(0x7f00000002c0)=[{0x2, 0x2, 0x4, 0x8}, {0x3, 0x1, 0x3, 0xa}, {0x4, 0x3, 0x6, 0x8}, {0x1, 0x3, 0x2, 0x4}, {0x0, 0x1, 0x8, 0x7}, {0x5, 0x4, 0xa, 0xc}], 0x10, 0xffff34f0}, 0x94) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 130.64673ms ago: executing program 4 (id=2066): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xffffbfff, 0x0, 0xfffffffffffffffd, 0x1) pipe2$9p(0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) 78.473754ms ago: executing program 5 (id=2067): open(0x0, 0x80242, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="60100000010501"], 0x1060}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$nl_route_sched(r2, 0x0, 0x0) 9.12819ms ago: executing program 5 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000030500fffffffffffffff4000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000280012800b0001006d61637365630000180002800c0001004057000000000000050003"], 0x50}}, 0x4000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed6, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r8, 0x0, 0x200002}, 0x18) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) 8.67306ms ago: executing program 3 (id=2069): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) getgid() r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfff8, 0x86}, &(0x7f0000000500)=0xff3e) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2010, r2, 0x4e0c000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e762973cc9ea1f6c6f8470cdaf4164e8737f8a2d24986865dfae1290d0f2a898806338ea4bd3c486986db76fb22102646f96bfe4c3d37267b96a0603295254e08066a6c25737db890004006aba0fd31337dcdb276b70d63d6153c97676751036081e8a56c9a0db010f8e0a54b15d1deb015171dba6de2546791558127d411ed006954bdb9754c28bf42927457c323a22bc2f9dec352a9d", @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 0s ago: executing program 5 (id=2070): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000bc0)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2260cb755dbee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae81", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001bc0)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)="644bc70b5137bd270a7827f12d5c8e58783d93a355b538e9ce68dd037a1cbe8ff0c3ce552efffd9153aaf9176e604131e20b96009fa0958ca60c7c854fa8067751dba6a67cad0a2a89287e155e54430daa2905cc4d041afb5fb46b74868187f7afdb66363ac19ddc634d163a6b6ff6099ec529f0af084afd1c9fa54fc127aa7964a90b00b09a88e63174e5354ac66b99862033b6b5fdd69e03d13ac73d1b598c45bf7ca3819fb94708", 0xa9}, {&(0x7f0000000440)="b59ab5b5605cfd10e340419732036259ca30dbb7bcdd58192e7733f24e6f3f6d10a9a08583a54e6f4a249b34f1d1865353927c9a5e9abd5dedaf1b67c9315604e2ddb9a19fcfa1d7c3576e39378562bf3b5d57d46059409638f8a66e74e5fbb8612e082186448e06e0b1eedea331b6bc7a799d2c6005924c6bae59e26a728bd320fe", 0x82}, {&(0x7f0000000500)="45adafaa4c01ab52a575862f348c3e52fd0de073d851f6e1350b511d487155f3b588836741c50af22d176f366a9740dc5eb6f07aed2a64d3746a4bb4dc7176707a821fb4ad529a9c03ae52b8f1f0a720b1e41633ef477cfdbe3137c650c56f6fed6f64912743dbe48f6d1b3fa05d65791ddc86b198b13537b82822a519e1cf0dd54bceaec981c9c33136a301", 0x8c}], 0x3}}], 0x3, 0x4048055) kernel console output (not intermixed with test programs): 365.725036][ T9243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1551'. [ 366.534097][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1554'. [ 366.547981][ T9240] loop2: detected capacity change from 0 to 512 [ 366.568596][ T9240] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 366.624360][ T9240] EXT4-fs (loop2): 1 truncate cleaned up [ 366.630922][ T9240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.020559][ T9256] loop0: detected capacity change from 0 to 512 [ 368.697221][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.294153][ T9276] loop2: detected capacity change from 0 to 1024 [ 370.302388][ T9276] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 370.312590][ T9276] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 370.328831][ T9276] EXT4-fs (loop2): invalid journal inode [ 370.391498][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 370.391516][ T29] audit: type=1326 audit(1755187764.097:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.2.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 370.421141][ T29] audit: type=1326 audit(1755187764.097:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.2.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 370.444716][ T29] audit: type=1326 audit(1755187764.097:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.2.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 370.468137][ T29] audit: type=1326 audit(1755187764.097:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9273 comm="syz.2.1559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 370.594401][ T29] audit: type=1326 audit(1755187764.207:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 370.617881][ T29] audit: type=1326 audit(1755187764.207:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 370.641426][ T29] audit: type=1326 audit(1755187764.207:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 370.664977][ T29] audit: type=1326 audit(1755187764.207:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 370.688452][ T29] audit: type=1326 audit(1755187764.217:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 370.712094][ T29] audit: type=1326 audit(1755187764.217:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 370.967550][ T9295] hub 8-0:1.0: USB hub found [ 370.972578][ T9295] hub 8-0:1.0: 8 ports detected [ 371.019487][ T9296] loop5: detected capacity change from 0 to 512 [ 371.072098][ T9296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.113545][ T9296] EXT4-fs (loop5): orphan cleanup on readonly fs [ 371.121467][ T9296] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1566: bg 0: block 248: padding at end of block bitmap is not set [ 371.138161][ T9296] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1566: Failed to acquire dquot type 1 [ 371.220331][ T9296] EXT4-fs (loop5): 1 truncate cleaned up [ 371.242676][ T9296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.145378][ T9307] loop2: detected capacity change from 0 to 1024 [ 372.152507][ T9307] EXT4-fs: Ignoring removed orlov option [ 372.883078][ T9307] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 373.227435][ T9306] loop4: detected capacity change from 0 to 512 [ 373.860137][ T9311] loop3: detected capacity change from 0 to 128 [ 374.993331][ T9307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.011209][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.055647][ T9306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.064532][ T9306] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 375.064565][ T9306] EXT4-fs: failed to create workqueue [ 375.079516][ T9306] EXT4-fs (loop4): mount failed [ 375.092359][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.297728][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 375.518514][ T9333] rdma_rxe: rxe_newlink: failed to add syz_tun [ 375.715043][ T9340] rdma_rxe: rxe_newlink: failed to add syz_tun [ 375.734580][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 375.771882][ T9342] loop4: detected capacity change from 0 to 1024 [ 375.778869][ T9342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.793181][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 375.793195][ T29] audit: type=1326 audit(1755187769.497:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 375.799035][ T9342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 375.799433][ T29] audit: type=1326 audit(1755187769.497:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 375.854304][ T9342] System zones: 0-1, 3-36 [ 375.854889][ T29] audit: type=1326 audit(1755187769.497:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 375.882906][ T29] audit: type=1326 audit(1755187769.497:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 375.906780][ T29] audit: type=1326 audit(1755187769.497:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 375.930225][ T29] audit: type=1326 audit(1755187769.497:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 375.953674][ T29] audit: type=1326 audit(1755187769.497:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 375.977214][ T29] audit: type=1326 audit(1755187769.497:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 376.000658][ T29] audit: type=1326 audit(1755187769.497:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 376.024253][ T29] audit: type=1326 audit(1755187769.497:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9346 comm="syz.0.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 376.069477][ T9342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.224388][ T9360] loop3: detected capacity change from 0 to 512 [ 376.270951][ T9360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.283571][ T9360] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.313580][ T9373] loop2: detected capacity change from 0 to 512 [ 378.321167][ T9373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.337231][ T9373] EXT4-fs (loop2): orphan cleanup on readonly fs [ 378.345014][ T9373] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1588: bg 0: block 248: padding at end of block bitmap is not set [ 378.374967][ T9373] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1588: Failed to acquire dquot type 1 [ 378.388736][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.399657][ T9373] EXT4-fs (loop2): 1 truncate cleaned up [ 378.466056][ T9373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.587637][ T9382] loop5: detected capacity change from 0 to 512 [ 379.596038][ T9382] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 379.611222][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.643918][ T9382] EXT4-fs (loop5): orphan cleanup on readonly fs [ 379.651941][ T9382] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1593: bg 0: block 248: padding at end of block bitmap is not set [ 379.667833][ T9382] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1593: Failed to acquire dquot type 1 [ 379.687016][ T9382] EXT4-fs (loop5): 1 truncate cleaned up [ 379.712387][ T9382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.791359][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.229665][ T9396] loop3: detected capacity change from 0 to 512 [ 381.238298][ T9396] EXT4-fs: test_dummy_encryption option not supported [ 381.712028][ T9401] loop2: detected capacity change from 0 to 512 [ 381.737085][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.753681][ T9401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.766343][ T9401] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.884743][ T9402] loop0: detected capacity change from 0 to 512 [ 382.101128][ T9402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 382.728744][ T9402] EXT4-fs (loop0): 1 truncate cleaned up [ 382.845865][ T9402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.371113][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.932691][ T9422] loop4: detected capacity change from 0 to 1024 [ 383.939735][ T9422] EXT4-fs: Ignoring removed orlov option [ 383.960225][ T9422] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 384.003661][ T9422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.124963][ T9428] loop5: detected capacity change from 0 to 512 [ 384.133352][ T9428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 384.142965][ T9428] EXT4-fs (loop5): orphan cleanup on readonly fs [ 384.149788][ T9428] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1602: bg 0: block 248: padding at end of block bitmap is not set [ 384.164533][ T9428] __quota_error: 8 callbacks suppressed [ 384.164560][ T9428] Quota error (device loop5): write_blk: dquota write failed [ 384.177549][ T9428] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 384.187532][ T9428] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1602: Failed to acquire dquot type 1 [ 384.201891][ T9428] EXT4-fs (loop5): 1 truncate cleaned up [ 384.208064][ T9428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.418816][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.562976][ T29] audit: type=1326 audit(1755187778.267:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 384.589109][ T29] audit: type=1326 audit(1755187778.287:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 384.612698][ T29] audit: type=1326 audit(1755187778.287:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 384.636374][ T29] audit: type=1326 audit(1755187778.287:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 384.659879][ T29] audit: type=1326 audit(1755187778.287:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 384.683369][ T29] audit: type=1326 audit(1755187778.287:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 384.706976][ T29] audit: type=1326 audit(1755187778.287:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 384.730509][ T29] audit: type=1326 audit(1755187778.287:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 384.886316][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.033339][ T9444] loop5: detected capacity change from 0 to 512 [ 385.056125][ T9444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.068817][ T9444] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.511168][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 385.958827][ T9452] loop4: detected capacity change from 0 to 1024 [ 385.965635][ T9452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.029193][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1608'. [ 386.151989][ T9456] loop2: detected capacity change from 0 to 1024 [ 386.171574][ T9452] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 386.191241][ T9456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.209067][ T9452] System zones: 0-1, 3-36 [ 386.229544][ T9452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.281892][ T9456] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 386.318132][ T9456] System zones: 0-1, 3-36 [ 386.332198][ T9456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.664066][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.868213][ T9464] loop5: detected capacity change from 0 to 128 [ 387.005379][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.070620][ T9469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.089976][ T9469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.146960][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.314762][ T9475] rdma_rxe: rxe_newlink: failed to add syz_tun [ 387.330942][ T9475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1614'. [ 387.436596][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.578639][ T9491] loop0: detected capacity change from 0 to 1024 [ 387.587521][ T9491] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 387.605230][ T9491] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 387.636282][ T9491] EXT4-fs (loop0): invalid journal inode [ 388.171491][ T9511] loop2: detected capacity change from 0 to 128 [ 388.272943][ T9515] loop4: detected capacity change from 0 to 512 [ 388.337972][ T9518] loop5: detected capacity change from 0 to 512 [ 388.470782][ T9518] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 388.846261][ T9531] hub 8-0:1.0: USB hub found [ 388.858048][ T9531] hub 8-0:1.0: 8 ports detected [ 389.348172][ T9515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.401145][ T9515] EXT4-fs (loop4): orphan cleanup on readonly fs [ 389.422670][ T9515] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1629: bg 0: block 248: padding at end of block bitmap is not set [ 389.439135][ T9515] __quota_error: 69 callbacks suppressed [ 389.439151][ T9515] Quota error (device loop4): write_blk: dquota write failed [ 389.452322][ T9515] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 389.462380][ T9515] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1629: Failed to acquire dquot type 1 [ 389.535741][ T9518] EXT4-fs (loop5): 1 truncate cleaned up [ 389.705639][ T9518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.234010][ T9515] EXT4-fs (loop4): 1 truncate cleaned up [ 390.258406][ T9515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 390.276934][ T9542] loop3: detected capacity change from 0 to 1024 [ 390.295962][ T9542] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 390.320572][ T9542] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 390.440345][ T9542] EXT4-fs (loop3): invalid journal inode [ 390.540771][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.559966][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.871898][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.925266][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1640'. [ 391.021739][ T9555] loop3: detected capacity change from 0 to 512 [ 391.082182][ T9552] loop5: detected capacity change from 0 to 1024 [ 391.165017][ T9555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.177914][ T9555] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.276828][ T9552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.385133][ T9552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 391.514456][ T9552] System zones: 0-1, 3-36 [ 391.668498][ T9568] loop2: detected capacity change from 0 to 512 [ 391.708189][ T9568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.719009][ T9568] EXT4-fs (loop2): orphan cleanup on readonly fs [ 391.726454][ T9568] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1644: bg 0: block 248: padding at end of block bitmap is not set [ 391.918850][ T9552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.933039][ T9568] Quota error (device loop2): write_blk: dquota write failed [ 391.940488][ T9568] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 391.950440][ T9568] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1644: Failed to acquire dquot type 1 [ 392.627241][ T9568] EXT4-fs (loop2): 1 truncate cleaned up [ 392.636269][ T9568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 392.819190][ T9578] loop0: detected capacity change from 0 to 512 [ 393.970217][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.601180][ T9578] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 394.613345][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.624913][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.659810][ T9578] EXT4-fs (loop0): 1 truncate cleaned up [ 394.666656][ T9578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.043340][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.101189][ T9589] loop5: detected capacity change from 0 to 128 [ 395.352861][ T9597] loop2: detected capacity change from 0 to 512 [ 395.836718][ T9597] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 395.862900][ T9597] EXT4-fs (loop2): 1 truncate cleaned up [ 395.870460][ T9597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.993216][ T9603] loop5: detected capacity change from 0 to 512 [ 397.251662][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.269433][ T9603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.282150][ T9603] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 397.508739][ T9609] loop3: detected capacity change from 0 to 1024 [ 397.525703][ T9609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.549593][ T9609] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 397.575219][ T9609] System zones: 0-1, 3-36 [ 397.589233][ T9609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.830486][ T29] audit: type=1326 audit(1755187791.537:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 397.907183][ T29] audit: type=1326 audit(1755187791.567:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 397.930705][ T29] audit: type=1326 audit(1755187791.567:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 397.954200][ T29] audit: type=1326 audit(1755187791.567:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 397.977653][ T29] audit: type=1326 audit(1755187791.567:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 398.001134][ T29] audit: type=1326 audit(1755187791.567:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 398.024642][ T29] audit: type=1326 audit(1755187791.567:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 398.048238][ T29] audit: type=1326 audit(1755187791.567:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 398.071704][ T29] audit: type=1326 audit(1755187791.567:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 398.095124][ T29] audit: type=1326 audit(1755187791.567:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.2.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 398.178527][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.363720][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.522060][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.555958][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.565281][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.586762][ T9633] loop3: detected capacity change from 0 to 512 [ 398.594179][ T9633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 398.604103][ T9633] EXT4-fs (loop3): orphan cleanup on readonly fs [ 398.612167][ T9633] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1657: bg 0: block 248: padding at end of block bitmap is not set [ 398.626689][ T9633] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1657: Failed to acquire dquot type 1 [ 398.638765][ T9633] EXT4-fs (loop3): 1 truncate cleaned up [ 398.645150][ T9633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.880590][ T9645] loop2: detected capacity change from 0 to 512 [ 398.891431][ T9645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 398.959286][ T9645] EXT4-fs (loop2): orphan cleanup on readonly fs [ 398.967307][ T9645] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1661: bg 0: block 248: padding at end of block bitmap is not set [ 398.982334][ T9645] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1661: Failed to acquire dquot type 1 [ 398.994927][ T9645] EXT4-fs (loop2): 1 truncate cleaned up [ 399.004866][ T9645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.264619][ T9650] loop5: detected capacity change from 0 to 1024 [ 399.277370][ T9650] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 399.320172][ T9650] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 399.349033][ T9650] EXT4-fs (loop5): invalid journal inode [ 399.376047][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.782215][ T9656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.816681][ T9652] netlink: 'syz.4.1665': attribute type 10 has an invalid length. [ 399.825525][ T9652] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1665'. [ 399.843891][ T9656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.296960][ T9660] hub 8-0:1.0: USB hub found [ 400.301682][ T9660] hub 8-0:1.0: 8 ports detected [ 402.332005][ T9672] loop5: detected capacity change from 0 to 512 [ 402.371554][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.394347][ T9672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.407177][ T9672] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.048125][ T9670] loop4: detected capacity change from 0 to 1024 [ 403.071625][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 403.071643][ T29] audit: type=1326 audit(1755187796.767:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.101317][ T29] audit: type=1326 audit(1755187796.767:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.124846][ T29] audit: type=1326 audit(1755187796.777:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.148370][ T29] audit: type=1326 audit(1755187796.777:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.171788][ T29] audit: type=1326 audit(1755187796.777:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.198608][ T9690] loop0: detected capacity change from 0 to 512 [ 403.211719][ T9670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 403.365970][ T29] audit: type=1326 audit(1755187796.907:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.389619][ T29] audit: type=1326 audit(1755187796.907:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.413122][ T29] audit: type=1326 audit(1755187796.907:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.436583][ T29] audit: type=1326 audit(1755187796.907:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.460059][ T29] audit: type=1326 audit(1755187796.907:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 403.518366][ T9698] loop3: detected capacity change from 0 to 1024 [ 403.525157][ T9698] EXT4-fs: Ignoring removed orlov option [ 403.530967][ T9698] EXT4-fs: inline encryption not supported [ 403.559410][ T9690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 403.568861][ T9670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 403.579810][ T9670] System zones: 0-1, 3-36 [ 403.584565][ T9690] EXT4-fs (loop0): orphan cleanup on readonly fs [ 403.595075][ T9690] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1675: bg 0: block 248: padding at end of block bitmap is not set [ 403.598113][ T9670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.618859][ T9690] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1675: Failed to acquire dquot type 1 [ 403.634429][ T9690] EXT4-fs (loop0): 1 truncate cleaned up [ 403.638878][ T9698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.640498][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.662302][ T9690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.705691][ T9704] loop5: detected capacity change from 0 to 128 [ 403.712798][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.910993][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.076239][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.684972][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.695456][ T9725] loop5: detected capacity change from 0 to 128 [ 405.716812][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.728487][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.767787][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.842203][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1687'. [ 407.160985][ T9739] loop5: detected capacity change from 0 to 512 [ 407.226586][ T9739] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 407.246223][ T9739] EXT4-fs (loop5): 1 truncate cleaned up [ 407.252724][ T9739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.342756][ T9743] loop4: detected capacity change from 0 to 512 [ 407.858593][ T9745] loop3: detected capacity change from 0 to 128 [ 408.434213][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.466862][ T9743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.479733][ T9743] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.613037][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 408.613137][ T29] audit: type=1326 audit(1755187802.317:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 408.732489][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'. [ 408.788631][ T29] audit: type=1326 audit(1755187802.407:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 408.812246][ T29] audit: type=1326 audit(1755187802.407:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 408.835850][ T29] audit: type=1326 audit(1755187802.407:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 408.859267][ T29] audit: type=1326 audit(1755187802.407:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 408.882702][ T29] audit: type=1326 audit(1755187802.407:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 408.906286][ T29] audit: type=1326 audit(1755187802.407:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 408.929783][ T29] audit: type=1326 audit(1755187802.407:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 408.953232][ T29] audit: type=1326 audit(1755187802.407:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 408.976759][ T29] audit: type=1326 audit(1755187802.407:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 409.535606][ T9780] loop3: detected capacity change from 0 to 512 [ 409.682668][ T9782] hub 8-0:1.0: USB hub found [ 409.687585][ T9782] hub 8-0:1.0: 8 ports detected [ 410.428047][ T9780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 411.259342][ T9780] EXT4-fs (loop3): 1 truncate cleaned up [ 411.265475][ T9780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.288889][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.485391][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.709465][ T9820] loop2: detected capacity change from 0 to 512 [ 412.980685][ T9820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.993562][ T9820] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 413.079888][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 414.071553][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 414.071570][ T29] audit: type=1326 audit(1755187807.777:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 415.063988][ T29] audit: type=1326 audit(1755187808.767:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 415.087525][ T29] audit: type=1326 audit(1755187808.767:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 415.111008][ T29] audit: type=1326 audit(1755187808.767:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 415.134430][ T29] audit: type=1326 audit(1755187808.767:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 415.157923][ T29] audit: type=1326 audit(1755187808.767:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 415.181449][ T29] audit: type=1326 audit(1755187808.767:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 415.204963][ T29] audit: type=1326 audit(1755187808.767:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 415.228386][ T29] audit: type=1326 audit(1755187808.767:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 415.251929][ T29] audit: type=1326 audit(1755187808.767:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 416.027537][ T9837] loop3: detected capacity change from 0 to 128 [ 416.115857][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'. [ 416.311524][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.396633][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1725'. [ 416.455434][ T9858] loop2: detected capacity change from 0 to 1024 [ 416.472465][ T9858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.954121][ T9858] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 417.055317][ T9858] System zones: 0-1, 3-36 [ 417.063097][ T9858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.254870][ T9874] loop4: detected capacity change from 0 to 1024 [ 417.265473][ T9874] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 417.301322][ T9874] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 417.389668][ T9874] EXT4-fs (loop4): invalid journal inode [ 417.534069][ T9884] loop0: detected capacity change from 0 to 512 [ 417.716655][ T9884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.729545][ T9884] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.032084][ T9890] loop5: detected capacity change from 0 to 128 [ 418.412683][ T9894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.565582][ T9894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.141621][ T9902] loop5: detected capacity change from 0 to 128 [ 419.241645][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.602957][ T9914] hub 8-0:1.0: USB hub found [ 419.608061][ T9914] hub 8-0:1.0: 8 ports detected [ 419.887709][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.026744][ T9920] netlink: 'syz.2.1741': attribute type 10 has an invalid length. [ 420.034987][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1741'. [ 420.084673][ T9916] loop3: detected capacity change from 0 to 512 [ 420.134945][ T9925] loop0: detected capacity change from 0 to 1024 [ 420.154417][ T9916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.170338][ T9925] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 420.208069][ T9925] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 420.615533][ T9925] EXT4-fs (loop0): invalid journal inode [ 420.656061][ T9932] loop5: detected capacity change from 0 to 128 [ 420.696962][ T9935] loop2: detected capacity change from 0 to 128 [ 420.698204][ T9916] EXT4-fs (loop3): orphan cleanup on readonly fs [ 420.994882][ T9946] loop2: detected capacity change from 0 to 512 [ 421.748324][ T9946] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 422.711541][ T9916] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1743: bg 0: block 248: padding at end of block bitmap is not set [ 422.727476][ T9916] __quota_error: 22 callbacks suppressed [ 422.727499][ T9916] Quota error (device loop3): write_blk: dquota write failed [ 422.740965][ T9916] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 422.751001][ T9916] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1743: Failed to acquire dquot type 1 [ 423.041757][ T9948] loop5: detected capacity change from 0 to 512 [ 423.064867][ T9945] loop0: detected capacity change from 0 to 512 [ 423.725841][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1754'. [ 424.746585][ T9946] EXT4-fs (loop2): 1 truncate cleaned up [ 424.752945][ T9946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.039911][ T9948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.052817][ T9948] EXT4-fs (loop5): orphan cleanup on readonly fs [ 425.061015][ T9948] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1753: bg 0: block 248: padding at end of block bitmap is not set [ 425.077205][ T9948] Quota error (device loop5): write_blk: dquota write failed [ 425.084720][ T9948] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 425.094659][ T9948] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1753: Failed to acquire dquot type 1 [ 425.108199][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.126251][ T9948] EXT4-fs (loop5): 1 truncate cleaned up [ 425.134248][ T9948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.178470][ T9945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.191140][ T9945] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.266647][ T9916] EXT4-fs (loop3): 1 truncate cleaned up [ 425.581587][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.639468][ T9916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.703929][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.751324][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.787275][ T9961] netlink: 'syz.2.1755': attribute type 10 has an invalid length. [ 425.795513][ T9961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1755'. [ 426.021963][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.046083][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1756'. [ 426.089679][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1760'. [ 426.166290][ T9975] loop5: detected capacity change from 0 to 128 [ 426.401906][ T9980] hub 8-0:1.0: USB hub found [ 426.406690][ T9980] hub 8-0:1.0: 8 ports detected [ 426.616507][ T9985] loop0: detected capacity change from 0 to 1024 [ 426.682344][ T9985] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 426.698283][ T9985] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 426.715467][ T9985] EXT4-fs (loop0): invalid journal inode [ 426.866850][ T9990] loop5: detected capacity change from 0 to 512 [ 426.884274][ T9991] loop0: detected capacity change from 0 to 512 [ 426.892767][ T9991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.906623][ T9991] EXT4-fs (loop0): orphan cleanup on readonly fs [ 426.916383][ T9991] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1767: bg 0: block 248: padding at end of block bitmap is not set [ 426.934002][ T9991] Quota error (device loop0): write_blk: dquota write failed [ 426.941438][ T9991] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 426.951397][ T9991] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1767: Failed to acquire dquot type 1 [ 426.964777][ T9991] EXT4-fs (loop0): 1 truncate cleaned up [ 426.971989][ T9991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.018122][ T9990] EXT4-fs: test_dummy_encryption option not supported [ 428.557209][ T9997] loop2: detected capacity change from 0 to 512 [ 428.564029][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.620110][ T9997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 428.649519][ T29] audit: type=1400 audit(1755187822.357:4661): avc: denied { mounton } for pid=9998 comm="syz.0.1769" path="/351/file0" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 428.692236][ T9997] EXT4-fs (loop2): orphan cleanup on readonly fs [ 428.708142][ T29] audit: type=1400 audit(1755187822.407:4662): avc: denied { watch watch_reads } for pid=9998 comm="syz.0.1769" path="/351/file0" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 428.771065][ T9997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1768: bg 0: block 248: padding at end of block bitmap is not set [ 428.802122][ T9997] Quota error (device loop2): write_blk: dquota write failed [ 428.809573][ T9997] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 428.819550][ T9997] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1768: Failed to acquire dquot type 1 [ 428.833422][ T9997] EXT4-fs (loop2): 1 truncate cleaned up [ 428.849355][ T9997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.393878][T10006] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 429.416085][T10006] bridge0: port 3(dummy0) entered disabled state [ 429.430741][T10006] dummy0: left allmulticast mode [ 429.441145][T10006] dummy0: left promiscuous mode [ 429.446211][T10006] bridge0: port 3(dummy0) entered disabled state [ 429.483190][T10007] FAULT_INJECTION: forcing a failure. [ 429.483190][T10007] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 429.496377][T10007] CPU: 1 UID: 0 PID: 10007 Comm: syz.4.1771 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 429.496406][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.496422][T10007] Call Trace: [ 429.496428][T10007] [ 429.496450][T10007] __dump_stack+0x1d/0x30 [ 429.496474][T10007] dump_stack_lvl+0xe8/0x140 [ 429.496494][T10007] dump_stack+0x15/0x1b [ 429.496510][T10007] should_fail_ex+0x265/0x280 [ 429.496569][T10007] should_fail+0xb/0x20 [ 429.496589][T10007] should_fail_usercopy+0x1a/0x20 [ 429.496612][T10007] _copy_from_user+0x1c/0xb0 [ 429.496784][T10007] ___sys_sendmsg+0xc1/0x1d0 [ 429.496822][T10007] __x64_sys_sendmsg+0xd4/0x160 [ 429.496919][T10007] x64_sys_call+0x191e/0x2ff0 [ 429.496948][T10007] do_syscall_64+0xd2/0x200 [ 429.496983][T10007] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 429.497007][T10007] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 429.497077][T10007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.497105][T10007] RIP: 0033:0x7fa81b14ebe9 [ 429.497127][T10007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.497145][T10007] RSP: 002b:00007fa819b8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.497265][T10007] RAX: ffffffffffffffda RBX: 00007fa81b376090 RCX: 00007fa81b14ebe9 [ 429.497282][T10007] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 429.497298][T10007] RBP: 00007fa819b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 429.497313][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.497329][T10007] R13: 00007fa81b376128 R14: 00007fa81b376090 R15: 00007ffc5794f218 [ 429.497353][T10007] [ 429.680155][T10006] team0: Port device dummy0 added [ 429.731706][T10010] dummy0: left allmulticast mode [ 429.736997][T10010] bridge0: port 3(dummy0) entered disabled state [ 429.748309][T10010] batman_adv: batadv0: Adding interface: dummy0 [ 429.754638][T10010] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.788295][T10010] batman_adv: batadv0: Interface activated: dummy0 [ 429.797568][ T29] audit: type=1400 audit(1755187823.497:4663): avc: denied { block_suspend } for pid=10008 comm="syz.0.1772" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 429.821365][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.854564][T10013] loop3: detected capacity change from 0 to 1024 [ 429.872000][T10013] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 429.897279][T10013] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 429.914292][T10013] EXT4-fs (loop3): invalid journal inode [ 429.925931][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.955619][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.006828][T10017] loop3: detected capacity change from 0 to 2048 [ 430.167168][T10022] loop3: detected capacity change from 0 to 128 [ 430.278835][T10024] FAULT_INJECTION: forcing a failure. [ 430.278835][T10024] name failslab, interval 1, probability 0, space 0, times 1 [ 430.291696][T10024] CPU: 0 UID: 0 PID: 10024 Comm: syz.3.1778 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 430.291734][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.291750][T10024] Call Trace: [ 430.291758][T10024] [ 430.291766][T10024] __dump_stack+0x1d/0x30 [ 430.291838][T10024] dump_stack_lvl+0xe8/0x140 [ 430.291863][T10024] dump_stack+0x15/0x1b [ 430.291885][T10024] should_fail_ex+0x265/0x280 [ 430.291912][T10024] should_failslab+0x8c/0xb0 [ 430.291939][T10024] kmem_cache_alloc_node_noprof+0x57/0x320 [ 430.292019][T10024] ? __alloc_skb+0x101/0x320 [ 430.292054][T10024] __alloc_skb+0x101/0x320 [ 430.292092][T10024] netlink_alloc_large_skb+0xba/0xf0 [ 430.292214][T10024] netlink_sendmsg+0x3cf/0x6b0 [ 430.292237][T10024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.292258][T10024] __sock_sendmsg+0x145/0x180 [ 430.292362][T10024] ____sys_sendmsg+0x31e/0x4e0 [ 430.292392][T10024] ___sys_sendmsg+0x17b/0x1d0 [ 430.292510][T10024] __x64_sys_sendmsg+0xd4/0x160 [ 430.292543][T10024] x64_sys_call+0x191e/0x2ff0 [ 430.292570][T10024] do_syscall_64+0xd2/0x200 [ 430.292605][T10024] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 430.292726][T10024] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 430.292759][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.292787][T10024] RIP: 0033:0x7f0771eaebe9 [ 430.292806][T10024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.292825][T10024] RSP: 002b:00007f0770917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.292929][T10024] RAX: ffffffffffffffda RBX: 00007f07720d5fa0 RCX: 00007f0771eaebe9 [ 430.292945][T10024] RDX: 0000000004008804 RSI: 00002000000002c0 RDI: 0000000000000003 [ 430.292964][T10024] RBP: 00007f0770917090 R08: 0000000000000000 R09: 0000000000000000 [ 430.292980][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.292994][T10024] R13: 00007f07720d6038 R14: 00007f07720d5fa0 R15: 00007ffc01f20b48 [ 430.293057][T10024] [ 430.550254][T10028] loop3: detected capacity change from 0 to 1024 [ 430.557452][T10028] ext4: Unknown parameter 'euid>00000000000000000000' [ 430.638119][ T29] audit: type=1326 audit(1755187824.317:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 430.661869][ T29] audit: type=1326 audit(1755187824.317:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 430.685403][ T29] audit: type=1326 audit(1755187824.317:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 430.708951][ T29] audit: type=1326 audit(1755187824.317:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 430.732478][ T29] audit: type=1326 audit(1755187824.317:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10027 comm="syz.3.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 430.800063][T10032] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1782'. [ 430.828684][T10034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1783'. [ 430.899568][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1784'. [ 431.421520][T10092] loop3: detected capacity change from 0 to 512 [ 431.440154][T10093] ALSA: seq fatal error: cannot create timer (-22) [ 431.447647][T10092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.465863][T10092] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.504798][T10102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.515680][T10102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.677951][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.735384][T10131] loop0: detected capacity change from 0 to 512 [ 431.751874][T10129] netlink: 'syz.3.1794': attribute type 2 has an invalid length. [ 431.791578][T10131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.807344][T10131] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.819149][T10142] capability: warning: `syz.3.1794' uses 32-bit capabilities (legacy support in use) [ 431.928576][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.993059][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.082607][T10172] FAULT_INJECTION: forcing a failure. [ 432.082607][T10172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.095915][T10172] CPU: 0 UID: 0 PID: 10172 Comm: syz.0.1800 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 432.095953][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.095970][T10172] Call Trace: [ 432.095979][T10172] [ 432.095989][T10172] __dump_stack+0x1d/0x30 [ 432.096020][T10172] dump_stack_lvl+0xe8/0x140 [ 432.096039][T10172] dump_stack+0x15/0x1b [ 432.096058][T10172] should_fail_ex+0x265/0x280 [ 432.096164][T10172] should_fail+0xb/0x20 [ 432.096187][T10172] should_fail_usercopy+0x1a/0x20 [ 432.096284][T10172] _copy_from_user+0x1c/0xb0 [ 432.096322][T10172] ___sys_sendmsg+0xc1/0x1d0 [ 432.096363][T10172] __sys_sendmmsg+0x178/0x300 [ 432.096397][T10172] __x64_sys_sendmmsg+0x57/0x70 [ 432.096509][T10172] x64_sys_call+0x1c4a/0x2ff0 [ 432.096538][T10172] do_syscall_64+0xd2/0x200 [ 432.096574][T10172] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 432.096635][T10172] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 432.096724][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.096753][T10172] RIP: 0033:0x7fec3523ebe9 [ 432.096772][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.096796][T10172] RSP: 002b:00007fec33ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 432.096830][T10172] RAX: ffffffffffffffda RBX: 00007fec35465fa0 RCX: 00007fec3523ebe9 [ 432.096843][T10172] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 432.096858][T10172] RBP: 00007fec33ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 432.096874][T10172] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.096890][T10172] R13: 00007fec35466038 R14: 00007fec35465fa0 R15: 00007ffd0e414718 [ 432.096918][T10172] [ 432.365748][T10181] loop2: detected capacity change from 0 to 512 [ 432.373009][T10181] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 432.387460][T10181] EXT4-fs (loop2): 1 truncate cleaned up [ 432.393676][T10181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.408731][T10187] FAULT_INJECTION: forcing a failure. [ 432.408731][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 432.421538][T10187] CPU: 1 UID: 0 PID: 10187 Comm: syz.0.1803 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 432.421570][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.421584][T10187] Call Trace: [ 432.421593][T10187] [ 432.421602][T10187] __dump_stack+0x1d/0x30 [ 432.421758][T10187] dump_stack_lvl+0xe8/0x140 [ 432.421783][T10187] dump_stack+0x15/0x1b [ 432.421802][T10187] should_fail_ex+0x265/0x280 [ 432.421822][T10187] should_failslab+0x8c/0xb0 [ 432.421892][T10187] kmem_cache_alloc_noprof+0x50/0x310 [ 432.421927][T10187] ? sctp_get_port_local+0x438/0xae0 [ 432.421960][T10187] sctp_get_port_local+0x438/0xae0 [ 432.422032][T10187] sctp_do_bind+0x398/0x4b0 [ 432.422073][T10187] sctp_connect_new_asoc+0x153/0x3a0 [ 432.422109][T10187] sctp_sendmsg+0xf10/0x18d0 [ 432.422162][T10187] ? selinux_socket_sendmsg+0x131/0x1b0 [ 432.422197][T10187] ? __pfx_sctp_sendmsg+0x10/0x10 [ 432.422228][T10187] inet_sendmsg+0xc5/0xd0 [ 432.422254][T10187] __sock_sendmsg+0x102/0x180 [ 432.422297][T10187] __sys_sendto+0x268/0x330 [ 432.422346][T10187] __x64_sys_sendto+0x76/0x90 [ 432.422389][T10187] x64_sys_call+0x2d05/0x2ff0 [ 432.422476][T10187] do_syscall_64+0xd2/0x200 [ 432.422511][T10187] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 432.422540][T10187] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 432.422568][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.422619][T10187] RIP: 0033:0x7fec3523ebe9 [ 432.422638][T10187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.422661][T10187] RSP: 002b:00007fec33ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 432.422685][T10187] RAX: ffffffffffffffda RBX: 00007fec35465fa0 RCX: 00007fec3523ebe9 [ 432.422701][T10187] RDX: 0000000000000006 RSI: 00002000000003c0 RDI: 0000000000000003 [ 432.422717][T10187] RBP: 00007fec33ca7090 R08: 0000200000000000 R09: 000000000000001c [ 432.422732][T10187] R10: 0000000000040040 R11: 0000000000000246 R12: 0000000000000001 [ 432.422755][T10187] R13: 00007fec35466038 R14: 00007fec35465fa0 R15: 00007ffd0e414718 [ 432.422776][T10187] [ 432.785680][T10204] loop3: detected capacity change from 0 to 512 [ 432.794296][T10204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 432.817378][T10204] EXT4-fs (loop3): 1 truncate cleaned up [ 432.825404][T10204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.877435][T10209] hub 8-0:1.0: USB hub found [ 432.882455][T10209] hub 8-0:1.0: 8 ports detected [ 433.466641][T10204] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.507786][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.744947][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.755980][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.209047][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 434.209066][ T29] audit: type=1400 audit(1755187827.917:4722): avc: denied { write } for pid=10254 comm="syz.4.1816" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 434.304193][T10263] loop0: detected capacity change from 0 to 512 [ 434.344084][T10263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.372305][T10263] EXT4-fs (loop0): orphan cleanup on readonly fs [ 434.392240][T10263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1814: bg 0: block 248: padding at end of block bitmap is not set [ 434.527877][ T29] audit: type=1400 audit(1755187827.967:4723): avc: denied { write } for pid=10254 comm="syz.4.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.547482][ T29] audit: type=1400 audit(1755187828.197:4724): avc: denied { setopt } for pid=10254 comm="syz.4.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 434.567213][ T29] audit: type=1400 audit(1755187828.217:4725): avc: denied { ioctl } for pid=10257 comm="syz.3.1815" path="socket:[23688]" dev="sockfs" ino=23688 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 434.592513][ T29] audit: type=1400 audit(1755187828.227:4726): avc: denied { write } for pid=10257 comm="syz.3.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 434.660809][T10263] Quota error (device loop0): write_blk: dquota write failed [ 434.668360][T10263] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 434.678328][T10263] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1814: Failed to acquire dquot type 1 [ 434.700130][T10271] netlink: 2036 bytes leftover after parsing attributes in process `syz.5.1817'. [ 434.709401][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1817'. [ 434.969415][T10278] loop2: detected capacity change from 0 to 512 [ 435.158140][ T29] audit: type=1400 audit(1755187828.597:4727): avc: denied { setopt } for pid=10276 comm="syz.3.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 435.179040][ T29] audit: type=1326 audit(1755187828.607:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 435.202602][ T29] audit: type=1326 audit(1755187828.607:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10276 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 435.230227][T10263] EXT4-fs (loop0): 1 truncate cleaned up [ 435.240229][T10263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 435.641589][T10278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.681635][T10278] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.877133][T10295] loop5: detected capacity change from 0 to 512 [ 435.884177][T10294] FAULT_INJECTION: forcing a failure. [ 435.884177][T10294] name failslab, interval 1, probability 0, space 0, times 0 [ 435.896978][T10294] CPU: 0 UID: 0 PID: 10294 Comm: syz.3.1824 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 435.897040][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.897059][T10294] Call Trace: [ 435.897066][T10294] [ 435.897074][T10294] __dump_stack+0x1d/0x30 [ 435.897095][T10294] dump_stack_lvl+0xe8/0x140 [ 435.897117][T10294] dump_stack+0x15/0x1b [ 435.897192][T10294] should_fail_ex+0x265/0x280 [ 435.897217][T10294] should_failslab+0x8c/0xb0 [ 435.897241][T10294] kmem_cache_alloc_node_noprof+0x57/0x320 [ 435.897275][T10294] ? __alloc_skb+0x101/0x320 [ 435.897320][T10294] __alloc_skb+0x101/0x320 [ 435.897354][T10294] netlink_alloc_large_skb+0xba/0xf0 [ 435.897393][T10294] netlink_sendmsg+0x3cf/0x6b0 [ 435.897422][T10294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.897451][T10294] __sock_sendmsg+0x145/0x180 [ 435.897551][T10294] ____sys_sendmsg+0x31e/0x4e0 [ 435.897579][T10294] ___sys_sendmsg+0x17b/0x1d0 [ 435.897617][T10294] __x64_sys_sendmsg+0xd4/0x160 [ 435.897703][T10294] x64_sys_call+0x191e/0x2ff0 [ 435.897724][T10294] do_syscall_64+0xd2/0x200 [ 435.897754][T10294] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 435.897782][T10294] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 435.897813][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.897839][T10294] RIP: 0033:0x7f0771eaebe9 [ 435.897884][T10294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.897908][T10294] RSP: 002b:00007f0770917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.897929][T10294] RAX: ffffffffffffffda RBX: 00007f07720d5fa0 RCX: 00007f0771eaebe9 [ 435.898007][T10294] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 435.898023][T10294] RBP: 00007f0770917090 R08: 0000000000000000 R09: 0000000000000000 [ 435.898038][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.898060][T10294] R13: 00007f07720d6038 R14: 00007f07720d5fa0 R15: 00007ffc01f20b48 [ 435.898078][T10294] [ 436.212741][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.224775][T10295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.239439][T10295] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.303064][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1823'. [ 436.412976][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.581469][T10308] loop4: detected capacity change from 0 to 512 [ 436.598916][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.694386][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'. [ 436.794037][T10308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.806647][T10308] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.205083][T10319] FAULT_INJECTION: forcing a failure. [ 438.205083][T10319] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 438.218659][T10319] CPU: 1 UID: 0 PID: 10319 Comm: syz.5.1833 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 438.218692][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.218708][T10319] Call Trace: [ 438.218716][T10319] [ 438.218726][T10319] __dump_stack+0x1d/0x30 [ 438.218754][T10319] dump_stack_lvl+0xe8/0x140 [ 438.218779][T10319] dump_stack+0x15/0x1b [ 438.218830][T10319] should_fail_ex+0x265/0x280 [ 438.218879][T10319] should_fail_alloc_page+0xf2/0x100 [ 438.218985][T10319] __alloc_frozen_pages_noprof+0xff/0x360 [ 438.219031][T10319] alloc_pages_mpol+0xb3/0x250 [ 438.219094][T10319] alloc_pages_noprof+0x90/0x130 [ 438.219130][T10319] pte_alloc_one+0x2d/0x120 [ 438.219154][T10319] ? should_fail_ex+0x30/0x280 [ 438.219246][T10319] __pte_alloc+0x32/0x2b0 [ 438.219279][T10319] handle_mm_fault+0x1c55/0x2c20 [ 438.219389][T10319] ? check_vma_flags+0x315/0x340 [ 438.219423][T10319] __get_user_pages+0x102e/0x1fa0 [ 438.219466][T10319] faultin_page_range+0x107/0x4e0 [ 438.219523][T10319] madvise_do_behavior+0x197/0x970 [ 438.219553][T10319] ? 0xffffffff81000000 [ 438.219644][T10319] ? __rcu_read_unlock+0x4f/0x70 [ 438.219676][T10319] do_madvise+0x10e/0x190 [ 438.219829][T10319] __x64_sys_madvise+0x64/0x80 [ 438.219940][T10319] x64_sys_call+0x1f1a/0x2ff0 [ 438.219969][T10319] do_syscall_64+0xd2/0x200 [ 438.220003][T10319] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 438.220081][T10319] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 438.220267][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.220289][T10319] RIP: 0033:0x7f7bc569ebe9 [ 438.220304][T10319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.220335][T10319] RSP: 002b:00007f7bc40ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 438.220359][T10319] RAX: ffffffffffffffda RBX: 00007f7bc58c5fa0 RCX: 00007f7bc569ebe9 [ 438.220372][T10319] RDX: 0000000000000017 RSI: 0000000000001000 RDI: 0000200000a5e000 [ 438.220385][T10319] RBP: 00007f7bc40ff090 R08: 0000000000000000 R09: 0000000000000000 [ 438.220397][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.220468][T10319] R13: 00007f7bc58c6038 R14: 00007f7bc58c5fa0 R15: 00007fff1e525b28 [ 438.220490][T10319] [ 439.088222][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1834'. [ 439.179794][T10327] loop0: detected capacity change from 0 to 512 [ 439.225007][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1837'. [ 439.246657][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 439.246674][ T29] audit: type=1326 audit(1755187832.947:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 439.288502][T10333] FAULT_INJECTION: forcing a failure. [ 439.288502][T10333] name failslab, interval 1, probability 0, space 0, times 0 [ 439.301226][T10333] CPU: 0 UID: 0 PID: 10333 Comm: syz.3.1839 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 439.301335][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.301356][T10333] Call Trace: [ 439.301364][T10333] [ 439.301374][T10333] __dump_stack+0x1d/0x30 [ 439.301401][T10333] dump_stack_lvl+0xe8/0x140 [ 439.301456][T10333] dump_stack+0x15/0x1b [ 439.301473][T10333] should_fail_ex+0x265/0x280 [ 439.301499][T10333] should_failslab+0x8c/0xb0 [ 439.301560][T10333] kmem_cache_alloc_noprof+0x50/0x310 [ 439.301595][T10333] ? audit_log_start+0x365/0x6c0 [ 439.301701][T10333] audit_log_start+0x365/0x6c0 [ 439.301745][T10333] audit_seccomp+0x48/0x100 [ 439.301860][T10333] ? __seccomp_filter+0x68c/0x10d0 [ 439.301888][T10333] __seccomp_filter+0x69d/0x10d0 [ 439.301916][T10333] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 439.301981][T10333] ? vfs_write+0x7e8/0x960 [ 439.302007][T10333] ? __rcu_read_unlock+0x4f/0x70 [ 439.302034][T10333] ? __fget_files+0x184/0x1c0 [ 439.302061][T10333] __secure_computing+0x82/0x150 [ 439.302153][T10333] syscall_trace_enter+0xcf/0x1e0 [ 439.302177][T10333] do_syscall_64+0xac/0x200 [ 439.302205][T10333] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 439.302265][T10333] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 439.302297][T10333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.302325][T10333] RIP: 0033:0x7f0771eaebe9 [ 439.302340][T10333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.302359][T10333] RSP: 002b:00007f0770917038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 439.302381][T10333] RAX: ffffffffffffffda RBX: 00007f07720d5fa0 RCX: 00007f0771eaebe9 [ 439.302430][T10333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.302444][T10333] RBP: 00007f0770917090 R08: 0000000000000000 R09: 0000000000000000 [ 439.302456][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.302578][T10333] R13: 00007f07720d6038 R14: 00007f07720d5fa0 R15: 00007ffc01f20b48 [ 439.302598][T10333] [ 439.302605][T10333] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 439.355776][ T29] audit: type=1326 audit(1755187832.987:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 439.359589][T10333] audit: out of memory in audit_log_start [ 439.364540][ T29] audit: type=1326 audit(1755187832.987:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0771ead550 code=0x7ffc0000 [ 439.388903][T10327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.389691][ T29] audit: type=1326 audit(1755187832.997:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.3.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0771ead69f code=0x7ffc0000 [ 439.394367][T10327] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.399175][ T29] audit: type=1326 audit(1755187833.057:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 439.405912][ T29] audit: type=1326 audit(1755187833.077:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 439.433348][T10327] FAULT_INJECTION: forcing a failure. [ 439.433348][T10327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.436275][ T29] audit: type=1326 audit(1755187833.077:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 439.440743][T10327] CPU: 0 UID: 0 PID: 10327 Comm: syz.0.1836 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 439.440772][T10327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.440785][T10327] Call Trace: [ 439.440858][T10327] [ 439.440951][T10327] __dump_stack+0x1d/0x30 [ 439.440983][T10327] dump_stack_lvl+0xe8/0x140 [ 439.441010][T10327] dump_stack+0x15/0x1b [ 439.441096][T10327] should_fail_ex+0x265/0x280 [ 439.441126][T10327] should_fail+0xb/0x20 [ 439.441163][T10327] should_fail_usercopy+0x1a/0x20 [ 439.441196][T10327] _copy_from_user+0x1c/0xb0 [ 439.441236][T10327] ext4_ioctl+0x5ac/0x2080 [ 439.441314][T10327] ? file_ioctl+0x146/0x530 [ 439.441339][T10327] ? ioctl_has_perm+0x257/0x2a0 [ 439.441372][T10327] ? do_vfs_ioctl+0x7ca/0xe10 [ 439.441397][T10327] ? selinux_file_ioctl+0x308/0x3a0 [ 439.441427][T10327] ? __fget_files+0x184/0x1c0 [ 439.441488][T10327] ? __pfx_ext4_ioctl+0x10/0x10 [ 439.441519][T10327] __se_sys_ioctl+0xcb/0x140 [ 439.441567][T10327] __x64_sys_ioctl+0x43/0x50 [ 439.441614][T10327] x64_sys_call+0x1816/0x2ff0 [ 439.441685][T10327] do_syscall_64+0xd2/0x200 [ 439.441723][T10327] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 439.441757][T10327] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 439.441846][T10327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.441876][T10327] RIP: 0033:0x7fec3523ebe9 [ 439.441933][T10327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.441958][T10327] RSP: 002b:00007fec33ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.441984][T10327] RAX: ffffffffffffffda RBX: 00007fec35465fa0 RCX: 00007fec3523ebe9 [ 439.442002][T10327] RDX: 0000200000000040 RSI: 00000000c028660f RDI: 0000000000000006 [ 439.442019][T10327] RBP: 00007fec33ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 439.442037][T10327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.442070][T10327] R13: 00007fec35466038 R14: 00007fec35465fa0 R15: 00007ffd0e414718 [ 439.442096][T10327] [ 439.908394][ T29] audit: type=1326 audit(1755187833.077:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10329 comm="syz.2.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f2b5febe9 code=0x7ffc0000 [ 439.932703][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.944887][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.975195][T10339] loop3: detected capacity change from 0 to 128 [ 440.035772][T10346] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 440.042370][T10346] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 440.050239][T10346] vhci_hcd vhci_hcd.0: Device attached [ 440.057574][T10347] vhci_hcd: cannot find the pending unlink 1 [ 440.109731][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1845'. [ 440.144590][T10358] loop5: detected capacity change from 0 to 512 [ 440.159884][T10358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 440.169774][T10358] EXT4-fs (loop5): orphan cleanup on readonly fs [ 440.177794][T10358] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1843: bg 0: block 248: padding at end of block bitmap is not set [ 440.194774][T10358] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1843: Failed to acquire dquot type 1 [ 440.207154][T10358] EXT4-fs (loop5): 1 truncate cleaned up [ 440.221369][T10358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 440.368361][T10355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1845'. [ 440.405250][T10363] loop2: detected capacity change from 0 to 128 [ 441.077111][T10347] vhci_hcd: connection closed [ 441.077353][ T31] vhci_hcd: stop threads [ 441.086450][ T31] vhci_hcd: release socket [ 441.091019][ T31] vhci_hcd: disconnect device [ 441.240563][ T5863] usb 2-1: enqueue for inactive port 0 [ 441.254994][T10372] FAULT_INJECTION: forcing a failure. [ 441.254994][T10372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.268147][T10372] CPU: 1 UID: 0 PID: 10372 Comm: syz.3.1850 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 441.268184][T10372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.268273][T10372] Call Trace: [ 441.268288][T10372] [ 441.268297][T10372] __dump_stack+0x1d/0x30 [ 441.268325][T10372] dump_stack_lvl+0xe8/0x140 [ 441.268425][T10372] dump_stack+0x15/0x1b [ 441.268514][T10372] should_fail_ex+0x265/0x280 [ 441.268537][T10372] should_fail+0xb/0x20 [ 441.268583][T10372] should_fail_usercopy+0x1a/0x20 [ 441.268612][T10372] _copy_from_user+0x1c/0xb0 [ 441.268648][T10372] __copy_msghdr+0x244/0x300 [ 441.268737][T10372] ___sys_sendmsg+0x109/0x1d0 [ 441.268778][T10372] __sys_sendmmsg+0x178/0x300 [ 441.268858][T10372] __x64_sys_sendmmsg+0x57/0x70 [ 441.268882][T10372] x64_sys_call+0x1c4a/0x2ff0 [ 441.268909][T10372] do_syscall_64+0xd2/0x200 [ 441.268938][T10372] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 441.268977][T10372] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 441.269009][T10372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.269041][T10372] RIP: 0033:0x7f0771eaebe9 [ 441.269061][T10372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.269123][T10372] RSP: 002b:00007f0770917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.269144][T10372] RAX: ffffffffffffffda RBX: 00007f07720d5fa0 RCX: 00007f0771eaebe9 [ 441.269157][T10372] RDX: 0000000000000002 RSI: 000020000000b4c0 RDI: 0000000000000003 [ 441.269170][T10372] RBP: 00007f0770917090 R08: 0000000000000000 R09: 0000000000000000 [ 441.269252][T10372] R10: 00000000000488c4 R11: 0000000000000246 R12: 0000000000000001 [ 441.269264][T10372] R13: 00007f07720d6038 R14: 00007f07720d5fa0 R15: 00007ffc01f20b48 [ 441.269282][T10372] [ 441.573861][T10377] loop2: detected capacity change from 0 to 2048 [ 441.603931][T10378] loop3: detected capacity change from 0 to 1024 [ 441.622294][T10376] netlink: 'syz.4.1852': attribute type 10 has an invalid length. [ 441.630575][T10376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1852'. [ 441.648064][T10377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 441.669012][T10378] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 441.708402][T10378] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 441.722914][T10376] dummy0: entered promiscuous mode [ 441.776859][T10378] EXT4-fs (loop3): invalid journal inode [ 441.914035][T10383] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.1851: inline data xattr refers to an external xattr inode [ 441.945247][T10387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 442.050374][T10393] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.1851: inline data xattr refers to an external xattr inode [ 442.072040][T10376] team0: Port device dummy0 removed [ 442.100781][T10376] bridge0: port 3(dummy0) entered blocking state [ 442.107625][T10376] bridge0: port 3(dummy0) entered disabled state [ 442.137725][T10376] dummy0: entered allmulticast mode [ 442.393011][T10403] FAULT_INJECTION: forcing a failure. [ 442.393011][T10403] name failslab, interval 1, probability 0, space 0, times 0 [ 442.405721][T10403] CPU: 0 UID: 0 PID: 10403 Comm: syz.0.1859 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 442.405758][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.405777][T10403] Call Trace: [ 442.405784][T10403] [ 442.405794][T10403] __dump_stack+0x1d/0x30 [ 442.405821][T10403] dump_stack_lvl+0xe8/0x140 [ 442.405845][T10403] dump_stack+0x15/0x1b [ 442.405905][T10403] should_fail_ex+0x265/0x280 [ 442.405927][T10403] should_failslab+0x8c/0xb0 [ 442.405951][T10403] kmem_cache_alloc_node_noprof+0x57/0x320 [ 442.405985][T10403] ? __alloc_skb+0x101/0x320 [ 442.406090][T10403] __alloc_skb+0x101/0x320 [ 442.406125][T10403] netlink_alloc_large_skb+0xba/0xf0 [ 442.406187][T10403] netlink_sendmsg+0x3cf/0x6b0 [ 442.406210][T10403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.406233][T10403] __sock_sendmsg+0x145/0x180 [ 442.406270][T10403] ____sys_sendmsg+0x31e/0x4e0 [ 442.406302][T10403] ___sys_sendmsg+0x17b/0x1d0 [ 442.406380][T10403] __x64_sys_sendmsg+0xd4/0x160 [ 442.406406][T10403] x64_sys_call+0x191e/0x2ff0 [ 442.406508][T10403] do_syscall_64+0xd2/0x200 [ 442.406536][T10403] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 442.406559][T10403] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 442.406590][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.406656][T10403] RIP: 0033:0x7fec3523ebe9 [ 442.406675][T10403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.406738][T10403] RSP: 002b:00007fec33ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.406763][T10403] RAX: ffffffffffffffda RBX: 00007fec35465fa0 RCX: 00007fec3523ebe9 [ 442.406788][T10403] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 442.406804][T10403] RBP: 00007fec33ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 442.406818][T10403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.406830][T10403] R13: 00007fec35466038 R14: 00007fec35465fa0 R15: 00007ffd0e414718 [ 442.406851][T10403] [ 442.408299][ T5863] usb 2-1: enqueue for inactive port 0 [ 442.664348][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.749618][T10377] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 442.765364][T10377] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 442.778013][T10377] EXT4-fs (loop2): This should not happen!! Data will be lost [ 442.778013][T10377] [ 442.778299][T10407] loop4: detected capacity change from 0 to 1024 [ 442.787755][T10377] EXT4-fs (loop2): Total free blocks count 0 [ 442.787770][T10377] EXT4-fs (loop2): Free/Dirty block details [ 442.806236][T10377] EXT4-fs (loop2): free_blocks=2415919104 [ 442.806372][T10405] loop3: detected capacity change from 0 to 512 [ 442.812136][T10377] EXT4-fs (loop2): dirty_blocks=8144 [ 442.824064][T10377] EXT4-fs (loop2): Block reservation details [ 442.830118][T10377] EXT4-fs (loop2): i_reserved_data_blocks=509 [ 442.849237][T10405] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 442.875449][T10407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 442.888362][T10405] EXT4-fs (loop3): orphan cleanup on readonly fs [ 442.897515][T10405] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.1860: Block bitmap for bg 0 marked uninitialized [ 442.912349][T10405] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 442.923162][T10405] EXT4-fs (loop3): 1 orphan inode deleted [ 442.929508][T10405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 442.956925][T10407] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 442.966927][T10407] System zones: 0-1, 3-36 [ 442.970984][ T3450] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 442.979660][T10407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.004560][T10423] netlink: 'syz.0.1868': attribute type 10 has an invalid length. [ 443.015214][T10423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1868'. [ 443.044992][T10405] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 443.055271][T10423] batman_adv: batadv0: Interface deactivated: dummy0 [ 443.069131][T10423] batman_adv: batadv0: Removing interface: dummy0 [ 443.079238][T10425] loop5: detected capacity change from 0 to 128 [ 443.087960][T10405] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 443.120796][T10423] bridge0: port 3(dummy0) entered blocking state [ 443.128444][T10423] bridge0: port 3(dummy0) entered disabled state [ 443.137412][T10423] dummy0: entered allmulticast mode [ 443.157926][T10423] bridge0: port 3(dummy0) entered blocking state [ 443.164886][T10423] bridge0: port 3(dummy0) entered forwarding state [ 443.350311][T10436] loop5: detected capacity change from 0 to 128 [ 443.351569][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.524741][T10441] loop2: detected capacity change from 0 to 512 [ 444.368135][T10441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 445.336519][ T5863] usb usb2-port1: attempt power cycle [ 445.376967][T10451] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1873'. [ 445.427876][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 445.470529][T10441] EXT4-fs (loop2): 1 truncate cleaned up [ 445.477101][T10441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.658754][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.734753][T10454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1874'. [ 446.245290][T10461] loop3: detected capacity change from 0 to 128 [ 446.341704][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.640080][T10470] process 'gtp' launched './file0' with NULL argv: empty string added [ 446.652193][T10471] bond1: entered promiscuous mode [ 446.655008][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 446.655053][ T29] audit: type=1400 audit(1755187840.347:4819): avc: denied { execute } for pid=10469 comm="gtp" name="file0" dev="tmpfs" ino=1987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 446.657312][T10471] bond1: entered allmulticast mode [ 446.666355][ T29] audit: type=1400 audit(1755187840.377:4820): avc: denied { execute_no_trans } for pid=10469 comm="gtp" path="/362/file0" dev="tmpfs" ino=1987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 446.685473][T10471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.721557][T10467] hub 8-0:1.0: USB hub found [ 446.726245][T10467] hub 8-0:1.0: 8 ports detected [ 446.736760][ T29] audit: type=1400 audit(1755187840.427:4821): avc: denied { map } for pid=10469 comm="gtp" path="socket:[24100]" dev="sockfs" ino=24100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 446.761790][T10471] bond1 (unregistering): Released all slaves [ 446.822138][T10476] loop4: detected capacity change from 0 to 512 [ 446.831974][T10476] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 446.855022][T10476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 446.913021][T10476] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.1875: Block bitmap for bg 0 marked uninitialized [ 446.940407][T10476] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 446.965602][T10476] EXT4-fs (loop4): 1 orphan inode deleted [ 446.977425][T10476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 446.995313][T10476] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 447.228794][T10476] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 447.268729][ T5863] usb usb2-port1: unable to enumerate USB device [ 447.517045][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1886'. [ 447.531856][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.563976][T10496] loop5: detected capacity change from 0 to 128 [ 447.588441][ T29] audit: type=1400 audit(1755187841.297:4822): avc: denied { shutdown } for pid=10498 comm="syz.4.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 447.651777][ T29] audit: type=1400 audit(1755187841.297:4823): avc: denied { create } for pid=10498 comm="syz.4.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 447.671486][ T29] audit: type=1400 audit(1755187841.297:4824): avc: denied { write } for pid=10498 comm="syz.4.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 447.707744][T10502] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 447.715547][T10502] netlink: 'syz.3.1889': attribute type 2 has an invalid length. [ 447.723327][T10502] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 447.731206][T10502] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 447.738974][T10502] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 447.746781][T10502] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 447.758570][ T29] audit: type=1400 audit(1755187841.407:4825): avc: denied { getopt } for pid=10501 comm="syz.3.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 447.807904][T10511] loop5: detected capacity change from 0 to 128 [ 447.836828][T10513] dummy0: left allmulticast mode [ 447.842149][T10513] bridge0: port 3(dummy0) entered disabled state [ 447.872135][T10515] loop3: detected capacity change from 0 to 512 [ 447.887419][T10481] Illegal XDP return value 4294967274 on prog (id 1069) dev N/A, expect packet loss! [ 447.905694][T10515] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1893: casefold flag without casefold feature [ 447.921417][T10515] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1893: couldn't read orphan inode 15 (err -117) [ 447.936337][T10515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.994791][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.116834][ T29] audit: type=1400 audit(1755187841.817:4826): avc: denied { ioctl } for pid=10527 comm="syz.0.1898" path="socket:[25031]" dev="sockfs" ino=25031 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 448.145845][T10522] hub 8-0:1.0: USB hub found [ 448.150734][T10522] hub 8-0:1.0: 8 ports detected [ 448.173963][ T29] audit: type=1326 audit(1755187841.817:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.0.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 448.197925][ T29] audit: type=1326 audit(1755187841.817:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.0.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec3523ebe9 code=0x7ffc0000 [ 448.283383][T10545] netlink: 'syz.0.1904': attribute type 10 has an invalid length. [ 448.291873][T10545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1904'. [ 448.686409][T10550] loop0: detected capacity change from 0 to 128 [ 448.887771][T10563] loop5: detected capacity change from 0 to 512 [ 448.912019][T10564] loop0: detected capacity change from 0 to 512 [ 448.919675][T10564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 448.930350][T10564] EXT4-fs (loop0): orphan cleanup on readonly fs [ 448.937268][T10564] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1910: bg 0: block 248: padding at end of block bitmap is not set [ 448.953397][T10564] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1910: Failed to acquire dquot type 1 [ 448.965649][T10564] EXT4-fs (loop0): 1 truncate cleaned up [ 448.972589][T10564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.181281][T10581] loop3: detected capacity change from 0 to 512 [ 449.197850][T10581] EXT4-fs: Ignoring removed mblk_io_submit option [ 449.205000][T10581] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 449.226769][T10581] EXT4-fs (loop3): 1 truncate cleaned up [ 449.236341][T10581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.315037][T10589] loop4: detected capacity change from 0 to 512 [ 449.327584][T10589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 449.347006][T10589] EXT4-fs (loop4): orphan cleanup on readonly fs [ 449.355039][T10589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1918: bg 0: block 248: padding at end of block bitmap is not set [ 449.370302][T10589] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1918: Failed to acquire dquot type 1 [ 449.382834][T10589] EXT4-fs (loop4): 1 truncate cleaned up [ 449.389388][T10589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.664172][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'. [ 449.685295][T10599] loop5: detected capacity change from 0 to 128 [ 449.692978][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.950781][T10613] SELinux: Context Ü is not valid (left unmapped). [ 450.200645][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.434701][T10621] loop4: detected capacity change from 0 to 512 [ 450.456728][T10621] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 450.492238][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.615613][T10633] loop3: detected capacity change from 0 to 128 [ 450.778379][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1938'. [ 450.806110][T10638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.821163][T10638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.032143][T10659] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 451.042542][T10659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1945'. [ 451.197047][T10668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1948'. [ 451.476134][T10675] loop0: detected capacity change from 0 to 128 [ 451.562518][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.661085][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.669298][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 451.669315][ T29] audit: type=1326 audit(1755187845.377:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.706919][ T29] audit: type=1326 audit(1755187845.397:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.730408][ T29] audit: type=1326 audit(1755187845.397:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.754544][ T29] audit: type=1326 audit(1755187845.397:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.778032][ T29] audit: type=1326 audit(1755187845.397:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.801751][ T29] audit: type=1326 audit(1755187845.397:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.825353][ T29] audit: type=1326 audit(1755187845.397:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.849132][ T29] audit: type=1326 audit(1755187845.397:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.849173][ T29] audit: type=1326 audit(1755187845.397:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.849281][ T29] audit: type=1326 audit(1755187845.397:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10667 comm="syz.5.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f7bc569ebe9 code=0x7ffc0000 [ 451.850560][T10685] loop2: detected capacity change from 0 to 1024 [ 451.965004][T10693] netlink: 'syz.0.1958': attribute type 10 has an invalid length. [ 451.976364][T10693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1958'. [ 451.984390][T10685] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 451.995187][T10685] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 452.009403][T10685] EXT4-fs (loop2): invalid journal inode [ 452.219215][T10709] dummy0: left allmulticast mode [ 452.228544][T10709] bridge0: port 3(dummy0) entered disabled state [ 452.502751][T10726] loop2: detected capacity change from 0 to 1024 [ 452.511736][T10726] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 452.583044][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 452.618947][T10726] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 453.121255][T10726] EXT4-fs (loop2): invalid journal inode [ 453.424967][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 454.364126][T10748] loop2: detected capacity change from 0 to 512 [ 454.375089][T10748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 454.508645][T10748] EXT4-fs (loop2): 1 truncate cleaned up [ 454.515403][T10748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.344552][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1988'. [ 455.485053][T10775] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1989'. [ 455.494153][T10775] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1989'. [ 455.530911][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1990'. [ 455.823770][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.839971][T10784] dummy0: left allmulticast mode [ 455.850360][T10784] bridge0: port 3(dummy0) entered disabled state [ 456.252330][T10803] loop4: detected capacity change from 0 to 128 [ 456.299890][T10800] hub 8-0:1.0: USB hub found [ 456.304767][T10800] hub 8-0:1.0: 8 ports detected [ 456.329364][T10806] netlink: 'syz.4.2001': attribute type 10 has an invalid length. [ 456.337740][T10806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2001'. [ 456.386145][T10806] bridge0: port 3(dummy0) entered blocking state [ 456.395412][T10806] bridge0: port 3(dummy0) entered disabled state [ 456.403394][T10806] dummy0: entered allmulticast mode [ 456.415780][T10806] bridge0: port 3(dummy0) entered blocking state [ 456.422679][T10806] bridge0: port 3(dummy0) entered forwarding state [ 456.476221][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2002'. [ 456.506533][T10811] loop4: detected capacity change from 0 to 512 [ 456.514064][T10811] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.522308][T10811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 456.533525][T10811] EXT4-fs (loop4): 1 truncate cleaned up [ 456.541500][T10811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.664250][T10824] loop5: detected capacity change from 0 to 512 [ 456.715485][T10824] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.730343][T10824] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 456.822907][T10824] EXT4-fs (loop5): 1 truncate cleaned up [ 456.829162][T10824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.901826][T10831] loop0: detected capacity change from 0 to 512 [ 456.974563][T10831] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 457.002722][T10831] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2009: invalid indirect mapped block 2683928664 (level 1) [ 457.039571][T10831] EXT4-fs (loop0): Remounting filesystem read-only [ 457.058748][T10831] EXT4-fs (loop0): 1 truncate cleaned up [ 457.064936][T10831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.152497][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.207815][T10842] netlink: 'syz.0.2013': attribute type 10 has an invalid length. [ 457.222925][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2013'. [ 457.270898][T10842] bridge0: port 3(dummy0) entered blocking state [ 457.278657][T10842] bridge0: port 3(dummy0) entered disabled state [ 457.288890][T10842] dummy0: entered allmulticast mode [ 457.335484][T10847] loop3: detected capacity change from 0 to 512 [ 457.337600][T10842] bridge0: port 3(dummy0) entered blocking state [ 457.351015][T10842] bridge0: port 3(dummy0) entered forwarding state [ 457.376924][T10847] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.420276][T10847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 457.449418][T10847] EXT4-fs (loop3): 1 truncate cleaned up [ 457.455606][T10847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.480001][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.540870][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.561096][T10859] FAULT_INJECTION: forcing a failure. [ 457.561096][T10859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.574247][T10859] CPU: 1 UID: 0 PID: 10859 Comm: syz.2.2021 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 457.574281][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.574297][T10859] Call Trace: [ 457.574305][T10859] [ 457.574314][T10859] __dump_stack+0x1d/0x30 [ 457.574343][T10859] dump_stack_lvl+0xe8/0x140 [ 457.574361][T10859] dump_stack+0x15/0x1b [ 457.574380][T10859] should_fail_ex+0x265/0x280 [ 457.574423][T10859] should_fail+0xb/0x20 [ 457.574443][T10859] should_fail_usercopy+0x1a/0x20 [ 457.574464][T10859] _copy_from_user+0x1c/0xb0 [ 457.574492][T10859] ___sys_sendmsg+0xc1/0x1d0 [ 457.574616][T10859] __x64_sys_sendmsg+0xd4/0x160 [ 457.574651][T10859] x64_sys_call+0x191e/0x2ff0 [ 457.574764][T10859] do_syscall_64+0xd2/0x200 [ 457.574792][T10859] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 457.574817][T10859] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 457.574891][T10859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.574939][T10859] RIP: 0033:0x7f1f2b5febe9 [ 457.574957][T10859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.574977][T10859] RSP: 002b:00007f1f2a05f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.574996][T10859] RAX: ffffffffffffffda RBX: 00007f1f2b825fa0 RCX: 00007f1f2b5febe9 [ 457.575008][T10859] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 457.575020][T10859] RBP: 00007f1f2a05f090 R08: 0000000000000000 R09: 0000000000000000 [ 457.575033][T10859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.575109][T10859] R13: 00007f1f2b826038 R14: 00007f1f2b825fa0 R15: 00007ffe14432b28 [ 457.575127][T10859] [ 458.207073][T10880] netlink: 'syz.4.2029': attribute type 10 has an invalid length. [ 458.222375][T10880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2029'. [ 458.562404][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.652153][T10899] loop5: detected capacity change from 0 to 512 [ 458.667875][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 458.689966][T10899] EXT4-fs: Ignoring removed mblk_io_submit option [ 458.716281][T10899] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 458.745700][T10903] syzkaller1: entered promiscuous mode [ 458.751421][T10903] syzkaller1: entered allmulticast mode [ 458.769337][T10899] EXT4-fs (loop5): 1 truncate cleaned up [ 458.775600][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 458.786834][T10899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.939981][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2041'. [ 458.962733][T10923] netlink: 'syz.4.2042': attribute type 10 has an invalid length. [ 458.994630][T10923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2042'. [ 459.007207][T10922] FAULT_INJECTION: forcing a failure. [ 459.007207][T10922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.020710][T10922] CPU: 0 UID: 0 PID: 10922 Comm: syz.3.2041 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 459.020820][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.020899][T10922] Call Trace: [ 459.020906][T10922] [ 459.020915][T10922] __dump_stack+0x1d/0x30 [ 459.020948][T10922] dump_stack_lvl+0xe8/0x140 [ 459.021027][T10922] dump_stack+0x15/0x1b [ 459.021057][T10922] should_fail_ex+0x265/0x280 [ 459.021111][T10922] should_fail+0xb/0x20 [ 459.021206][T10922] should_fail_usercopy+0x1a/0x20 [ 459.021262][T10922] _copy_from_user+0x1c/0xb0 [ 459.021300][T10922] ___sys_sendmsg+0xc1/0x1d0 [ 459.021350][T10922] __x64_sys_sendmsg+0xd4/0x160 [ 459.021386][T10922] x64_sys_call+0x191e/0x2ff0 [ 459.021426][T10922] do_syscall_64+0xd2/0x200 [ 459.021461][T10922] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 459.021494][T10922] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 459.021561][T10922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.021591][T10922] RIP: 0033:0x7f0771eaebe9 [ 459.021611][T10922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.021635][T10922] RSP: 002b:00007f0770917038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.021660][T10922] RAX: ffffffffffffffda RBX: 00007f07720d5fa0 RCX: 00007f0771eaebe9 [ 459.021691][T10922] RDX: 0000000000000850 RSI: 00002000000002c0 RDI: 0000000000000003 [ 459.021709][T10922] RBP: 00007f0770917090 R08: 0000000000000000 R09: 0000000000000000 [ 459.021725][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.021741][T10922] R13: 00007f07720d6038 R14: 00007f07720d5fa0 R15: 00007ffc01f20b48 [ 459.021768][T10922] [ 459.206024][T10903] bridge0: port 3(dummy0) entered disabled state [ 459.212505][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.219772][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.256934][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119711c00: rx timeout, send abort [ 459.270065][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 459.270083][ T29] audit: type=1400 audit(1755187852.977:5035): avc: denied { read } for pid=2973 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 459.298439][ T29] audit: type=1400 audit(1755187852.977:5036): avc: denied { search } for pid=2973 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.345031][T10903] batadv_slave_0: left promiscuous mode [ 459.352567][T10903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.387799][ T29] audit: type=1400 audit(1755187853.027:5037): avc: denied { search } for pid=2973 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.409726][ T29] audit: type=1400 audit(1755187853.027:5038): avc: denied { add_name } for pid=2973 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.431097][ T29] audit: type=1400 audit(1755187853.027:5039): avc: denied { create } for pid=2973 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 459.452105][ T29] audit: type=1400 audit(1755187853.027:5040): avc: denied { append open } for pid=2973 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 459.475294][ T29] audit: type=1400 audit(1755187853.027:5041): avc: denied { getattr } for pid=2973 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 459.507147][T10903] veth3: left promiscuous mode [ 459.512308][T10903] veth5: left promiscuous mode [ 459.521740][T10903] syzkaller1: left promiscuous mode [ 459.526990][T10903] syzkaller1: left allmulticast mode [ 459.547881][ T3450] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.557590][ T3450] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.566933][ T3450] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.577870][ T3450] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.596901][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.756964][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811985d200: rx timeout, send abort [ 459.766399][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119711c00: abort rx timeout. Force session deactivation [ 459.798628][ T29] audit: type=1400 audit(1755187853.497:5042): avc: denied { ioctl } for pid=10939 comm="syz.3.2049" path="socket:[25811]" dev="sockfs" ino=25811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 459.897407][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2051'. [ 459.917797][ T29] audit: type=1400 audit(1755187853.617:5043): avc: denied { bind } for pid=10948 comm="syz.2.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 459.988064][ T29] audit: type=1326 audit(1755187853.667:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0771eaebe9 code=0x7ffc0000 [ 460.024258][T10959] loop3: detected capacity change from 0 to 1024 [ 460.034722][T10959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 460.060984][T10959] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 460.069690][T10959] System zones: 0-1, 3-36 [ 460.080129][T10959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.081801][T10966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'. [ 460.161695][T10971] loop4: detected capacity change from 0 to 512 [ 460.175627][T10973] loop5: detected capacity change from 0 to 512 [ 460.195497][T10971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.221622][T10973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.235553][T10971] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.246844][T10973] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.264924][T10971] FAULT_INJECTION: forcing a failure. [ 460.264924][T10971] name failslab, interval 1, probability 0, space 0, times 0 [ 460.277779][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811985d200: abort rx timeout. Force session deactivation [ 460.288203][T10971] CPU: 0 UID: 0 PID: 10971 Comm: syz.4.2060 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 460.288319][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.288332][T10971] Call Trace: [ 460.288339][T10971] [ 460.288347][T10971] __dump_stack+0x1d/0x30 [ 460.288370][T10971] dump_stack_lvl+0xe8/0x140 [ 460.288469][T10971] dump_stack+0x15/0x1b [ 460.288486][T10971] should_fail_ex+0x265/0x280 [ 460.288537][T10971] should_failslab+0x8c/0xb0 [ 460.288563][T10971] kmem_cache_alloc_noprof+0x50/0x310 [ 460.288594][T10971] ? mb_cache_entry_create+0xf0/0x540 [ 460.288638][T10971] ? check_xattrs+0x27d/0x7d0 [ 460.288666][T10971] mb_cache_entry_create+0xf0/0x540 [ 460.288702][T10971] ext4_xattr_get+0x298/0x470 [ 460.288731][T10971] ? selinux_file_open+0x2df/0x330 [ 460.288780][T10971] ext4_xattr_security_get+0x32/0x40 [ 460.288803][T10971] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 460.288897][T10971] __vfs_getxattr+0x2ad/0x2c0 [ 460.288924][T10971] cap_inode_need_killpriv+0x2e/0x50 [ 460.288962][T10971] security_inode_need_killpriv+0x36/0x70 [ 460.288996][T10971] file_remove_privs_flags+0x123/0x320 [ 460.289098][T10971] ? path_openat+0x1bf8/0x2170 [ 460.289118][T10971] ? _parse_integer_limit+0x170/0x190 [ 460.289141][T10971] file_modified_flags+0x32/0x350 [ 460.289175][T10971] file_modified+0x17/0x20 [ 460.289206][T10971] ext4_buffered_write_iter+0x1d0/0x3c0 [ 460.289242][T10971] ? ext4_file_write_iter+0xfe/0xf00 [ 460.289279][T10971] ext4_file_write_iter+0x383/0xf00 [ 460.289395][T10971] ? 0xffffffff81000000 [ 460.289409][T10971] ? __rcu_read_unlock+0x4f/0x70 [ 460.289432][T10971] ? avc_policy_seqno+0x15/0x30 [ 460.289487][T10971] ? selinux_file_permission+0x1e4/0x320 [ 460.289513][T10971] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 460.289546][T10971] vfs_write+0x527/0x960 [ 460.289576][T10971] __x64_sys_pwrite64+0xfd/0x150 [ 460.289603][T10971] x64_sys_call+0xc4d/0x2ff0 [ 460.289702][T10971] do_syscall_64+0xd2/0x200 [ 460.289731][T10971] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 460.289823][T10971] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 460.289850][T10971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.289873][T10971] RIP: 0033:0x7fa81b14ebe9 [ 460.289958][T10971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.289977][T10971] RSP: 002b:00007fa819baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 460.289997][T10971] RAX: ffffffffffffffda RBX: 00007fa81b375fa0 RCX: 00007fa81b14ebe9 [ 460.290011][T10971] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 000000000000000b [ 460.290024][T10971] RBP: 00007fa819baf090 R08: 0000000000000000 R09: 0000000000000000 [ 460.290037][T10971] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 460.290050][T10971] R13: 00007fa81b376038 R14: 00007fa81b375fa0 R15: 00007ffc5794f218 [ 460.290139][T10971] [ 460.606590][ T6892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.617584][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.637195][T10982] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 460.660527][T10982] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 460.677128][T10984] loop4: detected capacity change from 0 to 128 [ 460.840403][T10992] loop2: detected capacity change from 0 to 512 [ 460.848351][T10992] EXT4-fs: Ignoring removed mblk_io_submit option [ 460.855205][T10992] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 460.879533][T10992] EXT4-fs (loop2): 1 truncate cleaned up [ 460.897449][T10992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.936818][T10998] dummy0: left allmulticast mode [ 460.942142][T10998] bridge0: port 3(dummy0) entered disabled state [ 460.955744][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2068'. [ 460.968905][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.003679][T11003] ================================================================== [ 461.011826][T11003] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 461.018987][T11003] [ 461.021338][T11003] write to 0xffff88811a1a2dfc of 4 bytes by task 10992 on cpu 1: [ 461.029082][T11003] xas_set_mark+0x12b/0x140 [ 461.033809][T11003] __folio_start_writeback+0x1dd/0x440 [ 461.039305][T11003] ext4_bio_write_folio+0x5ad/0x9f0 [ 461.044558][T11003] mpage_process_page_bufs+0x4a1/0x620 [ 461.050141][T11003] mpage_prepare_extent_to_map+0x786/0xc00 [ 461.055988][T11003] ext4_do_writepages+0xa05/0x2750 [ 461.061150][T11003] ext4_writepages+0x176/0x300 [ 461.065948][T11003] do_writepages+0x1c6/0x310 [ 461.070591][T11003] filemap_write_and_wait_range+0x144/0x340 [ 461.076625][T11003] filemap_invalidate_pages+0xa4/0x1a0 [ 461.082107][T11003] kiocb_invalidate_pages+0x6e/0x80 [ 461.087342][T11003] __iomap_dio_rw+0x5d4/0x1250 [ 461.092139][T11003] iomap_dio_rw+0x40/0x90 [ 461.096498][T11003] ext4_file_write_iter+0xad9/0xf00 [ 461.101739][T11003] iter_file_splice_write+0x669/0x9e0 [ 461.107132][T11003] direct_splice_actor+0x156/0x2a0 [ 461.112268][T11003] splice_direct_to_actor+0x312/0x680 [ 461.117673][T11003] do_splice_direct+0xda/0x150 [ 461.122469][T11003] do_sendfile+0x380/0x650 [ 461.126922][T11003] __x64_sys_sendfile64+0x105/0x150 [ 461.132165][T11003] x64_sys_call+0x2bb0/0x2ff0 [ 461.136874][T11003] do_syscall_64+0xd2/0x200 [ 461.141420][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.147330][T11003] [ 461.149679][T11003] read to 0xffff88811a1a2dfc of 4 bytes by task 11003 on cpu 0: [ 461.157334][T11003] xas_find_marked+0x5dc/0x620 [ 461.162126][T11003] find_get_entry+0x5d/0x380 [ 461.166756][T11003] filemap_get_folios_tag+0x92/0x210 [ 461.172069][T11003] mpage_prepare_extent_to_map+0x320/0xc00 [ 461.177993][T11003] ext4_do_writepages+0x708/0x2750 [ 461.183143][T11003] ext4_writepages+0x176/0x300 [ 461.188100][T11003] do_writepages+0x1c6/0x310 [ 461.192730][T11003] file_write_and_wait_range+0x156/0x2c0 [ 461.198497][T11003] generic_buffers_fsync_noflush+0x45/0x120 [ 461.204452][T11003] ext4_sync_file+0x1ab/0x690 [ 461.209180][T11003] vfs_fsync_range+0x10a/0x130 [ 461.213975][T11003] ext4_buffered_write_iter+0x34f/0x3c0 [ 461.219578][T11003] ext4_file_write_iter+0xdbf/0xf00 [ 461.224814][T11003] iter_file_splice_write+0x669/0x9e0 [ 461.230219][T11003] direct_splice_actor+0x156/0x2a0 [ 461.235366][T11003] splice_direct_to_actor+0x312/0x680 [ 461.240771][T11003] do_splice_direct+0xda/0x150 [ 461.245644][T11003] do_sendfile+0x380/0x650 [ 461.250101][T11003] __x64_sys_sendfile64+0x105/0x150 [ 461.255695][T11003] x64_sys_call+0x2bb0/0x2ff0 [ 461.260403][T11003] do_syscall_64+0xd2/0x200 [ 461.265110][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.271023][T11003] [ 461.273365][T11003] value changed: 0x0a000021 -> 0x04000021 [ 461.279102][T11003] [ 461.281443][T11003] Reported by Kernel Concurrency Sanitizer on: [ 461.287702][T11003] CPU: 0 UID: 0 PID: 11003 Comm: syz.2.2065 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 461.300217][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.310291][T11003] ================================================================== [ 461.680975][T11003] syz.2.2065 (11003) used greatest stack depth: 9080 bytes left [ 461.700049][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.