last executing test programs: 2m22.725609177s ago: executing program 3 (id=994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc1", 0xc3}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c", 0x46}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b13", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e", 0x6}], 0x1}}], 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m22.673622658s ago: executing program 3 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") (fail_nth: 1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1a9041, 0x0) 2m22.395903552s ago: executing program 3 (id=996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 2m21.750944681s ago: executing program 3 (id=1000): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="02030003110000002cbd700700dbdf2503000900800000001cdc0dca27e936a91e86956485960f1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000005000000070c0000000005000500000000000a000000000000000000000000001a00000000000000000107000000000000006a85d6ae444ad92e6dda0c816f457ea0aaccf5998ed2a0ffee073dc2a9cd36a0c6183785d837a7f13917061620f1277e59715a"], 0x88}, 0x1, 0x7}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@getroute={0x14, 0x1a, 0x108, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000001240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x40, 0x60) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000002900000004000000000000000000000810000000000000002900000039"], 0x30}, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000000000), 0x4) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) mount_setattr(r10, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) fsetxattr$security_capability(r7, &(0x7f00000002c0), &(0x7f0000000340)=@v3={0x3000000, [{0x80}, {0x3, 0x9}]}, 0x14, 0x2) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x12b0021, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=!,']) 2m21.399853996s ago: executing program 3 (id=1004): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) personality(0x410000e) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00[4\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x18) setitimer(0x1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x3, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="666f34b7b3940a3c875d46f05ee5aa18000000000000000000006800000000000000000000a8324e3be93e637efc0a81", @ANYRES8=r1, @ANYBLOB="8000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb700850000001600"/62], 0x0, 0xbff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000e8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) 2m20.423881151s ago: executing program 3 (id=1009): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x2c00c0c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[], 0x1, 0x2a1, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 2m20.408899981s ago: executing program 32 (id=1009): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x2c00c0c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 6.479887196s ago: executing program 5 (id=2085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7f) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, 0x0, 0xfffffffffffffffe) sendmmsg$inet(r3, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) 5.133647985s ago: executing program 5 (id=2090): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$eJzs3d9rXFkdAPDvnSRt0qYmVR9q0Vq0khbtTNLYNvhQI4g+Faz1PcZkEkImmZCZtE0okuIfIIi/0CeffBF8FkH6J6hQ0HcRUYrbdh92YXdnmcmdbZudSSbb+dEmnw+c3HPuvZPv92SYkzn3Xu4N4Mg6HxHTEdEXEZciYiRdn0lLbO+U6n5Pn9yfq5YkKpXb/08iSdfVf1eSLk+mLxuMiO9/N+JHycfjlja3lmcLhfx62s6VV9Zypc2ty0srs4v5xfzq9OTEtanrU1enxtvW1xvf/s8vf/r779z4y9fu/mvmfxd/XE1rOI7Vtr3Yj1Zst7jfTtcHan+Luv6IWD9IsNdYX9qfgV4nAgBAS6rf8T8dEV+KiGe/6XU2AAAAQCdUvjkc7yURFQAAAODQytSugU0y2fRagOHIZLLZnWt4PxsnMoViqfzVheLG6nx1W8RoDGQWlgr58fRa4dEYSKrtiVr9efvKrvZkRJyOiJ+PDNXa2bliYb7XBz8AAADgiDi5a/7/9sjO/B8AAAA4ZEZ7nQAAAADQceb/AAAAcPg1nf8n/d1NBAAAAOiE7928WS2V+vOv5+9sbiwX71yez5eWsysbc9m54vpadrFYXKzds29lv99XKBbXvh6rG/dy5XypnCttbs2sFDdWyzO153rP5D0nGgAAALrv9Bcf/jOJiO1vDNVK1bF0Wwtz9enOZgd0UuZguyedygPovr5eJwD0zD4X+P7t891KBOg65+OBfSb2v9jVPuBhAwAA4HUw9rlXOv/vfCC8wUzk4ej6ROf/T7U/D6D73OALjq6mc3wTAzgaju+/y2CzDX9tcy4AAEDHDNdKksmmU/7hyGSy2Z1D/KMxkCwsFfLjEfGpiPjHyMDxanui10kDAAAAAAAAAAAAAAAAAAAAAAAAwBumUkmiAgAAABxqEZn/JumD/MdGLgzvPj5wLHlnpLaMiLu/vf2re7Pl8vpEdf1bH60v/zpdf6UXRzAAAACA3erz9Po8HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa6emT+3P10s24j78VEaON4vfHYG05+KeRiDjxLIn+F16XRERfG+JvP4iIM43iJ9W0YjTNYnf8TEQM9Tj+yTbEh6PsYXX8mW70+cvE+dqy8eevPy2v6vH5ZuNfpj7+1ca5RuPfqRZjnH30x1zT+A8izvY3Hn/q8ZNXHH9/+IOtrWbbKr+LGGv4/yd5KVauvLKWK21uXV5amV3ML+ZXJycnrk1dn7o6NZ5bWCrk058NY/zsC3/+YK/+n2gSf3Sf/l9osf/vP7r35DN7xL/45d3x3629/2f2iF/9238l/T9Q3T5Wr2/v1F907g9/P7dX/+eb9H+/9/9ii/2/dOsn/25xVwCgC0qbW8uzhUJ+XeWNrAx4B9tcGYrXIo12VW6lH/QDv7zHAxMAANB2z7/09zoTAAAAAAAAAAAAAAAAAAAAOLo6fhOy4y/fWWCwd10FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjThwEAAP//sxnTZg==") (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$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") unlink(&(0x7f0000000100)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xb, 0x70bd2a, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x4, 0x3, 0xfffffb93, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() (async) r6 = gettid() r7 = gettid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) (async) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000ac0)={0xc, {"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", 0x1000}}, 0x1006) getsockopt(r4, 0x5, 0x0, &(0x7f0000000480)=""/206, &(0x7f0000000080)=0xce) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(r9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)={[&(0x7f00000001c0)='\'&%\x0e@,}\x00', &(0x7f0000000200)=':\x00', &(0x7f0000000300)='\x00']}, &(0x7f0000000680)={[&(0x7f0000000380)='$\x00', &(0x7f0000000580)='-]\x00', &(0x7f00000007c0)='kmem_cache_free\x00\x9a%0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x9, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="9c700000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x41, &(0x7f0000000240)=""/65, 0x41100, 0x10, '\x00', r1, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x5, 0x7, 0x5}, 0x10, r2, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000640)=[{0x2, 0x3, 0x8, 0x4}, {0x2, 0x4, 0x3}], 0x10, 0x4}, 0x94) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/59, 0x3b}, {0x0}], 0x2) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff02000000000000000000000000000132000012000000000200"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utime(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x18) ioctl$SIOCSIFHWADDR(r4, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) sendmsg$kcm(r3, &(0x7f0000000ac0)={&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x4, 0x4, 0x0, {0xa, 0x4e23, 0x2, @private1, 0x8}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000840)="e67fac026d3585bfec393ec6c1e34ae82e59cab226da0021c2dc6fd0b90e3a4c33572d6e8801319f0715ec7dd89beba862de59439cf45259e1d91ff4d15b15976bc6f7d3a594ec1912dfaac6ea35d15488f66f0918e69903c7f157f523ccb1b6368236c57aed702c6a13b5016a4dd0de74ceb8115913fa33f78ce0d11cb460d6360b8f8586b9be065a9adee713bd83631fecd0c2d70c8b8edfd6a84376eef45aef0c6485f1617e91c6b1d1276776e0d01a26928d", 0xb4}, {&(0x7f0000000900)="9a08dfe51bdf508900486c41870d81d77ef416b7ebe3d7c394d8cef532e75a72d6c0818684838cdae37cc812f39e39d683b51619cb0b625eb4cc064ac5532d90be626e7f7ea7af1165165ce86df578454917a3932e64431f5b6fbe97ea648e853d20147fd77227535fe793f8bbf9c96ed8d587b347bb1a58d25153199d5485370adcdc8c9bfd182a84efa43962ec8f043f89c3d329da1386d5f4ca", 0x9b}, {&(0x7f00000009c0)="21be248433dddb4364a95a8ccd925a12e0a8bf35dcaa919e2be6b35b3352d2f271b5e0af8f6eb410a8b2d70e2ad7b4511e5e10fa0ce48f62ed983a", 0x3b}, {&(0x7f0000000a00)="15d5aa320ed1000a13b0d9ec7cf546486c4696e874e120af12d242c50762b776416610ae58116032b6a2186e1d0dba1bfec8bd4dd953cd66503c06de6d18e9b823ed8868bb6684ae693f77c0cee12f9d605525d8463b990cb45cb03b90e079fa4d0ba394401bc81ce579d41df2ff15981f66b3", 0x73}, {&(0x7f0000000a80)="790471371f1976b3d098c76e41c7b09be9a3faab4250502cb699047706700abf60", 0x21}, {&(0x7f0000001080)="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", 0xfe}, {&(0x7f0000001180)="281e22e9815ee9dc318c46e54f14a7e1b58d51a15b2267f11c43bdda99fbd4149ddbbeb7eb739a666d7e8c311de3ae95ef8db311a0d89fc9353c4d2f8260556b372bec8b31846efe00bfdd9a6bc712ed356bac127982a2ebd7f24fec687ff8abc86c2526f6600b2eed9982380a5e7a8040b9f0ca5a02ade20102bd43dbc9724d7acf89e6bf3a68e64878cb570959f2ddba4205be6240fb9fce8c10cab3fdc438552fdd6a7063e5b7eda8da7b7345b64a050dc3791d926fd2ea5049c301709ed718c5edbd44e90fba60c360591c9b123fd027031e380b55", 0xd7}], 0x7, &(0x7f0000001300)=[{0x110, 0x110, 0x3, "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"}, {0xf8, 0x117, 0x4884, "056005b53b3b754f0c1dbfa70593ad6378bda9a32d1d6940d4dbeb5d6fc7b5a8e0bbd9f4f1bd73576bac36e3d7d972f96a4932ef1f5bed4dfca71c9c930b79d5072d744d37331298f9d4e3ffaf1250e0a756e3b51fed47c1907b66be2a5d60063e18cdc2c5a25c17b8f366184a9cd9c4b9d7464eec1325040346da780f4cb6647e8583b90bd905124bc118e436ddeca9dd73f1deca05d89ac7d22c9a83cf2739fef50529c4a35683e932a23bcd57c80b8ea6cd033d7e1cd221a4dd312884db353e233b3f96601a598a5fa2f463373e4b6905c81949c4623b30c2bf7f45f1d786f038"}, {0x88, 0x10b, 0x70f, "7262320840d0edf6cd743394ae947b83c9b7f3daa46db77392cc9aa09d996c1493bf6fd0699af2291d2a8791055e4f98ba26f1da3b130007b98a98dc5cfb47e07a959effc203ab1e36b8c4c8d1f617a99afc89813d4575f1c519f257e204eb785ce98e9172a91a7acdbc9d6780ca27c543"}, {0x68, 0xff, 0x200, "5e5996aca1565efc73c7c89c8c750864ab885531803c16ed851d2cf09dfe89dbc7480ee5ec1d328271b2e5eb71ee1686fdfef29f1dbb9190b8898dbf1dc43b6998a718e7607875e7c915087463300d67ec"}, {0x70, 0x118, 0x10001, "860c4832ffb0bf5dd5c7222965ef01d973c16b433157fa51d435678565ff034ae797f9b7f13cbceb415daf5a16400dd255c1185b00688c0ee101885ce432013fdf492b555e0c958b75e650e7d3f2e7cb42042d1278b0f36578ae66dd3ca0"}, {0x48, 0x0, 0x3ff, "5d149b46c2bd0d0b8a4655539e1f2cc39b06076f5853fac00d66679b7dc9de1260fa99e34a31c1b2b8c68ba169ce7dbcef43ccad1e"}, {0x50, 0x1, 0x0, "00bedbef2c423b635e1645bc18130177687a4a4fbae61f3349c258df3d1e81bf7ab22c3649736a2897b99a1ce6411d1612616a6ab6834bdfbf54eec598"}, {0x90, 0x0, 0x5, "ff4b1e3b848266c6f9ae56ff2d3b3b89262cc068ca495804c637a98e18ce96181eba3fc439ff1c94e8632e44e18fd2fb2f773bc3f257f84930da356e42b3006c5effc6d577821bc8de2b3bb2f06a2253b09a2a4075918e70240cf732dbe43e0778b754a51c1172af31944bb8c6b57cb1012d7c466e36686551c31af92e91"}, {0xe8, 0x10b, 0x6, "73b0413e0a97e43f517338553853671cc410815fccdcd7f46525c82d54bcfbe21e4781d1ec05675056dcfe5b52555ff8b6fc8eed8c58debfd73c940f7c81a3bbac31b22fdbfaeeef34fcc5fc3a734003f88e9616683c4efad81dd7f712944ef7e7b87e49fbf071ab3a38841aee9c9f085e9d07a4a4d314843051077c27d4b8ed5e91f4d2b7104aab0d83750688d5e1bf5da650ac5e2aae0351c3b836702ef4e059f7b7e5a40653b4440e583e4d14c764a3ce4f4c77630085e11ae82ad97855f63ccff7f0ffd36c8afa1d1d8b11e11bc2e0c58bb4"}], 0x578}, 0x240000d0) 4.351613537s ago: executing program 1 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.10813288s ago: executing program 2 (id=2098): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x7, 0xd}, {0xc, 0xffe0}, {0x0, 0xfff5}}}, 0x24}}, 0x805) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000014c0)=ANY=[@ANYRES8=r1, @ANYRES64=r0, @ANYRESDEC], 0x124}, 0x1, 0x0, 0x0, 0x4090}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) write(r4, &(0x7f00000006c0)="74a5d7f245d79e105f85a13b59013fe8830b94c5bd1d10e0f4", 0x19) sendfile(r4, r3, 0x0, 0x7ffff000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create(0x3ff) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x8, 0x0, 0x0, 'queue1\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) lsetxattr$trusted_overlay_upper(&(0x7f0000000700)='./bus\x00', &(0x7f0000000780), &(0x7f0000001500)={0x0, 0xfb, 0x1015, 0x6, 0x6, "8fd212441e464212155903532f3642b1", "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"}, 0x1015, 0x3) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000600)={0x0, 0xc, 0x0, 'queue0\x00'}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) 3.687570077s ago: executing program 1 (id=2100): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r0, {0x0, 0x5}, {0xffff, 0xffff}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) unshare(0x22020400) r4 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x465e, 0x400, 0x3, 0x234}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 3.342229771s ago: executing program 4 (id=2103): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x88) readv(r4, &(0x7f0000002580)=[{&(0x7f0000000740)=""/89, 0x59}, {0x0}], 0x2) sendmmsg$inet(r4, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="c1", 0x1}, {&(0x7f0000000480)="8c3206c17e367ae04671233facb3e7ac8f79975047cc48f37cbb2a2685c6274a6e46e5222b10a12fa346f2466d9e004fcd2638cae1cfc3", 0x37}, {&(0x7f0000000540)="3a970f1a34a3051622d217542018b3ac7e07ca27572b64166688d5585964e1d7b3f9", 0x22}], 0x3}}], 0x1, 0x0) 3.336711982s ago: executing program 1 (id=2104): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=") 3.235165043s ago: executing program 2 (id=2105): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x40024e}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0xa, 0x4e24, 0x10000, @empty}, 0x0, {[0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0x627, 0xc104effd, 0x43, 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x10}, 0xc) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xf, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08170800070000006d30060000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7f6ffff0700000085000000a50000003420e1cb582077f638fe4cc2094be6b022d92ef6307ccb9389110c02a910ddba5e9181feb3338cd67673e7b1b6bf4eb030cc5f0e74e8d4d63a2b32fbd710b99f39b3cbb16b05238474741ab285e16f76f9630a88fc9de3f810bb1e3379266f548e3e9b328b5867212245c0e101ee5f448514c51f4115c5eb8407d507fe4d53ab11513e"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x4a, &(0x7f0000000c00)=""/74, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x5, 0xc, 0xd9, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r3, r3, r3, r3, r4], &(0x7f0000000dc0)=[{0x3, 0x1, 0x4, 0x8}, {0x0, 0x5, 0x6, 0x3}, {0x5, 0x5, 0x10, 0x3}], 0x10, 0x80}, 0x94) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r5}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x1a, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000007000000000000000700000018110000e203cf58", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006a55f8ff08000000180000000f00000000000000020000000ad00700000000009500000000000000183000000200000000000000000000001836000001000000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0xfffffffd, 0xad}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r5, 0xffffffffffffffff, r6, r7, r8], &(0x7f0000000840)=[{0x1, 0x5, 0x8, 0x7}, {0x4, 0x5, 0x7, 0x6}, {0x4, 0x1, 0xd, 0xa}, {0x5, 0x4, 0xf, 0xc}], 0x10, 0x6}, 0x94) symlinkat(&(0x7f0000000940)='./file0\x00', r5, &(0x7f0000000980)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r9 = gettid() tkill(r9, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x1, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/tty/drivers\x00', 0x0, 0x0) connect$unix(r2, &(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 3.192629764s ago: executing program 5 (id=2106): syz_open_dev$usbfs(0x0, 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18) unshare(0x64000600) (fail_nth: 6) 3.090637825s ago: executing program 2 (id=2107): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x200000000000005}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syncfs(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000180)='ubifs\x00', 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32], 0x1, 0x122e, &(0x7f0000002580)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e000000080000009f8400000400000001000000", @ANYRES32=0x1, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0500000003b775294cbf3022acfd0004000200000009000040000005000000a93ed7873c73000000000000"], 0x50) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000300)=0x9856) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.10337601s ago: executing program 4 (id=2111): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000400)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000480), 0x8, 0x9, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="9c700000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x41, &(0x7f0000000240)=""/65, 0x41100, 0x10, '\x00', r1, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x5, 0x7, 0x5}, 0x10, r2, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000640)=[{0x2, 0x3, 0x8, 0x4}, {0x2, 0x4, 0x3}], 0x10, 0x4}, 0x94) r3 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/59, 0x3b}, {0x0}], 0x2) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff02000000000000000000000000000132000012000000000200"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) utime(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x18) ioctl$SIOCSIFHWADDR(r4, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) sendmsg$kcm(r3, &(0x7f0000000ac0)={&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x4, 0x4, 0x0, {0xa, 0x4e23, 0x2, @private1, 0x8}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000840)="e67fac026d3585bfec393ec6c1e34ae82e59cab226da0021c2dc6fd0b90e3a4c33572d6e8801319f0715ec7dd89beba862de59439cf45259e1d91ff4d15b15976bc6f7d3a594ec1912dfaac6ea35d15488f66f0918e69903c7f157f523ccb1b6368236c57aed702c6a13b5016a4dd0de74ceb8115913fa33f78ce0d11cb460d6360b8f8586b9be065a9adee713bd83631fecd0c2d70c8b8edfd6a84376eef45aef0c6485f1617e91c6b1d1276776e0d01a26928d", 0xb4}, {&(0x7f0000000900)="9a08dfe51bdf508900486c41870d81d77ef416b7ebe3d7c394d8cef532e75a72d6c0818684838cdae37cc812f39e39d683b51619cb0b625eb4cc064ac5532d90be626e7f7ea7af1165165ce86df578454917a3932e64431f5b6fbe97ea648e853d20147fd77227535fe793f8bbf9c96ed8d587b347bb1a58d25153199d5485370adcdc8c9bfd182a84efa43962ec8f043f89c3d329da1386d5f4ca", 0x9b}, {&(0x7f00000009c0)="21be248433dddb4364a95a8ccd925a12e0a8bf35dcaa919e2be6b35b3352d2f271b5e0af8f6eb410a8b2d70e2ad7b4511e5e10fa0ce48f62ed983a", 0x3b}, {&(0x7f0000000a00)="15d5aa320ed1000a13b0d9ec7cf546486c4696e874e120af12d242c50762b776416610ae58116032b6a2186e1d0dba1bfec8bd4dd953cd66503c06de6d18e9b823ed8868bb6684ae693f77c0cee12f9d605525d8463b990cb45cb03b90e079fa4d0ba394401bc81ce579d41df2ff15981f66b3", 0x73}, {&(0x7f0000000a80)="790471371f1976b3d098c76e41c7b09be9a3faab4250502cb699047706700abf60", 0x21}, {&(0x7f0000001080)="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", 0xfe}, {&(0x7f0000001180)="281e22e9815ee9dc318c46e54f14a7e1b58d51a15b2267f11c43bdda99fbd4149ddbbeb7eb739a666d7e8c311de3ae95ef8db311a0d89fc9353c4d2f8260556b372bec8b31846efe00bfdd9a6bc712ed356bac127982a2ebd7f24fec687ff8abc86c2526f6600b2eed9982380a5e7a8040b9f0ca5a02ade20102bd43dbc9724d7acf89e6bf3a68e64878cb570959f2ddba4205be6240fb9fce8c10cab3fdc438552fdd6a7063e5b7eda8da7b7345b64a050dc3791d926fd2ea5049c301709ed718c5edbd44e90fba60c360591c9b123fd027031e380b55", 0xd7}], 0x7, &(0x7f0000001300)=[{0x110, 0x110, 0x3, "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"}, {0xf8, 0x117, 0x4884, "056005b53b3b754f0c1dbfa70593ad6378bda9a32d1d6940d4dbeb5d6fc7b5a8e0bbd9f4f1bd73576bac36e3d7d972f96a4932ef1f5bed4dfca71c9c930b79d5072d744d37331298f9d4e3ffaf1250e0a756e3b51fed47c1907b66be2a5d60063e18cdc2c5a25c17b8f366184a9cd9c4b9d7464eec1325040346da780f4cb6647e8583b90bd905124bc118e436ddeca9dd73f1deca05d89ac7d22c9a83cf2739fef50529c4a35683e932a23bcd57c80b8ea6cd033d7e1cd221a4dd312884db353e233b3f96601a598a5fa2f463373e4b6905c81949c4623b30c2bf7f45f1d786f038"}, {0x88, 0x10b, 0x70f, "7262320840d0edf6cd743394ae947b83c9b7f3daa46db77392cc9aa09d996c1493bf6fd0699af2291d2a8791055e4f98ba26f1da3b130007b98a98dc5cfb47e07a959effc203ab1e36b8c4c8d1f617a99afc89813d4575f1c519f257e204eb785ce98e9172a91a7acdbc9d6780ca27c543"}, {0x68, 0xff, 0x200, "5e5996aca1565efc73c7c89c8c750864ab885531803c16ed851d2cf09dfe89dbc7480ee5ec1d328271b2e5eb71ee1686fdfef29f1dbb9190b8898dbf1dc43b6998a718e7607875e7c915087463300d67ec"}, {0x70, 0x118, 0x10001, "860c4832ffb0bf5dd5c7222965ef01d973c16b433157fa51d435678565ff034ae797f9b7f13cbceb415daf5a16400dd255c1185b00688c0ee101885ce432013fdf492b555e0c958b75e650e7d3f2e7cb42042d1278b0f36578ae66dd3ca0"}, {0x48, 0x0, 0x3ff, "5d149b46c2bd0d0b8a4655539e1f2cc39b06076f5853fac00d66679b7dc9de1260fa99e34a31c1b2b8c68ba169ce7dbcef43ccad1e"}, {0x50, 0x1, 0x0, "00bedbef2c423b635e1645bc18130177687a4a4fbae61f3349c258df3d1e81bf7ab22c3649736a2897b99a1ce6411d1612616a6ab6834bdfbf54eec598"}, {0x90, 0x0, 0x5, "ff4b1e3b848266c6f9ae56ff2d3b3b89262cc068ca495804c637a98e18ce96181eba3fc439ff1c94e8632e44e18fd2fb2f773bc3f257f84930da356e42b3006c5effc6d577821bc8de2b3bb2f06a2253b09a2a4075918e70240cf732dbe43e0778b754a51c1172af31944bb8c6b57cb1012d7c466e36686551c31af92e91"}, {0xe8, 0x10b, 0x6, "73b0413e0a97e43f517338553853671cc410815fccdcd7f46525c82d54bcfbe21e4781d1ec05675056dcfe5b52555ff8b6fc8eed8c58debfd73c940f7c81a3bbac31b22fdbfaeeef34fcc5fc3a734003f88e9616683c4efad81dd7f712944ef7e7b87e49fbf071ab3a38841aee9c9f085e9d07a4a4d314843051077c27d4b8ed5e91f4d2b7104aab0d83750688d5e1bf5da650ac5e2aae0351c3b836702ef4e059f7b7e5a40653b4440e583e4d14c764a3ce4f4c77630085e11ae82ad97855f63ccff7f0ffd36c8afa1d1d8b11e11bc2e0c58bb4"}], 0x578}, 0x240000d0) 1.647549267s ago: executing program 2 (id=2112): r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000980)={0x0, @rand_addr, @multicast1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex=r1, 0xd, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 1.3924932s ago: executing program 2 (id=2113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x38000, 0x0) syz_io_uring_setup(0x1dce, &(0x7f00000007c0)={0x0, 0x69af, 0x800, 0x2, 0x22b}, &(0x7f00000003c0), &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.334483831s ago: executing program 1 (id=2114): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1.026565356s ago: executing program 4 (id=2115): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x0, 0x0, 0x5, 0x800000007, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 929.961787ms ago: executing program 0 (id=2116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x38000, 0x0) syz_io_uring_setup(0x1dce, &(0x7f00000007c0)={0x0, 0x69af, 0x800, 0x2, 0x22b}, &(0x7f00000003c0), &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 592.464292ms ago: executing program 2 (id=2117): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x7, 0xd}, {0xc, 0xffe0}, {0x0, 0xfff5}}}, 0x24}}, 0x805) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000014c0)=ANY=[@ANYRES8=r1, @ANYRES64=r0, @ANYRESDEC], 0x124}, 0x1, 0x0, 0x0, 0x4090}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) write(r4, &(0x7f00000006c0)="74a5d7f245d79e105f85a13b59013fe8830b94c5bd1d10e0f4", 0x19) sendfile(r4, r3, 0x0, 0x7ffff000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create(0x3ff) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) lsetxattr$trusted_overlay_upper(&(0x7f0000000700)='./bus\x00', &(0x7f0000000780), &(0x7f0000001500)={0x0, 0xfb, 0x1015, 0x6, 0x6, "8fd212441e464212155903532f3642b1", "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"}, 0x1015, 0x3) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000600)={0x0, 0xc, 0x0, 'queue0\x00'}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) 501.891923ms ago: executing program 4 (id=2118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) io_setup(0x2278, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0x0) read(r4, &(0x7f0000000400)=""/87, 0x57) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x6488, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 443.601634ms ago: executing program 0 (id=2119): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) unshare(0x2040400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) 290.214397ms ago: executing program 4 (id=2120): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) chmod(&(0x7f0000000080)='./file0\x00', 0x80) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) 275.568317ms ago: executing program 5 (id=2121): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x88) readv(r4, &(0x7f0000002580)=[{&(0x7f0000000740)=""/89, 0x59}, {0x0}], 0x2) sendmmsg$inet(r4, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="c1", 0x1}, {&(0x7f0000000480)="8c3206c17e367ae04671233facb3e7ac8f79975047cc48f37cbb2a2685c6274a6e46e5222b10a12fa346f2466d9e004fcd2638cae1cfc3", 0x37}, {&(0x7f0000000540)="3a970f1a34a3051622d217542018b3ac7e07ca27572b64166688d5585964e1d7b3f9", 0x22}], 0x3}}], 0x1, 0x0) 160.055388ms ago: executing program 0 (id=2122): r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000980)={0x0, @rand_addr, @multicast1}, &(0x7f0000000a40)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex=r1, 0xd, 0x0, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 76.115989ms ago: executing program 0 (id=2123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 54.0645ms ago: executing program 1 (id=2124): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) open(0x0, 0x145142, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x174) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 1.38173ms ago: executing program 4 (id=2125): r0 = socket(0x22, 0x2, 0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000000)) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) dup3(r1, r0, 0x0) 0s ago: executing program 0 (id=2126): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x40024e}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0xa, 0x4e24, 0x10000, @empty}, 0x0, {[0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x627, 0xc104effd, 0x43, 0x0, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x7, 0x10}, 0xc) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xf, &(0x7f0000000ec0)=ANY=[@ANYBLOB="08170800070000006d30060000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7f6ffff0700000085000000a50000003420e1cb582077f638fe4cc2094be6b022d92ef6307ccb9389110c02a910ddba5e9181feb3338cd67673e7b1b6bf4eb030cc5f0e74e8d4d63a2b32fbd710b99f39b3cbb16b05238474741ab285e16f76f9630a88fc9de3f810bb1e3379266f548e3e9b328b5867212245c0e101ee5f448514c51f4115c5eb8407d507fe4d53ab11513e"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x4a, &(0x7f0000000c00)=""/74, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x5, 0xc, 0xd9, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r4, r4, r4, r4, r5], &(0x7f0000000dc0)=[{0x3, 0x1, 0x4, 0x8}, {0x0, 0x5, 0x6, 0x3}, {0x5, 0x5, 0x10, 0x3}], 0x10, 0x80}, 0x94) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r6}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x1a, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000007000000000000000700000018110000e203cf58", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006a55f8ff08000000180000000f00000000000000020000000ad00700000000009500000000000000183000000200000000000000000000001836000001000000000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0xfffffffd, 0xad}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r6, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000840)=[{0x1, 0x5, 0x8, 0x7}, {0x4, 0x5, 0x7, 0x6}, {0x4, 0x1, 0xd, 0xa}, {0x5, 0x4, 0xf, 0xc}], 0x10, 0x6}, 0x94) symlinkat(&(0x7f0000000940)='./file0\x00', r6, &(0x7f0000000980)='./file0\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r10 = gettid() tkill(r10, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x1, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/tty/drivers\x00', 0x0, 0x0) connect$unix(r3, &(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) kernel console output (not intermixed with test programs): nted 00000000-0000-0000-0000-000000000000 r/w. [ 281.064535][T11315] loop4: detected capacity change from 0 to 512 [ 281.079356][T11319] loop5: detected capacity change from 0 to 164 [ 281.088353][T11315] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.311267][T11331] syz.5.1613 uses obsolete (PF_INET,SOCK_PACKET) [ 281.321978][T11331] __nla_validate_parse: 6 callbacks suppressed [ 281.321997][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1613'. [ 281.342004][T11333] loop4: detected capacity change from 0 to 1024 [ 281.349061][T11333] EXT4-fs: Ignoring removed orlov option [ 281.451297][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 281.467011][T11339] hsr_slave_1 (unregistering): left promiscuous mode [ 281.647018][T11360] ipvlan5: entered promiscuous mode [ 281.652392][T11360] ipvlan5: entered allmulticast mode [ 281.752129][T11365] loop2: detected capacity change from 0 to 512 [ 281.958716][T11365] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.669656][T11421] loop0: detected capacity change from 0 to 1024 [ 282.691677][T11421] EXT4-fs: Ignoring removed orlov option [ 282.732123][T11431] loop1: detected capacity change from 0 to 512 [ 282.791770][T11431] EXT4-fs (loop1): orphan cleanup on readonly fs [ 282.845291][T11431] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1637: bg 0: block 248: padding at end of block bitmap is not set [ 282.875103][T11424] loop4: detected capacity change from 0 to 512 [ 282.892015][T11431] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1637: Failed to acquire dquot type 1 [ 282.952841][T11431] EXT4-fs (loop1): 1 truncate cleaned up [ 282.965722][T11424] EXT4-fs (loop4): orphan cleanup on readonly fs [ 282.975570][T11431] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 283.008121][T11431] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 283.055118][T11424] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1632: bg 0: block 248: padding at end of block bitmap is not set [ 283.075563][T11462] loop2: detected capacity change from 0 to 512 [ 283.123532][T11462] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.209920][T11478] loop1: detected capacity change from 0 to 512 [ 283.217717][T11478] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 283.240383][T11424] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1632: Failed to acquire dquot type 1 [ 283.252366][T11424] EXT4-fs (loop4): 1 truncate cleaned up [ 283.369410][T11493] loop1: detected capacity change from 0 to 512 [ 283.432024][T11493] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.534069][T11516] loop0: detected capacity change from 0 to 1024 [ 283.541248][T11516] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 283.552258][T11518] loop2: detected capacity change from 0 to 512 [ 283.584825][T11518] EXT4-fs (loop2): 1 orphan inode deleted [ 283.610929][T11518] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.624129][ T3968] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 283.697603][T11529] loop2: detected capacity change from 0 to 1024 [ 283.717320][T11529] EXT4-fs: Ignoring removed orlov option [ 284.068797][T11561] loop2: detected capacity change from 0 to 512 [ 284.085961][T11558] pim6reg1: entered promiscuous mode [ 284.112285][T11561] EXT4-fs (loop2): orphan cleanup on readonly fs [ 284.119341][T11561] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1655: bg 0: block 248: padding at end of block bitmap is not set [ 284.161721][T11561] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1655: Failed to acquire dquot type 1 [ 284.215908][T11568] loop1: detected capacity change from 0 to 512 [ 284.223075][T11561] EXT4-fs (loop2): 1 truncate cleaned up [ 284.241956][T11561] EXT4-fs mount: 112 callbacks suppressed [ 284.241993][T11561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.292043][T11568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.321770][T11568] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.353935][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.467677][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1658'. [ 284.558346][T11598] loop2: detected capacity change from 0 to 512 [ 284.629022][T11598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.720283][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.756545][T11598] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.819570][T11619] loop1: detected capacity change from 0 to 512 [ 284.821362][T11609] pim6reg1: entered promiscuous mode [ 284.835186][T11623] loop4: detected capacity change from 0 to 512 [ 284.845422][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.866404][T11619] EXT4-fs (loop1): 1 orphan inode deleted [ 284.876129][T11619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.891400][ T3968] __quota_error: 354 callbacks suppressed [ 284.891417][ T3968] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 284.906994][ T3968] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 284.959147][T11619] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.013960][T11627] loop0: detected capacity change from 0 to 512 [ 285.059930][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.079469][T11627] EXT4-fs (loop0): orphan cleanup on readonly fs [ 285.103178][T11634] loop2: detected capacity change from 0 to 512 [ 285.130036][ T29] audit: type=1400 audit(1752441674.724:9433): avc: denied { write } for pid=11637 comm="syz.5.1668" name="protocols" dev="proc" ino=4026533017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 285.159043][T11636] loop1: detected capacity change from 0 to 512 [ 285.166923][T11638] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1668'. [ 285.182929][T11627] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1665: bg 0: block 248: padding at end of block bitmap is not set [ 285.201493][T11634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.214655][T11627] Quota error (device loop0): write_blk: dquota write failed [ 285.221765][T11634] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.222259][T11627] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 285.243224][T11627] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1665: Failed to acquire dquot type 1 [ 285.256918][T11623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.297669][T11636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.302114][T11627] EXT4-fs (loop0): 1 truncate cleaned up [ 285.317030][T11636] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.331602][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1668'. [ 285.332241][T11623] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.351555][T11627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.366158][ T29] audit: type=1400 audit(1752441674.964:9434): avc: denied { mount } for pid=11637 comm="syz.5.1668" name="/" dev="ramfs" ino=22564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 285.407477][T11627] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 285.425307][T11627] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 285.435848][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.476302][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.486164][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1671'. [ 285.495148][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1671'. [ 285.507398][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.518954][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.521491][T11648] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.536951][T11648] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.545712][T11648] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.554599][T11648] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.566071][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1671'. [ 285.575111][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1671'. [ 285.653054][T11654] loop5: detected capacity change from 0 to 512 [ 285.656168][T11659] capability: warning: `syz.4.1670' uses deprecated v2 capabilities in a way that may be insecure [ 285.671210][ T29] audit: type=1400 audit(1752441675.264:9435): avc: denied { read write } for pid=11660 comm="syz.2.1675" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.683001][T11659] loop4: detected capacity change from 0 to 512 [ 285.695563][ T29] audit: type=1400 audit(1752441675.264:9436): avc: denied { open } for pid=11660 comm="syz.2.1675" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.807579][T11664] loop0: detected capacity change from 0 to 164 [ 285.818521][ T29] audit: type=1400 audit(1752441675.274:9437): avc: denied { create } for pid=11653 comm="syz.4.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.838832][ T29] audit: type=1400 audit(1752441675.274:9438): avc: denied { ioctl } for pid=11653 comm="syz.4.1670" path="socket:[21988]" dev="sockfs" ino=21988 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 285.885932][T11659] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1670: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 285.914961][T11654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.921382][ T29] audit: type=1400 audit(1752441675.464:9439): avc: denied { mount } for pid=11663 comm="syz.0.1676" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 285.951661][T11659] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1670: Bad quota inode: 3, type: 0 [ 285.961680][T11654] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.981535][T11659] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 286.034921][T11659] EXT4-fs (loop4): mount failed [ 286.162705][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.175602][T11674] loop4: detected capacity change from 0 to 512 [ 286.206067][T11679] loop2: detected capacity change from 0 to 512 [ 286.206220][T11681] loop5: detected capacity change from 0 to 164 [ 286.231280][T11679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.274065][T11674] EXT4-fs (loop4): 1 orphan inode deleted [ 286.281821][T11679] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.292425][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 286.312500][T11674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.332579][T11674] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.531675][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.579457][T11693] loop0: detected capacity change from 0 to 512 [ 286.617931][T11697] loop4: detected capacity change from 0 to 1024 [ 286.637860][T11697] EXT4-fs: Ignoring removed orlov option [ 286.646381][T11693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.683087][T11695] loop1: detected capacity change from 0 to 512 [ 286.711751][T11693] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.730981][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.741749][T11697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.879086][T11706] loop5: detected capacity change from 0 to 1024 [ 286.902636][T11706] EXT4-fs: Ignoring removed orlov option [ 286.937113][T11695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.950737][T11706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.206796][T11695] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.282253][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.479078][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.484738][T11722] loop0: detected capacity change from 0 to 512 [ 287.498917][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.533625][T11722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.576968][T11722] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.857036][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.356424][T11740] loop2: detected capacity change from 0 to 164 [ 288.477099][T11744] loop5: detected capacity change from 0 to 512 [ 288.524871][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.582345][T11744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.595126][T11744] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.763743][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.824105][T11752] loop4: detected capacity change from 0 to 512 [ 288.879509][T11760] loop0: detected capacity change from 0 to 512 [ 288.920884][T11765] loop5: detected capacity change from 0 to 512 [ 288.922300][T11752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.984647][T11765] EXT4-fs (loop5): orphan cleanup on readonly fs [ 288.998154][T11760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.024766][T11765] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1699: bg 0: block 248: padding at end of block bitmap is not set [ 289.049424][T11760] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.071838][T11752] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.091574][T11770] loop2: detected capacity change from 0 to 1024 [ 289.103199][T11765] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1699: Failed to acquire dquot type 1 [ 289.131690][T11770] EXT4-fs: Ignoring removed orlov option [ 289.137623][T11772] loop1: detected capacity change from 0 to 512 [ 289.155166][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.179398][T11765] EXT4-fs (loop5): 1 truncate cleaned up [ 289.186690][T11770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.201916][T11765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.232089][T11772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.273189][T11765] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 289.286234][T11777] loop0: detected capacity change from 0 to 512 [ 289.331684][T11765] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 289.409952][T11777] EXT4-fs (loop0): orphan cleanup on readonly fs [ 289.435972][T11752] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1697: corrupted inode contents [ 289.451400][T11777] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1704: bg 0: block 248: padding at end of block bitmap is not set [ 289.466642][T11772] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.477835][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.500010][T11777] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1704: Failed to acquire dquot type 1 [ 289.532720][T11752] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1697: mark_inode_dirty error [ 289.564420][T11784] loop5: detected capacity change from 0 to 512 [ 289.571409][T11752] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1697: corrupted inode contents [ 289.587708][T11777] EXT4-fs (loop0): 1 truncate cleaned up [ 289.593884][T11784] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 289.594359][T11777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.622164][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.646303][T11777] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1704: deleted inode referenced: 12 [ 289.666950][T11777] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.1704: deleted inode referenced: 12 [ 289.711712][T11752] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1697: mark_inode_dirty error [ 289.726553][T11788] loop5: detected capacity change from 0 to 512 [ 289.853516][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.867875][T11788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.892011][T11788] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.949098][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.039046][T11795] loop2: detected capacity change from 0 to 512 [ 290.047338][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.068864][T11795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.098023][T11795] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.181033][T11801] loop0: detected capacity change from 0 to 1024 [ 290.233873][T11803] loop1: detected capacity change from 0 to 164 [ 290.271582][T11801] EXT4-fs: Ignoring removed orlov option [ 290.287632][T11801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.289478][T11805] loop4: detected capacity change from 0 to 512 [ 290.373795][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.384616][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 290.384634][ T29] audit: type=1326 audit(1752441679.984:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.414334][ T29] audit: type=1326 audit(1752441679.984:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.437923][ T29] audit: type=1326 audit(1752441679.984:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.473366][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.484047][ T29] audit: type=1326 audit(1752441680.064:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.507618][ T29] audit: type=1326 audit(1752441680.064:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.531168][ T29] audit: type=1326 audit(1752441680.064:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.554732][ T29] audit: type=1326 audit(1752441680.064:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.578277][ T29] audit: type=1326 audit(1752441680.064:9472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.601891][ T29] audit: type=1326 audit(1752441680.064:9473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.625468][ T29] audit: type=1326 audit(1752441680.064:9474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.0.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c227e929 code=0x7ffc0000 [ 290.834354][T11813] loop5: detected capacity change from 0 to 512 [ 290.912519][T11813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.939890][T11805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.941441][T11813] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.084685][T11805] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.266186][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.293316][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.346838][T11828] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 291.353430][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.361146][T11828] vhci_hcd vhci_hcd.0: Device attached [ 291.399805][T11834] loop2: detected capacity change from 0 to 512 [ 291.422515][T11834] EXT4-fs (loop2): orphan cleanup on readonly fs [ 291.429474][T11834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1720: bg 0: block 248: padding at end of block bitmap is not set [ 291.451879][T11834] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1720: Failed to acquire dquot type 1 [ 291.451925][T11828] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 291.480407][T11834] EXT4-fs (loop2): 1 truncate cleaned up [ 291.589052][T11840] loop0: detected capacity change from 0 to 1024 [ 291.607671][T11840] EXT4-fs: Ignoring removed orlov option [ 291.625781][T11834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.641366][ T3415] usb 11-1: new low-speed USB device number 4 using vhci_hcd [ 291.663038][T11834] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1720: deleted inode referenced: 12 [ 291.675409][T11840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.692098][T11834] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.1720: deleted inode referenced: 12 [ 291.779638][T11830] vhci_hcd: connection reset by peer [ 291.791984][ T3968] vhci_hcd: stop threads [ 291.796308][ T3968] vhci_hcd: release socket [ 291.800774][ T3968] vhci_hcd: disconnect device [ 291.808836][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.979570][T11848] loop4: detected capacity change from 0 to 512 [ 292.034993][T11848] EXT4-fs (loop4): orphan cleanup on readonly fs [ 292.056262][T11848] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1722: bg 0: block 248: padding at end of block bitmap is not set [ 292.082658][T11848] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1722: Failed to acquire dquot type 1 [ 292.118604][T11848] EXT4-fs (loop4): 1 truncate cleaned up [ 292.124721][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.133757][T11848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.167888][T11851] loop2: detected capacity change from 0 to 512 [ 292.180486][T11851] EXT4-fs (loop2): orphan cleanup on readonly fs [ 292.190237][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.202117][T11851] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1723: bg 0: block 248: padding at end of block bitmap is not set [ 292.241569][T11851] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1723: Failed to acquire dquot type 1 [ 292.338400][T11851] EXT4-fs (loop2): 1 truncate cleaned up [ 292.439309][T11851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.473878][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 292.744356][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.898779][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.983699][T11867] loop4: detected capacity change from 0 to 512 [ 293.024305][T11867] EXT4-fs (loop4): 1 orphan inode deleted [ 293.038994][T11867] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.049692][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 293.075808][T11871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1726'. [ 293.236436][T11875] loop4: detected capacity change from 0 to 1024 [ 293.261388][T11875] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 293.272461][T11875] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 293.321272][T11875] JBD2: no valid journal superblock found [ 293.327116][T11875] EXT4-fs (loop4): Could not load journal inode [ 293.427332][T11880] loop5: detected capacity change from 0 to 512 [ 293.501768][T11880] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 293.602002][T11880] tmpfs: Unknown parameter 'nr_ino' [ 293.643462][T11897] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 293.650035][T11897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 293.657730][T11897] vhci_hcd vhci_hcd.0: Device attached [ 293.702250][T11900] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 293.905582][T11911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1739'. [ 293.951421][ T9508] usb 1-1: new low-speed USB device number 6 using vhci_hcd [ 293.978807][T11898] vhci_hcd: connection reset by peer [ 293.986222][ T3968] vhci_hcd: stop threads [ 293.990554][ T3968] vhci_hcd: release socket [ 293.995094][ T3968] vhci_hcd: disconnect device [ 294.137167][T11917] loop4: detected capacity change from 0 to 512 [ 294.209041][T11917] EXT4-fs (loop4): 1 orphan inode deleted [ 294.221761][ T293] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 294.234483][T11917] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.252890][T11921] loop2: detected capacity change from 0 to 512 [ 294.282315][T11921] ext4 filesystem being mounted at /364/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.415400][T11925] loop5: detected capacity change from 0 to 512 [ 294.429396][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 294.486871][T11931] loop4: detected capacity change from 0 to 512 [ 294.519498][T11925] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.533265][T11937] loop0: detected capacity change from 0 to 164 [ 294.557968][T11931] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.718835][T11941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 294.725500][T11941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 294.733150][T11941] vhci_hcd vhci_hcd.0: Device attached [ 294.795531][T11945] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 295.232631][T11942] vhci_hcd: connection closed [ 295.274238][ T3955] vhci_hcd: stop threads [ 295.283292][ T3955] vhci_hcd: release socket [ 295.287749][ T3955] vhci_hcd: disconnect device [ 295.641585][T11957] loop4: detected capacity change from 0 to 512 [ 295.717703][T11957] EXT4-fs (loop4): 1 orphan inode deleted [ 295.753112][T11957] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.766347][T11959] loop5: detected capacity change from 0 to 512 [ 295.798000][T11966] loop0: detected capacity change from 0 to 512 [ 295.827466][T11966] EXT4-fs (loop0): orphan cleanup on readonly fs [ 295.861961][T11966] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1753: bg 0: block 248: padding at end of block bitmap is not set [ 295.892255][T11959] EXT4-fs (loop5): orphan cleanup on readonly fs [ 295.898944][T11966] __quota_error: 27 callbacks suppressed [ 295.898955][T11966] Quota error (device loop0): write_blk: dquota write failed [ 295.912103][T11966] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 295.922024][T11966] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1753: Failed to acquire dquot type 1 [ 295.956299][T11959] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1751: bg 0: block 248: padding at end of block bitmap is not set [ 295.971261][T11966] EXT4-fs (loop0): 1 truncate cleaned up [ 296.040829][T11970] pim6reg1: entered promiscuous mode [ 296.075995][T11959] Quota error (device loop5): write_blk: dquota write failed [ 296.083865][T11959] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 296.093859][T11959] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1751: Failed to acquire dquot type 1 [ 296.196756][ T29] audit: type=1326 audit(1752441685.794:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11971 comm="syz.1.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 296.227878][ T3968] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 296.237819][ T3968] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 296.280003][T11959] EXT4-fs (loop5): 1 truncate cleaned up [ 296.285771][ T29] audit: type=1326 audit(1752441685.824:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11971 comm="syz.1.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 296.309355][ T29] audit: type=1326 audit(1752441685.824:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11971 comm="syz.1.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 296.332909][ T29] audit: type=1326 audit(1752441685.824:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11971 comm="syz.1.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 296.356407][ T29] audit: type=1326 audit(1752441685.824:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11971 comm="syz.1.1756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 296.389066][T11972] pim6reg1: entered promiscuous mode [ 296.444544][T11975] loop2: detected capacity change from 0 to 512 [ 296.471055][T11975] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 296.523650][T11959] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1751: deleted inode referenced: 12 [ 296.532957][T11979] loop0: detected capacity change from 0 to 512 [ 296.569188][T11979] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.608713][T11975] tmpfs: Unknown parameter 'nr_ino' [ 296.624764][T11986] loop4: detected capacity change from 0 to 164 [ 296.665158][T11982] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1751: deleted inode referenced: 12 [ 296.712989][ T3415] usb 11-1: enqueue for inactive port 0 [ 296.752135][ T3415] usb 11-1: enqueue for inactive port 0 [ 296.767571][T11993] FAULT_INJECTION: forcing a failure. [ 296.767571][T11993] name failslab, interval 1, probability 0, space 0, times 0 [ 296.780338][T11993] CPU: 1 UID: 0 PID: 11993 Comm: syz.1.1763 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 296.780373][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.780397][T11993] Call Trace: [ 296.780405][T11993] [ 296.780433][T11993] __dump_stack+0x1d/0x30 [ 296.780493][T11993] dump_stack_lvl+0xe8/0x140 [ 296.780513][T11993] dump_stack+0x15/0x1b [ 296.780529][T11993] should_fail_ex+0x265/0x280 [ 296.780565][T11993] should_failslab+0x8c/0xb0 [ 296.780637][T11993] kmem_cache_alloc_node_noprof+0x57/0x320 [ 296.780663][T11993] ? __alloc_skb+0x101/0x320 [ 296.780770][T11993] __alloc_skb+0x101/0x320 [ 296.780798][T11993] netlink_alloc_large_skb+0xba/0xf0 [ 296.780881][T11993] netlink_sendmsg+0x3cf/0x6b0 [ 296.780942][T11993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.780960][T11993] __sock_sendmsg+0x145/0x180 [ 296.780990][T11993] ____sys_sendmsg+0x31e/0x4e0 [ 296.781031][T11993] ___sys_sendmsg+0x17b/0x1d0 [ 296.781130][T11993] __x64_sys_sendmsg+0xd4/0x160 [ 296.781172][T11993] x64_sys_call+0x2999/0x2fb0 [ 296.781199][T11993] do_syscall_64+0xd2/0x200 [ 296.781286][T11993] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 296.781318][T11993] ? clear_bhb_loop+0x40/0x90 [ 296.781338][T11993] ? clear_bhb_loop+0x40/0x90 [ 296.781380][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.781421][T11993] RIP: 0033:0x7f8e63c3e929 [ 296.781441][T11993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.781465][T11993] RSP: 002b:00007f8e622a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.781489][T11993] RAX: ffffffffffffffda RBX: 00007f8e63e65fa0 RCX: 00007f8e63c3e929 [ 296.781501][T11993] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 296.781513][T11993] RBP: 00007f8e622a7090 R08: 0000000000000000 R09: 0000000000000000 [ 296.781604][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.781615][T11993] R13: 0000000000000000 R14: 00007f8e63e65fa0 R15: 00007ffea01a1768 [ 296.781633][T11993] [ 296.843639][ T3415] vhci_hcd: vhci_device speed not set [ 297.109037][T11996] loop1: detected capacity change from 0 to 512 [ 297.163300][T11996] EXT4-fs (loop1): orphan cleanup on readonly fs [ 297.172054][T11996] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1765: bg 0: block 248: padding at end of block bitmap is not set [ 297.215538][T12003] loop2: detected capacity change from 0 to 512 [ 297.224359][T11996] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1765: Failed to acquire dquot type 1 [ 297.245320][T12002] loop0: detected capacity change from 0 to 512 [ 297.287160][T12003] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.301912][T11996] EXT4-fs (loop1): 1 truncate cleaned up [ 297.342114][T12002] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.353908][T11996] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 297.376651][T11996] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 297.470415][T12011] loop0: detected capacity change from 0 to 1024 [ 297.519727][T12011] EXT4-fs: Ignoring removed orlov option [ 297.688237][T12026] loop4: detected capacity change from 0 to 1024 [ 297.698749][T12026] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 297.709777][T12026] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 297.723331][T12028] loop2: detected capacity change from 0 to 512 [ 297.732622][T12026] JBD2: no valid journal superblock found [ 297.738407][T12026] EXT4-fs (loop4): Could not load journal inode [ 297.745588][T12028] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 297.762259][T12028] tmpfs: Bad value for 'nr_inodes' [ 297.842324][T12032] loop4: detected capacity change from 0 to 1024 [ 297.850805][T12034] loop2: detected capacity change from 0 to 512 [ 297.865264][T12032] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 297.876280][T12032] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 297.910332][T12032] JBD2: no valid journal superblock found [ 297.916269][T12032] EXT4-fs (loop4): Could not load journal inode [ 297.939196][T12034] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.204960][T12045] loop1: detected capacity change from 0 to 512 [ 298.338215][T12045] EXT4-fs (loop1): orphan cleanup on readonly fs [ 298.368681][T12045] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1779: bg 0: block 248: padding at end of block bitmap is not set [ 298.458419][T12045] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1779: Failed to acquire dquot type 1 [ 298.472241][T12051] loop0: detected capacity change from 0 to 164 [ 298.487004][T12049] pim6reg1: entered promiscuous mode [ 298.530037][T12045] EXT4-fs (loop1): 1 truncate cleaned up [ 298.560800][T12045] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1779: deleted inode referenced: 12 [ 298.616504][T12045] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.1779: deleted inode referenced: 12 [ 298.762193][T12061] loop4: detected capacity change from 0 to 512 [ 299.155196][T12065] loop2: detected capacity change from 0 to 1024 [ 299.220371][T12065] EXT4-fs: Ignoring removed orlov option [ 299.733217][ T9508] usb 1-1: enqueue for inactive port 0 [ 299.738780][ T9508] usb 1-1: enqueue for inactive port 0 [ 299.774721][T12061] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.917210][T12070] loop1: detected capacity change from 0 to 512 [ 299.952119][T12070] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 300.073799][T12074] loop0: detected capacity change from 0 to 1024 [ 300.125690][T12074] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 300.136693][T12074] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 300.220858][T12074] JBD2: no valid journal superblock found [ 300.226719][T12074] EXT4-fs (loop0): Could not load journal inode [ 300.596863][ T9508] vhci_hcd: vhci_device speed not set [ 300.611684][T12070] tmpfs: Bad value for 'nr_inodes' [ 300.700015][T12079] loop4: detected capacity change from 0 to 512 [ 300.709679][T12081] loop5: detected capacity change from 0 to 512 [ 300.735744][T12084] loop1: detected capacity change from 0 to 512 [ 300.776940][T12079] EXT4-fs (loop4): 1 orphan inode deleted [ 300.783741][T12084] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.893542][ T56] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 300.921838][T12079] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.972276][T12081] EXT4-fs (loop5): orphan cleanup on readonly fs [ 301.130111][T12081] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1790: bg 0: block 248: padding at end of block bitmap is not set [ 301.166357][T12107] tmpfs: Bad value for 'mpol' [ 301.171265][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 301.171277][ T29] audit: type=1400 audit(1752441690.764:9595): avc: denied { mounton } for pid=12106 comm="syz.1.1797" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 301.266061][T12081] Quota error (device loop5): write_blk: dquota write failed [ 301.273662][T12081] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 301.283639][T12081] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1790: Failed to acquire dquot type 1 [ 301.674003][T12081] EXT4-fs (loop5): 1 truncate cleaned up [ 302.000794][T12131] loop5: detected capacity change from 0 to 512 [ 302.063594][T12137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1799'. [ 302.076487][T12131] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.463698][T12166] loop1: detected capacity change from 0 to 512 [ 302.512184][T12166] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.553359][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1801'. [ 302.581478][ T29] audit: type=1400 audit(1752441692.184:9596): avc: denied { allowed } for pid=12165 comm="syz.5.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 302.671948][ T29] audit: type=1400 audit(1752441692.204:9597): avc: denied { prog_load } for pid=12165 comm="syz.5.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 302.691389][ T29] audit: type=1400 audit(1752441692.204:9598): avc: denied { bpf } for pid=12165 comm="syz.5.1801" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 302.712512][ T29] audit: type=1400 audit(1752441692.204:9599): avc: denied { create } for pid=12165 comm="syz.5.1801" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.734069][ T29] audit: type=1400 audit(1752441692.204:9600): avc: denied { map } for pid=12165 comm="syz.5.1801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.758845][ T29] audit: type=1400 audit(1752441692.204:9601): avc: denied { read write } for pid=12165 comm="syz.5.1801" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.784109][ T29] audit: type=1400 audit(1752441692.214:9602): avc: denied { read write } for pid=12164 comm="syz.1.1800" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.840051][T12183] loop5: detected capacity change from 0 to 512 [ 302.978007][T12183] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 303.045478][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 303.103561][T12202] loop1: detected capacity change from 0 to 512 [ 303.158952][T12202] EXT4-fs (loop1): orphan cleanup on readonly fs [ 303.176320][T12202] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1805: bg 0: block 248: padding at end of block bitmap is not set [ 303.197187][T12202] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1805: Failed to acquire dquot type 1 [ 303.243972][T12202] EXT4-fs (loop1): 1 truncate cleaned up [ 303.566466][T12251] loop5: detected capacity change from 0 to 512 [ 303.576460][T12245] vlan2: entered allmulticast mode [ 303.585631][T12245] dummy0: entered allmulticast mode [ 303.601952][T12251] EXT4-fs (loop5): 1 orphan inode deleted [ 303.616380][T12251] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.627169][ T4797] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 1 [ 303.715638][T12264] loop5: detected capacity change from 0 to 512 [ 303.723794][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 303.732849][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 303.744405][T12264] EXT4-fs (loop5): orphan cleanup on readonly fs [ 303.781936][T12264] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1814: bg 0: block 248: padding at end of block bitmap is not set [ 303.813580][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 303.822627][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 303.831628][T12264] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1814: Failed to acquire dquot type 1 [ 303.870618][T12277] loop1: detected capacity change from 0 to 512 [ 303.889288][T12264] EXT4-fs (loop5): 1 truncate cleaned up [ 303.898062][T12277] EXT4-fs (loop1): orphan cleanup on readonly fs [ 303.938847][T12277] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1817: bg 0: block 248: padding at end of block bitmap is not set [ 303.970378][T12283] loop0: detected capacity change from 0 to 512 [ 304.043862][T12277] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1817: Failed to acquire dquot type 1 [ 304.086053][T12283] EXT4-fs (loop0): orphan cleanup on readonly fs [ 304.095712][T12277] EXT4-fs (loop1): 1 truncate cleaned up [ 304.181412][T12277] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 304.208450][T12277] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 304.254449][T12283] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1818: bg 0: block 248: padding at end of block bitmap is not set [ 304.351204][T12283] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1818: Failed to acquire dquot type 1 [ 304.441679][T12283] EXT4-fs (loop0): 1 truncate cleaned up [ 304.641956][T12329] tmpfs: Bad value for 'mpol' [ 305.294646][T12350] loop2: detected capacity change from 0 to 512 [ 305.332148][T12350] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 305.365549][T12352] loop1: detected capacity change from 0 to 512 [ 305.418814][T12352] EXT4-fs (loop1): orphan cleanup on readonly fs [ 305.435883][T12355] loop2: detected capacity change from 0 to 512 [ 305.477422][T12352] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1833: bg 0: block 248: padding at end of block bitmap is not set [ 305.534240][T12352] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1833: Failed to acquire dquot type 1 [ 305.554245][T12355] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.611578][T12352] EXT4-fs (loop1): 1 truncate cleaned up [ 305.643030][T12352] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 305.698707][T12352] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 305.721727][T12367] FAULT_INJECTION: forcing a failure. [ 305.721727][T12367] name failslab, interval 1, probability 0, space 0, times 0 [ 305.734560][T12367] CPU: 1 UID: 0 PID: 12367 Comm: syz.4.1837 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 305.734594][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.734610][T12367] Call Trace: [ 305.734618][T12367] [ 305.734668][T12367] __dump_stack+0x1d/0x30 [ 305.734712][T12367] dump_stack_lvl+0xe8/0x140 [ 305.734736][T12367] dump_stack+0x15/0x1b [ 305.734789][T12367] should_fail_ex+0x265/0x280 [ 305.734823][T12367] ? __se_sys_memfd_create+0x1cc/0x590 [ 305.734871][T12367] should_failslab+0x8c/0xb0 [ 305.734897][T12367] __kmalloc_cache_noprof+0x4c/0x320 [ 305.734991][T12367] ? fput+0x8f/0xc0 [ 305.735012][T12367] __se_sys_memfd_create+0x1cc/0x590 [ 305.735108][T12367] __x64_sys_memfd_create+0x31/0x40 [ 305.735135][T12367] x64_sys_call+0x122f/0x2fb0 [ 305.735158][T12367] do_syscall_64+0xd2/0x200 [ 305.735179][T12367] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 305.735210][T12367] ? clear_bhb_loop+0x40/0x90 [ 305.735292][T12367] ? clear_bhb_loop+0x40/0x90 [ 305.735318][T12367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.735343][T12367] RIP: 0033:0x7f7b499fe929 [ 305.735361][T12367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.735382][T12367] RSP: 002b:00007f7b48066e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 305.735460][T12367] RAX: ffffffffffffffda RBX: 0000000000000526 RCX: 00007f7b499fe929 [ 305.735475][T12367] RDX: 00007f7b48066ef0 RSI: 0000000000000000 RDI: 00007f7b49a814cc [ 305.735490][T12367] RBP: 0000200000000c00 R08: 00007f7b48066bb7 R09: 00007f7b48066e40 [ 305.735505][T12367] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000a00 [ 305.735519][T12367] R13: 00007f7b48066ef0 R14: 00007f7b48066eb0 R15: 0000200000000140 [ 305.735542][T12367] [ 305.990361][T12370] loop5: detected capacity change from 0 to 164 [ 306.036741][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'. [ 306.195549][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 306.195577][ T29] audit: type=1400 audit(1752441695.794:9681): avc: denied { create } for pid=12379 comm="syz.2.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 306.232889][T12382] loop1: detected capacity change from 0 to 512 [ 306.240040][ T29] audit: type=1400 audit(1752441695.834:9682): avc: denied { setopt } for pid=12379 comm="syz.2.1843" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 306.291898][ T29] audit: type=1400 audit(1752441695.864:9683): avc: denied { mounton } for pid=12381 comm="syz.1.1844" path="/361/file1" dev="tmpfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 306.330568][T12385] loop4: detected capacity change from 0 to 2048 [ 306.344629][T12388] loop2: detected capacity change from 0 to 512 [ 306.344850][ T29] audit: type=1400 audit(1752441695.914:9684): avc: denied { execmem } for pid=12384 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 306.366480][T12382] EXT4-fs (loop1): 1 orphan inode deleted [ 306.376168][ T3968] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 306.385996][ T3968] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 306.414480][ T29] audit: type=1400 audit(1752441696.014:9685): avc: denied { remount } for pid=12384 comm="syz.4.1845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 306.442978][T12385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1845'. [ 306.462153][T12388] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 306.481779][T12382] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.551392][ T29] audit: type=1400 audit(1752441696.044:9686): avc: denied { open } for pid=12390 comm="syz.0.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 306.570801][ T29] audit: type=1400 audit(1752441696.044:9687): avc: denied { kernel } for pid=12390 comm="syz.0.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 306.590557][ T29] audit: type=1400 audit(1752441696.044:9688): avc: denied { create } for pid=12390 comm="syz.0.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.611229][ T29] audit: type=1400 audit(1752441696.044:9689): avc: denied { write } for pid=12390 comm="syz.0.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.616817][T12396] loop0: detected capacity change from 0 to 1024 [ 306.655339][T12400] loop4: detected capacity change from 0 to 164 [ 306.688068][T12399] loop2: detected capacity change from 0 to 1024 [ 306.688854][T12402] loop5: detected capacity change from 0 to 512 [ 306.695566][T12399] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 306.711854][T12399] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 306.722896][T12396] EXT4-fs: Ignoring removed orlov option [ 306.744656][T12399] JBD2: no valid journal superblock found [ 306.750475][T12399] EXT4-fs (loop2): Could not load journal inode [ 306.798106][T12402] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.993705][T12409] ipvlan8: entered promiscuous mode [ 306.999017][T12409] ipvlan8: entered allmulticast mode [ 307.219785][T12417] ipvlan4: entered promiscuous mode [ 307.225117][T12417] ipvlan4: entered allmulticast mode [ 307.672433][T12435] loop5: detected capacity change from 0 to 512 [ 307.700613][T12435] EXT4-fs (loop5): orphan cleanup on readonly fs [ 307.710776][T12435] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1861: bg 0: block 248: padding at end of block bitmap is not set [ 307.727788][T12435] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1861: Failed to acquire dquot type 1 [ 307.755327][T12435] EXT4-fs (loop5): 1 truncate cleaned up [ 307.782065][T12433] loop0: detected capacity change from 0 to 512 [ 307.822661][T12435] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1861: deleted inode referenced: 12 [ 307.877061][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'. [ 307.886605][T12445] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.1861: deleted inode referenced: 12 [ 307.908912][T12433] EXT4-fs (loop0): orphan cleanup on readonly fs [ 307.948986][T12433] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1858: bg 0: block 248: padding at end of block bitmap is not set [ 308.121230][T12448] mmap: syz.4.1864 (12448) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 308.143456][T12448] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 308.150167][T12448] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 308.157811][T12448] vhci_hcd vhci_hcd.0: Device attached [ 308.186402][T12433] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1858: Failed to acquire dquot type 1 [ 308.199336][T12453] loop5: detected capacity change from 0 to 164 [ 308.209252][T12450] vhci_hcd: connection closed [ 308.211369][ T4795] vhci_hcd: stop threads [ 308.220441][ T4795] vhci_hcd: release socket [ 308.224986][ T4795] vhci_hcd: disconnect device [ 308.272904][T12433] EXT4-fs (loop0): 1 truncate cleaned up [ 308.356429][T12455] loop2: detected capacity change from 0 to 512 [ 308.375681][T12455] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.396162][T12455] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 308.434637][T12455] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 308.458736][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 308.467741][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1867'. [ 308.491827][T12455] EXT4-fs (loop2): orphan cleanup on readonly fs [ 308.498704][T12455] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1866: Invalid block bitmap block 0 in block_group 0 [ 308.541550][T12455] EXT4-fs (loop2): Remounting filesystem read-only [ 308.551486][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 308.560478][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1867'. [ 308.569686][T12455] EXT4-fs (loop2): 1 orphan inode deleted [ 308.654307][T12463] loop0: detected capacity change from 0 to 1024 [ 308.665180][T12463] EXT4-fs: Ignoring removed orlov option [ 308.781232][T12473] FAULT_INJECTION: forcing a failure. [ 308.781232][T12473] name failslab, interval 1, probability 0, space 0, times 0 [ 308.793961][T12473] CPU: 0 UID: 0 PID: 12473 Comm: syz.4.1872 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 308.793993][T12473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.794006][T12473] Call Trace: [ 308.794013][T12473] [ 308.794020][T12473] __dump_stack+0x1d/0x30 [ 308.794047][T12473] dump_stack_lvl+0xe8/0x140 [ 308.794071][T12473] dump_stack+0x15/0x1b [ 308.794091][T12473] should_fail_ex+0x265/0x280 [ 308.794128][T12473] should_failslab+0x8c/0xb0 [ 308.794211][T12473] kmem_cache_alloc_noprof+0x50/0x310 [ 308.794241][T12473] ? skb_clone+0x151/0x1f0 [ 308.794343][T12473] skb_clone+0x151/0x1f0 [ 308.794364][T12473] __netlink_deliver_tap+0x2c9/0x500 [ 308.794434][T12473] netlink_unicast+0x653/0x680 [ 308.794491][T12473] netlink_sendmsg+0x58b/0x6b0 [ 308.794572][T12473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.794590][T12473] __sock_sendmsg+0x145/0x180 [ 308.794678][T12473] ____sys_sendmsg+0x345/0x4e0 [ 308.794710][T12473] ___sys_sendmsg+0x17b/0x1d0 [ 308.794758][T12473] __sys_sendmmsg+0x178/0x300 [ 308.794871][T12473] __x64_sys_sendmmsg+0x57/0x70 [ 308.794911][T12473] x64_sys_call+0x2f2f/0x2fb0 [ 308.794999][T12473] do_syscall_64+0xd2/0x200 [ 308.795021][T12473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 308.795047][T12473] ? clear_bhb_loop+0x40/0x90 [ 308.795072][T12473] ? clear_bhb_loop+0x40/0x90 [ 308.795098][T12473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.795121][T12473] RIP: 0033:0x7f7b499fe929 [ 308.795135][T12473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.795152][T12473] RSP: 002b:00007f7b48067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.795196][T12473] RAX: ffffffffffffffda RBX: 00007f7b49c25fa0 RCX: 00007f7b499fe929 [ 308.795211][T12473] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 308.795223][T12473] RBP: 00007f7b48067090 R08: 0000000000000000 R09: 0000000000000000 [ 308.795234][T12473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.795245][T12473] R13: 0000000000000000 R14: 00007f7b49c25fa0 R15: 00007ffd2d8d95d8 [ 308.795329][T12473] [ 308.797514][T12474] loop2: detected capacity change from 0 to 1024 [ 308.871773][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1872'. [ 308.874910][T12474] EXT4-fs: Ignoring removed orlov option [ 308.878089][T12473] netlink: 'syz.4.1872': attribute type 14 has an invalid length. [ 309.043700][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1872'. [ 309.052733][T12473] netlink: 'syz.4.1872': attribute type 14 has an invalid length. [ 309.158341][T12477] loop4: detected capacity change from 0 to 1024 [ 309.251812][T12477] EXT4-fs: Ignoring removed orlov option [ 309.558042][T12484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1875'. [ 309.743179][T12490] loop5: detected capacity change from 0 to 164 [ 309.857245][T12493] pim6reg1: entered promiscuous mode [ 310.083765][T12505] FAULT_INJECTION: forcing a failure. [ 310.083765][T12505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.097020][T12505] CPU: 1 UID: 0 PID: 12505 Comm: syz.1.1881 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 310.097133][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.097146][T12505] Call Trace: [ 310.097151][T12505] [ 310.097159][T12505] __dump_stack+0x1d/0x30 [ 310.097258][T12505] dump_stack_lvl+0xe8/0x140 [ 310.097277][T12505] dump_stack+0x15/0x1b [ 310.097293][T12505] should_fail_ex+0x265/0x280 [ 310.097323][T12505] should_fail+0xb/0x20 [ 310.097409][T12505] should_fail_usercopy+0x1a/0x20 [ 310.097442][T12505] strncpy_from_user+0x25/0x230 [ 310.097466][T12505] ? kmem_cache_alloc_noprof+0x186/0x310 [ 310.097492][T12505] ? getname_flags+0x80/0x3b0 [ 310.097556][T12505] getname_flags+0xae/0x3b0 [ 310.097577][T12505] __x64_sys_mkdirat+0x40/0x60 [ 310.097607][T12505] x64_sys_call+0x2be0/0x2fb0 [ 310.097628][T12505] do_syscall_64+0xd2/0x200 [ 310.097719][T12505] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 310.097746][T12505] ? clear_bhb_loop+0x40/0x90 [ 310.097767][T12505] ? clear_bhb_loop+0x40/0x90 [ 310.097789][T12505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.097817][T12505] RIP: 0033:0x7f8e63c3e929 [ 310.097831][T12505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.097849][T12505] RSP: 002b:00007f8e622a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 310.097868][T12505] RAX: ffffffffffffffda RBX: 00007f8e63e65fa0 RCX: 00007f8e63c3e929 [ 310.097880][T12505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 310.097960][T12505] RBP: 00007f8e622a7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.097972][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.097984][T12505] R13: 0000000000000000 R14: 00007f8e63e65fa0 R15: 00007ffea01a1768 [ 310.098003][T12505] [ 310.290495][T12490] Unsupported NM flag settings (8) [ 310.415903][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 310.424947][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1886'. [ 310.529080][T12529] pim6reg1: entered promiscuous mode [ 310.576847][T12539] loop4: detected capacity change from 0 to 512 [ 310.624507][T12539] EXT4-fs (loop4): orphan cleanup on readonly fs [ 310.637860][T12539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1891: bg 0: block 248: padding at end of block bitmap is not set [ 310.654036][T12539] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1891: Failed to acquire dquot type 1 [ 310.685917][T12539] EXT4-fs (loop4): 1 truncate cleaned up [ 310.707511][T12539] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1891: deleted inode referenced: 12 [ 310.726817][T12539] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.1891: deleted inode referenced: 12 [ 310.778168][T12542] loop2: detected capacity change from 0 to 512 [ 310.867961][T12542] ext4 filesystem being mounted at /393/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.879694][T12548] loop0: detected capacity change from 0 to 8192 [ 310.894895][T12558] loop5: detected capacity change from 0 to 512 [ 310.905252][T12542] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1890: corrupted inode contents [ 310.923634][T12548] loop0: p1 p4 < > [ 310.928439][T12558] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 310.940843][T12542] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.1890: mark_inode_dirty error [ 310.941398][T12548] loop0: p1 start 4261412864 is beyond EOD, truncated [ 310.954151][T12542] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.1890: corrupted inode contents [ 310.985612][T12542] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1890: mark_inode_dirty error [ 311.049131][ T4051] udevd[4051]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 311.060915][T12562] loop5: detected capacity change from 0 to 128 [ 311.099518][T12562] syz.5.1896: attempt to access beyond end of device [ 311.099518][T12562] loop5: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 311.114873][T12562] syz.5.1896: attempt to access beyond end of device [ 311.114873][T12562] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 311.133601][T12566] loop0: detected capacity change from 0 to 164 [ 311.222356][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 311.222395][ T29] audit: type=1326 audit(1752441700.824:10138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90d3b158e7 code=0x7ffc0000 [ 311.252205][ T29] audit: type=1326 audit(1752441700.824:10139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90d3abab19 code=0x7ffc0000 [ 311.275748][ T29] audit: type=1326 audit(1752441700.824:10140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d3b1e929 code=0x7ffc0000 [ 311.351245][ T29] audit: type=1326 audit(1752441700.904:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90d3b158e7 code=0x7ffc0000 [ 311.364584][T12571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=12571 comm=syz.5.1896 [ 311.374935][ T29] audit: type=1326 audit(1752441700.904:10142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90d3abab19 code=0x7ffc0000 [ 311.411243][ T29] audit: type=1326 audit(1752441700.904:10143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d3b1e929 code=0x7ffc0000 [ 311.434916][ T29] audit: type=1326 audit(1752441700.924:10144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90d3b158e7 code=0x7ffc0000 [ 311.458452][ T29] audit: type=1326 audit(1752441700.924:10145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90d3abab19 code=0x7ffc0000 [ 311.482003][ T29] audit: type=1326 audit(1752441700.924:10146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d3b1e929 code=0x7ffc0000 [ 311.505717][ T29] audit: type=1326 audit(1752441700.934:10147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12561 comm="syz.5.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f90d3b158e7 code=0x7ffc0000 [ 311.596632][T12570] syz.5.1896: attempt to access beyond end of device [ 311.596632][T12570] loop5: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 311.610570][T12570] syz.5.1896: attempt to access beyond end of device [ 311.610570][T12570] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 311.651704][T12570] syz.5.1896: attempt to access beyond end of device [ 311.651704][T12570] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 311.733339][T12570] syz.5.1896: attempt to access beyond end of device [ 311.733339][T12570] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 311.799708][T12570] syz.5.1896: attempt to access beyond end of device [ 311.799708][T12570] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 311.813502][T12570] syz.5.1896: attempt to access beyond end of device [ 311.813502][T12570] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 311.816334][T12576] loop1: detected capacity change from 0 to 8192 [ 311.827793][T12570] syz.5.1896: attempt to access beyond end of device [ 311.827793][T12570] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 311.847273][T12570] syz.5.1896: attempt to access beyond end of device [ 311.847273][T12570] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 311.907512][T12576] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.182945][T12576] random: crng reseeded on system resumption [ 312.304333][T12594] loop5: detected capacity change from 0 to 512 [ 312.338417][T12594] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.578424][T12598] FAULT_INJECTION: forcing a failure. [ 312.578424][T12598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.591663][T12598] CPU: 0 UID: 0 PID: 12598 Comm: syz.5.1907 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 312.591689][T12598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.591703][T12598] Call Trace: [ 312.591710][T12598] [ 312.591720][T12598] __dump_stack+0x1d/0x30 [ 312.591745][T12598] dump_stack_lvl+0xe8/0x140 [ 312.591769][T12598] dump_stack+0x15/0x1b [ 312.591820][T12598] should_fail_ex+0x265/0x280 [ 312.591873][T12598] should_fail+0xb/0x20 [ 312.591897][T12598] should_fail_usercopy+0x1a/0x20 [ 312.591926][T12598] _copy_from_user+0x1c/0xb0 [ 312.591948][T12598] kstrtouint_from_user+0x69/0xf0 [ 312.592012][T12598] ? 0xffffffff81000000 [ 312.592028][T12598] ? selinux_file_permission+0x1e4/0x320 [ 312.592091][T12598] proc_fail_nth_write+0x50/0x160 [ 312.592130][T12598] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 312.592167][T12598] vfs_write+0x269/0x8e0 [ 312.592223][T12598] ? vfs_read+0x47f/0x6f0 [ 312.592257][T12598] ? __rcu_read_unlock+0x4f/0x70 [ 312.592284][T12598] ? __fget_files+0x184/0x1c0 [ 312.592305][T12598] ksys_write+0xda/0x1a0 [ 312.592355][T12598] __x64_sys_write+0x40/0x50 [ 312.592453][T12598] x64_sys_call+0x2cdd/0x2fb0 [ 312.592513][T12598] do_syscall_64+0xd2/0x200 [ 312.592529][T12598] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 312.592576][T12598] ? clear_bhb_loop+0x40/0x90 [ 312.592643][T12598] ? clear_bhb_loop+0x40/0x90 [ 312.592670][T12598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.592695][T12598] RIP: 0033:0x7f90d3b1d3df [ 312.592712][T12598] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 312.592767][T12598] RSP: 002b:00007f90d2187030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 312.592785][T12598] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f90d3b1d3df [ 312.592800][T12598] RDX: 0000000000000001 RSI: 00007f90d21870a0 RDI: 0000000000000004 [ 312.592814][T12598] RBP: 00007f90d2187090 R08: 0000000000000000 R09: 0000000000000000 [ 312.592829][T12598] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 312.592843][T12598] R13: 0000000000000000 R14: 00007f90d3d45fa0 R15: 00007ffc94e830c8 [ 312.592864][T12598] [ 312.951285][T12612] loop1: detected capacity change from 0 to 512 [ 313.218469][T12618] loop2: detected capacity change from 0 to 164 [ 313.297574][T12620] loop4: detected capacity change from 0 to 512 [ 313.353488][T12620] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.471531][T12612] EXT4-fs (loop1): orphan cleanup on readonly fs [ 313.491012][T12612] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1911: bg 0: block 248: padding at end of block bitmap is not set [ 313.509838][T12625] ipvlan10: entered promiscuous mode [ 313.512228][T12612] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1911: Failed to acquire dquot type 1 [ 313.515508][T12625] ipvlan10: entered allmulticast mode [ 313.531750][T12612] EXT4-fs (loop1): 1 truncate cleaned up [ 313.634271][T12628] loop4: detected capacity change from 0 to 512 [ 313.655556][T12628] EXT4-fs (loop4): orphan cleanup on readonly fs [ 313.662946][T12631] loop1: detected capacity change from 0 to 512 [ 313.671760][T12628] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1916: bg 0: block 248: padding at end of block bitmap is not set [ 313.696502][T12628] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1916: Failed to acquire dquot type 1 [ 313.744089][T12631] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.759063][T12634] loop5: detected capacity change from 0 to 512 [ 313.807567][T12628] EXT4-fs (loop4): 1 truncate cleaned up [ 313.822828][T12634] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.927672][T12641] loop5: detected capacity change from 0 to 1024 [ 313.935886][T12641] EXT4-fs: Ignoring removed orlov option [ 314.599325][T12662] loop0: detected capacity change from 0 to 512 [ 314.657622][T12662] EXT4-fs mount: 95 callbacks suppressed [ 314.657636][T12662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.696003][T12662] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.737359][T12672] __nla_validate_parse: 3 callbacks suppressed [ 314.737373][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'. [ 314.797438][T12674] loop1: detected capacity change from 0 to 512 [ 314.852407][T12674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.949926][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.962714][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.973456][T12674] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.161352][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.255731][T12690] loop1: detected capacity change from 0 to 164 [ 315.489276][T12694] ipvlan5: entered promiscuous mode [ 315.494577][T12694] ipvlan5: entered allmulticast mode [ 316.116242][T12702] loop2: detected capacity change from 0 to 1024 [ 316.216386][T12709] loop1: detected capacity change from 0 to 164 [ 316.283973][T12702] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 316.294943][T12702] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 316.511150][T12702] JBD2: no valid journal superblock found [ 316.517002][T12702] EXT4-fs (loop2): Could not load journal inode [ 316.750026][T12712] loop1: detected capacity change from 0 to 512 [ 316.899135][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 316.899153][ T29] audit: type=1400 audit(1752441706.494:10398): avc: denied { create } for pid=12713 comm="syz.2.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.937730][T12712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.984744][T12712] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 316.995627][T12719] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 317.061507][ T29] audit: type=1400 audit(1752441706.644:10399): avc: denied { open } for pid=12723 comm="syz.5.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 317.081043][ T29] audit: type=1400 audit(1752441706.644:10400): avc: denied { kernel } for pid=12723 comm="syz.5.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 317.132349][T12714] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 317.138921][T12714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.146543][T12714] vhci_hcd vhci_hcd.0: Device attached [ 317.173464][T12728] loop4: detected capacity change from 0 to 512 [ 317.273640][ T29] audit: type=1400 audit(1752441706.774:10401): avc: denied { write } for pid=12723 comm="syz.5.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 317.318314][ T29] audit: type=1400 audit(1752441706.914:10402): avc: denied { create } for pid=12732 comm="syz.0.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.351088][T12733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1945'. [ 317.405847][ T3395] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 317.504197][ T29] audit: type=1400 audit(1752441706.964:10403): avc: denied { module_request } for pid=12713 comm="syz.2.1940" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 317.526571][ T29] audit: type=1400 audit(1752441707.054:10404): avc: denied { sys_module } for pid=12713 comm="syz.2.1940" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 317.547852][ T29] audit: type=1400 audit(1752441707.084:10405): avc: denied { read } for pid=12732 comm="syz.0.1945" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.571249][ T29] audit: type=1400 audit(1752441707.084:10406): avc: denied { open } for pid=12732 comm="syz.0.1945" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.631797][T12717] vhci_hcd: connection reset by peer [ 317.643312][T12739] loop5: detected capacity change from 0 to 512 [ 317.650864][ T3968] vhci_hcd: stop threads [ 317.655192][ T3968] vhci_hcd: release socket [ 317.656318][T12728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.659622][ T3968] vhci_hcd: disconnect device [ 317.680464][T12728] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.699974][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.748897][T12744] loop1: detected capacity change from 0 to 164 [ 317.824630][T12739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.884351][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.911816][T12739] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.998629][T12749] loop1: detected capacity change from 0 to 512 [ 318.028848][T12749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.071410][T12749] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.160812][T12755] loop0: detected capacity change from 0 to 164 [ 318.173839][ T29] audit: type=1400 audit(1752441707.774:10407): avc: denied { read } for pid=12752 comm="syz.4.1948" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.312726][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.860122][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.106425][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1954'. [ 319.177950][T12781] loop0: detected capacity change from 0 to 512 [ 319.323328][T12781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.349152][T12781] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.416465][T12781] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1955: corrupted inode contents [ 319.555938][T12793] loop5: detected capacity change from 0 to 512 [ 319.569467][T12781] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1955: mark_inode_dirty error [ 319.601827][T12797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1960'. [ 319.621654][T12781] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1955: corrupted inode contents [ 320.078938][T12781] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1955: mark_inode_dirty error [ 320.377930][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.488884][T12793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.621451][T12793] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 320.712721][T12817] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 320.719381][T12817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.727057][T12817] vhci_hcd vhci_hcd.0: Device attached [ 320.791560][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.836931][T12814] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 320.971492][ T23] usb 9-1: new low-speed USB device number 5 using vhci_hcd [ 321.281393][T12818] vhci_hcd: connection reset by peer [ 321.289234][ T3955] vhci_hcd: stop threads [ 321.293541][ T3955] vhci_hcd: release socket [ 321.298096][ T3955] vhci_hcd: disconnect device [ 321.355297][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1970'. [ 321.986630][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 321.986648][ T29] audit: type=1400 audit(1752441711.584:10432): avc: denied { create } for pid=12882 comm="syz.2.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.080616][ T29] audit: type=1400 audit(1752441711.674:10433): avc: denied { create } for pid=12891 comm="syz.1.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.127837][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1972'. [ 322.141662][ T29] audit: type=1326 audit(1752441711.704:10434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 322.165487][ T29] audit: type=1326 audit(1752441711.734:10435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 322.189152][ T29] audit: type=1326 audit(1752441711.734:10436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 322.212873][ T29] audit: type=1326 audit(1752441711.734:10437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 322.236727][ T29] audit: type=1326 audit(1752441711.734:10438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 322.260538][ T29] audit: type=1326 audit(1752441711.734:10439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 322.284239][ T29] audit: type=1326 audit(1752441711.734:10440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 322.307988][ T29] audit: type=1326 audit(1752441711.734:10441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.1.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f8e63c3e929 code=0x7ffc0000 [ 322.464079][ T3395] usb 5-1: enqueue for inactive port 0 [ 322.469636][ T3395] usb 5-1: enqueue for inactive port 0 [ 322.499206][T12892] loop1: detected capacity change from 0 to 8192 [ 322.574208][ T3395] vhci_hcd: vhci_device speed not set [ 322.609866][T12892] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 322.730906][T12892] random: crng reseeded on system resumption [ 323.088314][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 323.095024][T12954] loop1: detected capacity change from 0 to 512 [ 323.137647][T12954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.230651][T12954] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.313394][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.395688][T12976] loop5: detected capacity change from 0 to 512 [ 323.420505][T12980] loop1: detected capacity change from 0 to 512 [ 323.433912][T12976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.521483][T12976] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.582313][T12980] EXT4-fs (loop1): orphan cleanup on readonly fs [ 323.741508][T12980] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1977: bg 0: block 248: padding at end of block bitmap is not set [ 323.881429][T12980] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1977: Failed to acquire dquot type 1 [ 323.882601][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.921949][T12980] EXT4-fs (loop1): 1 truncate cleaned up [ 323.952669][T12980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.227720][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.246748][T13022] loop2: detected capacity change from 0 to 1024 [ 324.330617][T13022] EXT4-fs: Ignoring removed orlov option [ 324.411030][T13022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.698836][T13033] loop1: detected capacity change from 0 to 164 [ 324.909172][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1986'. [ 325.125356][T13048] loop5: detected capacity change from 0 to 512 [ 325.189194][T13048] EXT4-fs (loop5): orphan cleanup on readonly fs [ 325.203555][T13051] ipvlan11: entered promiscuous mode [ 325.208910][T13051] ipvlan11: entered allmulticast mode [ 325.253390][T13048] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1988: bg 0: block 248: padding at end of block bitmap is not set [ 325.276926][T13048] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1988: Failed to acquire dquot type 1 [ 325.303150][T13048] EXT4-fs (loop5): 1 truncate cleaned up [ 325.316214][T13048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.354978][T13048] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 325.391804][T13048] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 325.445044][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.538525][T13066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1994'. [ 325.552668][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.569717][T13068] loop5: detected capacity change from 0 to 512 [ 325.588452][T13068] EXT4-fs (loop5): 1 orphan inode deleted [ 325.601436][ T3955] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 325.625741][T13068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.659886][T13068] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.721706][T13074] loop1: detected capacity change from 0 to 1024 [ 325.741096][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.757837][T13074] EXT4-fs: Ignoring removed orlov option [ 325.786688][T13078] loop5: detected capacity change from 0 to 1024 [ 325.800453][T13078] EXT4-fs: Ignoring removed orlov option [ 325.811765][T13061] netlink: 'syz.0.1992': attribute type 1 has an invalid length. [ 325.819566][T13061] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1992'. [ 325.842496][T13078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.859955][T13074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.956810][T13085] FAULT_INJECTION: forcing a failure. [ 325.956810][T13085] name failslab, interval 1, probability 0, space 0, times 0 [ 325.969560][T13085] CPU: 0 UID: 0 PID: 13085 Comm: syz.0.2000 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 325.969587][T13085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.969599][T13085] Call Trace: [ 325.969606][T13085] [ 325.969614][T13085] __dump_stack+0x1d/0x30 [ 325.969634][T13085] dump_stack_lvl+0xe8/0x140 [ 325.969698][T13085] dump_stack+0x15/0x1b [ 325.969712][T13085] should_fail_ex+0x265/0x280 [ 325.969740][T13085] should_failslab+0x8c/0xb0 [ 325.969763][T13085] kmem_cache_alloc_node_noprof+0x57/0x320 [ 325.969788][T13085] ? __alloc_skb+0x101/0x320 [ 325.969903][T13085] __alloc_skb+0x101/0x320 [ 325.969988][T13085] netlink_alloc_large_skb+0xba/0xf0 [ 325.970024][T13085] netlink_sendmsg+0x3cf/0x6b0 [ 325.970043][T13085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.970120][T13085] __sock_sendmsg+0x145/0x180 [ 325.970157][T13085] ____sys_sendmsg+0x31e/0x4e0 [ 325.970228][T13085] ___sys_sendmsg+0x17b/0x1d0 [ 325.970273][T13085] __x64_sys_sendmsg+0xd4/0x160 [ 325.970372][T13085] x64_sys_call+0x2999/0x2fb0 [ 325.970399][T13085] do_syscall_64+0xd2/0x200 [ 325.970463][T13085] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.970489][T13085] ? clear_bhb_loop+0x40/0x90 [ 325.970513][T13085] ? clear_bhb_loop+0x40/0x90 [ 325.970538][T13085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.970557][T13085] RIP: 0033:0x7f35c227e929 [ 325.970571][T13085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.970589][T13085] RSP: 002b:00007f35c08e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.970651][T13085] RAX: ffffffffffffffda RBX: 00007f35c24a5fa0 RCX: 00007f35c227e929 [ 325.970667][T13085] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 325.970678][T13085] RBP: 00007f35c08e7090 R08: 0000000000000000 R09: 0000000000000000 [ 325.970690][T13085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.970718][T13085] R13: 0000000000000000 R14: 00007f35c24a5fa0 R15: 00007fffa97a1aa8 [ 325.970741][T13085] [ 326.179822][ T23] usb 9-1: enqueue for inactive port 0 [ 326.185414][ T23] usb 9-1: enqueue for inactive port 0 [ 326.252555][ T23] vhci_hcd: vhci_device speed not set [ 326.334065][T13091] loop0: detected capacity change from 0 to 512 [ 326.474486][T13091] EXT4-fs (loop0): orphan cleanup on readonly fs [ 326.500852][T13091] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2001: bg 0: block 248: padding at end of block bitmap is not set [ 327.263959][T13101] loop2: detected capacity change from 0 to 512 [ 327.430271][T13091] __quota_error: 163 callbacks suppressed [ 327.430293][T13091] Quota error (device loop0): write_blk: dquota write failed [ 327.443573][T13091] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 327.453564][T13091] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2001: Failed to acquire dquot type 1 [ 327.471893][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.494572][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.527653][T13101] EXT4-fs (loop2): 1 orphan inode deleted [ 327.542754][ T4797] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 327.552603][ T4797] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 1 [ 327.572079][T13101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.588898][ T29] audit: type=1400 audit(1752441717.184:10600): avc: denied { create } for pid=13104 comm="syz.5.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.608907][ T29] audit: type=1400 audit(1752441717.184:10601): avc: denied { bind } for pid=13104 comm="syz.5.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.628454][ T29] audit: type=1400 audit(1752441717.204:10602): avc: denied { setopt } for pid=13104 comm="syz.5.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.655484][T13101] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.668939][T13091] EXT4-fs (loop0): 1 truncate cleaned up [ 327.689054][T13105] loop5: detected capacity change from 0 to 512 [ 327.763188][T13105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.782082][T13105] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.795189][ T29] audit: type=1400 audit(1752441717.394:10603): avc: denied { write } for pid=13104 comm="syz.5.2006" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 327.817818][ T29] audit: type=1400 audit(1752441717.394:10604): avc: denied { open } for pid=13104 comm="syz.5.2006" path="/198/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 328.063542][T13091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.079677][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.097871][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.107354][T13120] loop4: detected capacity change from 0 to 1024 [ 328.116457][T13120] EXT4-fs: Ignoring removed orlov option [ 328.122034][T13091] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 328.148739][T13120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.162241][ T29] audit: type=1400 audit(1752441717.744:10605): avc: denied { read write } for pid=13123 comm="syz.5.2012" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 328.163070][T13125] loop5: detected capacity change from 0 to 164 [ 328.186495][ T29] audit: type=1400 audit(1752441717.744:10606): avc: denied { open } for pid=13123 comm="syz.5.2012" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 328.215204][T13130] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 328.223049][T13124] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 328.231579][T13124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 328.239153][T13124] vhci_hcd vhci_hcd.0: Device attached [ 328.248923][T13091] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 328.410955][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.443952][T13137] loop1: detected capacity change from 0 to 1024 [ 328.471287][T13137] EXT4-fs: Ignoring removed orlov option [ 328.481404][ T23] usb 5-1: new low-speed USB device number 4 using vhci_hcd [ 328.500939][T13137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.516526][T13127] vhci_hcd: connection reset by peer [ 328.523697][ T3968] vhci_hcd: stop threads [ 328.528088][ T3968] vhci_hcd: release socket [ 328.532605][ T3968] vhci_hcd: disconnect device [ 328.741648][T13152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2019'. [ 329.443197][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.584702][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.653449][T13179] loop1: detected capacity change from 0 to 512 [ 329.691254][T13179] EXT4-fs (loop1): 1 orphan inode deleted [ 329.701532][ T3968] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 329.713619][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2024'. [ 329.723686][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 329.736542][T13179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.749472][T13188] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2028'. [ 329.758821][T13179] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.778531][T13175] pim6reg1: entered promiscuous mode [ 329.826222][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.838180][T13193] loop4: detected capacity change from 0 to 512 [ 329.882246][T13193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.895448][T13200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2030'. [ 329.922343][T13193] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.065065][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 330.240458][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.281151][T13209] loop5: detected capacity change from 0 to 1024 [ 330.335288][T13221] loop2: detected capacity change from 0 to 512 [ 330.344213][T13209] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 330.355228][T13209] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 330.371935][T13221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.396722][T13221] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.416675][T13223] loop0: detected capacity change from 0 to 512 [ 330.439246][T13223] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.462324][T13223] ext4: Unknown parameter 'fsuuid' [ 330.530299][T13209] JBD2: no valid journal superblock found [ 330.530632][T13227] pim6reg1: entered promiscuous mode [ 330.536195][T13209] EXT4-fs (loop5): Could not load journal inode [ 330.555450][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2041'. [ 330.670850][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.862717][T13238] pim6reg1: entered promiscuous mode [ 331.083300][T13268] loop2: detected capacity change from 0 to 512 [ 331.101927][T13268] EXT4-fs (loop2): orphan cleanup on readonly fs [ 331.129239][T13268] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2051: bg 0: block 248: padding at end of block bitmap is not set [ 331.164600][T13268] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2051: Failed to acquire dquot type 1 [ 331.238170][T13268] EXT4-fs (loop2): 1 truncate cleaned up [ 331.262562][T13268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.292696][T13268] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 331.311667][T13268] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 331.348743][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.409599][T13276] loop2: detected capacity change from 0 to 512 [ 331.437117][T13276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.457651][T13276] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.513297][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 331.522388][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2056'. [ 331.541834][T13283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 331.610724][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.641101][T13288] FAULT_INJECTION: forcing a failure. [ 331.641101][T13288] name failslab, interval 1, probability 0, space 0, times 0 [ 331.653868][T13288] CPU: 1 UID: 0 PID: 13288 Comm: syz.2.2058 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 331.653904][T13288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.654082][T13288] Call Trace: [ 331.654089][T13288] [ 331.654096][T13288] __dump_stack+0x1d/0x30 [ 331.654117][T13288] dump_stack_lvl+0xe8/0x140 [ 331.654240][T13288] dump_stack+0x15/0x1b [ 331.654327][T13288] should_fail_ex+0x265/0x280 [ 331.654413][T13288] should_failslab+0x8c/0xb0 [ 331.654501][T13288] kmem_cache_alloc_node_noprof+0x57/0x320 [ 331.654531][T13288] ? __alloc_skb+0x101/0x320 [ 331.654610][T13288] __alloc_skb+0x101/0x320 [ 331.654637][T13288] netlink_alloc_large_skb+0xba/0xf0 [ 331.654668][T13288] netlink_sendmsg+0x3cf/0x6b0 [ 331.654687][T13288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.654727][T13288] __sock_sendmsg+0x145/0x180 [ 331.654751][T13288] ____sys_sendmsg+0x31e/0x4e0 [ 331.654795][T13288] ___sys_sendmsg+0x17b/0x1d0 [ 331.654903][T13288] __x64_sys_sendmsg+0xd4/0x160 [ 331.654938][T13288] x64_sys_call+0x2999/0x2fb0 [ 331.654963][T13288] do_syscall_64+0xd2/0x200 [ 331.655033][T13288] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 331.655082][T13288] ? clear_bhb_loop+0x40/0x90 [ 331.655105][T13288] ? clear_bhb_loop+0x40/0x90 [ 331.655160][T13288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.655183][T13288] RIP: 0033:0x7f6f9ddce929 [ 331.655202][T13288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.655224][T13288] RSP: 002b:00007f6f9c437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.655322][T13288] RAX: ffffffffffffffda RBX: 00007f6f9dff5fa0 RCX: 00007f6f9ddce929 [ 331.655338][T13288] RDX: 0000000000008080 RSI: 0000200000000200 RDI: 0000000000000003 [ 331.655353][T13288] RBP: 00007f6f9c437090 R08: 0000000000000000 R09: 0000000000000000 [ 331.655369][T13288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.655398][T13288] R13: 0000000000000000 R14: 00007f6f9dff5fa0 R15: 00007ffc33a57668 [ 331.655420][T13288] [ 331.944750][T13297] loop5: detected capacity change from 0 to 512 [ 331.974496][T13292] pim6reg1: entered promiscuous mode [ 332.005079][T13297] EXT4-fs (loop5): orphan cleanup on readonly fs [ 332.019615][T13304] loop0: detected capacity change from 0 to 1024 [ 332.022090][T13297] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2062: bg 0: block 248: padding at end of block bitmap is not set [ 332.029022][T13304] EXT4-fs: Ignoring removed orlov option [ 332.055176][T13297] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2062: Failed to acquire dquot type 1 [ 332.071496][T13300] loop1: detected capacity change from 0 to 8192 [ 332.078866][T13297] EXT4-fs (loop5): 1 truncate cleaned up [ 332.079494][T13300] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 332.100989][T13304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.115171][T13297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.142884][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.161679][T13300] random: crng reseeded on system resumption [ 332.185325][T13310] loop5: detected capacity change from 0 to 512 [ 332.196779][T13310] EXT4-fs (loop5): orphan cleanup on readonly fs [ 332.204115][T13310] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2066: bg 0: block 248: padding at end of block bitmap is not set [ 332.245098][T13310] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2066: Failed to acquire dquot type 1 [ 332.345117][T13310] EXT4-fs (loop5): 1 truncate cleaned up [ 332.355873][T13310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.384375][T13310] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 332.437762][T13310] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 332.460453][T13323] loop4: detected capacity change from 0 to 512 [ 332.468964][ T8565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.478116][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 332.478127][ T29] audit: type=1400 audit(1752441722.074:11035): avc: denied { write } for pid=13319 comm="syz.2.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 332.578276][ T29] audit: type=1400 audit(1752441722.074:11036): avc: denied { execmem } for pid=13319 comm="syz.2.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 332.622711][T13323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.741563][T13323] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 332.785185][ T29] audit: type=1400 audit(1752441722.364:11037): avc: denied { write } for pid=13330 comm="syz.5.2071" path="socket:[26006]" dev="sockfs" ino=26006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 333.219051][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.234864][ T29] audit: type=1400 audit(1752441722.574:11038): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 333.320705][T13342] loop4: detected capacity change from 0 to 1024 [ 333.340297][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.355088][T13342] EXT4-fs: Ignoring removed orlov option [ 333.392927][ T29] audit: type=1326 audit(1752441722.994:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 333.431396][ T29] audit: type=1326 audit(1752441723.014:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 333.434252][T13342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.455084][ T29] audit: type=1326 audit(1752441723.014:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 333.491177][ T29] audit: type=1326 audit(1752441723.014:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 333.514936][ T29] audit: type=1326 audit(1752441723.014:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 333.538645][ T29] audit: type=1326 audit(1752441723.014:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13345 comm="syz.2.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 333.562926][ T23] usb 5-1: enqueue for inactive port 0 [ 333.568476][ T23] usb 5-1: enqueue for inactive port 0 [ 333.641413][ T23] vhci_hcd: vhci_device speed not set [ 333.682707][T13351] pim6reg1: entered promiscuous mode [ 333.821203][T13350] loop0: detected capacity change from 0 to 8192 [ 333.843928][T13350] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.860444][T13350] random: crng reseeded on system resumption [ 333.933801][T13359] __nla_validate_parse: 2 callbacks suppressed [ 333.933857][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'. [ 333.984077][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'. [ 334.067690][T13363] loop1: detected capacity change from 0 to 512 [ 334.090617][T13363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.123966][T13363] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.309173][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.375741][T13370] loop0: detected capacity change from 0 to 1024 [ 334.398383][T13370] EXT4-fs: Ignoring removed orlov option [ 334.408897][T13372] loop4: detected capacity change from 0 to 512 [ 334.487330][T13372] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.498699][T13401] loop1: detected capacity change from 0 to 1024 [ 335.793131][T13404] loop0: detected capacity change from 0 to 512 [ 335.838468][T13398] pim6reg1: entered promiscuous mode [ 335.851848][T13401] EXT4-fs: Ignoring removed orlov option [ 335.870392][T13404] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.965362][T13412] loop5: detected capacity change from 0 to 512 [ 336.036456][T13412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.076679][T13417] loop4: detected capacity change from 0 to 1024 [ 336.083624][T13417] EXT4-fs: Ignoring removed orlov option [ 336.162025][T13412] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.217044][T13420] loop0: detected capacity change from 0 to 512 [ 336.432237][T13420] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.842296][T13435] loop5: detected capacity change from 0 to 164 [ 337.007925][T13439] loop2: detected capacity change from 0 to 1024 [ 337.015766][T13439] EXT4-fs: Ignoring removed orlov option [ 337.284646][T13446] loop4: detected capacity change from 0 to 512 [ 337.313721][T13446] ext4 filesystem being mounted at /438/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.556415][T13455] loop0: detected capacity change from 0 to 164 [ 337.820528][T13459] loop1: detected capacity change from 0 to 512 [ 337.865562][T13459] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.897645][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 337.897689][ T29] audit: type=1400 audit(1752441727.494:11224): avc: denied { unmount } for pid=8565 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 337.999880][ T29] audit: type=1400 audit(1752441727.524:11225): avc: denied { write } for pid=13456 comm="syz.4.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.064811][ T29] audit: type=1326 audit(1752441727.624:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 338.088573][T13469] loop2: detected capacity change from 0 to 8192 [ 338.088633][ T29] audit: type=1326 audit(1752441727.624:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 338.088666][ T29] audit: type=1326 audit(1752441727.624:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 338.142199][ T29] audit: type=1326 audit(1752441727.624:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 338.165794][ T29] audit: type=1326 audit(1752441727.624:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 338.189511][ T29] audit: type=1326 audit(1752441727.624:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 338.213375][ T29] audit: type=1326 audit(1752441727.634:11232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 338.213921][T13469] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.236971][ T29] audit: type=1326 audit(1752441727.634:11233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.2.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f9ddce929 code=0x7ffc0000 [ 338.389574][T13474] netlink: 'syz.0.2108': attribute type 13 has an invalid length. [ 338.401697][T13469] random: crng reseeded on system resumption [ 338.464382][T13475] FAULT_INJECTION: forcing a failure. [ 338.464382][T13475] name failslab, interval 1, probability 0, space 0, times 0 [ 338.477108][T13475] CPU: 1 UID: 0 PID: 13475 Comm: syz.5.2106 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 338.477213][T13475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.477240][T13475] Call Trace: [ 338.477249][T13475] [ 338.477259][T13475] __dump_stack+0x1d/0x30 [ 338.477300][T13475] dump_stack_lvl+0xe8/0x140 [ 338.477319][T13475] dump_stack+0x15/0x1b [ 338.477334][T13475] should_fail_ex+0x265/0x280 [ 338.477435][T13475] should_failslab+0x8c/0xb0 [ 338.477460][T13475] kmem_cache_alloc_noprof+0x50/0x310 [ 338.477483][T13475] ? create_new_namespaces+0x3c/0x3d0 [ 338.477532][T13475] create_new_namespaces+0x3c/0x3d0 [ 338.477566][T13475] unshare_nsproxy_namespaces+0xe8/0x120 [ 338.477604][T13475] ksys_unshare+0x3d0/0x6d0 [ 338.477711][T13475] ? ksys_write+0x192/0x1a0 [ 338.477750][T13475] __x64_sys_unshare+0x1f/0x30 [ 338.477776][T13475] x64_sys_call+0x2d4b/0x2fb0 [ 338.477802][T13475] do_syscall_64+0xd2/0x200 [ 338.477833][T13475] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 338.477858][T13475] ? clear_bhb_loop+0x40/0x90 [ 338.477878][T13475] ? clear_bhb_loop+0x40/0x90 [ 338.477904][T13475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.477924][T13475] RIP: 0033:0x7f90d3b1e929 [ 338.477959][T13475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.477979][T13475] RSP: 002b:00007f90d2145038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 338.477998][T13475] RAX: ffffffffffffffda RBX: 00007f90d3d46160 RCX: 00007f90d3b1e929 [ 338.478013][T13475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 338.478028][T13475] RBP: 00007f90d2145090 R08: 0000000000000000 R09: 0000000000000000 [ 338.478047][T13475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.478058][T13475] R13: 0000000000000000 R14: 00007f90d3d46160 R15: 00007ffc94e830c8 [ 338.478079][T13475] [ 338.751508][T13474] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.758827][T13474] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.967224][T13480] loop4: detected capacity change from 0 to 164 [ 339.079176][T13484] FAULT_INJECTION: forcing a failure. [ 339.079176][T13484] name failslab, interval 1, probability 0, space 0, times 0 [ 339.092010][T13484] CPU: 1 UID: 0 PID: 13484 Comm: syz.1.2109 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 339.092037][T13484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.092053][T13484] Call Trace: [ 339.092060][T13484] [ 339.092069][T13484] __dump_stack+0x1d/0x30 [ 339.092134][T13484] dump_stack_lvl+0xe8/0x140 [ 339.092159][T13484] dump_stack+0x15/0x1b [ 339.092252][T13484] should_fail_ex+0x265/0x280 [ 339.092323][T13484] should_failslab+0x8c/0xb0 [ 339.092350][T13484] kmem_cache_alloc_node_noprof+0x57/0x320 [ 339.092420][T13484] ? __alloc_skb+0x101/0x320 [ 339.092450][T13484] __alloc_skb+0x101/0x320 [ 339.092484][T13484] netlink_alloc_large_skb+0xba/0xf0 [ 339.092555][T13484] netlink_sendmsg+0x3cf/0x6b0 [ 339.092576][T13484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.092594][T13484] __sock_sendmsg+0x145/0x180 [ 339.092696][T13484] ____sys_sendmsg+0x31e/0x4e0 [ 339.092785][T13484] ___sys_sendmsg+0x17b/0x1d0 [ 339.092844][T13484] __x64_sys_sendmsg+0xd4/0x160 [ 339.093026][T13484] x64_sys_call+0x2999/0x2fb0 [ 339.093049][T13484] do_syscall_64+0xd2/0x200 [ 339.093069][T13484] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 339.093095][T13484] ? clear_bhb_loop+0x40/0x90 [ 339.093120][T13484] ? clear_bhb_loop+0x40/0x90 [ 339.093197][T13484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.093221][T13484] RIP: 0033:0x7f8e63c3e929 [ 339.093239][T13484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.093316][T13484] RSP: 002b:00007f8e622a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.093337][T13484] RAX: ffffffffffffffda RBX: 00007f8e63e65fa0 RCX: 00007f8e63c3e929 [ 339.093381][T13484] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 339.093395][T13484] RBP: 00007f8e622a7090 R08: 0000000000000000 R09: 0000000000000000 [ 339.093410][T13484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.093425][T13484] R13: 0000000000000000 R14: 00007f8e63e65fa0 R15: 00007ffea01a1768 [ 339.093448][T13484] [ 339.460656][T13474] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.469657][T13474] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.478694][T13474] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.487666][T13474] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.818602][T13474] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.827601][T13474] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.836598][T13474] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.845618][T13474] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.879096][T13493] loop2: detected capacity change from 0 to 512 [ 339.958320][T13493] EXT4-fs (loop2): orphan cleanup on readonly fs [ 339.992295][T13493] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2113: bg 0: block 248: padding at end of block bitmap is not set [ 340.024917][T13496] loop1: detected capacity change from 0 to 512 [ 340.041825][T13493] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2113: Failed to acquire dquot type 1 [ 340.102570][T13493] EXT4-fs (loop2): 1 truncate cleaned up [ 340.287935][T13502] loop0: detected capacity change from 0 to 512 [ 340.301461][T13493] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 340.346316][T13493] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 340.355190][T13502] EXT4-fs (loop0): orphan cleanup on readonly fs [ 340.392464][T13502] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2116: bg 0: block 248: padding at end of block bitmap is not set [ 340.440724][T13502] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2116: Failed to acquire dquot type 1 [ 340.490612][T13502] EXT4-fs (loop0): 1 truncate cleaned up [ 340.511792][T13502] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 340.553091][T13502] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 340.696015][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2118'. [ 340.843887][T13513] loop4: detected capacity change from 0 to 1024 [ 340.853054][T13513] EXT4-fs: Ignoring removed nobh option [ 340.858684][T13513] EXT4-fs: Ignoring removed bh option [ 340.884402][T13518] loop2: detected capacity change from 0 to 1024 [ 340.891891][T13518] EXT4-fs: Ignoring removed orlov option [ 340.912890][T13523] loop0: detected capacity change from 0 to 1024 [ 340.915515][T13496] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.940030][T13523] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 340.951085][T13523] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 340.961691][T13523] JBD2: no valid journal superblock found [ 340.967463][T13523] EXT4-fs (loop0): Could not load journal inode [ 340.980092][T13513] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2120: Allocating blocks 481-513 which overlap fs metadata [ 340.995029][T13513] EXT4-fs (loop4): Remounting filesystem read-only [ 341.094243][T13534] loop1: detected capacity change from 0 to 512 [ 341.101553][ T2997] ================================================================== [ 341.109705][ T2997] BUG: KCSAN: data-race in dont_mount / step_into [ 341.116152][ T2997] [ 341.118574][ T2997] read-write to 0xffff888106a6c6c0 of 4 bytes by task 4051 on cpu 0: [ 341.126682][ T2997] dont_mount+0x2a/0x40 [ 341.130862][ T2997] vfs_unlink+0x28f/0x420 [ 341.135214][ T2997] do_unlinkat+0x28e/0x4c0 [ 341.139697][ T2997] __x64_sys_unlink+0x2e/0x40 [ 341.144402][ T2997] x64_sys_call+0x22a6/0x2fb0 [ 341.149097][ T2997] do_syscall_64+0xd2/0x200 [ 341.153623][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.159538][ T2997] [ 341.161878][ T2997] read to 0xffff888106a6c6c0 of 4 bytes by task 2997 on cpu 1: [ 341.169435][ T2997] step_into+0xe3/0x820 [ 341.173609][ T2997] walk_component+0x162/0x220 [ 341.178307][ T2997] path_lookupat+0xfe/0x2a0 [ 341.183093][ T2997] filename_lookup+0x147/0x340 [ 341.187875][ T2997] do_readlinkat+0x7d/0x320 [ 341.192399][ T2997] __x64_sys_readlink+0x47/0x60 [ 341.197293][ T2997] x64_sys_call+0x2cf3/0x2fb0 [ 341.201992][ T2997] do_syscall_64+0xd2/0x200 [ 341.206512][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.212421][ T2997] [ 341.214755][ T2997] value changed: 0x00300008 -> 0x00004008 [ 341.220497][ T2997] [ 341.222831][ T2997] Reported by Kernel Concurrency Sanitizer on: [ 341.229084][ T2997] CPU: 1 UID: 0 PID: 2997 Comm: udevd Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(voluntary) [ 341.241084][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.251161][ T2997] ================================================================== [ 341.283324][T13534] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff)