last executing test programs: 2.531512149s ago: executing program 0 (id=1502): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000008113a0000bfa200000000000007020000f8ffffeab703000008000000b704000000000000850000000100a5a149405651578441cd51eaada2354a95972975178407509e7972cc6dd30160f3fc1ffb7d6568aefb5d2f7a80fe0dffa96ce247ba8acd0a77dfa26ba737a2ebc66254144c32f848760391e670fe2669813947dd1dc4084a7fb138ae9a37943000f3c666a5e61bf0027c79073203fd85b4010f9efcee83af41ce658f70dcc42a46af74995a49b14b43f8d6f80f476225751757e4b24c7777fb99f848f41774725ea8aa39f01b697a7f87c825efb6e71825e1f59d30a6fe7ee1481aa077d3b3773363baeaec7b5bb49eba03373e3907f9fe49bc5b"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000300)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r9 = openat(r8, &(0x7f0000000080)='./file1\x00', 0x2040, 0x90) quotactl_fd$Q_GETINFO(r9, 0xffffffff80000502, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec033d173c59594e80b11c263107f65f12606a97894a6d", 0x22) sendfile(r10, r7, 0x0, 0x40001) sendfile(r10, r8, 0x0, 0x7ffff000) r11 = open(&(0x7f0000000580)='./bus\x00', 0x4800, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000)=r2, 0x1) sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x5, 0x0, 0xfffffffffffffe39, 0x0, 0xfffffffffffffe74}, 0x44014) close_range(r11, 0xffffffffffffffff, 0x0) 2.528082939s ago: executing program 1 (id=1503): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRES8], 0x1, 0x23e, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.44633791s ago: executing program 1 (id=1505): r0 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x700000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) sendfile(r5, r5, 0x0, 0xa) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r7, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f0000000000)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.65374541s ago: executing program 0 (id=1508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.60887407s ago: executing program 4 (id=1510): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) 1.58877142s ago: executing program 1 (id=1511): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x210016, &(0x7f00000000c0)={[], [{@appraise_type}]}, 0x0, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x0, 0x10001, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000120001ee27bd7800fcdbdf25ac1e0101000000000000000000000000000000350a003300"], 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x100, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x7}, 0x4c58, 0x8, 0x0, 0x1, 0x8, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r4, 0x0, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) 1.540532031s ago: executing program 4 (id=1512): socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.538816901s ago: executing program 4 (id=1513): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x80800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10430a, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/171, 0xab}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x9, 0x0, 0x0, 0x0, 0x7, 0x2610, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0xfffd, 0x0, 0x6, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803", 0x4c}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e4191575a40", 0x8c}], 0x2, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) 1.481560812s ago: executing program 0 (id=1514): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1faede2b, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) 1.466162052s ago: executing program 4 (id=1515): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec033d173c59594e80b11c263107f65f12606a97894a6d", 0x22) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 1.450727292s ago: executing program 0 (id=1516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1.328009754s ago: executing program 1 (id=1517): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f", 0x25}, {&(0x7f0000000580)="7cd14bd937dfc869af", 0x9}], 0x2}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r11, @ANYRES16, @ANYRES16=r3, @ANYRES32=r10, @ANYRES8, @ANYRESOCT=r2, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x40) epoll_create(0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/16], &(0x7f0000000280)='GPL\x00'}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 1.288948424s ago: executing program 3 (id=1518): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1, 0x0, 0xfffffffffffffc88}, 0xffffffff}], 0x1, 0x40000001, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r4, 0x0, 0x4}, 0x18) 912.613709ms ago: executing program 4 (id=1519): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000300)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r9 = openat(r8, &(0x7f0000000080)='./file1\x00', 0x2040, 0x90) quotactl_fd$Q_GETINFO(r9, 0xffffffff80000502, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec033d173c59594e80b11c263107f65f12606a97894a6d", 0x22) sendfile(r10, r7, 0x0, 0x40001) sendfile(r10, r8, 0x0, 0x7ffff000) r11 = open(&(0x7f0000000580)='./bus\x00', 0x4800, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x4c, &(0x7f0000000000)=r2, 0x1) sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x5, 0x0, 0xfffffffffffffe39, 0x0, 0xfffffffffffffe74}, 0x44014) close_range(r11, 0xffffffffffffffff, 0x0) 577.540113ms ago: executing program 4 (id=1522): r0 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x700000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x242, 0x2e0) sendfile(r6, r6, 0x0, 0xa) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r8, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f0000000000)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r11, 0x0, 0x0, 0x0, 0x80000}) eventfd(0x80000001) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 544.640463ms ago: executing program 0 (id=1524): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='ext4_ext_handle_unwritten_extents\x00', r0, 0x0, 0xe}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd18, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(r8, &(0x7f0000000440)='fd/3\x00') getgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 526.092314ms ago: executing program 2 (id=1525): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff000085000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) linkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x400) 439.754424ms ago: executing program 2 (id=1526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, 0x0) 439.077915ms ago: executing program 2 (id=1527): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x9) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc1", 0xc3}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db3b99ed18fb67c1f75ef7", 0x54}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a208545", 0x21}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x11e}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000007c0)="e1720eae370127ec8a85d621a34a45d72159b38b3c180a260c76dab2c741ebcc9b7660f0b5eac6c638e27e142d93be3c95bc82a65f664bfe79853eca18ca903d337ee3186383233543c386d84972d5f994b5632add321e2b43574d064227442e711a39cafa343205ca21758a37153327ab01614ecac1c04f664261800fee5b0f29f9733bb78e55b5fc58b021c8cfcb4d0f8b231ad160231f3a0b3142b714f683945220a856b0d66c25b279ff06c6e47541a11b38595226f86b352a5e66bc643bd5cffb0971fc72dcf985a4822fbf83409390853f316010d712d14a86cc32a6eedbdc673045", 0xe5}, {&(0x7f00000008c0)="77512f1f521ee9e370800a2d02a9ec99b89bf20e076890a1e531ccdb6252581c0b451ab4bcc32172e0ccc4c7d58d8a5a482f383322e51d05a740c73feaebf069f2745ab4c673b8962e15e17e6c12469bc1b690cead2fcb32647a2dddf376416c9edd7d862be3f0d38dfad08566670e3f39e5397b8e987d76d327c153236a96c34942e978f552993907c7059a73958a32c8ca626bca59f7d505046c0d189979b48243a0c76c35849492ec953b1c639fa337938b388523dfc867bbd03e8dd69b2ab75ee2efe7da6d3b025eff8807371bcb869b6b702da46d4876f7584566f64a85c6e83b381ec6adb62170538e9c", 0xed}, {&(0x7f0000000180)="5ae8d8f1", 0x4}, {&(0x7f0000000500)="bc67516e9064578cde942de6b59a627ddd79c8bc0b6e6a52a86a978e7a8779475c2a26712dffbad68666edfa3fbbe0f034058ee26ce999d178437923c8d2469ba907878d5498c41007dcc6d3709fd087b3fe6c2d91a33924", 0x58}], 0x4}}, {{&(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000009c0)="90ff89958d9188abcb736397f239c00eb992fd72b7137504f9be4099e367bd6cd4aa5a1c737ecae5ae71ab02df82046425172c09df563c28f9bd393de5edfc25a38561cb184ad74622072746b0c827684a277ad6d6af94ab0a1df2acdc5c0b0aa0c1b6eb4f9ad62c1839cf223fe3b72db74694630b6eedda013462fe853f44f6f22d659d4bf32a85c0e0c8994e785765d80b1a1aeb46b024ba286589085ef5cab07a8bddb3653698edc86145a335a112aac6d4d49076c9ad227265a982c09a72fa888071eb0884745ed3120ae59aace48dcf7e9c25edaccc9757e6ff772e", 0xde}, {&(0x7f0000000340)="069a95a89e0a637e9512e89dc7fc4329c1e3d818df97c69ee95c96841794d8bc2472784d4991e624cdcbd51e7aa5158cbfcabcf9", 0x34}, {&(0x7f0000000ac0)="9f42b5d036d0b747399d82d1ffb1e3fb6b61cc7fd3c8a038fa6d27d0ef9b3f1d0819076e4b216b7c5a78b16511a65bd69b8f486b05b04f67effc7d36d01db6e55ebb80dbc9f469efd580ab0e", 0x4c}, {&(0x7f0000000b40)="1592b4cf66696e76e1384f2e8420abb424979aae14434c6fecb72a4e5f36b390849fb8d03b5b993fc1b10869e3f036e7b64eba9a91c5ac0f43f1cd39cc8e35d3b08b3df0a1c2224e39b4d2f27379ac01f32292d381396f1216ffb65637ed0cfa9b6de5f6524037d8be4366bf50bfaf6e8ed1266f46015a71b4ed25764029a591710f777d3b95bc118f5af4cb01d6bffe6f4a9ffaf195a5bb0c95faca8ff4000b0386", 0xa2}], 0x4, &(0x7f0000000c00)}}, {{&(0x7f00000005c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000e80)="a45cb35de4c6ef0a3467f1c44913130c1d83bbec1a44ef495f8f9c23839bb25732b7709e2e59c0dec6abbf2ff2df9805ce8f52e506b587d03d0365f10124cd6e1d458a60e91aafd9d57d9948391633c9ace13c505846e408f40542fafd392986e4d8d1ba87f0bc8b027609048e1fa0e0653bd98edb822324734ab6d41cda8126cd1d8e7c005bf30ef321fed97f95e2532c4027f93ee2a7f6a6383eed27e6cd2ec23c47d241a9b4e52fa75f83e326aa0b8526631b9f", 0xb5}], 0x1}}], 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 437.396915ms ago: executing program 0 (id=1528): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) timer_settime(0x0, 0x0, &(0x7f0000000880)={{}, {0x77359400}}, &(0x7f00000008c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x305080, 0x8) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) syz_usb_connect$uac1(0x2, 0x11c, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10a, 0x3, 0x1, 0x1, 0xa0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9f, 0x4}, [@processing_unit={0x8, 0x24, 0x7, 0x4, 0x2, 0x5, "90"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x2, 0xa2, 0x0, 0x0, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x6, 0x5, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x307, 0x6, 0x6, 0x1}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x5, 0x5, [0x2, 0x8, 0x1, 0x1, 0x3], 0xe}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x6, 0x1, 0x3e}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0x80, 0x2, "b75e20"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x3}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x81, 0xd3, 0x6, "5fe9752f71"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x1, 0x5, {0x7, 0x25, 0x1, 0x81, 0x80, 0xf000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x2, 0x8, "37182b21b8a5aa"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x22, 0x4, 0x5, 0x0, "42dc"}, @as_header={0x7, 0x24, 0x1, 0xb0, 0x9, 0x1001}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x2, 0x4, "fd512da7"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x4, "b51af744862a92"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x3, "a0f541c85d567a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x1e, 0xf, {0x7, 0x25, 0x1, 0x80, 0x81, 0x2}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xf, 0xfe, 0x7, 0x10, 0xd}, 0x32, &(0x7f0000000280)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x3, 0x2, 0x85}, @ssp_cap={0xc, 0x10, 0xa, 0xfa, 0x0, 0x4c2, 0xf007, 0x7}, @generic={0xf, 0x10, 0xb, "c29ddafdc1846e07ced65d89"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x92, 0x7, 0x7c, 0x7, 0x1}]}, 0x3, [{0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="1903db319edf92fe050d5f5edecb0c7d880e0bc935b1"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x300a}}, {0x100, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}]}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) 434.661584ms ago: executing program 3 (id=1529): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rt_cache\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) add_key(&(0x7f0000000240)='.dead\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000580)="56bbee268ed90aa02a3e7c0338cb6945d13409d66684fc569a5a038281dd188462a9e1f89daa495c8f22e9c97764a6c6db18a037a638c7051797bdfff3d85f25003cbf381e5c70dc7bdf1a9ae321932a6e3d61ea6540de2fecc1646f3e21892596aa69ba6014eb03c34ae12b7a67fb538d3b11959dc40bfbc1da6fe38edb43f1cd58d9e33a9e80414535f23dfde4b24a1d01dd3204d4e7e3e637f4d9ebd05d9059af73245efac1f71070883577813f2a2c7446ea9dc33f039b4eae5c92501624570b55fb9926c154f84e7b225e49d9f8c998985a47c15256d84b44747318ae9a507027df", 0xe4, 0xfffffffffffffffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x40c0080) 430.019905ms ago: executing program 1 (id=1530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801800000000000e2"], 0x178) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 387.907685ms ago: executing program 1 (id=1531): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f", 0x25}, {&(0x7f0000000580)="7cd14bd937dfc869af", 0x9}], 0x2}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000380)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r11, @ANYRES16, @ANYRES16=r3, @ANYRES32=r10, @ANYRES8, @ANYRESOCT=r2, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x40) epoll_create(0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/16], &(0x7f0000000280)='GPL\x00'}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 387.595055ms ago: executing program 3 (id=1532): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r0, 0x20, &(0x7f0000000680)={&(0x7f0000002680)=""/4096, 0x1000, 0x0, &(0x7f0000000640)}}, 0x10) 366.280195ms ago: executing program 3 (id=1533): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000300)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$eJzs3c9rXFsdAPDvnSRt0qYm9QfUgrVoJS3amaSxbXBRI4iuCta6j7GZhJBJJmQmbROKpPgHCOIvdOXKjeBaBOmfIEJB9yKiFG0r8hbvvXncyZ02zZtJJzSTaTOfD5zcc+6PfM+ZYc7MuedybwA963xETEdEX0RcioiRbH0uS7G1ndL9nj19cCdNSdRqt/+TRJKta/yvJFuezA4bjIjvfjviB8nH41Y2NpdmS6XiWlYuVJdXC5WNzcuLy7MLxYXiyvTkxLWp61NXp8YPrK03vvnPn//4t9+68aev3Pv7zL8v/jCt1nC2bWc72rHV5n7bTR+ovxYN/RGxtp9gb7G+rD0D3a4IAABtSX/jfzIivhARz3/V7doAAAAAnVD7+nC8n0TUAAAAgCMrV78GNsnls2sBhiOXy+e3r+H9dJzIlcqV6pfny+src9vXyo7GQG5+sVQcz64VHo2BJC1P1PMvy1d2lScj4nRE/HRkqF7O3ymX5rp98gMAAAB6xMld4///jWyP/wEAAIAjZrTbFQAAAAA6zvgfAAAAjr6W4/+k/3ArAgAAAHTCd27eTFOt8fzrubsb60vlu5fnipWl/PJnIqK8tppfKJcX6vfsW95xaNNHPpfK5dWvxsr6/UK1WKkWKhubM8vl9ZXqTP253jNFz4kGAACAw3f684/+lkTE1teG6il1LNvWxlh9urO1Azopt7/dk07VAzh8fd2uANA1LvCF3mU+HngxsB9quvlnu8r7PG0AAAC8DcY++0bz/+YD4R1mIA+9y/w/9C7z/9C7zP9Djzv++l0GW2348wHXBQAA6Jjhekpy+WwucDhyuXw+4lT9sQADyfxiqTgeEZ+IiL+ODBxPyxPdrjQAAAAAAAAAAAAAAAAAAAAAAAAAvGNqtSRqAAAAwJEWkftXkj3If2zkwvDu8wPHkvdG6suIuPfr27+4P1utrk2k6//7Yn31l9n6K904gwEAAADs1hinN8bxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCQnj19cKeRDjPuk29ExGiz+P0xmC7+P/iHkYg48TyJZMdxab7vAOJvPYyIM83iJ2m1YnS7FvX4/TuOy0XEUJfjnzyA+NDLHqX9z3Szz18uzteXzT9//Vl6U0/Ot+r/clnkwXo/tzt+2v+dajPG2ce/L7SM/zDibH/z/qcRP2kRv93+9/vf29xsta32m4ixpt8/ySuxCtXl1UJlY/Py4vLsQnGhuDI5OXFt6vrU1anxwvxiqZj9bRrjJ5/744d7tf9Ei/ijr2n/hTbb/8Hj+08/tUf8i19s/v6f2SN++tp/KfseSLePNfJb2/mdzv3uL+f2av9ci/a/7v2/2Gb7L9360T/a3BUAOASVjc2l2VKpuNbhTGwdXiwZGZkscyv7oO/78C53TAAAwIF7+aO/2zUBAAAAAAAAAAAAAAAAAACA3tXxm5Adf/XOAoPdayoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ4+CgAA///LONF+") r8 = openat(r7, &(0x7f0000000080)='./file1\x00', 0x2040, 0x90) quotactl_fd$Q_GETINFO(r8, 0xffffffff80000502, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec033d173c59594e80b11c263107f65f12606a97894a6d", 0x22) sendfile(r9, r6, 0x0, 0x40001) sendfile(r9, r7, 0x0, 0x7ffff000) r10 = open(&(0x7f0000000580)='./bus\x00', 0x4800, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000)=r2, 0x1) sendmsg$inet(r10, &(0x7f0000000200)={0x0, 0x5, 0x0, 0xfffffffffffffe39, 0x0, 0xfffffffffffffe74}, 0x44014) close_range(r10, 0xffffffffffffffff, 0x0) 329.129566ms ago: executing program 2 (id=1534): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) mlockall(0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockname$packet(r1, 0x0, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r2, 0x2004, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) syz_clone(0x80044000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 95.937779ms ago: executing program 2 (id=1535): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1faede2b, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) 58.840709ms ago: executing program 3 (id=1536): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff000085000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) linkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x400) 48.628409ms ago: executing program 2 (id=1537): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000300)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r9 = openat(r8, &(0x7f0000000080)='./file1\x00', 0x2040, 0x90) quotactl_fd$Q_GETINFO(r9, 0xffffffff80000502, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec033d173c59594e80b11c263107f65f12606a97894a6d", 0x22) sendfile(r10, r7, 0x0, 0x40001) sendfile(r10, r8, 0x0, 0x7ffff000) r11 = open(&(0x7f0000000580)='./bus\x00', 0x4800, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000)=r2, 0x1) sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x5, 0x0, 0xfffffffffffffe39, 0x0, 0xfffffffffffffe74}, 0x44014) close_range(r11, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1538): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r3, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r3, 0x0, 0x0, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000300)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") r9 = openat(r8, &(0x7f0000000080)='./file1\x00', 0x2040, 0x90) quotactl_fd$Q_GETINFO(r9, 0xffffffff80000502, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec033d173c59594e80b11c263107f65f12606a97894a6d", 0x22) sendfile(r10, r7, 0x0, 0x40001) sendfile(r10, r8, 0x0, 0x7ffff000) r11 = open(&(0x7f0000000580)='./bus\x00', 0x4800, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000)=r2, 0x1) sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x5, 0x0, 0xfffffffffffffe39, 0x0, 0xfffffffffffffe74}, 0x44014) close_range(r11, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : type=1400 audit(1753582186.658:3643): avc: denied { create } for pid=4721 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.924380][ T29] audit: type=1400 audit(1753582186.658:3644): avc: denied { name_bind } for pid=4721 comm="syz.2.429" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 57.956304][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 57.980487][ T4728] netlink: 'syz.2.432': attribute type 5 has an invalid length. [ 58.008244][ T4725] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.009623][ T4726] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.029195][ T29] audit: type=1400 audit(1753582186.878:3645): avc: denied { mount } for pid=4723 comm="syz.4.430" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.056112][ T4726] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.431: corrupted xattr block 33: bad e_name length [ 58.071734][ T29] audit: type=1400 audit(1753582186.928:3646): avc: denied { add_name } for pid=4724 comm="syz.3.431" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.140167][ T4726] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 58.149634][ T4742] loop2: detected capacity change from 0 to 1024 [ 58.172941][ T4742] EXT4-fs: Ignoring removed oldalloc option [ 58.178985][ T4742] EXT4-fs: Ignoring removed bh option [ 58.184611][ T4726] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.431: corrupted xattr block 33: bad e_name length [ 58.205573][ T4726] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 58.225088][ T4726] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.431: corrupted xattr block 33: bad e_name length [ 58.274196][ T4726] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 58.449835][ T4746] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.430: corrupted inode contents [ 58.526731][ T4757] netlink: 'syz.1.441': attribute type 10 has an invalid length. [ 58.536154][ T4746] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.430: mark_inode_dirty error [ 58.561389][ T4746] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.430: corrupted inode contents [ 58.576762][ T4746] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.430: mark_inode_dirty error [ 58.589890][ T4746] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.430: mark inode dirty (error -117) [ 58.603884][ T4746] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 58.712729][ T4762] netlink: 'syz.3.440': attribute type 13 has an invalid length. [ 58.809096][ T4778] tipc: Enabled bearer , priority 0 [ 58.819042][ T4777] tipc: Disabling bearer [ 58.853506][ T4782] loop4: detected capacity change from 0 to 1024 [ 58.860643][ T4782] EXT4-fs: Ignoring removed oldalloc option [ 58.866607][ T4782] EXT4-fs: Ignoring removed bh option [ 58.968570][ T4792] netlink: 'syz.0.455': attribute type 13 has an invalid length. [ 59.003902][ T4795] loop2: detected capacity change from 0 to 512 [ 59.025290][ T4795] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.110051][ T4799] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.456: corrupted inode contents [ 59.119345][ T4782] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.451: Allocating blocks 1-17 which overlap fs metadata [ 59.130485][ T4799] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.456: mark_inode_dirty error [ 59.138299][ T4793] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.451: Allocating blocks 1-17 which overlap fs metadata [ 59.160750][ T4799] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.456: corrupted inode contents [ 59.172935][ T4799] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.456: mark_inode_dirty error [ 59.189156][ T4799] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.456: mark inode dirty (error -117) [ 59.204208][ T4799] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 59.382205][ T4813] netlink: 'syz.2.462': attribute type 13 has an invalid length. [ 59.692678][ T4832] loop3: detected capacity change from 0 to 1024 [ 59.712977][ T4832] EXT4-fs: Ignoring removed oldalloc option [ 59.719024][ T4832] EXT4-fs: Ignoring removed bh option [ 59.890170][ T4834] loop4: detected capacity change from 0 to 512 [ 59.992709][ T4834] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.123202][ T4847] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.470: corrupted inode contents [ 60.141548][ T4847] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.470: mark_inode_dirty error [ 60.173098][ T4832] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.468: Allocating blocks 1-17 which overlap fs metadata [ 60.197647][ T4828] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.468: Allocating blocks 1-17 which overlap fs metadata [ 60.219464][ T4847] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.470: corrupted inode contents [ 60.259224][ T4847] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.470: mark_inode_dirty error [ 60.272562][ T4847] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.470: mark inode dirty (error -117) [ 60.293003][ T4847] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 60.373119][ T4861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.480'. [ 60.450069][ T4867] tipc: Enabling of bearer rejected, failed to enable media [ 60.590036][ T4873] loop1: detected capacity change from 0 to 164 [ 60.702516][ T4873] bio_check_eod: 24 callbacks suppressed [ 60.702535][ T4873] syz.1.485: attempt to access beyond end of device [ 60.702535][ T4873] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 60.723466][ T4877] 9pnet_fd: Insufficient options for proto=fd [ 60.822406][ T4873] syz.1.485: attempt to access beyond end of device [ 60.822406][ T4873] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 60.858687][ T4882] loop3: detected capacity change from 0 to 1024 [ 60.867642][ T4882] EXT4-fs: Ignoring removed oldalloc option [ 60.873691][ T4882] EXT4-fs: Ignoring removed bh option [ 61.228826][ T4900] loop2: detected capacity change from 0 to 512 [ 61.401218][ T4900] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.492: corrupted inode contents [ 61.516893][ T4900] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.492: mark_inode_dirty error [ 61.544864][ T4900] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.492: corrupted inode contents [ 61.584701][ T4905] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 61.594144][ T4895] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.489: Allocating blocks 1-17 which overlap fs metadata [ 61.610118][ T4900] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.492: mark_inode_dirty error [ 61.621753][ T4882] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.489: Allocating blocks 1-17 which overlap fs metadata [ 61.623025][ T4900] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.492: corrupted inode contents [ 61.648856][ T4900] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 61.657662][ T4900] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.492: corrupted inode contents [ 61.672778][ T4909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.495'. [ 61.676233][ T4900] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.492: mark_inode_dirty error [ 61.694169][ T4900] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 61.703620][ T4900] EXT4-fs (loop2): 1 truncate cleaned up [ 61.709970][ T4900] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.721049][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 61.728938][ T4913] IPv4: Oversized IP packet from 127.202.26.0 [ 61.850002][ T4926] loop1: detected capacity change from 0 to 1024 [ 61.861972][ T4926] EXT4-fs: Ignoring removed oldalloc option [ 61.868019][ T4926] EXT4-fs: Ignoring removed bh option [ 61.952088][ T4935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.506'. [ 62.000083][ T4942] loop3: detected capacity change from 0 to 1024 [ 62.007116][ T4942] EXT4-fs: Ignoring removed oldalloc option [ 62.013107][ T4942] EXT4-fs: Ignoring removed bh option [ 62.598266][ T4964] loop2: detected capacity change from 0 to 512 [ 62.628336][ T4964] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.514: corrupted inode contents [ 62.641331][ T4964] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.514: mark_inode_dirty error [ 62.655962][ T4964] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.514: corrupted inode contents [ 62.669722][ T4967] Falling back ldisc for ttyS3. [ 62.676375][ T4964] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.514: mark_inode_dirty error [ 62.691916][ T4926] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.502: Allocating blocks 1-17 which overlap fs metadata [ 62.692335][ T4942] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.508: Allocating blocks 1-17 which overlap fs metadata [ 62.725360][ T4964] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.514: corrupted inode contents [ 62.746398][ T4961] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.508: Allocating blocks 1-17 which overlap fs metadata [ 62.749852][ T4964] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 62.781788][ T4971] loop1: detected capacity change from 0 to 164 [ 62.792528][ T29] kauditd_printk_skb: 847 callbacks suppressed [ 62.792539][ T29] audit: type=1400 audit(1753582191.668:4493): avc: denied { mount } for pid=4970 comm="syz.1.516" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 62.821844][ T4964] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.514: corrupted inode contents [ 62.857279][ T4964] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.514: mark_inode_dirty error [ 62.875279][ T4964] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 62.888121][ T4976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 62.897101][ T29] audit: type=1326 audit(1753582191.758:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 62.911917][ T4971] syz.1.516: attempt to access beyond end of device [ 62.911917][ T4971] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.920544][ T29] audit: type=1326 audit(1753582191.758:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 62.940795][ T4964] EXT4-fs (loop2): 1 truncate cleaned up [ 62.959180][ T29] audit: type=1326 audit(1753582191.778:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 62.966973][ T87] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 62.989829][ T29] audit: type=1326 audit(1753582191.778:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 62.999759][ T87] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 63.023025][ T29] audit: type=1326 audit(1753582191.778:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 63.046141][ T4964] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.057585][ T29] audit: type=1326 audit(1753582191.778:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 63.091580][ T29] audit: type=1326 audit(1753582191.778:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 63.115094][ T29] audit: type=1326 audit(1753582191.778:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 63.150670][ T4971] syz.1.516: attempt to access beyond end of device [ 63.150670][ T4971] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 63.194230][ T4984] IPv4: Oversized IP packet from 127.202.26.0 [ 63.221564][ T4988] IPv4: Oversized IP packet from 127.202.26.0 [ 63.268003][ T4989] netlink: 'syz.3.523': attribute type 10 has an invalid length. [ 63.739311][ T5007] loop2: detected capacity change from 0 to 512 [ 63.763508][ T5007] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.108343][ T5018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 64.178724][ T5030] 9pnet_fd: Insufficient options for proto=fd [ 64.361839][ T5044] loop2: detected capacity change from 0 to 164 [ 64.388617][ T5044] syz.2.544: attempt to access beyond end of device [ 64.388617][ T5044] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 64.404105][ T5044] syz.2.544: attempt to access beyond end of device [ 64.404105][ T5044] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.917858][ T5058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.549'. [ 64.942058][ T5063] 9pnet_fd: Insufficient options for proto=fd [ 64.958125][ T5065] loop4: detected capacity change from 0 to 1024 [ 64.966674][ T5065] EXT4-fs: Ignoring removed oldalloc option [ 64.972728][ T5065] EXT4-fs: Ignoring removed bh option [ 65.156519][ T5084] veth0: entered promiscuous mode [ 65.186762][ T5084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 65.208481][ T5094] IPv4: Oversized IP packet from 127.202.26.0 [ 65.322403][ T5082] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.553: Allocating blocks 1-17 which overlap fs metadata [ 65.341105][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 65.353661][ T5065] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.553: Allocating blocks 1-17 which overlap fs metadata [ 65.373895][ T5107] 9pnet_fd: Insufficient options for proto=fd [ 65.476057][ T5111] loop2: detected capacity change from 0 to 1024 [ 65.516448][ T5111] EXT4-fs: Ignoring removed oldalloc option [ 65.522635][ T5111] EXT4-fs: Ignoring removed bh option [ 65.667045][ T5131] loop4: detected capacity change from 0 to 512 [ 65.732096][ T5131] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.750048][ T5136] loop1: detected capacity change from 0 to 512 [ 65.764929][ T5136] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.577: corrupted inode contents [ 65.802809][ T5111] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.569: Allocating blocks 1-17 which overlap fs metadata [ 65.816807][ T5136] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.577: mark_inode_dirty error [ 65.832760][ T5116] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.569: Allocating blocks 1-17 which overlap fs metadata [ 65.848497][ T5136] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.577: corrupted inode contents [ 65.849928][ T5142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 65.870214][ T5136] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.577: mark_inode_dirty error [ 65.912190][ T5136] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.577: corrupted inode contents [ 65.937247][ T5136] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 65.953978][ T5136] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.577: corrupted inode contents [ 65.966492][ T5136] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.577: mark_inode_dirty error [ 65.978834][ T5136] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 65.988844][ T5136] EXT4-fs (loop1): 1 truncate cleaned up [ 66.000379][ T87] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 66.013292][ T5136] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.245326][ T5167] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 66.287375][ T5171] loop1: detected capacity change from 0 to 164 [ 66.339773][ T5173] tipc: Started in network mode [ 66.344828][ T5173] tipc: Node identity 725c1a4d54ee, cluster identity 4711 [ 66.352209][ T5173] tipc: Enabled bearer , priority 0 [ 66.361789][ T5172] tipc: Disabling bearer [ 66.419557][ T5179] loop2: detected capacity change from 0 to 512 [ 66.452805][ T5179] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.636031][ T5200] loop2: detected capacity change from 0 to 512 [ 66.657858][ T5199] netlink: 'syz.4.603': attribute type 10 has an invalid length. [ 66.675981][ T5200] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.602: corrupted inode contents [ 66.694419][ T5200] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.602: mark_inode_dirty error [ 66.710501][ T5200] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.602: corrupted inode contents [ 66.792265][ T5200] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.602: mark_inode_dirty error [ 66.834451][ T5200] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.602: corrupted inode contents [ 66.893550][ T5200] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 66.962713][ T5200] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.602: corrupted inode contents [ 66.994077][ T5200] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.602: mark_inode_dirty error [ 67.015643][ T5200] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 67.063548][ T5200] EXT4-fs (loop2): 1 truncate cleaned up [ 67.085250][ T3423] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 67.101952][ T5200] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.161743][ T5215] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 67.309264][ T5225] loop3: detected capacity change from 0 to 512 [ 67.378152][ T5225] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.401566][ T5232] IPv4: Oversized IP packet from 127.202.26.0 [ 67.656439][ T5249] loop3: detected capacity change from 0 to 512 [ 67.668178][ T5251] Falling back ldisc for ttyS3. [ 67.687527][ T5249] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.620: corrupted inode contents [ 67.716545][ T5249] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.620: mark_inode_dirty error [ 67.729266][ T5249] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.620: corrupted inode contents [ 67.743066][ T5249] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.620: mark_inode_dirty error [ 67.755398][ T5249] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.620: corrupted inode contents [ 67.770754][ T5249] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 67.779949][ T5249] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.620: corrupted inode contents [ 67.795529][ T5261] loop2: detected capacity change from 0 to 164 [ 67.800909][ T5249] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.620: mark_inode_dirty error [ 67.814174][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 67.814246][ T29] audit: type=1400 audit(1753582196.688:4731): avc: denied { mount } for pid=5260 comm="syz.2.625" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.816151][ T5249] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 67.855549][ T29] audit: type=1400 audit(1753582196.728:4732): avc: denied { write } for pid=5260 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.857334][ T5249] EXT4-fs (loop3): 1 truncate cleaned up [ 67.891858][ T5249] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.900915][ T87] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 67.904840][ T29] audit: type=1400 audit(1753582196.768:4733): avc: denied { mount } for pid=5248 comm="syz.3.620" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.912334][ T87] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 67.933813][ T29] audit: type=1400 audit(1753582196.778:4734): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.973320][ T29] audit: type=1400 audit(1753582196.828:4735): avc: denied { add_name } for pid=5248 comm="syz.3.620" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.993958][ T29] audit: type=1400 audit(1753582196.828:4736): avc: denied { create } for pid=5248 comm="syz.3.620" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.013990][ T29] audit: type=1400 audit(1753582196.828:4737): avc: denied { read append open } for pid=5248 comm="syz.3.620" path="/116/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.037624][ T29] audit: type=1400 audit(1753582196.828:4738): avc: denied { open } for pid=5248 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.056968][ T29] audit: type=1400 audit(1753582196.828:4739): avc: denied { kernel } for pid=5248 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 68.097706][ T3316] EXT4-fs unmount: 47 callbacks suppressed [ 68.097723][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.131644][ T5269] loop3: detected capacity change from 0 to 512 [ 68.184323][ T5269] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.628: corrupted inode contents [ 68.213266][ T5269] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.628: mark_inode_dirty error [ 68.227236][ T5269] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.628: corrupted inode contents [ 68.242068][ T5269] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.628: mark_inode_dirty error [ 68.253587][ T5269] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.628: corrupted inode contents [ 68.267405][ T5269] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 68.308347][ T5269] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.628: corrupted inode contents [ 68.342963][ T5279] Falling back ldisc for ttyS3. [ 68.349555][ T5269] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.628: mark_inode_dirty error [ 68.391339][ T5269] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 68.406012][ T5269] EXT4-fs (loop3): 1 truncate cleaned up [ 68.437262][ T5269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.450034][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 68.488887][ T5269] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.554380][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.557099][ T5292] netlink: 'syz.1.637': attribute type 10 has an invalid length. [ 68.593899][ T5294] loop3: detected capacity change from 0 to 512 [ 68.607488][ T5290] netlink: 'syz.2.636': attribute type 10 has an invalid length. [ 68.633019][ T5294] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.638: corrupted inode contents [ 68.645554][ T5294] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.638: mark_inode_dirty error [ 68.668757][ T5294] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.638: corrupted inode contents [ 68.681465][ T5294] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.638: mark_inode_dirty error [ 68.694567][ T5294] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.638: corrupted inode contents [ 68.708144][ T5294] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 68.745573][ T5294] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.638: corrupted inode contents [ 68.757938][ T5294] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.638: mark_inode_dirty error [ 68.770425][ T5294] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 68.780035][ T5294] EXT4-fs (loop3): 1 truncate cleaned up [ 68.786158][ T5294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.799196][ T5294] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.799203][ T390] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 68.905858][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.365340][ T5335] IPv4: Oversized IP packet from 127.202.26.0 [ 69.690465][ T5361] netlink: 'syz.4.665': attribute type 10 has an invalid length. [ 69.742029][ T5363] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 69.767817][ T5365] IPv4: Oversized IP packet from 127.202.26.0 [ 69.879997][ T5372] netlink: 'syz.1.670': attribute type 13 has an invalid length. [ 70.529169][ T5394] loop4: detected capacity change from 0 to 1024 [ 70.536350][ T5394] EXT4-fs: Ignoring removed oldalloc option [ 70.542529][ T5394] EXT4-fs: Ignoring removed bh option [ 70.552995][ T5394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.661979][ T5403] IPv4: Oversized IP packet from 127.202.26.0 [ 70.816482][ T5411] loop2: detected capacity change from 0 to 164 [ 70.866340][ T5414] loop3: detected capacity change from 0 to 1024 [ 70.875567][ T5414] EXT4-fs: Ignoring removed oldalloc option [ 70.881662][ T5414] EXT4-fs: Ignoring removed bh option [ 71.011931][ T5414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.031263][ T5420] loop2: detected capacity change from 0 to 1024 [ 71.048783][ T5402] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.678: Allocating blocks 1-17 which overlap fs metadata [ 71.078872][ T5423] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 71.092159][ T5420] EXT4-fs: Ignoring removed oldalloc option [ 71.098117][ T5420] EXT4-fs: Ignoring removed bh option [ 71.147902][ T5394] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.678: Allocating blocks 1-17 which overlap fs metadata [ 71.221224][ T5420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.332061][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.418783][ T5414] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.685: Allocating blocks 1-17 which overlap fs metadata [ 71.649610][ T5425] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.685: Allocating blocks 1-17 which overlap fs metadata [ 71.756497][ T5429] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.686: Allocating blocks 1-17 which overlap fs metadata [ 71.834616][ T5420] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.686: Allocating blocks 1-17 which overlap fs metadata [ 71.909798][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.912154][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.021379][ T5443] netlink: 'syz.2.694': attribute type 13 has an invalid length. [ 72.077918][ T5454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.698'. [ 72.087661][ T5454] sch_fq: defrate 0 ignored. [ 72.164289][ T5459] netlink: 'syz.3.700': attribute type 10 has an invalid length. [ 72.874920][ T5475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.883486][ T5475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.910182][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 72.910197][ T29] audit: type=1400 audit(1753582201.748:5342): avc: denied { create } for pid=5471 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.936098][ T29] audit: type=1400 audit(1753582201.748:5343): avc: denied { connect } for pid=5471 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.955728][ T29] audit: type=1400 audit(1753582201.748:5344): avc: denied { create } for pid=5471 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.975900][ T29] audit: type=1400 audit(1753582201.748:5345): avc: denied { read write } for pid=5471 comm="syz.1.704" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.999452][ T29] audit: type=1400 audit(1753582201.748:5346): avc: denied { open } for pid=5471 comm="syz.1.704" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.022930][ T29] audit: type=1400 audit(1753582201.748:5347): avc: denied { ioctl } for pid=5471 comm="syz.1.704" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.047729][ T29] audit: type=1400 audit(1753582201.768:5348): avc: denied { read } for pid=5471 comm="syz.1.704" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.071211][ T29] audit: type=1400 audit(1753582201.768:5349): avc: denied { open } for pid=5471 comm="syz.1.704" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.095138][ T29] audit: type=1400 audit(1753582201.768:5350): avc: denied { create } for pid=5471 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.181453][ T29] audit: type=1400 audit(1753582202.058:5351): avc: denied { map_create } for pid=5477 comm="syz.2.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.209273][ T5481] loop2: detected capacity change from 0 to 512 [ 73.240287][ T5481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.259512][ T5481] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.284029][ T5481] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.706: corrupted inode contents [ 73.286687][ T5490] IPv4: Oversized IP packet from 127.202.26.0 [ 73.303874][ T5481] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.706: mark_inode_dirty error [ 73.332906][ T5481] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.706: corrupted inode contents [ 73.360643][ T5481] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.706: mark_inode_dirty error [ 73.373658][ T5481] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.706: mark inode dirty (error -117) [ 73.395364][ T5481] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 73.435052][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.551317][ T5510] netlink: 'syz.0.717': attribute type 13 has an invalid length. [ 74.038330][ T5531] IPv4: Oversized IP packet from 127.202.26.0 [ 74.083484][ T5535] loop4: detected capacity change from 0 to 512 [ 74.091489][ T5535] ext4: Unknown parameter 'appraise_type' [ 74.125319][ T5535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.726'. [ 74.271953][ T5549] netlink: 'syz.4.731': attribute type 13 has an invalid length. [ 74.297972][ T5551] netlink: 'syz.0.732': attribute type 13 has an invalid length. [ 74.357625][ T5554] loop2: detected capacity change from 0 to 512 [ 74.372830][ T5554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.386904][ T5554] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.402886][ T5554] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.733: corrupted inode contents [ 74.416508][ T5554] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.733: mark_inode_dirty error [ 74.432881][ T5554] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.733: corrupted inode contents [ 74.445775][ T5554] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.733: mark_inode_dirty error [ 74.461388][ T5554] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.733: mark inode dirty (error -117) [ 74.474745][ T5554] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 74.499117][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.558818][ T5570] loop3: detected capacity change from 0 to 1024 [ 74.566673][ T5570] EXT4-fs: Ignoring removed oldalloc option [ 74.572684][ T5570] EXT4-fs: Ignoring removed bh option [ 74.588082][ T5574] netlink: 'syz.2.740': attribute type 10 has an invalid length. [ 74.598252][ T5570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.810640][ T5570] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.738: Allocating blocks 1-17 which overlap fs metadata [ 74.849700][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.445027][ T5596] loop1: detected capacity change from 0 to 512 [ 75.468343][ T5596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.493207][ T5596] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.510246][ T5596] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.746: corrupted inode contents [ 75.525094][ T5596] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.746: mark_inode_dirty error [ 75.541164][ T5596] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.746: corrupted inode contents [ 75.564551][ T5596] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.746: mark_inode_dirty error [ 75.577835][ T5596] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.746: mark inode dirty (error -117) [ 75.597263][ T5613] loop4: detected capacity change from 0 to 1024 [ 75.604097][ T5613] EXT4-fs: Ignoring removed oldalloc option [ 75.605680][ T5596] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 75.610066][ T5613] EXT4-fs: Ignoring removed bh option [ 75.631771][ T5613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.646335][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.666329][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.688458][ T5619] loop4: detected capacity change from 0 to 1024 [ 75.695364][ T5619] EXT4-fs: Ignoring removed oldalloc option [ 75.701412][ T5619] EXT4-fs: Ignoring removed bh option [ 75.714833][ T5619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.734345][ T5625] netlink: 'syz.0.756': attribute type 13 has an invalid length. [ 75.925459][ T5631] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.755: Allocating blocks 1-17 which overlap fs metadata [ 75.945832][ T5636] netlink: 'syz.1.759': attribute type 10 has an invalid length. [ 75.955108][ T5619] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.755: Allocating blocks 1-17 which overlap fs metadata [ 76.010795][ T5639] netlink: 'syz.3.761': attribute type 10 has an invalid length. [ 76.021473][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.061318][ T5647] loop4: detected capacity change from 0 to 512 [ 76.085350][ T5647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.098074][ T5647] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.112064][ T5647] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.764: corrupted inode contents [ 76.124733][ T5647] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.764: mark_inode_dirty error [ 76.136936][ T5647] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.764: corrupted inode contents [ 76.150763][ T5647] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.764: mark_inode_dirty error [ 76.155909][ T5653] IPv4: Oversized IP packet from 127.202.26.0 [ 76.163608][ T5647] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.764: mark inode dirty (error -117) [ 76.182220][ T5647] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 76.205717][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.332388][ T5665] loop4: detected capacity change from 0 to 1024 [ 76.339212][ T5665] EXT4-fs: Ignoring removed oldalloc option [ 76.345298][ T5665] EXT4-fs: Ignoring removed bh option [ 76.361672][ T5665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.391309][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.798526][ T5684] IPv4: Oversized IP packet from 127.202.26.0 [ 76.816982][ T5686] loop1: detected capacity change from 0 to 512 [ 76.856096][ T5686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.876321][ T5686] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.896529][ T5696] loop3: detected capacity change from 0 to 1024 [ 76.912105][ T5686] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.777: corrupted inode contents [ 76.916317][ T5700] netlink: 'syz.4.784': attribute type 13 has an invalid length. [ 76.929555][ T5696] EXT4-fs: Ignoring removed oldalloc option [ 76.938148][ T5696] EXT4-fs: Ignoring removed bh option [ 76.948225][ T5686] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.777: mark_inode_dirty error [ 76.961332][ T5686] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.777: corrupted inode contents [ 76.974018][ T5696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.988713][ T5686] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.777: mark_inode_dirty error [ 77.002298][ T5686] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.777: mark inode dirty (error -117) [ 77.015132][ T5686] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 77.040127][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.064799][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.127694][ T5709] netlink: 'syz.2.787': attribute type 10 has an invalid length. [ 77.293801][ T5720] IPv4: Oversized IP packet from 127.202.26.0 [ 77.342216][ T5724] netlink: 'syz.1.792': attribute type 10 has an invalid length. [ 77.472785][ T5735] loop3: detected capacity change from 0 to 512 [ 77.493816][ T5735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.506989][ T5735] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.525076][ T5735] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.797: corrupted inode contents [ 77.538173][ T5735] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.797: mark_inode_dirty error [ 77.554918][ T5735] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.797: corrupted inode contents [ 77.573410][ T5735] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.797: mark_inode_dirty error [ 77.586191][ T5735] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.797: mark inode dirty (error -117) [ 77.600760][ T5735] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 77.623653][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.909439][ T5751] IPv4: Oversized IP packet from 127.202.26.0 [ 77.980765][ T5758] loop2: detected capacity change from 0 to 1024 [ 77.987661][ T5758] EXT4-fs: Ignoring removed oldalloc option [ 77.993759][ T5758] EXT4-fs: Ignoring removed bh option [ 78.019005][ T29] kauditd_printk_skb: 866 callbacks suppressed [ 78.019018][ T29] audit: type=1400 audit(1753582206.888:6218): avc: denied { create } for pid=5760 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.046343][ T5758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.046545][ T29] audit: type=1400 audit(1753582206.918:6219): avc: denied { setopt } for pid=5760 comm="syz.4.807" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.079574][ T29] audit: type=1400 audit(1753582206.938:6220): avc: denied { read open } for pid=5757 comm="syz.2.806" path="/192/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.102639][ T29] audit: type=1400 audit(1753582206.938:6221): avc: denied { write } for pid=5757 comm="syz.2.806" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.280453][ T5768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.289332][ T5768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.607174][ T5758] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.806: Allocating blocks 1-17 which overlap fs metadata [ 78.614312][ T29] audit: type=1400 audit(1753582207.148:6222): avc: denied { create } for pid=5760 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.640273][ T29] audit: type=1400 audit(1753582207.148:6223): avc: denied { connect } for pid=5760 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 78.659856][ T29] audit: type=1400 audit(1753582207.148:6224): avc: denied { create } for pid=5760 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.680040][ T29] audit: type=1400 audit(1753582207.148:6225): avc: denied { read write } for pid=5760 comm="syz.4.807" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.703632][ T29] audit: type=1400 audit(1753582207.148:6226): avc: denied { open } for pid=5760 comm="syz.4.807" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.726999][ T29] audit: type=1400 audit(1753582207.148:6227): avc: denied { ioctl } for pid=5760 comm="syz.4.807" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.763595][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.776205][ T5772] netlink: 'syz.1.811': attribute type 13 has an invalid length. [ 78.876360][ T5787] netlink: 'syz.0.817': attribute type 10 has an invalid length. [ 78.913570][ T5789] loop3: detected capacity change from 0 to 4096 [ 78.922399][ T5789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.007403][ T5801] loop2: detected capacity change from 0 to 512 [ 79.021984][ T5801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.034787][ T5801] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.048294][ T5801] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.823: corrupted inode contents [ 79.062108][ T5801] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.823: mark_inode_dirty error [ 79.073723][ T5801] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.823: corrupted inode contents [ 79.086832][ T5801] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.823: mark_inode_dirty error [ 79.099283][ T5801] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.823: mark inode dirty (error -117) [ 79.113136][ T5801] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 79.137356][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.159727][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.237056][ T5817] IPv4: Oversized IP packet from 127.202.26.0 [ 79.401566][ T5828] loop3: detected capacity change from 0 to 1024 [ 79.408301][ T5828] EXT4-fs: Ignoring removed oldalloc option [ 79.414347][ T5828] EXT4-fs: Ignoring removed bh option [ 79.431803][ T5828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.449799][ T5832] loop1: detected capacity change from 0 to 512 [ 79.462989][ T5832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.475843][ T5832] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.548585][ T5836] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.834: corrupted inode contents [ 79.561493][ T5836] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.834: mark_inode_dirty error [ 79.573359][ T5836] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.834: corrupted inode contents [ 79.585884][ T5836] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.834: mark_inode_dirty error [ 79.598045][ T5836] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.834: mark inode dirty (error -117) [ 79.603141][ T5828] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.833: Allocating blocks 1-17 which overlap fs metadata [ 79.612763][ T5836] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 79.653110][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.665284][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.687485][ T5841] loop1: detected capacity change from 0 to 512 [ 79.694982][ T5841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.733222][ T5841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.746089][ T5841] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.772475][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.807191][ T5851] IPv4: Oversized IP packet from 127.202.26.0 [ 79.839412][ T5854] 9pnet: Could not find request transport: fd0x0000000000000003 [ 79.949067][ T5868] netlink: 'syz.3.847': attribute type 10 has an invalid length. [ 79.990069][ T5866] loop1: detected capacity change from 0 to 1024 [ 79.996949][ T5866] EXT4-fs: Ignoring removed oldalloc option [ 80.002951][ T5866] EXT4-fs: Ignoring removed bh option [ 80.013688][ T5866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.119078][ T5875] loop2: detected capacity change from 0 to 512 [ 80.134171][ T5875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.146959][ T5875] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.199946][ T5866] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.846: Allocating blocks 1-17 which overlap fs metadata [ 80.220599][ T5878] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.848: corrupted inode contents [ 80.235283][ T5878] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.848: mark_inode_dirty error [ 80.246866][ T5878] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.848: corrupted inode contents [ 80.247856][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.260456][ T5878] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.848: mark_inode_dirty error [ 80.280940][ T5878] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.848: mark inode dirty (error -117) [ 80.293785][ T5878] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 80.331394][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.332686][ T5885] loop1: detected capacity change from 0 to 512 [ 80.347600][ T5885] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.362282][ T5885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.362778][ T5887] IPv4: Oversized IP packet from 127.202.26.0 [ 80.375392][ T5885] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.403306][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.423607][ T5893] 9pnet_fd: Insufficient options for proto=fd [ 80.528528][ T5903] netlink: 'syz.1.858': attribute type 13 has an invalid length. [ 80.875526][ T5919] IPv4: Oversized IP packet from 127.202.26.0 [ 80.988200][ T5921] 9pnet_fd: Insufficient options for proto=fd [ 81.049091][ T5924] loop3: detected capacity change from 0 to 1024 [ 81.090212][ T5924] EXT4-fs: Ignoring removed oldalloc option [ 81.096213][ T5924] EXT4-fs: Ignoring removed bh option [ 81.122769][ T5924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.157703][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.222383][ T5943] Falling back ldisc for ttyS3. [ 81.780020][ T5968] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 81.878112][ T5974] 9pnet_fd: Insufficient options for proto=fd [ 81.925782][ T5980] IPv4: Oversized IP packet from 127.202.26.0 [ 81.960550][ T5982] netlink: 'syz.3.888': attribute type 13 has an invalid length. [ 81.983227][ T5984] netlink: 'syz.0.889': attribute type 13 has an invalid length. [ 82.802611][ T6007] loop3: detected capacity change from 0 to 512 [ 82.832793][ T6007] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.897: corrupted inode contents [ 82.847915][ T6007] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.897: mark_inode_dirty error [ 82.862059][ T6007] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.897: corrupted inode contents [ 82.889321][ T6007] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.897: mark_inode_dirty error [ 82.902509][ T6007] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.897: corrupted inode contents [ 82.914735][ T6007] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 82.924600][ T6007] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.897: corrupted inode contents [ 82.963925][ T6007] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.897: mark_inode_dirty error [ 82.989002][ T6007] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 83.063224][ T6007] EXT4-fs (loop3): 1 truncate cleaned up [ 83.069188][ T6007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.081899][ T37] __quota_error: 675 callbacks suppressed [ 83.081910][ T37] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 83.097425][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 83.100490][ T29] audit: type=1400 audit(1753582211.978:6903): avc: denied { mount } for pid=6006 comm="syz.3.897" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.119815][ T6007] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.145412][ T29] audit: type=1400 audit(1753582212.018:6904): avc: denied { add_name } for pid=6006 comm="syz.3.897" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.156954][ T6028] Falling back ldisc for ttyS3. [ 83.165980][ T29] audit: type=1400 audit(1753582212.018:6905): avc: denied { create } for pid=6006 comm="syz.3.897" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.246761][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.252638][ T29] audit: type=1400 audit(1753582212.068:6906): avc: denied { read append open } for pid=6006 comm="syz.3.897" path="/186/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.279407][ T29] audit: type=1400 audit(1753582212.068:6907): avc: denied { tracepoint } for pid=6006 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.299095][ T29] audit: type=1400 audit(1753582212.068:6908): avc: denied { mounton } for pid=6006 comm="syz.3.897" path="/186/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.321881][ T29] audit: type=1400 audit(1753582212.098:6909): avc: denied { write } for pid=6006 comm="syz.3.897" name="kcm" dev="proc" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.344364][ T29] audit: type=1400 audit(1753582212.098:6910): avc: denied { setattr } for pid=6006 comm="syz.3.897" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.366678][ T29] audit: type=1400 audit(1753582212.118:6911): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.392170][ T6039] netlink: 'syz.2.911': attribute type 13 has an invalid length. [ 83.432396][ T6042] netlink: 'syz.3.910': attribute type 13 has an invalid length. [ 83.469159][ T6049] 9pnet_fd: Insufficient options for proto=fd [ 83.792905][ T6060] Falling back ldisc for ttyS3. [ 83.894978][ T6062] loop1: detected capacity change from 0 to 512 [ 83.915220][ T6062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.928627][ T6062] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.011360][ T6066] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.918: corrupted inode contents [ 84.023349][ T6066] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.918: mark_inode_dirty error [ 84.034799][ T6066] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.918: corrupted inode contents [ 84.046847][ T6066] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.918: mark_inode_dirty error [ 84.058904][ T6066] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.918: mark inode dirty (error -117) [ 84.072079][ T6066] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 84.093715][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.137385][ T6070] loop2: detected capacity change from 0 to 512 [ 84.153161][ T6070] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.921: corrupted inode contents [ 84.165347][ T6070] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.921: mark_inode_dirty error [ 84.177986][ T6070] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.921: corrupted inode contents [ 84.191302][ T6070] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.921: mark_inode_dirty error [ 84.207381][ T6070] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.921: corrupted inode contents [ 84.219395][ T6070] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 84.228531][ T6070] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.921: corrupted inode contents [ 84.241777][ T6070] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.921: mark_inode_dirty error [ 84.263150][ T6070] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 84.272606][ T6070] EXT4-fs (loop2): 1 truncate cleaned up [ 84.278977][ T6070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.292225][ T87] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 84.305923][ T6070] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.388154][ T6090] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 84.406200][ T6092] IPv4: Oversized IP packet from 127.202.26.0 [ 84.427999][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.485577][ T6100] netlink: 'syz.2.930': attribute type 13 has an invalid length. [ 84.503544][ T6102] netlink: 'syz.4.933': attribute type 13 has an invalid length. [ 84.575242][ T6110] loop1: detected capacity change from 0 to 1024 [ 84.582261][ T6110] EXT4-fs: Ignoring removed oldalloc option [ 84.588212][ T6110] EXT4-fs: Ignoring removed bh option [ 84.602381][ T6110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.629280][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.386069][ T6147] netlink: 'syz.2.951': attribute type 10 has an invalid length. [ 85.425881][ T6150] loop4: detected capacity change from 0 to 1024 [ 85.452507][ T6150] EXT4-fs: Ignoring removed oldalloc option [ 85.458487][ T6150] EXT4-fs: Ignoring removed bh option [ 85.474692][ T6150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.537025][ T6163] loop3: detected capacity change from 0 to 512 [ 85.583198][ T6163] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.956: corrupted inode contents [ 85.596215][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.612784][ T6163] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.956: mark_inode_dirty error [ 85.627873][ T6163] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.956: corrupted inode contents [ 85.640021][ T6163] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.956: mark_inode_dirty error [ 85.651410][ T6163] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.956: corrupted inode contents [ 85.663381][ T6163] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 85.682615][ T6171] netlink: 'syz.1.959': attribute type 13 has an invalid length. [ 85.713960][ T6163] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.956: corrupted inode contents [ 85.734169][ T6163] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.956: mark_inode_dirty error [ 85.747981][ T6163] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 85.786265][ T6163] EXT4-fs (loop3): 1 truncate cleaned up [ 85.805034][ T6163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.837641][ T6163] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.884237][ T6181] netlink: 'syz.4.962': attribute type 13 has an invalid length. [ 86.793735][ T6208] netlink: 'syz.1.972': attribute type 10 has an invalid length. [ 86.857369][ T6216] netlink: 'syz.4.976': attribute type 10 has an invalid length. [ 86.873201][ T6219] loop3: detected capacity change from 0 to 512 [ 86.893256][ T6219] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.977: corrupted inode contents [ 86.905348][ T6219] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.977: mark_inode_dirty error [ 86.916972][ T6219] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.977: corrupted inode contents [ 86.929141][ T6219] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.977: mark_inode_dirty error [ 86.940682][ T6219] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.977: corrupted inode contents [ 86.953843][ T6219] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 86.962658][ T6219] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.977: corrupted inode contents [ 86.974755][ T6219] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.977: mark_inode_dirty error [ 86.986282][ T6219] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 86.995892][ T6219] EXT4-fs (loop3): 1 truncate cleaned up [ 87.002289][ T6219] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.016235][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 87.097649][ T1036] kernel write not supported for file bpf-prog (pid: 1036 comm: kworker/0:2) [ 87.721722][ T6252] loop4: detected capacity change from 0 to 512 [ 87.744328][ T6252] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.989: corrupted inode contents [ 87.756446][ T6252] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.989: mark_inode_dirty error [ 87.767991][ T6252] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.989: corrupted inode contents [ 87.779923][ T6252] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.989: mark_inode_dirty error [ 87.791322][ T6252] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.989: corrupted inode contents [ 87.803472][ T6252] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 87.812387][ T6252] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.989: corrupted inode contents [ 87.825655][ T6252] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.989: mark_inode_dirty error [ 87.836833][ T6252] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 88.012401][ T6267] wg2: entered promiscuous mode [ 88.017321][ T6267] wg2: entered allmulticast mode [ 88.116173][ T29] kauditd_printk_skb: 1057 callbacks suppressed [ 88.116189][ T29] audit: type=1400 audit(1753582216.988:7967): avc: denied { create } for pid=6266 comm="syz.2.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.203877][ T6252] EXT4-fs (loop4): 1 truncate cleaned up [ 88.212138][ T29] audit: type=1400 audit(1753582217.088:7968): avc: denied { mount } for pid=6251 comm="syz.4.989" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 88.212145][ T6252] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.240826][ T3384] kernel write not supported for file bpf-prog (pid: 3384 comm: kworker/1:3) [ 88.244244][ T29] audit: type=1326 audit(1753582217.088:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.2.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c99ebe9a9 code=0x7ffc0000 [ 88.276521][ T29] audit: type=1400 audit(1753582217.088:7970): avc: denied { add_name } for pid=6251 comm="syz.4.989" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.297088][ T29] audit: type=1400 audit(1753582217.088:7971): avc: denied { create } for pid=6251 comm="syz.4.989" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.317125][ T29] audit: type=1400 audit(1753582217.088:7972): avc: denied { read append open } for pid=6251 comm="syz.4.989" path="/189/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.340714][ T29] audit: type=1400 audit(1753582217.088:7973): avc: denied { open } for pid=6251 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.359961][ T29] audit: type=1400 audit(1753582217.088:7974): avc: denied { kernel } for pid=6251 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.379316][ T29] audit: type=1400 audit(1753582217.088:7975): avc: denied { tracepoint } for pid=6251 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.398978][ T29] audit: type=1400 audit(1753582217.108:7976): avc: denied { mounton } for pid=6269 comm="syz.3.993" path=2F3230392FE91F7189591E9233614B dev="tmpfs" ino=1131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 88.509913][ T6283] loop3: detected capacity change from 0 to 1024 [ 88.516750][ T6283] EXT4-fs: Ignoring removed oldalloc option [ 88.522856][ T6283] EXT4-fs: Ignoring removed bh option [ 88.530040][ T6285] validate_nla: 1 callbacks suppressed [ 88.530051][ T6285] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 88.743317][ T6283] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.999: Allocating blocks 1-17 which overlap fs metadata [ 88.758038][ T6293] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.999: Allocating blocks 1-17 which overlap fs metadata [ 88.778004][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.786633][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.828873][ T6307] wg2: entered promiscuous mode [ 88.833842][ T6307] wg2: entered allmulticast mode [ 89.145381][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 89.256648][ T6361] loop4: detected capacity change from 0 to 512 [ 89.274439][ T6361] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1031: corrupted inode contents [ 89.286860][ T6361] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.1031: mark_inode_dirty error [ 89.299640][ T6361] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1031: corrupted inode contents [ 89.314221][ T6361] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1031: mark_inode_dirty error [ 89.325956][ T6361] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1031: corrupted inode contents [ 89.338300][ T6361] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 89.347340][ T6361] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1031: corrupted inode contents [ 89.359738][ T6361] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.1031: mark_inode_dirty error [ 89.371970][ T6361] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 89.383512][ T6361] EXT4-fs (loop4): 1 truncate cleaned up [ 89.384630][ T2959] kernel write not supported for file bpf-prog (pid: 2959 comm: kworker/1:2) [ 89.389996][ T6361] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.408874][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 89.616941][ T6392] netlink: 'syz.4.1043': attribute type 10 has an invalid length. [ 89.639842][ T2959] kernel write not supported for file bpf-prog (pid: 2959 comm: kworker/1:2) [ 89.736527][ T6400] netlink: 'syz.3.1046': attribute type 13 has an invalid length. [ 89.996870][ T6420] netlink: 'syz.2.1054': attribute type 13 has an invalid length. [ 90.164297][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 90.206394][ T6427] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 90.503758][ T6434] can0: slcan on ttyS3. [ 90.560204][ T6433] can0 (unregistered): slcan off ttyS3. [ 91.064148][ T2959] kernel write not supported for file bpf-prog (pid: 2959 comm: kworker/1:2) [ 91.137550][ T6455] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 91.194685][ T6465] loop2: detected capacity change from 0 to 512 [ 91.223294][ T6465] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1074: corrupted inode contents [ 91.237009][ T6465] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.1074: mark_inode_dirty error [ 91.248845][ T6465] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1074: corrupted inode contents [ 91.261519][ T6465] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1074: mark_inode_dirty error [ 91.273285][ T6465] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1074: corrupted inode contents [ 91.286667][ T6465] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 91.295596][ T6465] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1074: corrupted inode contents [ 91.312641][ T6465] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.1074: mark_inode_dirty error [ 91.325806][ T6465] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 91.341178][ T6465] EXT4-fs (loop2): 1 truncate cleaned up [ 91.349351][ T6465] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.369002][ T6475] netlink: 'syz.0.1076': attribute type 10 has an invalid length. [ 91.445265][ T6482] netlink: 'syz.4.1079': attribute type 10 has an invalid length. [ 91.462205][ T6480] netlink: 'syz.2.1078': attribute type 13 has an invalid length. [ 91.685608][ T3384] kernel write not supported for file bpf-prog (pid: 3384 comm: kworker/1:3) [ 92.058602][ T6500] can0: slcan on ttyS3. [ 92.120242][ T6499] can0 (unregistered): slcan off ttyS3. [ 92.174234][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 92.222993][ T6520] netlink: 'syz.0.1095': attribute type 10 has an invalid length. [ 92.350494][ T6537] can0: slcan on ttyS3. [ 92.380624][ T6535] can0 (unregistered): slcan off ttyS3. [ 92.400754][ T2959] kernel write not supported for file bpf-prog (pid: 2959 comm: kworker/1:2) [ 92.652388][ T4479] kernel write not supported for file bpf-prog (pid: 4479 comm: kworker/0:3) [ 92.683900][ T6573] can0: slcan on ttyS3. [ 92.730373][ T6572] can0 (unregistered): slcan off ttyS3. [ 92.853137][ T6580] loop1: detected capacity change from 0 to 512 [ 92.873573][ T6580] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1120: corrupted inode contents [ 92.885669][ T6580] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.1120: mark_inode_dirty error [ 92.897181][ T6580] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1120: corrupted inode contents [ 92.909315][ T6580] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1120: mark_inode_dirty error [ 92.921646][ T6580] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1120: corrupted inode contents [ 92.933837][ T6580] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 92.942493][ T6580] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1120: corrupted inode contents [ 92.954627][ T6580] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.1120: mark_inode_dirty error [ 92.965852][ T6580] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 92.975270][ T6580] EXT4-fs (loop1): 1 truncate cleaned up [ 92.981791][ T6580] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.992449][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 93.153539][ T29] kauditd_printk_skb: 1185 callbacks suppressed [ 93.153557][ T29] audit: type=1400 audit(1753582222.028:9160): avc: denied { execmem } for pid=6596 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.297978][ T29] audit: type=1326 audit(1753582222.168:9161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 93.379871][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 93.485387][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 93.667272][ T6612] loop2: detected capacity change from 0 to 512 [ 93.715021][ T29] audit: type=1326 audit(1753582222.168:9162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 93.738501][ T29] audit: type=1326 audit(1753582222.168:9163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 93.761992][ T29] audit: type=1326 audit(1753582222.168:9164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 93.785480][ T29] audit: type=1326 audit(1753582222.168:9165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 93.791898][ T6615] validate_nla: 3 callbacks suppressed [ 93.791915][ T6615] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 93.808895][ T29] audit: type=1326 audit(1753582222.168:9166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 93.808927][ T29] audit: type=1326 audit(1753582222.168:9167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 93.830161][ T6612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1131: corrupted inode contents [ 93.845701][ T29] audit: type=1326 audit(1753582222.168:9168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 93.904632][ T29] audit: type=1326 audit(1753582222.168:9169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6601 comm="syz.4.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 93.954958][ T6612] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.1131: mark_inode_dirty error [ 93.973764][ T6612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1131: corrupted inode contents [ 94.007048][ T6612] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.1131: mark_inode_dirty error [ 94.055854][ T6612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1131: corrupted inode contents [ 94.077578][ T6612] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 94.089626][ T6612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.1131: corrupted inode contents [ 94.119883][ T6612] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.1131: mark_inode_dirty error [ 94.135353][ T6612] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 94.150431][ T6612] EXT4-fs (loop2): 1 truncate cleaned up [ 94.152493][ T6631] netlink: 'syz.0.1138': attribute type 10 has an invalid length. [ 94.156813][ T6612] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.176846][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 94.197060][ T6635] netlink: 'syz.4.1140': attribute type 10 has an invalid length. [ 94.221865][ T6637] netlink: 'syz.1.1141': attribute type 13 has an invalid length. [ 94.325937][ T6647] loop2: detected capacity change from 0 to 1024 [ 94.332684][ T6647] EXT4-fs: Ignoring removed oldalloc option [ 94.338693][ T6647] EXT4-fs: Ignoring removed bh option [ 94.498112][ T6650] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1144: Allocating blocks 1-17 which overlap fs metadata [ 94.512978][ T6647] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1144: Allocating blocks 1-17 which overlap fs metadata [ 94.666981][ T4479] kernel write not supported for file bpf-prog (pid: 4479 comm: kworker/0:3) [ 94.729071][ T6676] loop3: detected capacity change from 0 to 1024 [ 94.736717][ T6676] EXT4-fs: Ignoring removed oldalloc option [ 94.742851][ T6676] EXT4-fs: Ignoring removed bh option [ 94.750704][ T6678] netlink: 'syz.2.1157': attribute type 10 has an invalid length. [ 94.910755][ T6676] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1156: Allocating blocks 1-17 which overlap fs metadata [ 94.925023][ T6682] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1156: Allocating blocks 1-17 which overlap fs metadata [ 95.068961][ T1036] kernel write not supported for file bpf-prog (pid: 1036 comm: kworker/0:2) [ 95.262425][ T6720] loop1: detected capacity change from 0 to 1024 [ 95.269269][ T6720] EXT4-fs: Ignoring removed oldalloc option [ 95.275306][ T6720] EXT4-fs: Ignoring removed bh option [ 95.367617][ T6731] netlink: 'syz.3.1176': attribute type 10 has an invalid length. [ 95.572504][ T6720] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1172: Allocating blocks 1-17 which overlap fs metadata [ 95.652891][ T6737] netlink: 'syz.2.1178': attribute type 13 has an invalid length. [ 95.711238][ T1036] kernel write not supported for file bpf-prog (pid: 1036 comm: kworker/0:2) [ 96.023317][ T6760] netlink: 'syz.1.1188': attribute type 10 has an invalid length. [ 96.052568][ T6762] loop4: detected capacity change from 0 to 512 [ 96.083656][ T6762] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1189: corrupted inode contents [ 96.097803][ T6762] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.1189: mark_inode_dirty error [ 96.109780][ T6762] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1189: corrupted inode contents [ 96.122713][ T6762] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1189: mark_inode_dirty error [ 96.134605][ T6762] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1189: corrupted inode contents [ 96.147019][ T6762] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 96.155719][ T6762] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1189: corrupted inode contents [ 96.167994][ T6762] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.1189: mark_inode_dirty error [ 96.180655][ T6762] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 96.193135][ T6762] EXT4-fs (loop4): 1 truncate cleaned up [ 96.229769][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 96.274002][ T6762] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.335529][ T6770] loop3: detected capacity change from 0 to 1024 [ 96.347062][ T6770] EXT4-fs: Ignoring removed oldalloc option [ 96.353198][ T6770] EXT4-fs: Ignoring removed bh option [ 96.540541][ T4479] kernel write not supported for file bpf-prog (pid: 4479 comm: kworker/0:3) [ 96.726157][ T6770] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1190: Allocating blocks 1-17 which overlap fs metadata [ 96.796306][ T6796] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 96.894576][ T3384] kernel write not supported for file bpf-prog (pid: 3384 comm: kworker/1:3) [ 97.716754][ T6818] loop1: detected capacity change from 0 to 512 [ 97.789201][ T6818] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.878300][ T6832] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.1207: corrupted inode contents [ 97.911778][ T6838] netlink: 'syz.3.1216': attribute type 10 has an invalid length. [ 97.920700][ T6832] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.1207: mark_inode_dirty error [ 97.948695][ T6832] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.1207: corrupted inode contents [ 98.003059][ T6832] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.1207: mark_inode_dirty error [ 98.033727][ T6832] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.1207: mark inode dirty (error -117) [ 98.048862][ T6832] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 98.164384][ T6855] loop1: detected capacity change from 0 to 1024 [ 98.168465][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 98.168480][ T29] audit: type=1326 audit(1753582227.038:9842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c99ebe9a9 code=0x7ffc0000 [ 98.171538][ T6855] EXT4-fs: Ignoring removed oldalloc option [ 98.181172][ T29] audit: type=1326 audit(1753582227.048:9843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c99ebe9a9 code=0x7ffc0000 [ 98.200446][ T6855] EXT4-fs: Ignoring removed bh option [ 98.217310][ T29] audit: type=1326 audit(1753582227.078:9844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f5c99ebe9a9 code=0x7ffc0000 [ 98.258568][ T29] audit: type=1326 audit(1753582227.078:9845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c99ebe9a9 code=0x7ffc0000 [ 98.282062][ T29] audit: type=1326 audit(1753582227.078:9846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6844 comm="syz.2.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c99ebe9a9 code=0x7ffc0000 [ 98.307860][ T6855] EXT4-fs mount: 27 callbacks suppressed [ 98.307889][ T6855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.364000][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.413069][ T29] audit: type=1326 audit(1753582227.288:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3320e9a9 code=0x7ffc0000 [ 98.444910][ T29] audit: type=1326 audit(1753582227.308:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3320e9a9 code=0x7ffc0000 [ 98.468434][ T29] audit: type=1326 audit(1753582227.308:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd3320e9a9 code=0x7ffc0000 [ 98.491954][ T29] audit: type=1326 audit(1753582227.308:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3320e9a9 code=0x7ffc0000 [ 98.515407][ T29] audit: type=1326 audit(1753582227.308:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efd3320e9a9 code=0x7ffc0000 [ 99.100787][ T6888] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 101.010480][ T6929] netlink: 'syz.4.1249': attribute type 13 has an invalid length. [ 101.079883][ T6939] netlink: 'syz.3.1253': attribute type 10 has an invalid length. [ 102.554287][ T6986] netlink: 'syz.1.1269': attribute type 13 has an invalid length. [ 102.973088][ T7002] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 103.171339][ T29] kauditd_printk_skb: 981 callbacks suppressed [ 103.171403][ T29] audit: type=1326 audit(1753582232.048:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd33205967 code=0x7ffc0000 [ 103.201140][ T29] audit: type=1326 audit(1753582232.048:10834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd331aab89 code=0x7ffc0000 [ 103.224774][ T29] audit: type=1326 audit(1753582232.048:10835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efd3320e9a9 code=0x7ffc0000 [ 103.248393][ T29] audit: type=1326 audit(1753582232.048:10836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd33205967 code=0x7ffc0000 [ 103.271859][ T29] audit: type=1326 audit(1753582232.048:10837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd331aab89 code=0x7ffc0000 [ 103.295373][ T29] audit: type=1326 audit(1753582232.048:10838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efd3320e9a9 code=0x7ffc0000 [ 103.318904][ T29] audit: type=1326 audit(1753582232.048:10839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd33205967 code=0x7ffc0000 [ 103.342314][ T29] audit: type=1326 audit(1753582232.048:10840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd331aab89 code=0x7ffc0000 [ 103.366078][ T29] audit: type=1326 audit(1753582232.048:10841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efd3320e9a9 code=0x7ffc0000 [ 103.389722][ T29] audit: type=1326 audit(1753582232.078:10842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6985 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd33205967 code=0x7ffc0000 [ 103.450271][ T7013] netlink: 'syz.1.1279': attribute type 10 has an invalid length. [ 103.812720][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.821432][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.337771][ T7044] netlink: 'syz.1.1290': attribute type 13 has an invalid length. [ 105.192852][ T7074] netlink: 'syz.1.1301': attribute type 10 has an invalid length. [ 105.804565][ T7099] netlink: 'syz.0.1311': attribute type 13 has an invalid length. [ 106.087596][ T7119] netlink: 'syz.1.1318': attribute type 13 has an invalid length. [ 106.226533][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.235134][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.712124][ T7131] loop3: detected capacity change from 0 to 1024 [ 106.719366][ T7131] EXT4-fs: Ignoring removed oldalloc option [ 106.725628][ T7131] EXT4-fs: Ignoring removed bh option [ 106.753285][ T7131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.227932][ T7131] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1323: Allocating blocks 1-17 which overlap fs metadata [ 107.307370][ T7139] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1323: Allocating blocks 1-17 which overlap fs metadata [ 107.480835][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.497883][ T7154] netlink: 'syz.1.1329': attribute type 10 has an invalid length. [ 107.528830][ T7158] netlink: 'syz.0.1330': attribute type 13 has an invalid length. [ 107.754170][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.762746][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.907659][ T7171] loop4: detected capacity change from 0 to 512 [ 107.945728][ T7171] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1334: corrupted inode contents [ 107.961961][ T7171] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.1334: mark_inode_dirty error [ 107.975857][ T7171] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1334: corrupted inode contents [ 107.991104][ T7171] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1334: mark_inode_dirty error [ 108.008109][ T7171] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1334: corrupted inode contents [ 108.022707][ T7171] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 108.036889][ T7171] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1334: corrupted inode contents [ 108.053185][ T7171] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.1334: mark_inode_dirty error [ 108.065479][ T7171] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 108.076494][ T7171] EXT4-fs (loop4): 1 truncate cleaned up [ 108.082701][ T7171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.096533][ T7171] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.107360][ T390] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 108.152134][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.190671][ T29] kauditd_printk_skb: 1467 callbacks suppressed [ 108.190771][ T29] audit: type=1326 audit(1753582237.058:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8ee85967 code=0x7ffc0000 [ 108.225246][ T29] audit: type=1326 audit(1753582237.068:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8ee2ab89 code=0x7ffc0000 [ 108.226444][ T7178] netlink: 'syz.4.1336': attribute type 13 has an invalid length. [ 108.248892][ T29] audit: type=1326 audit(1753582237.068:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f6d8ee8e9a9 code=0x7ffc0000 [ 108.248961][ T29] audit: type=1326 audit(1753582237.068:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8ee85967 code=0x7ffc0000 [ 108.248992][ T29] audit: type=1326 audit(1753582237.068:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8ee2ab89 code=0x7ffc0000 [ 108.249023][ T29] audit: type=1326 audit(1753582237.068:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f6d8ee8e9a9 code=0x7ffc0000 [ 108.249064][ T29] audit: type=1326 audit(1753582237.098:12315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8ee85967 code=0x7ffc0000 [ 108.249176][ T29] audit: type=1326 audit(1753582237.098:12316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d8ee2ab89 code=0x7ffc0000 [ 108.249236][ T29] audit: type=1326 audit(1753582237.098:12317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f6d8ee8e9a9 code=0x7ffc0000 [ 108.249267][ T29] audit: type=1326 audit(1753582237.098:12318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.0.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d8ee85967 code=0x7ffc0000 [ 108.456510][ T7183] netlink: 'syz.1.1337': attribute type 10 has an invalid length. [ 109.241602][ T7208] netlink: 'syz.2.1347': attribute type 10 has an invalid length. [ 109.291798][ T7212] netlink: 'syz.1.1349': attribute type 13 has an invalid length. [ 109.539460][ T7230] netlink: 'syz.0.1356': attribute type 13 has an invalid length. [ 109.667662][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.676192][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.135774][ T7237] loop1: detected capacity change from 0 to 512 [ 110.155173][ T7237] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1358: corrupted inode contents [ 110.167267][ T7237] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.1358: mark_inode_dirty error [ 110.180257][ T7237] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1358: corrupted inode contents [ 110.193689][ T7237] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1358: mark_inode_dirty error [ 110.206824][ T7237] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1358: corrupted inode contents [ 110.222844][ T7237] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 110.233048][ T7237] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.1358: corrupted inode contents [ 110.245495][ T7237] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.1358: mark_inode_dirty error [ 110.258800][ T7237] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 110.269782][ T7237] EXT4-fs (loop1): 1 truncate cleaned up [ 110.276939][ T7237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.293338][ T390] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 110.301948][ T7237] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.338821][ T7252] netlink: 'syz.2.1364': attribute type 10 has an invalid length. [ 110.361551][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.652948][ T7268] netlink: 'syz.3.1369': attribute type 13 has an invalid length. [ 111.505772][ T7295] netlink: 'syz.1.1380': attribute type 10 has an invalid length. [ 112.226942][ T7307] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 112.453772][ T7316] loop3: detected capacity change from 0 to 512 [ 112.460785][ T7316] ext4: Unknown parameter 'appraise_type' [ 112.475045][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1386'. [ 112.722070][ T7327] netlink: 'syz.3.1390': attribute type 13 has an invalid length. [ 113.076058][ T7335] loop2: detected capacity change from 0 to 1024 [ 113.082961][ T7335] EXT4-fs: Ignoring removed oldalloc option [ 113.088970][ T7335] EXT4-fs: Ignoring removed bh option [ 113.102643][ T7335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.204726][ T29] kauditd_printk_skb: 1541 callbacks suppressed [ 113.204742][ T29] audit: type=1326 audit(1753582242.078:13860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3e7445967 code=0x7ffc0000 [ 113.234556][ T29] audit: type=1326 audit(1753582242.078:13859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd33205967 code=0x7ffc0000 [ 113.258105][ T29] audit: type=1326 audit(1753582242.078:13861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3e73eab89 code=0x7ffc0000 [ 113.281512][ T29] audit: type=1326 audit(1753582242.078:13862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd3e744e9a9 code=0x7ffc0000 [ 113.305116][ T29] audit: type=1326 audit(1753582242.078:13863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd331aab89 code=0x7ffc0000 [ 113.328850][ T29] audit: type=1326 audit(1753582242.078:13864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.1.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efd3320e9a9 code=0x7ffc0000 [ 113.352643][ T29] audit: type=1326 audit(1753582242.088:13865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3e7445967 code=0x7ffc0000 [ 113.376136][ T29] audit: type=1326 audit(1753582242.088:13866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd3e73eab89 code=0x7ffc0000 [ 113.399569][ T29] audit: type=1326 audit(1753582242.088:13867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd3e744e9a9 code=0x7ffc0000 [ 113.423156][ T29] audit: type=1326 audit(1753582242.088:13868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7326 comm="syz.3.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd3e7445967 code=0x7ffc0000 [ 113.485224][ T7340] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1393: Allocating blocks 1-17 which overlap fs metadata [ 113.499837][ T7335] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1393: Allocating blocks 1-17 which overlap fs metadata [ 113.534312][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.019416][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.028130][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.116669][ T7363] loop1: detected capacity change from 0 to 1024 [ 114.127534][ T7363] EXT4-fs: Ignoring removed oldalloc option [ 114.133724][ T7363] EXT4-fs: Ignoring removed bh option [ 114.147894][ T7363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.424894][ T7363] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1401: Allocating blocks 1-17 which overlap fs metadata [ 114.513995][ T7370] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1401: Allocating blocks 1-17 which overlap fs metadata [ 114.547476][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.576181][ T7382] loop1: detected capacity change from 0 to 1024 [ 114.587281][ T7382] EXT4-fs: Ignoring removed oldalloc option [ 114.593627][ T7382] EXT4-fs: Ignoring removed bh option [ 114.614592][ T7382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.025324][ T7382] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1406: Allocating blocks 1-17 which overlap fs metadata [ 115.040974][ T7385] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1406: Allocating blocks 1-17 which overlap fs metadata [ 115.082253][ T7389] netlink: 'syz.2.1408': attribute type 13 has an invalid length. [ 115.093394][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.305053][ T7399] loop4: detected capacity change from 0 to 512 [ 115.326722][ T7399] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1412: corrupted inode contents [ 115.341995][ T7399] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.1412: mark_inode_dirty error [ 115.354933][ T7399] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1412: corrupted inode contents [ 115.367118][ T7399] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1412: mark_inode_dirty error [ 115.379745][ T7399] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1412: corrupted inode contents [ 115.393545][ T7399] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 115.403568][ T7399] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1412: corrupted inode contents [ 115.416643][ T7399] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.1412: mark_inode_dirty error [ 115.427978][ T7399] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 115.443612][ T7399] EXT4-fs (loop4): 1 truncate cleaned up [ 115.449835][ T7399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.462525][ T7399] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.470436][ T390] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 115.527371][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.624871][ T7440] netlink: 'syz.1.1427': attribute type 10 has an invalid length. [ 116.652622][ T7442] loop4: detected capacity change from 0 to 512 [ 116.685185][ T7442] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1428: corrupted inode contents [ 116.699272][ T7442] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.1428: mark_inode_dirty error [ 116.715966][ T7442] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1428: corrupted inode contents [ 116.729329][ T7442] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1428: mark_inode_dirty error [ 116.742186][ T7442] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1428: corrupted inode contents [ 116.755030][ T7442] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 116.764843][ T7442] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1428: corrupted inode contents [ 116.778317][ T7442] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.1428: mark_inode_dirty error [ 116.805471][ T7442] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 116.830779][ T7442] EXT4-fs (loop4): 1 truncate cleaned up [ 116.836978][ T7442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.850060][ T7442] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.862598][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 116.878511][ T7451] netlink: 'syz.3.1430': attribute type 13 has an invalid length. [ 116.912940][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.506349][ T7476] loop1: detected capacity change from 0 to 1024 [ 117.514428][ T7476] EXT4-fs: Ignoring removed oldalloc option [ 117.520598][ T7476] EXT4-fs: Ignoring removed bh option [ 117.534454][ T7476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.889224][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.897753][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.956908][ T7479] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1439: Allocating blocks 1-17 which overlap fs metadata [ 117.972376][ T7476] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1439: Allocating blocks 1-17 which overlap fs metadata [ 118.028664][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.039681][ T7487] loop4: detected capacity change from 0 to 512 [ 118.084078][ T7487] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1442: corrupted inode contents [ 118.112409][ T7487] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.1442: mark_inode_dirty error [ 118.159433][ T7487] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1442: corrupted inode contents [ 118.171901][ T7487] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1442: mark_inode_dirty error [ 118.183730][ T7487] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1442: corrupted inode contents [ 118.197131][ T7487] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 118.205902][ T7487] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1442: corrupted inode contents [ 118.217969][ T7487] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.1442: mark_inode_dirty error [ 118.229921][ T29] kauditd_printk_skb: 1210 callbacks suppressed [ 118.229933][ T29] audit: type=1326 audit(1753582247.108:15077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c99ebe9a9 code=0x7ffc0000 [ 118.229969][ T7487] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 118.236227][ T29] audit: type=1326 audit(1753582247.108:15078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c99ebe9a9 code=0x7ffc0000 [ 118.262123][ T7487] EXT4-fs (loop4): 1 truncate cleaned up [ 118.298265][ T87] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.307021][ T7487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.308035][ T87] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 118.321643][ T7487] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.352446][ T29] audit: type=1400 audit(1753582247.218:15079): avc: denied { append } for pid=7486 comm="syz.4.1442" path="/289/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.403463][ T7504] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 118.421266][ T7506] netlink: 'syz.1.1449': attribute type 10 has an invalid length. [ 118.436137][ T29] audit: type=1400 audit(1753582247.308:15080): avc: denied { mounton } for pid=7486 comm="syz.4.1442" path="/289/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.459103][ T29] audit: type=1400 audit(1753582247.308:15081): avc: denied { write } for pid=7486 comm="syz.4.1442" name="kcm" dev="proc" ino=4026532646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 118.481896][ T29] audit: type=1400 audit(1753582247.308:15082): avc: denied { setattr } for pid=7486 comm="syz.4.1442" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.530581][ T29] audit: type=1400 audit(1753582247.408:15083): avc: denied { tracepoint } for pid=7486 comm="syz.4.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 118.585438][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.838394][ T7514] netlink: 'syz.4.1450': attribute type 13 has an invalid length. [ 118.848885][ T29] audit: type=1326 audit(1753582247.728:15084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.4.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 118.872704][ T29] audit: type=1326 audit(1753582247.728:15085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.4.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 119.293716][ T7522] netlink: 'syz.1.1453': attribute type 10 has an invalid length. [ 119.293976][ T7523] loop2: detected capacity change from 0 to 1024 [ 119.308779][ T7523] EXT4-fs: Ignoring removed oldalloc option [ 119.314935][ T7523] EXT4-fs: Ignoring removed bh option [ 119.332642][ T7523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.629146][ T7528] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1454: Allocating blocks 1-17 which overlap fs metadata [ 119.643587][ T7523] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1454: Allocating blocks 1-17 which overlap fs metadata [ 119.680015][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.177931][ T7547] netlink: 'syz.1.1461': attribute type 10 has an invalid length. [ 120.374155][ T7558] netlink: 'syz.2.1464': attribute type 10 has an invalid length. [ 120.596706][ T7562] loop4: detected capacity change from 0 to 1024 [ 120.603639][ T7562] EXT4-fs: Ignoring removed oldalloc option [ 120.609618][ T7562] EXT4-fs: Ignoring removed bh option [ 120.622618][ T7562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.772291][ T7569] loop3: detected capacity change from 0 to 1024 [ 120.779297][ T7569] EXT4-fs: Ignoring removed oldalloc option [ 120.785357][ T7569] EXT4-fs: Ignoring removed bh option [ 120.796135][ T7566] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1465: Allocating blocks 1-17 which overlap fs metadata [ 120.811210][ T7562] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1465: Allocating blocks 1-17 which overlap fs metadata [ 120.814462][ T7569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.852578][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.879247][ T7573] netlink: 'syz.4.1467': attribute type 13 has an invalid length. [ 121.095206][ T7574] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1466: Allocating blocks 1-17 which overlap fs metadata [ 121.109231][ T7569] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1466: Allocating blocks 1-17 which overlap fs metadata [ 121.151292][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.330006][ T7591] netlink: 'syz.2.1474': attribute type 10 has an invalid length. [ 121.465203][ T7595] loop3: detected capacity change from 0 to 256 [ 121.726663][ T7604] loop4: detected capacity change from 0 to 512 [ 121.734344][ T7604] ext4: Unknown parameter 'appraise_type' [ 121.796551][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1478'. [ 121.865985][ T7606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.874508][ T7606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.905245][ T7608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1479'. [ 121.916999][ T7608] sch_fq: defrate 0 ignored. [ 121.926323][ T7610] loop4: detected capacity change from 0 to 1024 [ 121.933367][ T7610] EXT4-fs: Ignoring removed oldalloc option [ 121.939362][ T7610] EXT4-fs: Ignoring removed bh option [ 121.947363][ T7610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.302694][ T7633] netlink: 'syz.1.1487': attribute type 10 has an invalid length. [ 122.336760][ T7615] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1480: Allocating blocks 1-17 which overlap fs metadata [ 122.355399][ T7610] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1480: Allocating blocks 1-17 which overlap fs metadata [ 122.386508][ T7639] netlink: 'syz.2.1490': attribute type 13 has an invalid length. [ 122.405273][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1491'. [ 122.419983][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.479734][ T7646] netlink: 'syz.4.1493': attribute type 10 has an invalid length. [ 123.233080][ T29] kauditd_printk_skb: 1024 callbacks suppressed [ 123.233096][ T29] audit: type=1400 audit(1753582252.108:16110): avc: denied { map_create } for pid=7652 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.258844][ T29] audit: type=1400 audit(1753582252.108:16111): avc: denied { map_read map_write } for pid=7652 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.278907][ T29] audit: type=1400 audit(1753582252.108:16112): avc: denied { prog_run } for pid=7652 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 123.336651][ T7657] netlink: 'syz.4.1496': attribute type 13 has an invalid length. [ 123.352483][ T29] audit: type=1400 audit(1753582252.108:16113): avc: denied { create } for pid=7652 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.372157][ T29] audit: type=1400 audit(1753582252.108:16114): avc: denied { setopt } for pid=7652 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.391856][ T29] audit: type=1400 audit(1753582252.108:16115): avc: denied { write } for pid=7652 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.411382][ T29] audit: type=1400 audit(1753582252.158:16116): avc: denied { read } for pid=7652 comm="syz.2.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.430891][ T29] audit: type=1400 audit(1753582252.178:16117): avc: denied { open } for pid=7650 comm="syz.1.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 123.450230][ T29] audit: type=1400 audit(1753582252.178:16118): avc: denied { kernel } for pid=7650 comm="syz.1.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 123.469864][ T29] audit: type=1326 audit(1753582252.218:16119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7656 comm="syz.4.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2801fe9a9 code=0x7ffc0000 [ 123.646572][ T7679] netlink: 'syz.1.1505': attribute type 13 has an invalid length. [ 124.440244][ T7687] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 124.555751][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1511'. [ 124.574287][ T7700] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1513'. [ 124.589806][ T7700] sch_fq: defrate 0 ignored. [ 124.623424][ T7707] loop4: detected capacity change from 0 to 1024 [ 124.630229][ T7707] EXT4-fs: Ignoring removed oldalloc option [ 124.636250][ T7707] EXT4-fs: Ignoring removed bh option [ 124.653437][ T7707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.886187][ T7707] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1515: Allocating blocks 1-17 which overlap fs metadata [ 124.906941][ T7714] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1515: Allocating blocks 1-17 which overlap fs metadata [ 125.168005][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.241909][ T7724] loop4: detected capacity change from 0 to 1024 [ 125.248844][ T7724] EXT4-fs: Ignoring removed oldalloc option [ 125.254853][ T7724] EXT4-fs: Ignoring removed bh option [ 125.273014][ T7724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.436472][ T7724] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1519: Allocating blocks 1-17 which overlap fs metadata [ 125.451320][ T7732] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1519: Allocating blocks 1-17 which overlap fs metadata [ 125.517851][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.567753][ T7740] validate_nla: 1 callbacks suppressed [ 125.567858][ T7740] netlink: 'syz.4.1522': attribute type 13 has an invalid length. [ 125.725770][ T7758] loop3: detected capacity change from 0 to 1024 [ 125.733574][ T7758] EXT4-fs: Ignoring removed oldalloc option [ 125.740106][ T7758] EXT4-fs: Ignoring removed bh option [ 125.767227][ T7761] netlink: 'syz.1.1531': attribute type 10 has an invalid length. [ 125.778681][ T7758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.964621][ T7758] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1533: Allocating blocks 1-17 which overlap fs metadata [ 125.983741][ T7768] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1533: Allocating blocks 1-17 which overlap fs metadata [ 126.020576][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.046037][ T7774] loop2: detected capacity change from 0 to 1024 [ 126.055130][ T7774] EXT4-fs: Ignoring removed oldalloc option [ 126.061235][ T7774] EXT4-fs: Ignoring removed bh option [ 126.071943][ T7778] loop3: detected capacity change from 0 to 1024 [ 126.074934][ T7774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.079133][ T7778] EXT4-fs: Ignoring removed oldalloc option [ 126.096948][ T7778] EXT4-fs: Ignoring removed bh option [ 126.123493][ T7778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.162847][ T7783] ================================================================== [ 126.170961][ T7783] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 126.178278][ T7783] [ 126.180707][ T7783] read-write to 0xffff8881057326c8 of 8 bytes by task 7774 on cpu 1: [ 126.188801][ T7783] xas_clear_mark+0x91/0x180 [ 126.193420][ T7783] __folio_start_writeback+0x2e7/0x440 [ 126.198917][ T7783] ext4_bio_write_folio+0x5ad/0x9f0 [ 126.204157][ T7783] mpage_submit_folio+0xe4/0x170 [ 126.209141][ T7783] mpage_process_page_bufs+0x39b/0x4a0 [ 126.214653][ T7783] mpage_prepare_extent_to_map+0x741/0xaa0 [ 126.220509][ T7783] ext4_do_writepages+0x6ea/0x21c0 [ 126.225651][ T7783] ext4_writepages+0x176/0x300 [ 126.230480][ T7783] do_writepages+0x1c6/0x310 [ 126.235102][ T7783] file_write_and_wait_range+0x156/0x2c0 [ 126.240765][ T7783] generic_buffers_fsync_noflush+0x45/0x120 [ 126.246706][ T7783] ext4_sync_file+0x1ab/0x690 [ 126.251427][ T7783] vfs_fsync_range+0x10a/0x130 [ 126.256246][ T7783] ext4_buffered_write_iter+0x34f/0x3c0 [ 126.261870][ T7783] ext4_file_write_iter+0x383/0xf00 [ 126.267202][ T7783] iter_file_splice_write+0x5ef/0x970 [ 126.272624][ T7783] direct_splice_actor+0x153/0x2a0 [ 126.277768][ T7783] splice_direct_to_actor+0x30f/0x680 [ 126.283160][ T7783] do_splice_direct+0xda/0x150 [ 126.287957][ T7783] do_sendfile+0x380/0x650 [ 126.292403][ T7783] __x64_sys_sendfile64+0x105/0x150 [ 126.297622][ T7783] x64_sys_call+0xb39/0x2fb0 [ 126.302242][ T7783] do_syscall_64+0xd2/0x200 [ 126.306761][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.312671][ T7783] [ 126.315013][ T7783] read to 0xffff8881057326c8 of 8 bytes by task 7783 on cpu 0: [ 126.322575][ T7783] xas_find_marked+0x218/0x620 [ 126.327437][ T7783] find_get_entry+0x5d/0x380 [ 126.332050][ T7783] filemap_get_folios_tag+0x13b/0x210 [ 126.337479][ T7783] mpage_prepare_extent_to_map+0x320/0xaa0 [ 126.343330][ T7783] ext4_do_writepages+0x6ea/0x21c0 [ 126.348496][ T7783] ext4_writepages+0x176/0x300 [ 126.353307][ T7783] do_writepages+0x1c6/0x310 [ 126.357918][ T7783] file_write_and_wait_range+0x156/0x2c0 [ 126.363584][ T7783] generic_buffers_fsync_noflush+0x45/0x120 [ 126.369526][ T7783] ext4_sync_file+0x1ab/0x690 [ 126.372489][ T7774] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1537: Allocating blocks 1-17 which overlap fs metadata [ 126.374237][ T7783] vfs_fsync_range+0x10a/0x130 [ 126.374279][ T7783] ext4_buffered_write_iter+0x34f/0x3c0 [ 126.374301][ T7783] ext4_file_write_iter+0x383/0xf00 [ 126.403398][ T7783] iter_file_splice_write+0x5ef/0x970 [ 126.408813][ T7783] direct_splice_actor+0x153/0x2a0 [ 126.413954][ T7783] splice_direct_to_actor+0x30f/0x680 [ 126.419371][ T7783] do_splice_direct+0xda/0x150 [ 126.424171][ T7783] do_sendfile+0x380/0x650 [ 126.428621][ T7783] __x64_sys_sendfile64+0x105/0x150 [ 126.433834][ T7783] x64_sys_call+0xb39/0x2fb0 [ 126.438451][ T7783] do_syscall_64+0xd2/0x200 [ 126.442965][ T7783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.448882][ T7783] [ 126.451246][ T7783] value changed: 0x0000000000000006 -> 0x0000000000000000 [ 126.458368][ T7783] [ 126.460708][ T7783] Reported by Kernel Concurrency Sanitizer on: [ 126.464776][ T7778] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1538: Allocating blocks 1-17 which overlap fs metadata [ 126.466881][ T7783] CPU: 0 UID: 0 PID: 7783 Comm: syz.2.1537 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) [ 126.483226][ T7784] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1538: Allocating blocks 1-17 which overlap fs metadata [ 126.492850][ T7783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.492867][ T7783] ================================================================== [ 126.526249][ T7783] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1537: Allocating blocks 1-17 which overlap fs metadata [ 126.552975][ T7783] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.1537: Allocating blocks 1-17 which overlap fs metadata [ 126.594670][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.627973][ T7783] syz.2.1537 (7783) used greatest stack depth: 9080 bytes left [ 126.646973][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.