last executing test programs: 1m7.811300689s ago: executing program 3 (id=3613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1m7.355861503s ago: executing program 3 (id=3627): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1, 0xe7b, 0x0, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x34, &(0x7f00000004c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@arp={0x806, @generic={0x100, 0x6004, 0x6, 0x7, 0x8, @empty, "a3493fe438ec20", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, "4a4ec42de06db4a52e91f4"}}}}, 0x0) 1m7.131925565s ago: executing program 3 (id=3633): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{0x2, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x10000, 0x0, 0x0, 0x400}, {}, {0x0, 0x400}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {0x3, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff9}, {}, {0x7, 0x0, 0x10}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xebf88aa}, {0x0, 0x0, 0x0, 0x2}, {0xffffffff, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x4}, {}, {0xa7, 0x0, 0x0, 0x1f23}, {0x100000}, {}, {0x0, 0x0, 0x40}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {}, {0x0, 0x1000002}, {0x5}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x523e}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m7.131274766s ago: executing program 3 (id=3634): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f00000049c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000000) r1 = socket(0x1f, 0x1, 0xffffff80) close_range(r0, r1, 0x2) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000100)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8478, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6bc, 0x2, @perf_config_ext={0xffffffffffffff01, 0x10000}, 0x0, 0x10000, 0x6, 0x1, 0x9, 0x20008, 0xb, 0x0, 0x0, 0x0, 0x40000020000003}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getdents64(r2, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x0, 0x0) getdents64(r2, 0x0, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff01) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r2, @ANYBLOB="0700faff00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000030000000300"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x29, 0xf, 0x7, 0x5, 0x8, @private1, @loopback, 0x7800, 0x700, 0xddf, 0x36ad4bb9}}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r10, r10, 0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xf, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeba, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x3, 0xf0, &(0x7f0000000800)=""/240, 0x41100, 0x11, '\x00', r9, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x1, 0xe, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r7, r2, r10], 0x0, 0x10, 0x3ff}, 0x94) sendmmsg$inet(r7, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)=';', 0x1}], 0x1}}], 0x1, 0x400a880) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='qgroup_meta_convert\x00', r5}, 0x18) acct(0x0) 1m6.87885517s ago: executing program 3 (id=3637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$getflags(r2, 0xb) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000000000000000000000000001fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018"], 0xe0}}, 0x0) 1m6.507229496s ago: executing program 3 (id=3642): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfb, 0x100007, @remote, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) dup3(r3, r2, 0x0) 1m6.506957306s ago: executing program 32 (id=3642): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfb, 0x100007, @remote, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) dup3(r3, r2, 0x0) 3.330183803s ago: executing program 5 (id=5010): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flistxattr(r5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (fail_nth: 3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x700, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.85174871s ago: executing program 0 (id=5019): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0x40000, 0x198, 0x0, 0x198, 0x380, 0x358, 0x358, 0x380, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0002191400000000000404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x478) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffd, &(0x7f0000000880)=""/4093, 0x41000}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.597935505s ago: executing program 0 (id=5027): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0xd, 0x7ffc1ffb}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x9}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x100}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0xfd}, {}, {}, {}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x3}, {0x200}, {0x0, 0xa}, {}, {}, {}, {}, {}, {0x0, 0x8a}, {}, {}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.520580983s ago: executing program 0 (id=5028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000dbafc280100000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}, {&(0x7f0000000100)="0acbe8ef2f2c5f0d", 0x8}], 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r6], 0x30}}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe27dac6e179231d4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r9, r10+10000000}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100050009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x8, &(0x7f0000000040)=[{0x578e, 0x3, 0x8, 0x6000}, {0x5, 0x4, 0x1, 0x8}, {0x7, 0x6, 0xe, 0xfff}, {0xff5, 0x3a, 0x1, 0x80}, {0x3, 0x86, 0x2}, {0xa10, 0x9b, 0xff, 0x7}, {0x2000, 0x9, 0x8, 0x5}, {0x7fff, 0x4, 0xe1, 0x8}]}) syslog(0x9, 0x0, 0x0) 2.346446609s ago: executing program 5 (id=5031): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 2.202174334s ago: executing program 5 (id=5034): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r4, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000080)=""/87, 0x57, 0x1000002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x1a18e4b, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f00000013c0)="$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") 2.165875387s ago: executing program 0 (id=5036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 2.124945191s ago: executing program 0 (id=5039): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2040008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x6a}}]}, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000004", @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000800038004000400180001801400020076657468305f746f5f626f6e64000000"], 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2475823d5e2407", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="93002a00057605e8088ff2b4bb615fe67c3f7c2bb533d987f2e3835ff6aba12fd890e5aaf7a109906e600ac8555997045a61027124c5c9963745a1e28ef3467958bf5fa9e232ff35b07a9f531374f15bb05c6399957e82b2fa23897bec78afc72633722e811454c007facbea7af764b3c7599c1f042d9418e400b86c651286c7f2aed0bcffffffffffff0802110000012a010300"], 0xb0}, 0x1, 0x0, 0x0, 0x5}, 0x24008004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r6, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 2.053746179s ago: executing program 4 (id=5042): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000180)={[{@nojournal_checksum}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@noblock_validity}]}, 0x1, 0x44a, &(0x7f0000000880)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") pipe2$9p(&(0x7f00000000c0), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1c", 0x18}, {&(0x7f0000000640)="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", 0x29b}, {&(0x7f0000000300)="2e0fd87d8d84b93c7803a87df5acd511ee50b0a0d0d9e3fc8345949042d5449c61a2b530aeea469c70772df880777d6e1744", 0x32}, {&(0x7f0000000a40)="0be623851e", 0x5}], 0x4}}], 0x1, 0x40408e0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.952900398s ago: executing program 4 (id=5043): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x4}, 0x18) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) finit_module(r5, 0x0, 0x3) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc, 0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECUREBITS(0x1c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.854351528s ago: executing program 4 (id=5044): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x31, &(0x7f00000004c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@arp={0x806, @generic={0x100, 0x6004, 0x6, 0x4, 0x8, @empty, "a3493fe4", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, "4a4ec42de06db4a52e91f4"}}}}, 0x0) 1.351570947s ago: executing program 5 (id=5045): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 1.332658339s ago: executing program 5 (id=5046): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[], 0xfa, 0x2c0, &(0x7f0000000100)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000070000000800000009000000", @ANYRES32=0x0, @ANYBLOB="0100000003000000040000000b00001a15000100f102dcf29effae15cd"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000004) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="000000182db862ad000000000000000700000085100000fbff03e00ec6cf58e2b235fb55fcffff2c09d6f322a6278fb54aa83687186400000300000000000000020000009500"/88], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114, 0x0, 0x4b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x101}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xed2fb89c1d7f5aad}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x4, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x9}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000080), 0x0, 0x826, 0x5) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.246937557s ago: executing program 1 (id=5047): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x943, 0x80) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000021c0)=""/4096) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0x9) rt_sigsuspend(&(0x7f0000000280)={[0x7d9]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x9c, 0x97, &(0x7f0000000880)="64a999f113892399791d99af00f76d685b1909dfc7766cc6c5d8d75b2ca12cd5db8bd3cb0c0e9782b86469164e62d4c85ee16ba94437af55df232cf73d976848e54b84cdcc61f80851a1c268aa5a558e285bea3dd2bd178b6726a896936dde18ca2f6906a8311297d354b1a14c9f2357c878ad8ab9a7af60f094ca2ea5facf4bfa91406f3f98f6bd642b2e4dddb4b22392f8a37d38421994b813c404", &(0x7f0000000940)=""/151, 0x5, 0x0, 0x40, 0xcf, &(0x7f00000002c0)="03960f76c856e5c8cf5e51cf4db0352b30735abf4bd9ee3543fb88a70e4e590db87c8e96853de8a5ddbcf18e36d01b8b9ee6967b49d79e31ddbba1933c0ea187", &(0x7f0000000a00)="bc42798dee7f782106e8644b98045c4fb310a91d84b2f218388f010deeb50fbdd950162936c4d3cc3e1b47dfd5f7cb28f54a6696e18816f4c92d26f0c8a3ecf85864a666f1793ea1b9e39591d37003b2371dae0895f000bcac6f7334bd242c6c91e813768dd1410abb35a61dcecf736ff12183e537aab55d106b4353eee051df48b074993266b3d8c2fe73ac762dae2facfd9b9621cac0262406e3316be9aae4b450c147d3963be45c4d32a31898b7d3ae9c345bee5f09535edc86c2cc5241798245e4f69a95296f58ee475b2ab083", 0x1, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) msgsnd(0x0, 0x0, 0x2000, 0x0) 1.239932078s ago: executing program 0 (id=5048): pipe2(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8000f28, 0x8) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xb) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.063426185s ago: executing program 2 (id=5053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r7, 0x4, r1}, 0x10) 1.063077016s ago: executing program 2 (id=5054): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) 1.062673276s ago: executing program 2 (id=5055): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000188700"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sync_file_range(0xffffffffffffffff, 0x10001, 0xf7fffffffffffffd, 0x2) socket$netlink(0x10, 0x3, 0x14) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r4, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x4}}, 0x14) 996.662872ms ago: executing program 4 (id=5056): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0xffffffffffffffa6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0xc) r6 = fsopen(&(0x7f0000000040)='rootfs\x00', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='fsi_slave_init\x00', r5, 0x0, 0x4}, 0x18) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r8, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), 0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000780)=0xc) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)=[{&(0x7f0000002840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0], 0x1264}, {&(0x7f0000003a40)=ANY=[@ANYBLOB="c41200001c00000129bd7000fcdbdf2508008e007f000001ab1252801e17037308fcf950f0612e9c9859ae159be248f3da1b1e6723a77dfb3625eaaed47f96a113000033de116a3c8ad7b3d6a4fe54bff94c1dd869045fb8dc87379489b752f0bd2d1e93b5e7f79e8d51569f4ad97d190ccb1ddb144e4b30602896b65056906c17c272607d3330fb8d5ca7a1f809c7474b93d4938945160800988004002080a000b2800800b500ac14142d0400258fffa00aba594b79fbbbba60db4e5dc4aaaf723109d5db85b3d5807d9bef825eb1d8b816b842f5ea7fa0f757449d05f94b8e9b8030b5ac808e4322f4af287d4a4d138176a75a6f02353e7b869528f305412bc9049e1d23044c25eba7508f4bbb2e1c2fd197c70cbfe89ac3fb807567a4201a311d99bba7fcb27e045396657065a464a61337aefbdbe804b317afb73a2fa518a99d9458b03a459bcdfaa9ac0b845e7e8e1d359018c273e3849aec1c4419685ed62229380dd8be6b9a984bcc42122b915438da0fb89198d60f077cbab8fde6a3385aeb4f7ab5ee3748d745e9080746c5496eeefabca7f2bc9992c7b19c12be9b29537156ff8b9508963c33494075dd61586cc4e3bf36a079011f431b8000032d80d81e3fb480c72435f94861d49bdd18ad69ae8d24e9224a649de988568dfa104a8527c9cde4a82000078008006300", @ANYRES32=r6, @ANYBLOB="0800d400", @ANYRES32=r10, @ANYBLOB="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"], 0x12c4}], 0x2, &(0x7f0000001a40)=ANY=[@ANYBLOB="2c000000000000000100000001000000dfa6328263ac6211a7da9d61903efc91cdd5079971fd8f01a62b58f4a985301eeb0569ccc086fe373c25225ca960d473d8ead9b5afba3e5be3828b1527eda759a13f9c4958b211b1de3dc29b418908a09c65245f1d10049061f866b184f30a01db0d76055a20f7f4c25ba33339d1e054e4936dd77a2deee600fb58750f2cc9ed759f0a0bc7a435bf754bcd8200f37243a3e8a6ca3cde9ec03a7c3fae68b474a14f06fb41cdf513849778b29d46fc", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x20000000}, 0x44) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, r12) getgroups(0x6, &(0x7f0000000540)=[0xee00, 0xee00, 0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040007000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="a65d8000", @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="10000200000000002000000000000000"], 0x74, 0x1) fsmount(r6, 0x1, 0x8d) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40600000000000001800128000000100626f6e645f736c617665000000000580000005000200000008000300", @ANYRES32=0x0, @ANYBLOB="04002b8008000100", @ANYRES32=r7, @ANYBLOB="140014007663616e300000000000000000000000c7103826d4b212195bfb147092f66bf95640dabef54385cdc6260660d29433b025f0b0013d340a6db41f8d471f78c8b2c137b8b64475c72727e3f7aae89fc54c1829f7fc1db99f7645b2b361ca01543ab88733095f8bff7e564808"], 0x60}}, 0x4000000) 986.351413ms ago: executing program 2 (id=5057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 967.535805ms ago: executing program 2 (id=5058): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 847.092037ms ago: executing program 4 (id=5059): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2040008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x6a}}]}, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000004", @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000800038004000400180001801400020076657468305f746f5f626f6e64000000"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r5, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 719.873339ms ago: executing program 2 (id=5060): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 487.862592ms ago: executing program 5 (id=5061): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x34, &(0x7f00000004c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@arp={0x806, @generic={0x100, 0x6004, 0x6, 0x7, 0x8, @empty, "a3493fe438ec20", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, "4a4ec42de06db4a52e91f4"}}}}, 0x0) 353.836765ms ago: executing program 1 (id=5062): creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) 352.934385ms ago: executing program 1 (id=5063): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r1, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 329.864027ms ago: executing program 1 (id=5064): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) 313.511449ms ago: executing program 1 (id=5065): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 297.653481ms ago: executing program 1 (id=5066): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x31, &(0x7f00000004c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@arp={0x806, @generic={0x100, 0x6004, 0x6, 0x4, 0x8, @empty, "a3493fe4", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, "4a4ec42de06db4a52e91f4"}}}}, 0x0) 0s ago: executing program 4 (id=5067): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffff69}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000280)=@sg0, 0x0, &(0x7f0000000340)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): audit(1761470889.473:29890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.0.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 262.554685][ T29] audit: type=1326 audit(1761470889.473:29891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15483 comm="syz.0.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 262.588828][ T29] audit: type=1326 audit(1761470889.513:29892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15494 comm="syz.2.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 262.590151][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.628599][T15501] loop1: detected capacity change from 0 to 512 [ 262.664622][T15501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.682060][T15501] EXT4-fs (loop1): orphan cleanup on readonly fs [ 262.685820][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4179'. [ 262.710999][T15501] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4176: bg 0: block 248: padding at end of block bitmap is not set [ 262.728331][T15501] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4176: Failed to acquire dquot type 1 [ 262.746761][T15508] loop0: detected capacity change from 0 to 8192 [ 262.765682][T15503] netlink: 96 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 262.785604][T15501] EXT4-fs (loop1): 1 truncate cleaned up [ 262.795370][T15501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.821483][T15513] loop5: detected capacity change from 0 to 512 [ 262.834037][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4182'. [ 262.843528][T12755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.853662][T15513] EXT4-fs (loop5): first meta block group too large: 100663296 (group descriptor block count 1) [ 262.867414][T15525] netlink: 'syz.4.4183': attribute type 10 has an invalid length. [ 262.876596][T15525] team0: Port device dummy0 added [ 262.946404][T15513] loop5: detected capacity change from 0 to 512 [ 263.017294][T15529] sd 0:0:1:0: device reset [ 263.022380][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'. [ 263.066790][T15513] EXT4-fs error (device loop5): ext4_quota_enable:7136: inode #3: comm syz.5.4172: unexpected EA_INODE flag [ 263.098634][T15513] EXT4-fs (loop5): Remounting filesystem read-only [ 263.117676][T15513] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 263.143254][T15513] EXT4-fs (loop5): mount failed [ 263.153124][T15527] loop1: detected capacity change from 0 to 512 [ 263.160157][T15527] msdos: Bad value for 'umask' [ 263.175932][T15527] loop1: detected capacity change from 0 to 736 [ 263.183897][T15527] iso9660: Bad value for 'dmode' [ 263.203041][T15552] loop4: detected capacity change from 0 to 512 [ 263.210008][T15552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.217040][T15552] EXT4-fs: Ignoring removed oldalloc option [ 263.243235][T15552] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4192: Parent and EA inode have the same ino 15 [ 263.268441][T15552] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4192: Parent and EA inode have the same ino 15 [ 263.274846][T15555] loop5: detected capacity change from 0 to 8192 [ 263.311754][T15552] EXT4-fs (loop4): 1 orphan inode deleted [ 263.320556][T15552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.371822][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.623483][T15582] loop0: detected capacity change from 0 to 512 [ 263.632487][T15582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.640184][T15582] EXT4-fs: Ignoring removed oldalloc option [ 263.661494][T15582] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.4202: Parent and EA inode have the same ino 15 [ 263.675576][T15582] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.4202: Parent and EA inode have the same ino 15 [ 263.689993][T15582] EXT4-fs (loop0): 1 orphan inode deleted [ 263.704786][T15582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.734529][T12141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.333253][T15620] loop4: detected capacity change from 0 to 512 [ 264.340414][T15620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.353299][T15620] EXT4-fs (loop4): orphan cleanup on readonly fs [ 264.365114][T15620] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4218: bg 0: block 248: padding at end of block bitmap is not set [ 264.385307][T15620] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4218: Failed to acquire dquot type 1 [ 264.397680][T15620] EXT4-fs (loop4): 1 truncate cleaned up [ 264.403916][T15620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.420195][T15620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.860402][T15663] pim6reg: entered allmulticast mode [ 264.959475][T15687] sd 0:0:1:0: device reset [ 265.083857][T15693] loop5: detected capacity change from 0 to 8192 [ 265.128310][T15695] sd 0:0:1:0: device reset [ 265.322976][T15704] loop0: detected capacity change from 0 to 512 [ 265.351796][T15704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.365578][T15704] EXT4-fs (loop0): orphan cleanup on readonly fs [ 265.391474][T15704] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4251: bg 0: block 248: padding at end of block bitmap is not set [ 265.406447][T15704] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4251: Failed to acquire dquot type 1 [ 265.422075][T15704] EXT4-fs (loop0): 1 truncate cleaned up [ 265.506440][T15704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.524129][T15704] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.670777][T15718] loop1: detected capacity change from 0 to 512 [ 265.683867][T15720] loop4: detected capacity change from 0 to 512 [ 265.690285][T15718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.690504][T15720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.716178][T15718] EXT4-fs (loop1): orphan cleanup on readonly fs [ 265.737587][T15718] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4254: bg 0: block 248: padding at end of block bitmap is not set [ 265.742387][T15720] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.761305][T15720] EXT4-fs: Mount option(s) incompatible with ext2 [ 265.772403][T15718] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4254: Failed to acquire dquot type 1 [ 265.806824][T15718] EXT4-fs (loop1): 1 truncate cleaned up [ 265.815687][T15720] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 265.823922][T15720] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 265.834096][T15718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.859689][T15731] lo speed is unknown, defaulting to 1000 [ 265.871819][T15731] lo speed is unknown, defaulting to 1000 [ 265.877799][T15731] lo speed is unknown, defaulting to 1000 [ 265.892891][T15731] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 265.901244][T15731] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 265.913072][T12755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.922481][T15731] lo speed is unknown, defaulting to 1000 [ 265.928599][T15731] lo speed is unknown, defaulting to 1000 [ 265.974110][T15731] lo speed is unknown, defaulting to 1000 [ 265.998207][T15751] loop4: detected capacity change from 0 to 512 [ 266.005307][T15751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.015068][T15751] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4268: bad orphan inode 11 [ 266.025552][T15751] ext4_test_bit(bit=10, block=4) = 1 [ 266.030853][T15751] is_bad_inode(inode)=0 [ 266.035038][T15751] NEXT_ORPHAN(inode)=2080374784 [ 266.040097][T15751] max_ino=32 [ 266.043376][T15751] i_nlink=0 [ 266.046514][T15731] lo speed is unknown, defaulting to 1000 [ 266.051022][T15751] EXT4-fs (loop4): 1 truncate cleaned up [ 266.052638][T15731] lo speed is unknown, defaulting to 1000 [ 266.058670][T15751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.079233][T15747] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 266.196161][T15761] sd 0:0:1:0: device reset [ 266.237816][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.247064][T15772] loop5: detected capacity change from 0 to 8192 [ 266.262190][T15775] __nla_validate_parse: 13 callbacks suppressed [ 266.262273][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4275'. [ 266.473846][T15799] FAULT_INJECTION: forcing a failure. [ 266.473846][T15799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.487000][T15799] CPU: 1 UID: 0 PID: 15799 Comm: syz.5.4284 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 266.487085][T15799] Tainted: [W]=WARN [ 266.487091][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.487102][T15799] Call Trace: [ 266.487108][T15799] [ 266.487116][T15799] __dump_stack+0x1d/0x30 [ 266.487130][T15799] dump_stack_lvl+0xe8/0x140 [ 266.487142][T15799] dump_stack+0x15/0x1b [ 266.487152][T15799] should_fail_ex+0x265/0x280 [ 266.487212][T15799] should_fail+0xb/0x20 [ 266.487221][T15799] should_fail_usercopy+0x1a/0x20 [ 266.487233][T15799] _copy_to_user+0x20/0xa0 [ 266.487248][T15799] simple_read_from_buffer+0xb5/0x130 [ 266.487326][T15799] proc_fail_nth_read+0x10e/0x150 [ 266.487344][T15799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.487361][T15799] vfs_read+0x1a8/0x770 [ 266.487374][T15799] ? __rcu_read_unlock+0x4f/0x70 [ 266.487401][T15799] ? __fget_files+0x184/0x1c0 [ 266.487418][T15799] ksys_read+0xda/0x1a0 [ 266.487490][T15799] __x64_sys_read+0x40/0x50 [ 266.487504][T15799] x64_sys_call+0x27c0/0x3000 [ 266.487525][T15799] do_syscall_64+0xd2/0x200 [ 266.487536][T15799] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 266.487552][T15799] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 266.487624][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.487669][T15799] RIP: 0033:0x7f22cfa5d9dc [ 266.487678][T15799] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.487689][T15799] RSP: 002b:00007f22ce4bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.487736][T15799] RAX: ffffffffffffffda RBX: 00007f22cfcb5fa0 RCX: 00007f22cfa5d9dc [ 266.487743][T15799] RDX: 000000000000000f RSI: 00007f22ce4bf0a0 RDI: 0000000000000003 [ 266.487750][T15799] RBP: 00007f22ce4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 266.487757][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.487764][T15799] R13: 00007f22cfcb6038 R14: 00007f22cfcb5fa0 R15: 00007ffe26a3d408 [ 266.487775][T15799] [ 266.760615][ T36] IPVS: starting estimator thread 0... [ 266.795696][T15813] loop5: detected capacity change from 0 to 512 [ 266.797916][T15815] loop4: detected capacity change from 0 to 256 [ 266.802502][T15813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.815251][T15813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.818514][T15815] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.832658][T15813] EXT4-fs: Mount option(s) incompatible with ext2 [ 266.861059][T15809] IPVS: using max 2928 ests per chain, 146400 per kthread [ 266.863206][T15813] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 266.876466][T15813] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 266.988804][T15832] loop5: detected capacity change from 0 to 8192 [ 267.330986][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 267.331001][ T29] audit: type=1400 audit(1761470894.293:30318): avc: denied { getopt } for pid=15853 comm="syz.1.4306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 267.479926][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4316'. [ 267.488912][T15876] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4316'. [ 267.498022][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4316'. [ 267.507053][T15876] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4316'. [ 267.529751][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4316'. [ 267.620680][ T29] audit: type=1326 audit(1761470894.583:30319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15883 comm="syz.2.4320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29cbceefc9 code=0x0 [ 267.760604][ T29] audit: type=1326 audit(1761470894.723:30320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 267.796732][ T29] audit: type=1326 audit(1761470894.723:30321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 267.820446][ T29] audit: type=1326 audit(1761470894.723:30322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 267.844094][ T29] audit: type=1326 audit(1761470894.723:30323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 267.867768][ T29] audit: type=1326 audit(1761470894.723:30324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 267.891584][ T29] audit: type=1326 audit(1761470894.723:30325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 267.891618][ T29] audit: type=1326 audit(1761470894.723:30326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 267.891643][ T29] audit: type=1326 audit(1761470894.723:30327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15889 comm="syz.1.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 268.019127][T15896] FAULT_INJECTION: forcing a failure. [ 268.019127][T15896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.032331][T15896] CPU: 1 UID: 0 PID: 15896 Comm: syz.0.4325 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 268.032385][T15896] Tainted: [W]=WARN [ 268.032392][T15896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.032405][T15896] Call Trace: [ 268.032412][T15896] [ 268.032419][T15896] __dump_stack+0x1d/0x30 [ 268.032441][T15896] dump_stack_lvl+0xe8/0x140 [ 268.032490][T15896] dump_stack+0x15/0x1b [ 268.032510][T15896] should_fail_ex+0x265/0x280 [ 268.032606][T15896] should_fail+0xb/0x20 [ 268.032621][T15896] should_fail_usercopy+0x1a/0x20 [ 268.032643][T15896] _copy_from_user+0x1c/0xb0 [ 268.032688][T15896] ___sys_sendmsg+0xc1/0x1d0 [ 268.032732][T15896] __x64_sys_sendmsg+0xd4/0x160 [ 268.032790][T15896] x64_sys_call+0x191e/0x3000 [ 268.032812][T15896] do_syscall_64+0xd2/0x200 [ 268.032831][T15896] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 268.032888][T15896] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 268.032919][T15896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.032944][T15896] RIP: 0033:0x7fa56c01efc9 [ 268.032961][T15896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.033012][T15896] RSP: 002b:00007fa56aa87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.033029][T15896] RAX: ffffffffffffffda RBX: 00007fa56c275fa0 RCX: 00007fa56c01efc9 [ 268.033041][T15896] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 268.033055][T15896] RBP: 00007fa56aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 268.033069][T15896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.033080][T15896] R13: 00007fa56c276038 R14: 00007fa56c275fa0 R15: 00007fff218d5ae8 [ 268.033236][T15896] [ 268.221599][T15892] sd 0:0:1:0: device reset [ 268.228592][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4323'. [ 268.297417][T15911] loop4: detected capacity change from 0 to 512 [ 268.304440][T15911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.311701][T15911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.321290][T15911] EXT4-fs: Mount option(s) incompatible with ext2 [ 268.335109][T15917] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 268.346172][T15911] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 268.354390][T15911] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 268.434882][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4338'. [ 268.448089][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4337'. [ 268.565231][T15943] loop4: detected capacity change from 0 to 512 [ 268.573495][T15943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.586577][T15943] EXT4-fs (loop4): orphan cleanup on readonly fs [ 268.596845][T15943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4344: bg 0: block 248: padding at end of block bitmap is not set [ 268.620761][T15943] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4344: Failed to acquire dquot type 1 [ 268.639526][T15943] EXT4-fs (loop4): 1 truncate cleaned up [ 268.653690][T15943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.674404][T15948] loop1: detected capacity change from 0 to 8192 [ 268.699352][T15943] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.782336][T15950] loop1: detected capacity change from 0 to 512 [ 268.791928][T15950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.800662][T15950] EXT4-fs: Ignoring removed oldalloc option [ 268.827997][T15950] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4347: Parent and EA inode have the same ino 15 [ 268.862655][T15950] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4347: Parent and EA inode have the same ino 15 [ 268.882952][T15950] EXT4-fs (loop1): 1 orphan inode deleted [ 268.891978][T15954] loop4: detected capacity change from 0 to 512 [ 268.902393][T15950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.916162][T15954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.923763][T15954] EXT4-fs: Ignoring removed oldalloc option [ 268.954335][T15954] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4349: Parent and EA inode have the same ino 15 [ 268.969476][T12755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.969528][T15954] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4349: Parent and EA inode have the same ino 15 [ 269.000779][T15954] EXT4-fs (loop4): 1 orphan inode deleted [ 269.009956][T15954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.053481][T15959] loop1: detected capacity change from 0 to 512 [ 269.077555][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.087994][T15959] EXT4-fs: Ignoring removed nobh option [ 269.116815][T15959] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.4351: corrupted inode contents [ 269.129131][T15959] EXT4-fs (loop1): Remounting filesystem read-only [ 269.139159][T15959] EXT4-fs (loop1): 1 truncate cleaned up [ 269.145320][T15959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.159024][T15959] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.172850][T15959] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.225155][T15962] sd 0:0:1:0: device reset [ 269.229903][T15962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4352'. [ 269.286934][T15978] loop5: detected capacity change from 0 to 512 [ 269.295742][T15978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.301813][T15982] loop0: detected capacity change from 0 to 8192 [ 269.306438][T15978] EXT4-fs: Ignoring removed oldalloc option [ 269.356508][T15978] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4357: Parent and EA inode have the same ino 15 [ 269.372135][T15986] loop1: detected capacity change from 0 to 8192 [ 269.400471][T15978] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4357: Parent and EA inode have the same ino 15 [ 269.423865][T15978] EXT4-fs (loop5): 1 orphan inode deleted [ 269.447222][T15978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.560129][T15988] loop4: detected capacity change from 0 to 512 [ 269.568382][T15995] loop0: detected capacity change from 0 to 512 [ 269.577216][T15995] EXT4-fs (loop0): first meta block group too large: 100663296 (group descriptor block count 1) [ 269.588233][T15988] EXT4-fs: Mount option(s) incompatible with ext3 [ 269.599122][T15995] loop0: detected capacity change from 0 to 512 [ 269.647435][T16011] lo speed is unknown, defaulting to 1000 [ 269.671418][T15995] EXT4-fs error (device loop0): ext4_quota_enable:7136: inode #3: comm syz.0.4365: unexpected EA_INODE flag [ 269.696686][T15995] EXT4-fs (loop0): Remounting filesystem read-only [ 269.706869][T15995] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 269.731326][T15995] EXT4-fs (loop0): mount failed [ 269.775102][T16014] netlink: 'syz.2.4369': attribute type 4 has an invalid length. [ 269.918642][T16018] sd 0:0:1:0: device reset [ 270.008139][T16030] loop4: detected capacity change from 0 to 1024 [ 270.026913][T16030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.049955][T16030] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 270.059835][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.098753][T16039] loop5: detected capacity change from 0 to 512 [ 270.106290][T16030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.120133][T16039] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.140029][T16039] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.4379: bad orphan inode 11 [ 270.170408][T16039] ext4_test_bit(bit=10, block=4) = 1 [ 270.175766][T16039] is_bad_inode(inode)=0 [ 270.179940][T16039] NEXT_ORPHAN(inode)=2080374784 [ 270.184868][T16039] max_ino=32 [ 270.188059][T16039] i_nlink=0 [ 270.197953][T16039] EXT4-fs (loop5): 1 truncate cleaned up [ 270.210414][T16045] loop4: detected capacity change from 0 to 8192 [ 270.216931][T16039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.394714][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.440763][T16052] FAULT_INJECTION: forcing a failure. [ 270.440763][T16052] name failslab, interval 1, probability 0, space 0, times 0 [ 270.453407][T16052] CPU: 1 UID: 0 PID: 16052 Comm: syz.5.4383 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.453438][T16052] Tainted: [W]=WARN [ 270.453446][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.453459][T16052] Call Trace: [ 270.453466][T16052] [ 270.453475][T16052] __dump_stack+0x1d/0x30 [ 270.453561][T16052] dump_stack_lvl+0xe8/0x140 [ 270.453580][T16052] dump_stack+0x15/0x1b [ 270.453598][T16052] should_fail_ex+0x265/0x280 [ 270.453617][T16052] should_failslab+0x8c/0xb0 [ 270.453648][T16052] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 270.453679][T16052] ? __alloc_skb+0x101/0x320 [ 270.453707][T16052] __alloc_skb+0x101/0x320 [ 270.453775][T16052] ? audit_log_start+0x342/0x720 [ 270.453831][T16052] audit_log_start+0x3a0/0x720 [ 270.453849][T16052] ? do_user_addr_fault+0xcda/0x1080 [ 270.453926][T16052] audit_seccomp+0x48/0x100 [ 270.453957][T16052] ? __seccomp_filter+0x82d/0x1250 [ 270.453983][T16052] __seccomp_filter+0x83e/0x1250 [ 270.454101][T16052] __secure_computing+0x82/0x150 [ 270.454126][T16052] syscall_trace_enter+0xcf/0x1e0 [ 270.454152][T16052] do_syscall_64+0xac/0x200 [ 270.454172][T16052] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.454232][T16052] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 270.454260][T16052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.454281][T16052] RIP: 0033:0x7f22cfa5d9dc [ 270.454297][T16052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 270.454372][T16052] RSP: 002b:00007f22ce4bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.454406][T16052] RAX: ffffffffffffffda RBX: 00007f22cfcb5fa0 RCX: 00007f22cfa5d9dc [ 270.454419][T16052] RDX: 000000000000000f RSI: 00007f22ce4bf0a0 RDI: 0000000000000005 [ 270.454430][T16052] RBP: 00007f22ce4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 270.454441][T16052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.454452][T16052] R13: 00007f22cfcb6038 R14: 00007f22cfcb5fa0 R15: 00007ffe26a3d408 [ 270.454524][T16052] [ 270.801216][T16068] loop1: detected capacity change from 0 to 512 [ 270.821698][T16068] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.832724][T16068] EXT4-fs (loop1): orphan cleanup on readonly fs [ 270.847654][T16068] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4389: bg 0: block 248: padding at end of block bitmap is not set [ 270.863364][T16068] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4389: Failed to acquire dquot type 1 [ 270.886961][T16068] EXT4-fs (loop1): 1 truncate cleaned up [ 270.910948][T16068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.934657][T16068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.949473][T16082] loop5: detected capacity change from 0 to 512 [ 270.964216][T16082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.990285][T16087] xt_CT: No such helper "pptp" [ 270.995951][T16082] EXT4-fs: Ignoring removed oldalloc option [ 271.003352][T16087] netlink: 'syz.0.4399': attribute type 30 has an invalid length. [ 271.049572][T16087] bond1: option arp_missed_max: invalid value (0) [ 271.056171][T16087] bond1: option arp_missed_max: allowed values 1 - 255 [ 271.069839][T16087] bond1 (unregistering): Released all slaves [ 271.101170][T16082] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4396: Parent and EA inode have the same ino 15 [ 271.126977][T16082] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4396: Parent and EA inode have the same ino 15 [ 271.141589][T16082] EXT4-fs (loop5): 1 orphan inode deleted [ 271.149779][T16082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.175100][T16116] SELinux: policydb version 0 does not match my version range 15-35 [ 271.183773][T16116] SELinux: failed to load policy [ 271.189507][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.236389][T16123] loop5: detected capacity change from 0 to 512 [ 271.254785][T16123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.274703][T16123] EXT4-fs (loop5): orphan cleanup on readonly fs [ 271.284645][T16123] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4411: bg 0: block 248: padding at end of block bitmap is not set [ 271.313779][T16133] loop0: detected capacity change from 0 to 512 [ 271.325339][T16123] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4411: Failed to acquire dquot type 1 [ 271.339118][T16133] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.358213][T16123] EXT4-fs (loop5): 1 truncate cleaned up [ 271.365901][T16123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.386508][T16133] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.4416: bad orphan inode 11 [ 271.401083][T16133] ext4_test_bit(bit=10, block=4) = 1 [ 271.406471][T16133] is_bad_inode(inode)=0 [ 271.410625][T16133] NEXT_ORPHAN(inode)=2080374784 [ 271.415514][T16133] max_ino=32 [ 271.418737][T16133] i_nlink=0 [ 271.445133][T16133] EXT4-fs (loop0): 1 truncate cleaned up [ 271.465499][T16138] __nla_validate_parse: 8 callbacks suppressed [ 271.465512][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4417'. [ 271.630759][T16147] loop5: detected capacity change from 0 to 512 [ 271.640657][T16147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.648441][T16147] EXT4-fs: Ignoring removed oldalloc option [ 271.664215][T16147] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4421: Parent and EA inode have the same ino 15 [ 271.678833][T16147] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4421: Parent and EA inode have the same ino 15 [ 271.699086][T16147] EXT4-fs (loop5): 1 orphan inode deleted [ 271.750394][T16150] sd 0:0:1:0: device reset [ 271.756097][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4422'. [ 271.812905][T16160] loop5: detected capacity change from 0 to 512 [ 271.819666][T16160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.826639][T16160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.834064][T16160] EXT4-fs: Mount option(s) incompatible with ext2 [ 271.856268][T16160] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 271.864574][T16160] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 271.925347][T16162] loop5: detected capacity change from 0 to 8192 [ 272.225634][T16168] loop1: detected capacity change from 0 to 8192 [ 272.267414][T16173] loop4: detected capacity change from 0 to 512 [ 272.275134][T16173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.291707][T16173] EXT4-fs (loop4): orphan cleanup on readonly fs [ 272.306362][T16173] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4428: bg 0: block 248: padding at end of block bitmap is not set [ 272.332361][T16173] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4428: Failed to acquire dquot type 1 [ 272.356859][T16173] EXT4-fs (loop4): 1 truncate cleaned up [ 272.503065][T16184] sd 0:0:1:0: device reset [ 272.508087][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4434'. [ 272.590313][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4439'. [ 272.674783][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 272.674797][ T29] audit: type=1326 audit(1761470899.643:30600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 272.723983][ T29] audit: type=1326 audit(1761470899.673:30601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 272.747666][ T29] audit: type=1326 audit(1761470899.673:30602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 272.771314][ T29] audit: type=1326 audit(1761470899.673:30603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 272.794972][ T29] audit: type=1326 audit(1761470899.673:30604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 272.803377][T16207] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 272.818721][ T29] audit: type=1326 audit(1761470899.673:30605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 272.818750][ T29] audit: type=1326 audit(1761470899.673:30606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 272.873478][ T29] audit: type=1326 audit(1761470899.673:30607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 272.897054][ T29] audit: type=1326 audit(1761470899.673:30608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 272.920820][ T29] audit: type=1326 audit(1761470899.673:30609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16200 comm="syz.0.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 273.065700][T16220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4450'. [ 273.076395][T16220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16220 comm=syz.2.4450 [ 273.091627][T16214] loop1: detected capacity change from 0 to 512 [ 273.100300][T16214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.108176][T16214] EXT4-fs: Ignoring removed oldalloc option [ 273.119880][T16218] sd 0:0:1:0: device reset [ 273.124933][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'. [ 273.128221][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4452'. [ 273.160814][T16214] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4446: Parent and EA inode have the same ino 15 [ 273.181575][T16214] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4446: Parent and EA inode have the same ino 15 [ 273.212476][T16214] EXT4-fs (loop1): 1 orphan inode deleted [ 273.230692][T16235] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4451'. [ 273.262671][T16234] loop4: detected capacity change from 0 to 512 [ 273.272113][T16234] EXT4-fs (loop4): first meta block group too large: 100663296 (group descriptor block count 1) [ 273.288929][T16234] loop4: detected capacity change from 0 to 512 [ 273.313801][T16234] EXT4-fs error (device loop4): ext4_quota_enable:7136: inode #3: comm syz.4.4453: unexpected EA_INODE flag [ 273.337620][T16234] EXT4-fs (loop4): Remounting filesystem read-only [ 273.346990][T16234] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 273.365749][T16246] loop5: detected capacity change from 0 to 512 [ 273.384919][T16246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.388799][T16234] EXT4-fs (loop4): mount failed [ 273.413380][T16239] netlink: 96 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 273.422485][T16246] EXT4-fs (loop5): orphan cleanup on readonly fs [ 273.425465][T16239] loop1: detected capacity change from 0 to 512 [ 273.438019][T16246] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4457: bg 0: block 248: padding at end of block bitmap is not set [ 273.452839][T16246] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4457: Failed to acquire dquot type 1 [ 273.469460][T16239] EXT4-fs: Mount option(s) incompatible with ext3 [ 273.494417][T16246] EXT4-fs (loop5): 1 truncate cleaned up [ 273.662974][T16266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4464'. [ 273.697911][T16264] sd 0:0:1:0: device reset [ 273.748109][T16296] loop1: detected capacity change from 0 to 512 [ 273.761079][T16296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.775374][T16296] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.4475: bad orphan inode 11 [ 273.804371][T16296] ext4_test_bit(bit=10, block=4) = 1 [ 273.810050][T16296] is_bad_inode(inode)=0 [ 273.814382][T16296] NEXT_ORPHAN(inode)=2080374784 [ 273.819403][T16296] max_ino=32 [ 273.822795][T16296] i_nlink=0 [ 273.826048][T16296] EXT4-fs (loop1): 1 truncate cleaned up [ 273.883653][T16310] loop4: detected capacity change from 0 to 512 [ 273.897847][T16310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.909763][T16310] EXT4-fs: Ignoring removed oldalloc option [ 273.938491][T16310] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4480: Parent and EA inode have the same ino 15 [ 273.953832][T16310] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4480: Parent and EA inode have the same ino 15 [ 273.968109][T16310] EXT4-fs (loop4): 1 orphan inode deleted [ 273.998932][T16318] sd 0:0:1:0: device reset [ 274.103750][T16335] loop0: detected capacity change from 0 to 512 [ 274.113271][T16335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.131409][T16335] EXT4-fs: Ignoring removed oldalloc option [ 274.150005][T16335] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.4489: Parent and EA inode have the same ino 15 [ 274.164851][T16335] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.4489: Parent and EA inode have the same ino 15 [ 274.167462][T16344] dummy0: entered promiscuous mode [ 274.183277][T16344] dummy0: left promiscuous mode [ 274.184239][T16335] EXT4-fs (loop0): 1 orphan inode deleted [ 274.421563][T16358] loop4: detected capacity change from 0 to 512 [ 274.430051][T16358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.438144][T16358] EXT4-fs: Ignoring removed oldalloc option [ 274.454407][T16358] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4496: Parent and EA inode have the same ino 15 [ 274.469484][T16358] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4496: Parent and EA inode have the same ino 15 [ 274.486433][T16358] EXT4-fs (loop4): 1 orphan inode deleted [ 274.627176][T16363] sd 0:0:1:0: device reset [ 274.808421][T16377] sd 0:0:1:0: device reset [ 275.131523][T16421] loop5: detected capacity change from 0 to 512 [ 275.139616][T16421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.147765][T16421] EXT4-fs: Ignoring removed oldalloc option [ 275.178156][T16421] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4520: Parent and EA inode have the same ino 15 [ 275.193107][T16421] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4520: Parent and EA inode have the same ino 15 [ 275.215807][T16421] EXT4-fs (loop5): 1 orphan inode deleted [ 275.240001][T16436] loop1: detected capacity change from 0 to 512 [ 275.246766][T16436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.253600][T16436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.260684][T16436] EXT4-fs: Mount option(s) incompatible with ext2 [ 275.420462][T16451] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 275.616692][T16453] loop4: detected capacity change from 0 to 512 [ 275.623682][T16453] /dev/loop4: Can't open blockdev [ 276.310033][T16489] lo speed is unknown, defaulting to 1000 [ 276.389047][T16500] loop1: detected capacity change from 0 to 512 [ 276.417012][T16500] EXT4-fs (loop1): first meta block group too large: 100663296 (group descriptor block count 1) [ 276.462855][T16500] loop1: detected capacity change from 0 to 512 [ 276.491833][T16500] EXT4-fs error (device loop1): ext4_quota_enable:7136: inode #3: comm syz.1.4549: unexpected EA_INODE flag [ 276.504492][T16503] __nla_validate_parse: 18 callbacks suppressed [ 276.504578][T16503] netlink: 96 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 276.520055][T16500] EXT4-fs (loop1): Remounting filesystem read-only [ 276.633143][T16500] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 276.674406][T16500] EXT4-fs (loop1): mount failed [ 276.725502][T16503] loop0: detected capacity change from 0 to 512 [ 276.762257][T16503] EXT4-fs: Mount option(s) incompatible with ext3 [ 276.875857][T16518] loop4: detected capacity change from 0 to 512 [ 276.891781][T16518] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 276.902597][T16518] EXT4-fs warning (device loop4): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop14 [ 276.977106][T16526] loop1: detected capacity change from 0 to 512 [ 276.985132][T16522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4558'. [ 277.003268][T16526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.019198][T16526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.029482][T16526] EXT4-fs: Mount option(s) incompatible with ext2 [ 277.065064][T16529] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 277.096285][T16533] loop1: detected capacity change from 0 to 512 [ 277.103643][T16533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.123117][T16533] EXT4-fs (loop1): orphan cleanup on readonly fs [ 277.144400][T16533] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4562: bg 0: block 248: padding at end of block bitmap is not set [ 277.159587][T16533] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4562: Failed to acquire dquot type 1 [ 277.191414][T16533] EXT4-fs (loop1): 1 truncate cleaned up [ 277.225255][T16536] sd 0:0:1:0: device reset [ 277.230286][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4554'. [ 277.316459][T16552] xt_hashlimit: max too large, truncated to 1048576 [ 277.361425][T16555] loop5: detected capacity change from 0 to 512 [ 277.386472][T16555] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.419540][T16555] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.435485][T16555] EXT4-fs: Mount option(s) incompatible with ext2 [ 277.466670][T16555] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 277.474964][T16555] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 277.559783][T16566] loop1: detected capacity change from 0 to 512 [ 277.582210][T16566] EXT4-fs (loop1): 1 orphan inode deleted [ 277.600311][T16571] loop5: detected capacity change from 0 to 512 [ 277.628820][T16571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.648731][T16573] loop1: detected capacity change from 0 to 512 [ 277.655369][T16573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.662199][T16573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.665046][T16571] EXT4-fs (loop5): orphan cleanup on readonly fs [ 277.681086][T16573] EXT4-fs: Mount option(s) incompatible with ext2 [ 277.691422][T16571] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4576: bg 0: block 248: padding at end of block bitmap is not set [ 277.714544][T16571] __quota_error: 884 callbacks suppressed [ 277.714560][T16571] Quota error (device loop5): write_blk: dquota write failed [ 277.727736][T16571] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 277.737716][T16571] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4576: Failed to acquire dquot type 1 [ 277.757985][T16571] EXT4-fs (loop5): 1 truncate cleaned up [ 277.938215][T16592] loop5: detected capacity change from 0 to 1024 [ 277.962079][T16592] journal_path: Non-blockdev passed as './file0' [ 277.968463][T16592] EXT4-fs: error: could not find journal device path [ 278.154779][ T29] audit: type=1326 audit(1761470905.123:31490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cfa5efc9 code=0x7ffc0000 [ 278.196162][ T29] audit: type=1326 audit(1761470905.123:31491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cfa5efc9 code=0x7ffc0000 [ 278.219807][ T29] audit: type=1326 audit(1761470905.153:31492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f22cfa5efc9 code=0x7ffc0000 [ 278.222478][T16581] lo speed is unknown, defaulting to 1000 [ 278.243424][ T29] audit: type=1326 audit(1761470905.153:31493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cfa5efc9 code=0x7ffc0000 [ 278.243459][ T29] audit: type=1326 audit(1761470905.153:31494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cfa5efc9 code=0x7ffc0000 [ 278.296322][ T29] audit: type=1326 audit(1761470905.153:31495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f22cfa5efc9 code=0x7ffc0000 [ 278.320297][ T29] audit: type=1326 audit(1761470905.153:31496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cfa5efc9 code=0x7ffc0000 [ 278.344039][ T29] audit: type=1326 audit(1761470905.153:31497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16598 comm="syz.5.4587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cfa5efc9 code=0x7ffc0000 [ 278.367885][T16599] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 278.374502][T16599] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 278.382759][T16599] vhci_hcd vhci_hcd.0: Device attached [ 278.414945][T16601] vhci_hcd vhci_hcd.0: port 0 already used [ 278.441651][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4588'. [ 278.458248][T16619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4590'. [ 278.483323][T16617] netlink: 8 bytes leftover after parsing attributes in process `kfree'. [ 278.492019][T16617] netlink: 12 bytes leftover after parsing attributes in process `kfree'. [ 278.505186][T16600] vhci_hcd: connection closed [ 278.505316][ T41] vhci_hcd: stop threads [ 278.514471][ T41] vhci_hcd: release socket [ 278.518960][ T41] vhci_hcd: disconnect device [ 278.544917][ T60] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.560984][ T60] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.572807][ T60] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.581296][ T60] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.602526][T16634] netlink: 'syz.1.4596': attribute type 1 has an invalid length. [ 278.618516][T16634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.628406][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4596'. [ 278.638549][T16634] bond1 (unregistering): Released all slaves [ 278.664334][T16630] sd 0:0:1:0: device reset [ 278.669248][T16630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4595'. [ 278.683279][T16634] 9pnet: Unknown protocol version 9p [ 278.697029][T16644] loop4: detected capacity change from 0 to 256 [ 278.704421][T16644] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.084514][T16653] sd 0:0:1:0: device reset [ 279.089612][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4602'. [ 279.142295][T16658] loop5: detected capacity change from 0 to 512 [ 279.151996][T16658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.159508][T16658] EXT4-fs: Ignoring removed oldalloc option [ 279.174105][T16658] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4603: Parent and EA inode have the same ino 15 [ 279.188957][T16658] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4603: Parent and EA inode have the same ino 15 [ 279.202470][T16658] EXT4-fs (loop5): 1 orphan inode deleted [ 279.330238][T16666] loop5: detected capacity change from 0 to 512 [ 279.337476][T16666] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 279.347403][T16666] EXT4-fs (loop5): inodes count not valid: 10813472 vs 32 [ 279.657669][T16689] loop1: detected capacity change from 0 to 512 [ 279.667628][T16689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.675891][T16689] EXT4-fs: Ignoring removed oldalloc option [ 279.694298][T16689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4614: Parent and EA inode have the same ino 15 [ 279.716200][T16689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4614: Parent and EA inode have the same ino 15 [ 279.735034][T16689] EXT4-fs (loop1): 1 orphan inode deleted [ 279.742424][T16693] loop5: detected capacity change from 0 to 512 [ 279.743995][T16693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.744393][T16693] EXT4-fs: Ignoring removed oldalloc option [ 279.757619][T16693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4615: Parent and EA inode have the same ino 15 [ 279.767347][T16689] 9pnet_fd: Insufficient options for proto=fd [ 279.782677][T16693] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4615: Parent and EA inode have the same ino 15 [ 279.800445][T16693] EXT4-fs (loop5): 1 orphan inode deleted [ 279.823330][T16696] loop1: detected capacity change from 0 to 1024 [ 279.830768][T16696] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 279.841767][T16696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 279.850642][T16696] EXT4-fs (loop1): failed to initialize system zone (-117) [ 279.858133][T16696] EXT4-fs (loop1): mount failed [ 279.869447][T16696] loop1: detected capacity change from 0 to 512 [ 279.886339][T16696] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.901677][T16696] geneve0 speed is unknown, defaulting to 1000 [ 279.908215][T16696] geneve0 speed is unknown, defaulting to 1000 [ 279.914652][T16696] geneve0 speed is unknown, defaulting to 1000 [ 279.921521][T16696] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 279.931440][T16696] geneve0 speed is unknown, defaulting to 1000 [ 279.938206][T16696] geneve0 speed is unknown, defaulting to 1000 [ 279.944899][T16696] geneve0 speed is unknown, defaulting to 1000 [ 279.951656][T16696] geneve0 speed is unknown, defaulting to 1000 [ 279.958342][T16696] geneve0 speed is unknown, defaulting to 1000 [ 280.102938][T16708] sd 0:0:1:0: device reset [ 280.138312][T16713] loop1: detected capacity change from 0 to 512 [ 280.145594][T16713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.155197][T16713] EXT4-fs (loop1): orphan cleanup on readonly fs [ 280.162621][T16713] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4621: bg 0: block 248: padding at end of block bitmap is not set [ 280.177787][T16713] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4621: Failed to acquire dquot type 1 [ 280.190399][T16713] EXT4-fs (loop1): 1 truncate cleaned up [ 280.393143][T16722] sd 0:0:1:0: device reset [ 280.539452][T16743] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 280.551736][T16743] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 280.556324][T16745] loop4: detected capacity change from 0 to 512 [ 280.567486][T16745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.575040][T16745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.582465][T16745] EXT4-fs: Mount option(s) incompatible with ext2 [ 280.597761][T16745] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 280.606098][T16745] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 280.666082][T16754] sd 0:0:1:0: device reset [ 280.693095][T16758] loop5: detected capacity change from 0 to 1024 [ 280.713384][T16758] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.4639: Allocating blocks 385-513 which overlap fs metadata [ 280.727909][T16758] EXT4-fs (loop5): pa ffff888106decbd0: logic 16, phys. 129, len 24 [ 280.736047][T16758] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 280.896439][T16766] loop5: detected capacity change from 0 to 8192 [ 281.232964][T16781] loop1: detected capacity change from 0 to 512 [ 281.251422][T16781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.260486][T16781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.270046][T16781] EXT4-fs: Mount option(s) incompatible with ext2 [ 281.459724][T16791] __nla_validate_parse: 13 callbacks suppressed [ 281.459769][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4651'. [ 281.607173][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4657'. [ 281.648253][T16809] sd 0:0:1:0: device reset [ 281.659942][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4658'. [ 281.754235][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4663'. [ 281.808398][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4663'. [ 281.838012][T16833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4668'. [ 281.850799][T16830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4667'. [ 281.891942][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4668'. [ 282.083138][T16846] FAULT_INJECTION: forcing a failure. [ 282.083138][T16846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.096371][T16846] CPU: 0 UID: 0 PID: 16846 Comm: syz.1.4673 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.096468][T16846] Tainted: [W]=WARN [ 282.096476][T16846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.096490][T16846] Call Trace: [ 282.096497][T16846] [ 282.096505][T16846] __dump_stack+0x1d/0x30 [ 282.096532][T16846] dump_stack_lvl+0xe8/0x140 [ 282.096555][T16846] dump_stack+0x15/0x1b [ 282.096609][T16846] should_fail_ex+0x265/0x280 [ 282.096629][T16846] should_fail+0xb/0x20 [ 282.096645][T16846] should_fail_usercopy+0x1a/0x20 [ 282.096667][T16846] _copy_from_user+0x1c/0xb0 [ 282.096752][T16846] ___sys_sendmsg+0xc1/0x1d0 [ 282.096796][T16846] __x64_sys_sendmsg+0xd4/0x160 [ 282.096835][T16846] x64_sys_call+0x191e/0x3000 [ 282.096928][T16846] do_syscall_64+0xd2/0x200 [ 282.096948][T16846] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.096979][T16846] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 282.097088][T16846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.097112][T16846] RIP: 0033:0x7f2f9981efc9 [ 282.097128][T16846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.097149][T16846] RSP: 002b:00007f2f98287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.097169][T16846] RAX: ffffffffffffffda RBX: 00007f2f99a75fa0 RCX: 00007f2f9981efc9 [ 282.097206][T16846] RDX: 0000000000000044 RSI: 00002000000007c0 RDI: 0000000000000003 [ 282.097221][T16846] RBP: 00007f2f98287090 R08: 0000000000000000 R09: 0000000000000000 [ 282.097234][T16846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.097246][T16846] R13: 00007f2f99a76038 R14: 00007f2f99a75fa0 R15: 00007ffe08514478 [ 282.097293][T16846] [ 282.401972][T16854] loop0: detected capacity change from 0 to 512 [ 282.424035][T16854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.436666][T16854] EXT4-fs (loop0): orphan cleanup on readonly fs [ 282.453390][T16854] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4676: bg 0: block 248: padding at end of block bitmap is not set [ 282.472172][T16854] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4676: Failed to acquire dquot type 1 [ 282.488580][T16854] EXT4-fs (loop0): 1 truncate cleaned up [ 282.505949][T16854] EXT4-fs mount: 39 callbacks suppressed [ 282.505967][T16854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.582348][T16854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.650318][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4681'. [ 282.787216][ T29] kauditd_printk_skb: 1476 callbacks suppressed [ 282.787232][ T29] audit: type=1400 audit(1761470909.864:32970): avc: denied { mount } for pid=16871 comm="syz.1.4685" name="/" dev="autofs" ino=49674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 282.908487][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4683'. [ 282.967167][ T29] audit: type=1326 audit(1761470910.048:32971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 282.991324][ T29] audit: type=1326 audit(1761470910.048:32972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 283.019994][ T29] audit: type=1326 audit(1761470910.110:32973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 283.043711][ T29] audit: type=1326 audit(1761470910.110:32974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 283.067405][ T29] audit: type=1326 audit(1761470910.110:32975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 283.091129][ T29] audit: type=1326 audit(1761470910.110:32976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 283.114712][ T29] audit: type=1326 audit(1761470910.110:32977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 283.138324][ T29] audit: type=1326 audit(1761470910.110:32978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 283.162584][ T29] audit: type=1326 audit(1761470910.110:32979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16880 comm="syz.2.4687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cbceefc9 code=0x7ffc0000 [ 283.254007][T16839] loop5: detected capacity change from 0 to 512 [ 283.279037][T16890] loop4: detected capacity change from 0 to 256 [ 283.285429][T16839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.298906][T16890] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.298956][T16839] ext4 filesystem being mounted at /165/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.473036][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.574220][T16902] loop5: detected capacity change from 0 to 512 [ 283.584782][T16902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.594516][T16902] EXT4-fs (loop5): orphan cleanup on readonly fs [ 283.601459][T16902] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4692: bg 0: block 248: padding at end of block bitmap is not set [ 283.616221][T16902] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4692: Failed to acquire dquot type 1 [ 283.628536][T16902] EXT4-fs (loop5): 1 truncate cleaned up [ 283.635210][T16902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.649687][T16897] sd 0:0:1:0: device reset [ 283.708169][T16902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.756790][T16910] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.764155][T16913] loop5: detected capacity change from 0 to 512 [ 283.784034][T16915] loop1: detected capacity change from 0 to 512 [ 283.791659][T16915] EXT4-fs (loop1): first meta block group too large: 100663296 (group descriptor block count 1) [ 283.803973][T16913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.815589][T16915] loop1: detected capacity change from 0 to 512 [ 283.823623][T16913] EXT4-fs (loop5): orphan cleanup on readonly fs [ 283.830616][T16913] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4696: bg 0: block 248: padding at end of block bitmap is not set [ 283.845711][T16913] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4696: Failed to acquire dquot type 1 [ 283.857973][T16913] EXT4-fs (loop5): 1 truncate cleaned up [ 283.863777][T16915] EXT4-fs error (device loop1): ext4_quota_enable:7136: inode #3: comm syz.1.4697: unexpected EA_INODE flag [ 283.875904][T16913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.894560][T16913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.906860][T16915] EXT4-fs (loop1): Remounting filesystem read-only [ 283.913485][T16915] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 283.934506][T16915] EXT4-fs (loop1): mount failed [ 283.989407][T16927] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.193855][T16942] loop4: detected capacity change from 0 to 512 [ 284.214245][T16942] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.228780][T16942] EXT4-fs (loop4): orphan cleanup on readonly fs [ 284.240061][T16942] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4706: bg 0: block 248: padding at end of block bitmap is not set [ 284.257461][T16945] loop1: detected capacity change from 0 to 512 [ 284.264790][T16942] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4706: Failed to acquire dquot type 1 [ 284.264811][T16945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.285281][T16945] EXT4-fs (loop1): orphan cleanup on readonly fs [ 284.288343][T16942] EXT4-fs (loop4): 1 truncate cleaned up [ 284.297890][T16945] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4707: bg 0: block 248: padding at end of block bitmap is not set [ 284.316691][T16942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.330861][T16945] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4707: Failed to acquire dquot type 1 [ 284.354047][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.363656][T16945] EXT4-fs (loop1): 1 truncate cleaned up [ 284.370038][T16945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.395832][T16945] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.450503][T16956] loop0: detected capacity change from 0 to 8192 [ 284.482055][T16966] loop4: detected capacity change from 0 to 128 [ 284.522848][T16960] bio_check_eod: 102 callbacks suppressed [ 284.522864][T16960] syz.4.4712: attempt to access beyond end of device [ 284.522864][T16960] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 284.528167][T16968] loop1: detected capacity change from 0 to 8192 [ 284.595971][T16960] syz.4.4712: attempt to access beyond end of device [ 284.595971][T16960] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 285.074200][T16984] loop5: detected capacity change from 0 to 512 [ 285.084538][T16984] EXT4-fs (loop5): first meta block group too large: 100663296 (group descriptor block count 1) [ 285.096656][T16986] loop4: detected capacity change from 0 to 512 [ 285.104352][T16986] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.121429][T16984] loop5: detected capacity change from 0 to 512 [ 285.129838][T16986] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4720: bad orphan inode 11 [ 285.139994][T16984] EXT4-fs error (device loop5): ext4_quota_enable:7136: inode #3: comm syz.5.4719: unexpected EA_INODE flag [ 285.144601][T16986] ext4_test_bit(bit=10, block=4) = 1 [ 285.156821][T16986] is_bad_inode(inode)=0 [ 285.159115][T16984] EXT4-fs (loop5): Remounting filesystem read-only [ 285.161070][T16986] NEXT_ORPHAN(inode)=2080374784 [ 285.167536][T16984] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 285.172362][T16986] max_ino=32 [ 285.172373][T16986] i_nlink=0 [ 285.187075][T16984] EXT4-fs (loop5): mount failed [ 285.198445][T16986] EXT4-fs (loop4): 1 truncate cleaned up [ 285.205388][T16986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.355635][T16993] loop0: detected capacity change from 0 to 512 [ 285.368773][T16993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.378639][T16993] EXT4-fs (loop0): orphan cleanup on readonly fs [ 285.378934][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.385583][T16993] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4721: bg 0: block 248: padding at end of block bitmap is not set [ 285.410422][T16993] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4721: Failed to acquire dquot type 1 [ 285.422414][T16993] EXT4-fs (loop0): 1 truncate cleaned up [ 285.432636][T16993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.488772][T17002] loop4: detected capacity change from 0 to 512 [ 285.498686][T12141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.508651][T17002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.517388][T17000] loop1: detected capacity change from 0 to 1024 [ 285.524357][T17000] EXT4-fs: Ignoring removed bh option [ 285.529835][T17000] EXT4-fs: inline encryption not supported [ 285.530139][T17002] EXT4-fs (loop4): orphan cleanup on readonly fs [ 285.542385][T17000] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 285.542715][T17002] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4723: bg 0: block 248: padding at end of block bitmap is not set [ 285.552369][T17000] EXT4-fs (loop1): group descriptors corrupted! [ 285.576970][T17002] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4723: Failed to acquire dquot type 1 [ 285.589175][T17002] EXT4-fs (loop4): 1 truncate cleaned up [ 285.595519][T17002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.623917][T17002] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.671728][T17016] loop1: detected capacity change from 0 to 8192 [ 285.761705][T17027] loop4: detected capacity change from 0 to 512 [ 285.769042][T17027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.830228][T17027] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4733: bad orphan inode 11 [ 285.845729][T17027] ext4_test_bit(bit=10, block=4) = 1 [ 285.851069][T17027] is_bad_inode(inode)=0 [ 285.854635][T17034] loop0: detected capacity change from 0 to 512 [ 285.855260][T17027] NEXT_ORPHAN(inode)=2080374784 [ 285.866343][T17027] max_ino=32 [ 285.866479][T17034] EXT4-fs (loop0): first meta block group too large: 100663296 (group descriptor block count 1) [ 285.869593][T17027] i_nlink=0 [ 285.883629][T17027] EXT4-fs (loop4): 1 truncate cleaned up [ 285.889041][T17034] loop0: detected capacity change from 0 to 512 [ 285.889711][T17027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.924629][T17034] EXT4-fs error (device loop0): ext4_quota_enable:7136: inode #3: comm syz.0.4735: unexpected EA_INODE flag [ 285.945722][T17034] EXT4-fs (loop0): Remounting filesystem read-only [ 285.952346][T17034] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 285.967320][T17034] EXT4-fs (loop0): mount failed [ 286.022363][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.104169][T17040] loop4: detected capacity change from 0 to 1024 [ 286.120583][T17040] EXT4-fs: Ignoring removed orlov option [ 286.130744][T17040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.216075][T17049] FAULT_INJECTION: forcing a failure. [ 286.216075][T17049] name failslab, interval 1, probability 0, space 0, times 0 [ 286.228801][T17049] CPU: 0 UID: 0 PID: 17049 Comm: syz.0.4739 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 286.228831][T17049] Tainted: [W]=WARN [ 286.228867][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.228880][T17049] Call Trace: [ 286.228888][T17049] [ 286.228897][T17049] __dump_stack+0x1d/0x30 [ 286.228920][T17049] dump_stack_lvl+0xe8/0x140 [ 286.228955][T17049] dump_stack+0x15/0x1b [ 286.228974][T17049] should_fail_ex+0x265/0x280 [ 286.229019][T17049] should_failslab+0x8c/0xb0 [ 286.229049][T17049] kmem_cache_alloc_noprof+0x50/0x480 [ 286.229079][T17049] ? dst_alloc+0xbd/0x100 [ 286.229142][T17049] dst_alloc+0xbd/0x100 [ 286.229174][T17049] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 286.229275][T17049] ip_route_output_flow+0x65/0x110 [ 286.229304][T17049] udp_sendmsg+0x11b0/0x13c0 [ 286.229543][T17049] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 286.229651][T17049] ? avc_has_perm+0xf7/0x180 [ 286.229671][T17049] ? __pfx_udp_sendmsg+0x10/0x10 [ 286.229693][T17049] inet_sendmsg+0xac/0xd0 [ 286.229770][T17049] __sock_sendmsg+0x102/0x180 [ 286.229794][T17049] ____sys_sendmsg+0x345/0x4e0 [ 286.229829][T17049] ___sys_sendmsg+0x17b/0x1d0 [ 286.229949][T17049] __sys_sendmmsg+0x178/0x300 [ 286.229977][T17049] __x64_sys_sendmmsg+0x57/0x70 [ 286.229998][T17049] x64_sys_call+0x1c4a/0x3000 [ 286.230027][T17049] do_syscall_64+0xd2/0x200 [ 286.230044][T17049] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 286.230092][T17049] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 286.230122][T17049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.230144][T17049] RIP: 0033:0x7fa56c01efc9 [ 286.230256][T17049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.230272][T17049] RSP: 002b:00007fa56aa87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 286.230289][T17049] RAX: ffffffffffffffda RBX: 00007fa56c275fa0 RCX: 00007fa56c01efc9 [ 286.230300][T17049] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 286.230332][T17049] RBP: 00007fa56aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 286.230344][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.230355][T17049] R13: 00007fa56c276038 R14: 00007fa56c275fa0 R15: 00007fff218d5ae8 [ 286.230373][T17049] [ 286.514848][T17052] loop5: detected capacity change from 0 to 512 [ 286.531302][T17052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.540750][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.553446][T17052] EXT4-fs (loop5): orphan cleanup on readonly fs [ 286.563027][T17052] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4740: bg 0: block 248: padding at end of block bitmap is not set [ 286.589310][T17052] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4740: Failed to acquire dquot type 1 [ 286.610880][T17052] EXT4-fs (loop5): 1 truncate cleaned up [ 286.617158][T17052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 286.618637][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 286.638254][T17052] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.659554][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 286.678745][T17064] __nla_validate_parse: 14 callbacks suppressed [ 286.678786][T17064] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4745'. [ 286.792442][T17072] loop4: detected capacity change from 0 to 512 [ 286.806210][T17072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.813729][T17072] EXT4-fs: Ignoring removed oldalloc option [ 286.835233][T17072] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4748: Parent and EA inode have the same ino 15 [ 286.863027][T17072] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.4748: Parent and EA inode have the same ino 15 [ 286.884405][T17072] EXT4-fs (loop4): 1 orphan inode deleted [ 286.894525][T17072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.955638][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.057819][T17091] loop4: detected capacity change from 0 to 256 [ 287.087910][T17091] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.120806][T17094] loop5: detected capacity change from 0 to 512 [ 287.148837][T17094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.181152][T17094] EXT4-fs (loop5): orphan cleanup on readonly fs [ 287.188726][T17094] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4756: bg 0: block 248: padding at end of block bitmap is not set [ 287.209456][T17103] loop1: detected capacity change from 0 to 512 [ 287.228870][T17106] loop0: detected capacity change from 0 to 2048 [ 287.237963][T17103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.246739][T17094] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4756: Failed to acquire dquot type 1 [ 287.259126][T17103] EXT4-fs (loop1): orphan cleanup on readonly fs [ 287.267052][T17106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.279955][T17103] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4759: bg 0: block 248: padding at end of block bitmap is not set [ 287.295032][T17094] EXT4-fs (loop5): 1 truncate cleaned up [ 287.315646][T17103] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4759: Failed to acquire dquot type 1 [ 287.317402][T17094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.342942][T17103] EXT4-fs (loop1): 1 truncate cleaned up [ 287.353103][T17103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.366116][T17094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.375873][T12141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.399575][T12755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.413510][T17113] loop5: detected capacity change from 0 to 1024 [ 287.426724][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4764'. [ 287.434931][T17113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.451234][T17113] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.4765: Allocating blocks 385-513 which overlap fs metadata [ 287.466646][T17112] EXT4-fs (loop5): pa ffff888106e715b0: logic 16, phys. 129, len 24 [ 287.474864][T17112] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 287.561817][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'. [ 287.576695][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.613932][T17133] loop0: detected capacity change from 0 to 512 [ 287.620576][T17133] EXT4-fs: user quota file already specified [ 287.662774][T17138] loop0: detected capacity change from 0 to 1024 [ 287.669799][T17138] EXT4-fs: Ignoring removed nobh option [ 287.675364][T17138] EXT4-fs: Ignoring removed bh option [ 287.690030][T17138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.740295][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 287.740309][ T29] audit: type=1400 audit(1761470914.930:33513): avc: denied { append } for pid=17136 comm="syz.0.4773" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.840764][T12141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.854454][ T29] audit: type=1400 audit(1761470915.012:33514): avc: denied { map } for pid=17136 comm="syz.0.4773" path="/332/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.877793][ T29] audit: type=1400 audit(1761470915.012:33515): avc: denied { mount } for pid=17136 comm="syz.0.4773" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 287.900957][ T29] audit: type=1400 audit(1761470915.022:33516): avc: denied { search } for pid=17136 comm="syz.0.4773" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 287.923290][ T29] audit: type=1400 audit(1761470915.022:33517): avc: denied { search } for pid=17136 comm="syz.0.4773" name="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 287.945763][ T29] audit: type=1400 audit(1761470915.022:33518): avc: denied { read open } for pid=17136 comm="syz.0.4773" path="/" dev="configfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 288.035273][ T29] audit: type=1400 audit(1761470915.225:33519): avc: denied { block_suspend } for pid=17157 comm="syz.4.4782" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 288.101311][ T29] audit: type=1400 audit(1761470915.256:33520): avc: denied { write } for pid=17157 comm="syz.4.4782" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 288.124380][ T29] audit: type=1400 audit(1761470915.256:33521): avc: denied { open } for pid=17157 comm="syz.4.4782" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 288.147856][ T29] audit: type=1400 audit(1761470915.256:33522): avc: denied { ioctl } for pid=17157 comm="syz.4.4782" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 288.445380][T17172] loop0: detected capacity change from 0 to 512 [ 288.475406][T17172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.515282][T17172] EXT4-fs (loop0): orphan cleanup on readonly fs [ 288.542433][T17172] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4787: bg 0: block 248: padding at end of block bitmap is not set [ 288.587148][T17172] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4787: Failed to acquire dquot type 1 [ 288.619167][T17172] EXT4-fs (loop0): 1 truncate cleaned up [ 288.635614][T17172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.734831][T12141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.750663][T17178] loop4: detected capacity change from 0 to 512 [ 288.757295][T17178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.789386][T17178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.810644][T17178] EXT4-fs: Mount option(s) incompatible with ext2 [ 288.921360][T17190] loop4: detected capacity change from 0 to 512 [ 288.932318][T17190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.958809][T17190] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4795: bad orphan inode 11 [ 288.976545][T17190] ext4_test_bit(bit=10, block=4) = 1 [ 288.981870][T17190] is_bad_inode(inode)=0 [ 288.986032][T17190] NEXT_ORPHAN(inode)=2080374784 [ 288.991134][T17190] max_ino=32 [ 288.994317][T17190] i_nlink=0 [ 289.026837][T17190] EXT4-fs (loop4): 1 truncate cleaned up [ 289.036691][T17190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.160763][T17194] loop5: detected capacity change from 0 to 512 [ 289.169818][T17194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.184200][T17194] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.4794: bad orphan inode 11 [ 289.195364][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4797'. [ 289.195477][T17194] ext4_test_bit(bit=10, block=4) = 1 [ 289.195491][T17194] is_bad_inode(inode)=0 [ 289.195521][T17194] NEXT_ORPHAN(inode)=2080374784 [ 289.218706][T17194] max_ino=32 [ 289.221937][T17194] i_nlink=0 [ 289.225671][T17194] EXT4-fs (loop5): 1 truncate cleaned up [ 289.232261][T17194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.247626][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.256832][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4797'. [ 289.278419][T17203] loop4: detected capacity change from 0 to 512 [ 289.292573][T17204] x_tables: duplicate entry at hook 2 [ 289.300361][T17203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 289.310582][T17203] EXT4-fs (loop4): orphan cleanup on readonly fs [ 289.317616][T17203] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4798: bg 0: block 248: padding at end of block bitmap is not set [ 289.342483][T17203] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4798: Failed to acquire dquot type 1 [ 289.354651][T17203] EXT4-fs (loop4): 1 truncate cleaned up [ 289.360915][T17203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.377400][T17203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.420889][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.453763][T17209] loop1: detected capacity change from 0 to 8192 [ 289.485560][T17212] loop4: detected capacity change from 0 to 512 [ 289.573498][T17216] lo speed is unknown, defaulting to 1000 [ 289.579695][T17216] geneve0 speed is unknown, defaulting to 1000 [ 289.618240][T17212] EXT4-fs (loop4): first meta block group too large: 100663296 (group descriptor block count 1) [ 289.756870][T17212] loop4: detected capacity change from 0 to 512 [ 289.778209][T17226] loop5: detected capacity change from 0 to 128 [ 289.786594][T17225] loop0: detected capacity change from 0 to 256 [ 289.794109][T17212] EXT4-fs error (device loop4): ext4_quota_enable:7136: inode #3: comm syz.4.4802: unexpected EA_INODE flag [ 289.822114][T17212] EXT4-fs (loop4): Remounting filesystem read-only [ 289.841372][T17212] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 289.857725][T17212] EXT4-fs (loop4): mount failed [ 289.864119][T17225] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.864598][T17222] syz.5.4804: attempt to access beyond end of device [ 289.864598][T17222] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 290.167608][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 290.221084][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4810'. [ 290.278442][T17248] loop1: detected capacity change from 0 to 512 [ 290.286359][T17248] EXT4-fs (loop1): unable to read superblock [ 290.290794][T17250] loop4: detected capacity change from 0 to 512 [ 290.300436][T17250] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.310627][T17250] EXT4-fs (loop4): orphan cleanup on readonly fs [ 290.318223][T17250] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4813: bg 0: block 248: padding at end of block bitmap is not set [ 290.332770][T17250] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4813: Failed to acquire dquot type 1 [ 290.344671][T17250] EXT4-fs (loop4): 1 truncate cleaned up [ 290.351042][T17250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.378968][T17250] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.398854][T17256] loop4: detected capacity change from 0 to 512 [ 290.437453][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.446334][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.485741][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.501994][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.561706][T17270] loop4: detected capacity change from 0 to 1024 [ 290.573252][T17270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.597084][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.713186][T17275] lo speed is unknown, defaulting to 1000 [ 290.719327][T17275] geneve0 speed is unknown, defaulting to 1000 [ 290.746954][T17277] loop1: detected capacity change from 0 to 512 [ 290.781130][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4824'. [ 290.841597][T17277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.913410][T17292] loop4: detected capacity change from 0 to 8192 [ 291.424128][T12755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.049357][T17328] loop0: detected capacity change from 0 to 512 [ 292.060117][T17328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.086913][T17322] loop5: detected capacity change from 0 to 512 [ 292.089203][T17328] EXT4-fs (loop0): orphan cleanup on readonly fs [ 292.105619][T17322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.109465][T17328] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4841: bg 0: block 248: padding at end of block bitmap is not set [ 292.125157][T17322] EXT4-fs: Ignoring removed oldalloc option [ 292.138309][T17328] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4841: Failed to acquire dquot type 1 [ 292.160948][T17328] EXT4-fs (loop0): 1 truncate cleaned up [ 292.172886][T17328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.197929][T17322] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4837: Parent and EA inode have the same ino 15 [ 292.218326][T17322] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4837: Parent and EA inode have the same ino 15 [ 292.244069][T12141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.286969][T17322] EXT4-fs (loop5): 1 orphan inode deleted [ 292.294426][T17333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4844'. [ 292.305885][T17322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.447015][T17335] sd 0:0:1:0: device reset [ 292.452146][T17335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4845'. [ 292.489256][T17340] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4846'. [ 292.520183][T17340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4846'. [ 292.582029][T17343] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4847'. [ 292.592888][T17343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4847'. [ 292.675948][ T29] kauditd_printk_skb: 802 callbacks suppressed [ 292.675964][ T29] audit: type=1326 audit(1761470919.936:34317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff66e775e67 code=0x7ffc0000 [ 292.726972][ T29] audit: type=1326 audit(1761470919.947:34318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff66e71b099 code=0x7ffc0000 [ 292.750817][ T29] audit: type=1326 audit(1761470919.947:34319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff66e77efc9 code=0x7ffc0000 [ 292.774466][ T29] audit: type=1326 audit(1761470919.977:34320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff66e775e67 code=0x7ffc0000 [ 292.798156][ T29] audit: type=1326 audit(1761470919.977:34321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff66e71b099 code=0x7ffc0000 [ 292.821925][ T29] audit: type=1326 audit(1761470919.977:34322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff66e77efc9 code=0x7ffc0000 [ 292.845792][ T29] audit: type=1326 audit(1761470919.977:34323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff66e775e67 code=0x7ffc0000 [ 292.869461][ T29] audit: type=1326 audit(1761470919.977:34324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff66e71b099 code=0x7ffc0000 [ 292.893020][ T29] audit: type=1326 audit(1761470919.977:34325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff66e77efc9 code=0x7ffc0000 [ 292.936934][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.951014][T17358] loop4: detected capacity change from 0 to 1024 [ 292.967216][T17358] /dev/loop4: Can't open blockdev [ 292.979086][ T29] audit: type=1326 audit(1761470919.987:34326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.4.4835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff66e775e67 code=0x7ffc0000 [ 293.018003][T17362] loop5: detected capacity change from 0 to 256 [ 293.025212][T17362] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 293.028847][T17360] loop1: detected capacity change from 0 to 512 [ 293.044474][T17360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.054366][T17360] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.4854: bad orphan inode 11 [ 293.067162][T17360] ext4_test_bit(bit=10, block=4) = 1 [ 293.072510][T17360] is_bad_inode(inode)=0 [ 293.076814][T17360] NEXT_ORPHAN(inode)=2080374784 [ 293.081836][T17360] max_ino=32 [ 293.085141][T17360] i_nlink=0 [ 293.088663][T17360] EXT4-fs (loop1): 1 truncate cleaned up [ 293.096155][T17360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.250332][T17375] FAULT_INJECTION: forcing a failure. [ 293.250332][T17375] name failslab, interval 1, probability 0, space 0, times 0 [ 293.263127][T17375] CPU: 0 UID: 0 PID: 17375 Comm: syz.0.4860 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.263166][T17375] Tainted: [W]=WARN [ 293.263173][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.263186][T17375] Call Trace: [ 293.263213][T17375] [ 293.263220][T17375] __dump_stack+0x1d/0x30 [ 293.263242][T17375] dump_stack_lvl+0xe8/0x140 [ 293.263262][T17375] dump_stack+0x15/0x1b [ 293.263337][T17375] should_fail_ex+0x265/0x280 [ 293.263354][T17375] should_failslab+0x8c/0xb0 [ 293.263381][T17375] kmem_cache_alloc_noprof+0x50/0x480 [ 293.263453][T17375] ? radix_tree_node_alloc+0x8a/0x1f0 [ 293.263486][T17375] radix_tree_node_alloc+0x8a/0x1f0 [ 293.263547][T17375] idr_get_free+0x1fa/0x550 [ 293.263574][T17375] idr_alloc_u32+0xca/0x180 [ 293.263596][T17375] tcf_idr_check_alloc+0x193/0x240 [ 293.263624][T17375] tcf_ctinfo_init+0x3fd/0x810 [ 293.263687][T17375] tcf_action_init_1+0x36a/0x4a0 [ 293.263719][T17375] tcf_action_init+0x267/0x6d0 [ 293.263787][T17375] tc_ctl_action+0x291/0x830 [ 293.263822][T17375] ? __pfx_tc_ctl_action+0x10/0x10 [ 293.263849][T17375] rtnetlink_rcv_msg+0x65a/0x6d0 [ 293.263935][T17375] ? avc_has_perm_noaudit+0x1b1/0x200 [ 293.263959][T17375] netlink_rcv_skb+0x123/0x220 [ 293.264045][T17375] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 293.264139][T17375] rtnetlink_rcv+0x1c/0x30 [ 293.264172][T17375] netlink_unicast+0x5c0/0x690 [ 293.264206][T17375] netlink_sendmsg+0x58b/0x6b0 [ 293.264226][T17375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.264319][T17375] __sock_sendmsg+0x145/0x180 [ 293.264345][T17375] ____sys_sendmsg+0x31e/0x4e0 [ 293.264381][T17375] ___sys_sendmsg+0x17b/0x1d0 [ 293.264424][T17375] __x64_sys_sendmsg+0xd4/0x160 [ 293.264516][T17375] x64_sys_call+0x191e/0x3000 [ 293.264536][T17375] do_syscall_64+0xd2/0x200 [ 293.264553][T17375] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.264579][T17375] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 293.264621][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.264644][T17375] RIP: 0033:0x7fa56c01efc9 [ 293.264721][T17375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.264741][T17375] RSP: 002b:00007fa56aa87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.264777][T17375] RAX: ffffffffffffffda RBX: 00007fa56c275fa0 RCX: 00007fa56c01efc9 [ 293.264788][T17375] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 293.264799][T17375] RBP: 00007fa56aa87090 R08: 0000000000000000 R09: 0000000000000000 [ 293.264852][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.264945][T17375] R13: 00007fa56c276038 R14: 00007fa56c275fa0 R15: 00007fff218d5ae8 [ 293.264963][T17375] [ 293.541980][T12755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.575280][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'. [ 293.689962][T17397] loop1: detected capacity change from 0 to 512 [ 293.697657][T17397] EXT4-fs (loop1): first meta block group too large: 100663296 (group descriptor block count 1) [ 293.712046][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4869'. [ 293.715249][T17397] loop1: detected capacity change from 0 to 512 [ 293.749289][T17397] EXT4-fs error (device loop1): ext4_quota_enable:7136: inode #3: comm syz.1.4868: unexpected EA_INODE flag [ 293.763708][T17397] EXT4-fs (loop1): Remounting filesystem read-only [ 293.783227][T17397] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 293.818615][T17397] EXT4-fs (loop1): mount failed [ 293.975905][T17420] sd 0:0:1:0: device reset [ 293.982530][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4875'. [ 294.020978][T17424] loop5: detected capacity change from 0 to 512 [ 294.061929][T17424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.113242][T17424] EXT4-fs (loop5): orphan cleanup on readonly fs [ 294.120025][T17430] loop4: detected capacity change from 0 to 128 [ 294.136880][T17424] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4878: bg 0: block 248: padding at end of block bitmap is not set [ 294.192666][T17424] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4878: Failed to acquire dquot type 1 [ 294.205226][T17433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4881'. [ 294.229697][T17426] vhci_hcd: invalid port number 96 [ 294.235131][T17426] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 294.242705][T17424] EXT4-fs (loop5): 1 truncate cleaned up [ 294.262048][T17424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.288377][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.341058][T17443] loop4: detected capacity change from 0 to 512 [ 294.355252][T17443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.371229][T17443] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4886: bad orphan inode 11 [ 294.386478][T17443] ext4_test_bit(bit=10, block=4) = 1 [ 294.391879][T17443] is_bad_inode(inode)=0 [ 294.396061][T17443] NEXT_ORPHAN(inode)=2080374784 [ 294.401000][T17443] max_ino=32 [ 294.404229][T17443] i_nlink=0 [ 294.430393][T17443] EXT4-fs (loop4): 1 truncate cleaned up [ 294.443910][T17443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.541295][T12555] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.945776][T17491] loop1: detected capacity change from 0 to 512 [ 295.982847][T17491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.989533][T17491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.996705][T17491] EXT4-fs: Mount option(s) incompatible with ext2 [ 296.250525][T17504] loop1: detected capacity change from 0 to 512 [ 296.261026][T17507] loop5: detected capacity change from 0 to 512 [ 296.268464][T17504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.278199][T17507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.289060][T17504] EXT4-fs (loop1): orphan cleanup on readonly fs [ 296.298168][T17507] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.4911: bad orphan inode 11 [ 296.309244][T17504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4910: bg 0: block 248: padding at end of block bitmap is not set [ 296.330176][T17507] ext4_test_bit(bit=10, block=4) = 1 [ 296.330324][T17504] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4910: Failed to acquire dquot type 1 [ 296.335500][T17507] is_bad_inode(inode)=0 [ 296.351223][T17507] NEXT_ORPHAN(inode)=2080374784 [ 296.356063][T17507] max_ino=32 [ 296.359289][T17507] i_nlink=0 [ 296.372629][T17507] EXT4-fs (loop5): 1 truncate cleaned up [ 296.377823][T17504] EXT4-fs (loop1): 1 truncate cleaned up [ 296.378763][T17507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.384598][T17504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.461298][T12755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.509466][T14058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.595950][T17516] loop1: detected capacity change from 0 to 8192 [ 296.835918][T17526] loop5: detected capacity change from 0 to 512 [ 296.842969][T17526] EXT4-fs (loop5): first meta block group too large: 100663296 (group descriptor block count 1) [ 296.866032][T17526] loop5: detected capacity change from 0 to 512 [ 296.894382][T17526] EXT4-fs error (device loop5): ext4_quota_enable:7136: inode #3: comm syz.5.4918: unexpected EA_INODE flag [ 296.906774][T17526] EXT4-fs (loop5): Remounting filesystem read-only [ 296.913454][T17526] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 297.031672][T17526] EXT4-fs (loop5): mount failed [ 297.304976][T17540] __nla_validate_parse: 3 callbacks suppressed [ 297.304991][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4921'. [ 297.805652][T17571] loop5: detected capacity change from 0 to 128 [ 297.951942][ T29] kauditd_printk_skb: 787 callbacks suppressed [ 297.951956][ T29] audit: type=1326 audit(1761470925.265:35110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17574 comm="syz.5.4934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22cfa5efc9 code=0x7dff0000 [ 298.047616][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4933'. [ 298.159880][T17584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=17584 comm=syz.4.4937 [ 298.272943][T17591] loop4: detected capacity change from 0 to 512 [ 298.280128][T17591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.289961][T17591] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4940: bad orphan inode 11 [ 298.300578][T17591] ext4_test_bit(bit=10, block=4) = 1 [ 298.305972][T17591] is_bad_inode(inode)=0 [ 298.310149][T17591] NEXT_ORPHAN(inode)=2080374784 [ 298.315305][T17591] max_ino=32 [ 298.318602][T17591] i_nlink=0 [ 298.322524][T17591] EXT4-fs (loop4): 1 truncate cleaned up [ 298.375232][T17594] loop1: detected capacity change from 0 to 8192 [ 298.456605][T17601] FAULT_INJECTION: forcing a failure. [ 298.456605][T17601] name failslab, interval 1, probability 0, space 0, times 0 [ 298.469307][T17601] CPU: 0 UID: 0 PID: 17601 Comm: syz.4.4944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.469338][T17601] Tainted: [W]=WARN [ 298.469344][T17601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.469355][T17601] Call Trace: [ 298.469362][T17601] [ 298.469369][T17601] __dump_stack+0x1d/0x30 [ 298.469395][T17601] dump_stack_lvl+0xe8/0x140 [ 298.469491][T17601] dump_stack+0x15/0x1b [ 298.469537][T17601] should_fail_ex+0x265/0x280 [ 298.469555][T17601] should_failslab+0x8c/0xb0 [ 298.469587][T17601] kmem_cache_alloc_noprof+0x50/0x480 [ 298.469690][T17601] ? getname_flags+0x80/0x3b0 [ 298.469784][T17601] getname_flags+0x80/0x3b0 [ 298.469817][T17601] __se_sys_move_mount+0x2d6/0x490 [ 298.469849][T17601] __x64_sys_move_mount+0x67/0x80 [ 298.469929][T17601] x64_sys_call+0xcfe/0x3000 [ 298.469950][T17601] do_syscall_64+0xd2/0x200 [ 298.469967][T17601] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.469995][T17601] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 298.470146][T17601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.470166][T17601] RIP: 0033:0x7ff66e77efc9 [ 298.470183][T17601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.470199][T17601] RSP: 002b:00007ff66d1df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 298.470218][T17601] RAX: ffffffffffffffda RBX: 00007ff66e9d5fa0 RCX: 00007ff66e77efc9 [ 298.470269][T17601] RDX: ffffffffffffff9c RSI: 0000200000002040 RDI: ffffffffffffff9c [ 298.470282][T17601] RBP: 00007ff66d1df090 R08: 0000000000000000 R09: 0000000000000000 [ 298.470294][T17601] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 298.470350][T17601] R13: 00007ff66e9d6038 R14: 00007ff66e9d5fa0 R15: 00007ffff06255c8 [ 298.470366][T17601] [ 298.740865][ T29] audit: type=1326 audit(1761470926.072:35111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17610 comm="syz.0.4949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa56c01efc9 code=0x0 [ 298.811573][ T29] audit: type=1326 audit(1761470926.123:35112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.2.4950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29cbceefc9 code=0x7dff0000 [ 299.210680][T17623] loop5: detected capacity change from 0 to 512 [ 299.223105][T17623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.230674][T17623] EXT4-fs: Ignoring removed oldalloc option [ 299.248282][T17623] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4951: Parent and EA inode have the same ino 15 [ 299.262996][T17623] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.4951: Parent and EA inode have the same ino 15 [ 299.278901][T17623] EXT4-fs (loop5): 1 orphan inode deleted [ 299.286996][ T29] audit: type=1400 audit(1761470926.617:35113): avc: denied { create } for pid=17624 comm="syz.1.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.307387][ T29] audit: type=1400 audit(1761470926.617:35114): avc: denied { write } for pid=17624 comm="syz.1.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.326915][ T29] audit: type=1400 audit(1761470926.617:35115): avc: denied { mount } for pid=17624 comm="syz.1.4952" name="/" dev="autofs" ino=52832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 299.380531][T17629] loop5: detected capacity change from 0 to 512 [ 299.387572][T17629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.400511][T17629] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.4953: bad orphan inode 11 [ 299.411280][T17629] ext4_test_bit(bit=10, block=4) = 1 [ 299.416624][T17629] is_bad_inode(inode)=0 [ 299.420893][T17629] NEXT_ORPHAN(inode)=2080374784 [ 299.425791][T17629] max_ino=32 [ 299.429019][T17629] i_nlink=0 [ 299.432567][T17629] EXT4-fs (loop5): 1 truncate cleaned up [ 299.501196][ T29] audit: type=1400 audit(1761470926.839:35116): avc: denied { create } for pid=17631 comm="syz.5.4954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 299.527020][T17635] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 299.534791][T17635] audit: out of memory in audit_log_start [ 299.543571][ T29] audit: type=1326 audit(1761470926.859:35117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17634 comm="syz.4.4955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66e77efc9 code=0x7ffc0000 [ 299.639761][T17638] netlink: 'syz.4.4957': attribute type 29 has an invalid length. [ 299.647719][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4957'. [ 299.729503][T17650] loop0: detected capacity change from 0 to 512 [ 299.736447][T17650] EXT4-fs (loop0): first meta block group too large: 100663296 (group descriptor block count 1) [ 299.751810][T17650] loop0: detected capacity change from 0 to 512 [ 299.767764][T17650] EXT4-fs error (device loop0): ext4_quota_enable:7136: inode #3: comm syz.0.4961: unexpected EA_INODE flag [ 299.779780][T17650] EXT4-fs (loop0): Remounting filesystem read-only [ 299.786317][T17650] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 299.801532][T17650] EXT4-fs (loop0): mount failed [ 299.807413][T17662] loop4: detected capacity change from 0 to 256 [ 299.815132][T17662] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.594795][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4969'. [ 300.615133][T17677] netlink: 'syz.1.4968': attribute type 8 has an invalid length. [ 300.703369][T17679] lo speed is unknown, defaulting to 1000 [ 300.712167][T17679] geneve0 speed is unknown, defaulting to 1000 [ 300.783806][T17693] loop4: detected capacity change from 0 to 2048 [ 300.879105][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4980'. [ 300.962823][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 300.971758][T17726] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4986'. [ 300.980923][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 300.989809][T17726] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4986'. [ 300.999730][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 301.008878][T17728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=17728 comm=syz.2.4987 [ 301.022283][T17729] sd 0:0:1:0: device reset [ 301.031051][T17731] loop1: detected capacity change from 0 to 512 [ 301.038172][T17731] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 301.090739][T17731] EXT4-fs (loop1): 1 truncate cleaned up [ 301.105147][T17731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.114163][T17731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.150711][T17742] loop4: detected capacity change from 0 to 1024 [ 301.167522][T17742] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4990: Failed to acquire dquot type 0 [ 301.215303][T17742] EXT4-fs (loop4): 1 truncate cleaned up [ 301.226383][T17745] FAULT_INJECTION: forcing a failure. [ 301.226383][T17745] name failslab, interval 1, probability 0, space 0, times 0 [ 301.239205][T17745] CPU: 1 UID: 0 PID: 17745 Comm: syz.5.4992 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 301.239236][T17745] Tainted: [W]=WARN [ 301.239243][T17745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.239254][T17745] Call Trace: [ 301.239260][T17745] [ 301.239338][T17745] __dump_stack+0x1d/0x30 [ 301.239362][T17745] dump_stack_lvl+0xe8/0x140 [ 301.239382][T17745] dump_stack+0x15/0x1b [ 301.239399][T17745] should_fail_ex+0x265/0x280 [ 301.239419][T17745] ? __se_sys_memfd_create+0x1cc/0x590 [ 301.239445][T17745] should_failslab+0x8c/0xb0 [ 301.239517][T17745] __kmalloc_cache_noprof+0x4c/0x4a0 [ 301.239549][T17745] __se_sys_memfd_create+0x1cc/0x590 [ 301.239615][T17745] __x64_sys_memfd_create+0x31/0x40 [ 301.239640][T17745] x64_sys_call+0x2ac2/0x3000 [ 301.239664][T17745] do_syscall_64+0xd2/0x200 [ 301.239761][T17745] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 301.239792][T17745] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 301.239822][T17745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.239890][T17745] RIP: 0033:0x7f22cfa5efc9 [ 301.239907][T17745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.239926][T17745] RSP: 002b:00007f22ce4bee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 301.239947][T17745] RAX: ffffffffffffffda RBX: 0000000000000588 RCX: 00007f22cfa5efc9 [ 301.239961][T17745] RDX: 00007f22ce4beef0 RSI: 0000000000000000 RDI: 00007f22cfae2960 [ 301.239972][T17745] RBP: 0000200000009ec0 R08: 00007f22ce4bebb7 R09: 00007f22ce4bee40 [ 301.239983][T17745] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 301.239996][T17745] R13: 00007f22ce4beef0 R14: 00007f22ce4beeb0 R15: 0000200000000600 [ 301.240045][T17745] [ 301.590472][T17769] loop4: detected capacity change from 0 to 1024 [ 301.607884][T17769] EXT4-fs: Ignoring removed orlov option [ 301.613859][T17769] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.620331][T17769] EXT4-fs: inline encryption not supported [ 301.626804][T17773] netlink: zone id is out of range [ 301.632065][T17773] netlink: zone id is out of range [ 301.637554][T17773] netlink: zone id is out of range [ 301.643127][T17773] netlink: zone id is out of range [ 301.648352][T17773] netlink: zone id is out of range [ 301.653906][T17773] netlink: zone id is out of range [ 301.660438][T17766] sd 0:0:1:0: device reset [ 301.670604][T17773] netlink: zone id is out of range [ 301.691402][T17773] netlink: zone id is out of range [ 301.696564][T17773] netlink: zone id is out of range [ 301.701837][T17773] netlink: zone id is out of range [ 301.744093][T17782] FAULT_INJECTION: forcing a failure. [ 301.744093][T17782] name failslab, interval 1, probability 0, space 0, times 0 [ 301.756761][T17782] CPU: 1 UID: 0 PID: 17782 Comm: syz.4.5005 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 301.756794][T17782] Tainted: [W]=WARN [ 301.756802][T17782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.756820][T17782] Call Trace: [ 301.756827][T17782] [ 301.756834][T17782] __dump_stack+0x1d/0x30 [ 301.756859][T17782] dump_stack_lvl+0xe8/0x140 [ 301.756903][T17782] dump_stack+0x15/0x1b [ 301.756974][T17782] should_fail_ex+0x265/0x280 [ 301.756996][T17782] should_failslab+0x8c/0xb0 [ 301.757022][T17782] kmem_cache_alloc_noprof+0x50/0x480 [ 301.757049][T17782] ? getname_flags+0x80/0x3b0 [ 301.757112][T17782] getname_flags+0x80/0x3b0 [ 301.757139][T17782] __se_sys_move_mount+0x2d6/0x490 [ 301.757216][T17782] __x64_sys_move_mount+0x67/0x80 [ 301.757245][T17782] x64_sys_call+0xcfe/0x3000 [ 301.757348][T17782] do_syscall_64+0xd2/0x200 [ 301.757369][T17782] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 301.757397][T17782] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 301.757489][T17782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.757508][T17782] RIP: 0033:0x7ff66e77efc9 [ 301.757580][T17782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.757655][T17782] RSP: 002b:00007ff66d1df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 301.757744][T17782] RAX: ffffffffffffffda RBX: 00007ff66e9d5fa0 RCX: 00007ff66e77efc9 [ 301.757756][T17782] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c [ 301.757769][T17782] RBP: 00007ff66d1df090 R08: 0000000000000000 R09: 0000000000000000 [ 301.757782][T17782] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 301.757794][T17782] R13: 00007ff66e9d6038 R14: 00007ff66e9d5fa0 R15: 00007ffff06255c8 [ 301.757809][T17782] [ 301.987850][T17788] netlink: 'syz.4.5007': attribute type 13 has an invalid length. [ 302.289296][T17810] FAULT_INJECTION: forcing a failure. [ 302.289296][T17810] name failslab, interval 1, probability 0, space 0, times 0 [ 302.302156][T17810] CPU: 1 UID: 0 PID: 17810 Comm: syz.5.5010 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.302188][T17810] Tainted: [W]=WARN [ 302.302195][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.302232][T17810] Call Trace: [ 302.302238][T17810] [ 302.302246][T17810] __dump_stack+0x1d/0x30 [ 302.302270][T17810] dump_stack_lvl+0xe8/0x140 [ 302.302292][T17810] dump_stack+0x15/0x1b [ 302.302330][T17810] should_fail_ex+0x265/0x280 [ 302.302348][T17810] should_failslab+0x8c/0xb0 [ 302.302497][T17810] kmem_cache_alloc_noprof+0x50/0x480 [ 302.302529][T17810] ? alloc_empty_file+0x76/0x200 [ 302.302611][T17810] ? mntput+0x4b/0x80 [ 302.302631][T17810] alloc_empty_file+0x76/0x200 [ 302.302663][T17810] path_openat+0x68/0x2170 [ 302.302732][T17810] ? _parse_integer_limit+0x170/0x190 [ 302.302766][T17810] ? kstrtoull+0x111/0x140 [ 302.302798][T17810] ? kstrtouint+0x76/0xc0 [ 302.302830][T17810] do_filp_open+0x109/0x230 [ 302.302873][T17810] do_sys_openat2+0xa6/0x110 [ 302.302896][T17810] __x64_sys_openat+0xf2/0x120 [ 302.302961][T17810] x64_sys_call+0x2eab/0x3000 [ 302.302981][T17810] do_syscall_64+0xd2/0x200 [ 302.302998][T17810] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 302.303104][T17810] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 302.303138][T17810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.303184][T17810] RIP: 0033:0x7f22cfa5efc9 [ 302.303198][T17810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.303215][T17810] RSP: 002b:00007f22ce47d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 302.303270][T17810] RAX: ffffffffffffffda RBX: 00007f22cfcb6180 RCX: 00007f22cfa5efc9 [ 302.303281][T17810] RDX: 0000000000002982 RSI: 0000200000001840 RDI: ffffffffffffff9c [ 302.303293][T17810] RBP: 00007f22ce47d090 R08: 0000000000000000 R09: 0000000000000000 [ 302.303304][T17810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.303351][T17810] R13: 00007f22cfcb6218 R14: 00007f22cfcb6180 R15: 00007ffe26a3d408 [ 302.303367][T17810] [ 302.550185][T17809] loop4: detected capacity change from 0 to 8192 [ 302.646635][T17827] loop1: detected capacity change from 0 to 512 [ 302.661953][T17827] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 302.835559][T17835] __nla_validate_parse: 17 callbacks suppressed [ 302.835579][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5025'. [ 302.851217][T17835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.858867][T17835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.882739][T17840] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 302.922078][T17844] netlink: 'syz.0.5028': attribute type 8 has an invalid length. [ 302.930779][ T29] kauditd_printk_skb: 1169 callbacks suppressed [ 302.930794][ T29] audit: type=1326 audit(303.282:36281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 303.043317][ T29] audit: type=1326 audit(303.282:36282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 303.066458][ T29] audit: type=1326 audit(303.282:36283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 303.089590][ T29] audit: type=1326 audit(303.282:36284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 303.112659][ T29] audit: type=1326 audit(303.282:36285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.1.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f9981efc9 code=0x7ffc0000 [ 303.136075][ T29] audit: type=1326 audit(303.282:36286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 303.159353][ T29] audit: type=1326 audit(303.282:36287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 303.182412][ T29] audit: type=1326 audit(303.282:36288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 303.205841][ T29] audit: type=1326 audit(303.282:36289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 303.228945][ T29] audit: type=1326 audit(303.282:36290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17843 comm="syz.0.5028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56c01efc9 code=0x7ffc0000 [ 303.364562][T17873] loop4: detected capacity change from 0 to 512 [ 303.374297][T17873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.382158][T17873] EXT4-fs: Ignoring removed oldalloc option [ 303.400603][T17873] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.5042: Parent and EA inode have the same ino 15 [ 303.413769][T17882] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5034'. [ 303.415309][T17873] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.5042: Parent and EA inode have the same ino 15 [ 303.436436][T17882] loop5: detected capacity change from 0 to 1024 [ 303.437957][T17873] EXT4-fs (loop4): 1 orphan inode deleted [ 303.552680][T17884] sd 0:0:1:0: device reset [ 303.557890][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5043'. [ 303.604698][T17889] loop4: detected capacity change from 0 to 8192 [ 304.106186][T17895] loop5: detected capacity change from 0 to 256 [ 304.113949][T17895] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.218703][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5050'. [ 304.295410][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5052'. [ 304.472963][T17926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5056'. [ 304.482557][T17926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5056'. [ 304.518179][T17926] loop4: detected capacity change from 0 to 1024 [ 304.525089][T17926] EXT4-fs: Ignoring removed bh option [ 304.530629][T17926] EXT4-fs: inline encryption not supported [ 304.536884][T17926] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 304.546658][T17926] EXT4-fs (loop4): group descriptors corrupted! [ 304.557122][T17926] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5056'. [ 304.566290][T17926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5056'. [ 304.970611][T17937] loop5: detected capacity change from 0 to 8192 [ 305.173678][T17949] loop1: detected capacity change from 0 to 8192 [ 305.469741][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5067'. [ 305.496812][T17949] ================================================================== [ 305.505020][T17949] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 305.513551][T17949] [ 305.515888][T17949] write to 0xffff88811a4d1c20 of 8 bytes by task 17950 on cpu 0: [ 305.523609][T17949] sync_mapping_buffers+0x163/0x7d0 [ 305.528914][T17949] fat_file_fsync+0xaa/0x100 [ 305.533519][T17949] vfs_fsync_range+0x10d/0x130 [ 305.538382][T17949] generic_file_write_iter+0x1b8/0x2f0 [ 305.543846][T17949] do_iter_readv_writev+0x4a1/0x540 [ 305.549266][T17949] vfs_writev+0x2df/0x8b0 [ 305.553615][T17949] __se_sys_pwritev2+0xfc/0x1c0 [ 305.558566][T17949] __x64_sys_pwritev2+0x67/0x80 [ 305.563531][T17949] x64_sys_call+0x2c59/0x3000 [ 305.568218][T17949] do_syscall_64+0xd2/0x200 [ 305.572883][T17949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.578768][T17949] [ 305.581085][T17949] read to 0xffff88811a4d1c20 of 8 bytes by task 17949 on cpu 1: [ 305.588807][T17949] mark_buffer_dirty_inode+0x95/0x1c0 [ 305.594197][T17949] fat_mirror_bhs+0x234/0x320 [ 305.599037][T17949] fat_alloc_clusters+0x98b/0xa80 [ 305.604057][T17949] fat_get_block+0x258/0x5e0 [ 305.608654][T17949] __block_write_begin_int+0x400/0xf90 [ 305.614119][T17949] cont_write_begin+0x5fc/0x970 [ 305.618965][T17949] fat_write_begin+0x4f/0xe0 [ 305.623548][T17949] cont_write_begin+0x1b0/0x970 [ 305.628484][T17949] fat_write_begin+0x4f/0xe0 [ 305.633064][T17949] generic_cont_expand_simple+0xb0/0x150 [ 305.638694][T17949] fat_cont_expand+0x3e/0x170 [ 305.643448][T17949] fat_setattr+0x2a5/0x8a0 [ 305.647943][T17949] notify_change+0x872/0x8f0 [ 305.652559][T17949] do_ftruncate+0x34b/0x450 [ 305.657054][T17949] __x64_sys_ftruncate+0x68/0xc0 [ 305.661985][T17949] x64_sys_call+0x2d61/0x3000 [ 305.666821][T17949] do_syscall_64+0xd2/0x200 [ 305.671336][T17949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.677321][T17949] [ 305.679639][T17949] value changed: 0xffff88811a44be08 -> 0x0000000000000000 [ 305.686744][T17949] [ 305.689059][T17949] Reported by Kernel Concurrency Sanitizer on: [ 305.695195][T17949] CPU: 1 UID: 0 PID: 17949 Comm: syz.1.5066 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 305.706561][T17949] Tainted: [W]=WARN [ 305.710352][T17949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.720399][T17949] ==================================================================