last executing test programs: 13m35.721504394s ago: executing program 4 (id=259): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000003f80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x206}, 0x18) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 13m35.486912699s ago: executing program 4 (id=266): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2040400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x48d, &(0x7f0000001100)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 13m35.262424743s ago: executing program 4 (id=274): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x200, 0x8028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffcdc}, 0x0, 0x81, 0x200000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000080000000317e80840a2a114a28be06a364fccb2d8c7c07f054605b318033fc223f73bc8e0c50396851030aeff12e316f8920184b41aebe7a44834d66ef0cd529f39628dcb11b36500a2da49de3efa52f677daad69c416d86966078c2f67cf74191c789917f915e3192c84a7493bf87b84e885a4305b7a3e6e380036ceb3d85b5ef78e9b5601e7d4c5e1ecfc58a419ff2a63fd0efc0d41823a9b7c77ec294d5f44ebcd98e0e73161c1c5ca909cacfe9b8919ceea62e48290f27305fe1d8e994492ea5d2fee7aa94b105c144203a437a228b5fc22ceb4", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x1}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000000), &(0x7f00000001c0)=r3}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 13m35.106812036s ago: executing program 4 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x7, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) socket$key(0xf, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@lazytime}, {@dioread_lock}, {@data_err_ignore}, {@dioread_nolock}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80045300, &(0x7f0000000180)) tkill(r7, 0x7) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000480)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) 13m32.054653755s ago: executing program 4 (id=335): link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) (fail_nth: 2) 13m31.396780238s ago: executing program 4 (id=346): syz_read_part_table(0x5b2, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000040)='./file1\x00', 0x5) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0xf) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100), 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 13m31.239615321s ago: executing program 32 (id=346): syz_read_part_table(0x5b2, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000040)='./file1\x00', 0x5) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0xf) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100), 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 1m6.959105364s ago: executing program 0 (id=7609): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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") 1m6.782232097s ago: executing program 0 (id=7611): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100c00, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x200000000000100) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000ec00"/29], 0x50) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000e, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) tee(0xffffffffffffffff, r1, 0x6, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) accept$packet(r1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 1m6.377334906s ago: executing program 0 (id=7612): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x8000, 0x80, 0x80000000, 0x0, {{0x26, 0x4, 0x3, 0x1a, 0x98, 0x66, 0x0, 0x7, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @rr={0x7, 0x1b, 0x1e, [@remote, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1]}, @generic={0x83, 0x11, "3ce981562f2ad15276011c6583164a"}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x0, 0x3, '-'}, {0x2, 0x2}, {0x6, 0x8, "3091bddabdc6"}, {0x5, 0x2}, {0x0, 0x7, "c17f4fc01d"}, {0x1, 0x3, "cb"}, {0x0, 0xf, "ee9035eb10b10f5e723614671d"}, {0x1, 0x4, "31b1"}]}, @noop, @timestamp_addr={0x44, 0x24, 0xb7, 0x1, 0x3, [{@multicast2, 0x7}, {@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@loopback, 0x75c}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x47, &(0x7f0000000400)=""/71, 0x41100, 0x15, '\x00', r4, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x15679, r2, 0x5, &(0x7f0000000580)=[r1, r1, r1, r3], &(0x7f00000005c0)=[{0x0, 0x2, 0xf, 0x1}, {0x3, 0x5, 0xf}, {0x0, 0x2, 0x6, 0x4}, {0x5, 0x1, 0x5, 0xb}, {0x5, 0x1, 0x0, 0x6}], 0x10, 0x8}, 0x94) readlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=""/93, 0x5d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x7800, 0x20, 0x401, 0x4, {{0x25, 0x4, 0x0, 0x8, 0x94, 0x65, 0x0, 0x9, 0x4, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x2b, 0x60, [@rand_addr=0x64010100, @broadcast, @empty, @multicast1, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}]}, @end, @timestamp={0x44, 0xc, 0x92, 0x0, 0xa, [0x1, 0x401]}, @timestamp_addr={0x44, 0xc, 0x7a, 0x1, 0x9, [{@private=0xa010100, 0x7}]}, @end, @generic={0x86, 0xf, "2e6be02f025919d937f6f6b789"}, @timestamp={0x44, 0x8, 0x2e, 0x0, 0x7, [0x6]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xd6, 0x0, 0xe, [0x2, 0x4a3d, 0x4, 0x6, 0x8000, 0x1, 0x1fb]}]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.529916921s ago: executing program 6 (id=8484): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x2000000, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="29000000000100000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r3, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) rt_sigprocmask(0x3, 0x0, &(0x7f0000000240), 0xfea4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) set_tid_address(0x0) 2.448999733s ago: executing program 2 (id=8485): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r1, 0x0, 0x3ffff) sendfile(r3, r1, 0x0, 0x7ffff000) write$binfmt_aout(r0, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.414271863s ago: executing program 1 (id=8486): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r4, 0x407, 0x6) sendmmsg$inet(r3, &(0x7f0000001840)=[{{&(0x7f00000000c0)={0x2, 0x4e1f, @multicast1}, 0x10, &(0x7f0000000640)}}, {{&(0x7f0000000840)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000980)=[{0x0}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x6e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001740)}}], 0x3, 0x200040d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r5, 0x0, 0xffffffff80000001}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) msgget$private(0x0, 0x790) r6 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) 2.292916746s ago: executing program 3 (id=8488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0xffffffffffffffb9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0xfe, "0006000000df0066952e0d16c708db720800"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 2.265961986s ago: executing program 5 (id=8489): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000001f80)=""/4098, 0x1002) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x8800000, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001007470726f7879000014000280080002400000080c08000140"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x5) unshare(0xc040400) fcntl$notify(r8, 0x402, 0x8000003d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)=r9) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.08811615s ago: executing program 3 (id=8490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000368000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c00028005000300010000000800024000000015c0ef9908000140100000090900020073797a320000000000000200000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x97, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58f00610600fe8000000000000000000000000000aafe8000000000000000000000000000aa4e2440", @ANYRES32=0x41424344, @ANYBLOB="6002fffd9078"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="32050000000000eeaa235a88a8ad6f9cf3a2a9af970061107e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.924347403s ago: executing program 5 (id=8491): r0 = socket(0x15, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000200)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x401, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x0, {0x1}, {0x2, 0xf0}, 0xfe, 0x2}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0}, {0x1}, 0x0, 0xff}], 0x40) sendmsg$nl_route_sched(r1, 0x0, 0xc4) 1.863858594s ago: executing program 3 (id=8492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0xc3200, 0x30, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000610000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) 1.849481164s ago: executing program 2 (id=8493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$SG_BLKSECTGET(r3, 0x1267, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) close_range(r5, r6, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000141, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r3, 0x0, 0x3ffff) sendfile(r8, r3, 0x0, 0x7ffff000) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r9, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.828271865s ago: executing program 1 (id=8494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 1.791480225s ago: executing program 3 (id=8495): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000000020000000000000000000181900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TCSETSW2(r2, 0x5425, 0x0) 1.791025685s ago: executing program 1 (id=8496): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e74657200"], 0xc4}}, 0x20050890) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)='m &', 0x3}], 0x1}, 0x855) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7f) 1.601303709s ago: executing program 6 (id=8497): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fe, &(0x7f0000000600)="$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") 941.284871ms ago: executing program 5 (id=8499): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) socket$kcm(0x10, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x5}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x29}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005bc588d999a81e1e55e14f6e3ecf897d82b76a6dd70bffebbde8eafa4ff3ac174bb15044903bc3ec558c5b28675fa97913edb1baf2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 599.937608ms ago: executing program 1 (id=8502): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100c00, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x200000000000100) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000ec00"/29], 0x50) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000e, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) tee(0xffffffffffffffff, r1, 0x6, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) accept$packet(r1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 390.991642ms ago: executing program 2 (id=8503): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x4, 0x4008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, 0x0, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000e80)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) bind$inet(r3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095", @ANYRESHEX=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="aa682fd4195715993989ad6e60227a75591ebc405a902b77c23c423c22ac432ee0dd806fa57ce19941988fb9309694a2269d25969acc441c4bc243892cd212a4e4dcd70a", @ANYRES16=r8, @ANYRESOCT=r7, @ANYRES16=r0, @ANYBLOB="0c0099000600000077000000"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10009010) r9 = socket$vsock_stream(0x28, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd02515302000000000000008f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da48563f25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01e72c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce382829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a06f747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cc95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973bf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd188b2c03c52060a86e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a68f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccf8f28c666faeb9919d68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df02800"/2537, 0x9e9}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)}}], 0x1, 0x240080e4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2a1}, 0x94) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bfffffff903000006a1082000000000204000000000700009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 349.947383ms ago: executing program 6 (id=8504): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r1, 0x0, 0x3ffff) sendfile(r3, r1, 0x0, 0x7ffff000) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 20.77972ms ago: executing program 2 (id=8505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0xc3200, 0x30, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000610000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) 20.485769ms ago: executing program 2 (id=8506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x8) 0s ago: executing program 2 (id=8507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x2000000, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="29000000000100000000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r3, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) rt_sigprocmask(0x3, 0x0, &(0x7f0000000240), 0xfea4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000000)) set_tid_address(0x0) kernel console output (not intermixed with test programs): .358869][T27133] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7652: Failed to acquire dquot type 0 [ 802.370856][T27133] EXT4-fs (loop2): 1 orphan inode deleted [ 802.377447][T27133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.401564][T27032] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.408705][T27032] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.437614][T27137] loop1: detected capacity change from 0 to 764 [ 802.444172][T27032] bridge_slave_0: entered allmulticast mode [ 802.496914][T27137] netlink: 'syz.1.7656': attribute type 16 has an invalid length. [ 802.504913][T27137] netlink: 'syz.1.7656': attribute type 3 has an invalid length. [ 802.512651][T27137] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.7656'. [ 802.527803][T27032] bridge_slave_0: entered promiscuous mode [ 802.566317][T27032] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.573464][T27032] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.668026][T27032] bridge_slave_1: entered allmulticast mode [ 802.685928][T27119] JBD2: no valid journal superblock found [ 802.691702][T27119] EXT4-fs (loop3): Could not load journal inode [ 802.716364][T27138] rock: directory entry would overflow storage [ 802.722604][T27138] rock: sig=0x4f50, size=4, remaining=3 [ 802.728229][T27138] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 802.742516][T27032] bridge_slave_1: entered promiscuous mode [ 802.862465][T27137] rock: directory entry would overflow storage [ 802.868727][T27137] rock: sig=0x4f50, size=4, remaining=3 [ 802.874383][T27137] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 802.914076][T27032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.938730][T27032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.029565][T27032] team0: Port device team_slave_0 added [ 803.055440][T27032] team0: Port device team_slave_1 added [ 803.117104][T27144] macvtap0: refused to change device tx_queue_len [ 803.124748][T27032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.131740][T27032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.157904][T27032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.262608][T27149] loop5: detected capacity change from 0 to 512 [ 803.288330][T27149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.326302][T27032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.333306][T27032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.359524][T27032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.383192][T27149] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.429138][T27149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.535413][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.621778][T27149] IPVS: Unknown mcast interface: le0 [ 803.674660][T27166] loop3: detected capacity change from 0 to 164 [ 803.693557][T27166] syz.3.7664: attempt to access beyond end of device [ 803.693557][T27166] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 803.714334][T27166] syz.3.7664: attempt to access beyond end of device [ 803.714334][T27166] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 803.728943][T27168] loop5: detected capacity change from 0 to 128 [ 803.738576][T27168] EXT4-fs: Mount option(s) incompatible with ext2 [ 803.748633][T27032] hsr_slave_0: entered promiscuous mode [ 803.763471][T27032] hsr_slave_1: entered promiscuous mode [ 803.770483][T27032] debugfs: 'hsr0' already exists in 'hsr' [ 803.776474][T27032] Cannot create hsr debugfs directory [ 803.794392][T27168] loop5: detected capacity change from 0 to 2048 [ 803.846260][T27172] loop3: detected capacity change from 0 to 512 [ 803.852998][T27172] EXT4-fs: Ignoring removed bh option [ 803.859202][T27168] loop5: p3 p4 < > [ 803.863126][T27168] loop5: p3 size 57344 extends beyond EOD, truncated [ 803.876948][T27172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.904929][T27172] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 803.910617][T27032] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 803.928825][T27032] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 803.939655][T27032] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 803.957785][T27032] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 803.995466][T21414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.083897][T27187] FAULT_INJECTION: forcing a failure. [ 804.083897][T27187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.097151][T27187] CPU: 1 UID: 0 PID: 27187 Comm: syz.3.7671 Not tainted syzkaller #0 PREEMPT(voluntary) [ 804.097246][T27187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 804.097264][T27187] Call Trace: [ 804.097272][T27187] [ 804.097282][T27187] __dump_stack+0x1d/0x30 [ 804.097306][T27187] dump_stack_lvl+0xe8/0x140 [ 804.097338][T27187] dump_stack+0x15/0x1b [ 804.097425][T27187] should_fail_ex+0x265/0x280 [ 804.097456][T27187] should_fail+0xb/0x20 [ 804.097478][T27187] should_fail_usercopy+0x1a/0x20 [ 804.097514][T27187] _copy_from_iter+0xd2/0xe80 [ 804.097546][T27187] ? __build_skb_around+0x1a0/0x200 [ 804.097570][T27187] ? __alloc_skb+0x223/0x320 [ 804.097716][T27187] netlink_sendmsg+0x471/0x6b0 [ 804.097746][T27187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 804.097780][T27187] __sock_sendmsg+0x142/0x180 [ 804.097821][T27187] sock_write_iter+0x165/0x1b0 [ 804.097918][T27187] do_iter_readv_writev+0x499/0x540 [ 804.097968][T27187] vfs_writev+0x2df/0x8b0 [ 804.098073][T27187] do_writev+0xe7/0x210 [ 804.098185][T27187] __x64_sys_writev+0x45/0x50 [ 804.098216][T27187] x64_sys_call+0x1e9a/0x2ff0 [ 804.098254][T27187] do_syscall_64+0xd2/0x200 [ 804.098289][T27187] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 804.098356][T27187] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 804.098449][T27187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.098471][T27187] RIP: 0033:0x7f0a70e9eec9 [ 804.098535][T27187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.098558][T27187] RSP: 002b:00007f0a6f907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 804.098581][T27187] RAX: ffffffffffffffda RBX: 00007f0a710f5fa0 RCX: 00007f0a70e9eec9 [ 804.098598][T27187] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000005 [ 804.098613][T27187] RBP: 00007f0a6f907090 R08: 0000000000000000 R09: 0000000000000000 [ 804.098625][T27187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.098640][T27187] R13: 00007f0a710f6038 R14: 00007f0a710f5fa0 R15: 00007fffbb3ab488 [ 804.098700][T27187] [ 804.101776][T27032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.345426][T27032] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.359259][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.366501][T10611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.379109][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.386246][T10611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.449063][T27207] loop2: detected capacity change from 0 to 512 [ 804.462901][T27207] EXT4-fs: Ignoring removed bh option [ 804.491685][T27207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.513736][T27032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 804.524361][T27032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.543877][T27207] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 804.556151][T27204] loop3: detected capacity change from 0 to 164 [ 804.574488][T27204] syz.3.7678: attempt to access beyond end of device [ 804.574488][T27204] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 804.612925][T27204] syz.3.7678: attempt to access beyond end of device [ 804.612925][T27204] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 804.657172][T27212] loop1: detected capacity change from 0 to 164 [ 804.709815][T27217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7680'. [ 804.740319][T27217] loop2: detected capacity change from 0 to 512 [ 804.762088][T27032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.814961][T27217] ext4: Bad value for 'resuid' [ 804.819786][T27217] ext4: Bad value for 'resuid' [ 804.921130][T27237] loop2: detected capacity change from 0 to 128 [ 804.963557][T27240] loop5: detected capacity change from 0 to 128 [ 804.994560][T27242] loop3: detected capacity change from 0 to 512 [ 805.021824][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 805.021865][ T29] audit: type=1400 audit(1758543346.951:11790): avc: denied { mounton } for pid=27241 comm="syz.3.7689" path="/353/bus" dev="tmpfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 805.056971][T27242] EXT4-fs: Ignoring removed bh option [ 805.074309][ T29] audit: type=1400 audit(1758543346.951:11791): avc: denied { recv } for pid=27199 comm="syz.1.7676" saddr=10.128.0.163 src=30036 daddr=10.128.0.61 dest=36746 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 805.100327][ T29] audit: type=1400 audit(1758543346.991:11792): avc: denied { prog_load } for pid=27247 comm="syz.5.7691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 805.120040][ T29] audit: type=1400 audit(1758543346.991:11793): avc: denied { bpf } for pid=27247 comm="syz.5.7691" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 805.141031][ T29] audit: type=1400 audit(1758543346.991:11794): avc: denied { perfmon } for pid=27247 comm="syz.5.7691" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 805.162306][ T29] audit: type=1400 audit(1758543346.991:11795): avc: denied { module_request } for pid=27032 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 805.185135][ T29] audit: type=1400 audit(1758543346.991:11796): avc: denied { create } for pid=27247 comm="syz.5.7691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 805.205038][ T29] audit: type=1400 audit(1758543346.991:11797): avc: denied { getopt } for pid=27247 comm="syz.5.7691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 805.224981][ T29] audit: type=1400 audit(1758543346.991:11798): avc: denied { map_create } for pid=27247 comm="syz.5.7691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 805.244541][ T29] audit: type=1326 audit(1758543346.991:11799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27247 comm="syz.5.7691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34cedeec9 code=0x7ffc0000 [ 805.273826][T27242] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 805.423009][T27032] veth0_vlan: entered promiscuous mode [ 805.457165][T27032] veth1_vlan: entered promiscuous mode [ 805.482505][T27032] veth0_macvtap: entered promiscuous mode [ 805.493298][T27032] veth1_macvtap: entered promiscuous mode [ 805.521295][T27032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.536275][T27032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.578343][ T4888] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.620715][ T4888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.645203][T27282] loop1: detected capacity change from 0 to 1024 [ 805.648892][ T4888] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.651991][T27282] EXT4-fs: Ignoring removed orlov option [ 805.665787][T27284] loop5: detected capacity change from 0 to 512 [ 805.672666][T10611] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.675159][T27284] EXT4-fs: Ignoring removed bh option [ 805.727870][T27284] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 805.728843][T27290] bridge_slave_0: left allmulticast mode [ 805.744175][T27290] bridge_slave_0: left promiscuous mode [ 805.750074][T27290] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.759904][T27290] bridge_slave_1: left allmulticast mode [ 805.765652][T27290] bridge_slave_1: left promiscuous mode [ 805.771676][T27290] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.781751][T27290] bond0: (slave bond_slave_0): Releasing backup interface [ 805.791839][T27290] bond0: (slave bond_slave_1): Releasing backup interface [ 805.805288][T27290] team0: Port device team_slave_0 removed [ 805.814442][T27290] team0: Port device team_slave_1 removed [ 805.821838][T27290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.829503][T27290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.839085][T27290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.846555][T27290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.856462][T27293] loop2: detected capacity change from 0 to 1024 [ 805.863780][T27293] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 805.878437][T27293] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7700: bg 0: block 10: padding at end of block bitmap is not set [ 805.919652][T27294] erspan0 speed is unknown, defaulting to 1000 [ 805.956695][T27293] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7700: Failed to acquire dquot type 0 [ 805.988863][T27290] loop6: detected capacity change from 0 to 164 [ 806.036018][T27293] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7700: Failed to acquire dquot type 0 [ 806.059623][T27294] lo speed is unknown, defaulting to 1000 [ 806.122681][T27293] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.7700: Freeing blocks not in datazone - block = 0, count = 4096 [ 806.141301][T27293] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7700: Failed to acquire dquot type 0 [ 806.153655][T27293] EXT4-fs (loop2): 1 orphan inode deleted [ 806.368099][T27300] loop5: detected capacity change from 0 to 164 [ 806.897027][T27339] loop6: detected capacity change from 0 to 164 [ 807.034824][T27324] loop3: detected capacity change from 0 to 164 [ 807.085353][T27324] syz.3.7715: attempt to access beyond end of device [ 807.085353][T27324] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 807.085405][T27324] syz.3.7715: attempt to access beyond end of device [ 807.085405][T27324] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 807.357052][T27350] loop6: detected capacity change from 0 to 164 [ 807.381191][T27351] loop5: detected capacity change from 0 to 164 [ 807.435057][T27347] syz.6.7721: attempt to access beyond end of device [ 807.435057][T27347] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 807.435184][T27347] syz.6.7721: attempt to access beyond end of device [ 807.435184][T27347] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 807.953106][T27377] loop3: detected capacity change from 0 to 164 [ 808.023223][T27380] loop1: detected capacity change from 0 to 164 [ 808.311141][T27390] loop3: detected capacity change from 0 to 164 [ 808.337589][T27390] syz.3.7733: attempt to access beyond end of device [ 808.337589][T27390] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 808.375585][T27390] syz.3.7733: attempt to access beyond end of device [ 808.375585][T27390] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 808.484210][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7735'. [ 808.498903][T27392] batadv0: entered promiscuous mode [ 808.517675][T27392] macvtap1: entered promiscuous mode [ 808.523163][T27392] macvtap1: entered allmulticast mode [ 808.528702][T27392] batadv0: entered allmulticast mode [ 808.561197][T27392] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 808.596834][T27399] batadv0: left allmulticast mode [ 808.602029][T27399] batadv0: left promiscuous mode [ 808.812742][T27411] loop5: detected capacity change from 0 to 164 [ 808.872287][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7745'. [ 809.202576][T27437] netlink: 'syz.3.7752': attribute type 4 has an invalid length. [ 809.236377][T27437] netlink: 'syz.3.7752': attribute type 4 has an invalid length. [ 809.272427][T27437] loop3: detected capacity change from 0 to 256 [ 809.334272][T27445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7756'. [ 809.400534][T27441] loop1: detected capacity change from 0 to 164 [ 809.435636][T27441] syz.1.7754: attempt to access beyond end of device [ 809.435636][T27441] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 809.476657][T27441] syz.1.7754: attempt to access beyond end of device [ 809.476657][T27441] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 809.525054][T27452] loop5: detected capacity change from 0 to 164 [ 809.797347][T21843] EXT4-fs unmount: 8 callbacks suppressed [ 809.797365][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.057160][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 810.057177][ T29] audit: type=1326 audit(1758543351.991:12020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.285175][ T29] audit: type=1326 audit(1758543352.031:12021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.309209][ T29] audit: type=1326 audit(1758543352.031:12022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.333008][ T29] audit: type=1326 audit(1758543352.031:12023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.356737][ T29] audit: type=1326 audit(1758543352.031:12024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.357070][T27486] loop3: detected capacity change from 0 to 164 [ 810.380900][ T29] audit: type=1326 audit(1758543352.031:12025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.411248][ T29] audit: type=1326 audit(1758543352.031:12026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.425398][T27488] loop2: detected capacity change from 0 to 512 [ 810.435445][ T29] audit: type=1326 audit(1758543352.031:12027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.465642][ T29] audit: type=1326 audit(1758543352.031:12028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.472879][T27488] EXT4-fs: Ignoring removed bh option [ 810.489208][ T29] audit: type=1326 audit(1758543352.031:12029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27475 comm="syz.6.7768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 810.547920][T27486] syz.3.7770: attempt to access beyond end of device [ 810.547920][T27486] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 810.564513][T27491] loop6: detected capacity change from 0 to 164 [ 810.597499][T27488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.623089][T27486] syz.3.7770: attempt to access beyond end of device [ 810.623089][T27486] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 810.644921][T27488] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 810.765423][T27498] loop5: detected capacity change from 0 to 164 [ 810.765830][T27502] netlink: 'syz.3.7773': attribute type 4 has an invalid length. [ 810.794527][T27503] loop1: detected capacity change from 0 to 1024 [ 810.810857][T27498] syz.5.7772: attempt to access beyond end of device [ 810.810857][T27498] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 810.814744][T27503] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 810.860414][T27498] syz.5.7772: attempt to access beyond end of device [ 810.860414][T27498] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 810.879891][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.894082][T27507] loop3: detected capacity change from 0 to 256 [ 810.902928][T27503] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7769: bg 0: block 10: padding at end of block bitmap is not set [ 810.956864][T27503] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.7769: Failed to acquire dquot type 0 [ 810.988151][T27509] loop2: detected capacity change from 0 to 1024 [ 810.996319][T27509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 810.996913][T27503] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.7769: Failed to acquire dquot type 0 [ 811.007341][T27509] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 811.028969][T27509] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 811.059274][T27509] JBD2: no valid journal superblock found [ 811.065219][T27509] EXT4-fs (loop2): Could not load journal inode [ 811.080157][T27503] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.7769: Freeing blocks not in datazone - block = 0, count = 4096 [ 811.114588][T27503] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.7769: Failed to acquire dquot type 0 [ 811.204915][T27503] EXT4-fs (loop1): 1 orphan inode deleted [ 811.255046][T27503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 811.648346][T27521] loop2: detected capacity change from 0 to 164 [ 811.839898][T27543] loop6: detected capacity change from 0 to 164 [ 811.946966][T27543] syz.6.7783: attempt to access beyond end of device [ 811.946966][T27543] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 811.971697][T27542] loop5: detected capacity change from 0 to 8192 [ 811.979627][T27542] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 812.061356][T27543] syz.6.7783: attempt to access beyond end of device [ 812.061356][T27543] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 812.237837][T27553] loop3: detected capacity change from 0 to 164 [ 812.254220][T27546] syz.3.7786: attempt to access beyond end of device [ 812.254220][T27546] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 812.295261][T27546] syz.3.7786: attempt to access beyond end of device [ 812.295261][T27546] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 812.407194][T27559] loop5: detected capacity change from 0 to 164 [ 813.007200][T27586] loop2: detected capacity change from 0 to 164 [ 813.075947][T27583] loop5: detected capacity change from 0 to 164 [ 813.086062][T27589] loop6: detected capacity change from 0 to 164 [ 813.194019][T27596] loop5: detected capacity change from 0 to 128 [ 813.397797][T27603] loop6: detected capacity change from 0 to 128 [ 813.459826][T27604] loop3: detected capacity change from 0 to 164 [ 814.133075][T27634] loop5: detected capacity change from 0 to 164 [ 814.452407][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.549790][T27645] loop3: detected capacity change from 0 to 164 [ 814.596149][T27635] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 814.667768][T27635] loop2: detected capacity change from 0 to 512 [ 814.691932][T27667] loop1: detected capacity change from 0 to 512 [ 814.748987][T27667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.767251][T27667] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.799230][T27667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.846674][T27663] loop3: detected capacity change from 0 to 164 [ 814.876089][T27673] loop6: detected capacity change from 0 to 512 [ 814.891259][T27667] IPVS: Unknown mcast interface: le0 [ 814.899191][T27663] bio_check_eod: 6 callbacks suppressed [ 814.899218][T27663] syz.3.7820: attempt to access beyond end of device [ 814.899218][T27663] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 814.921773][T27663] syz.3.7820: attempt to access beyond end of device [ 814.921773][T27663] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 814.941359][T27673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.973105][T27673] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.984078][T27673] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.006650][T27673] IPVS: Unknown mcast interface: le0 [ 815.137122][T27685] FAULT_INJECTION: forcing a failure. [ 815.137122][T27685] name failslab, interval 1, probability 0, space 0, times 0 [ 815.149969][T27685] CPU: 1 UID: 0 PID: 27685 Comm: syz.3.7826 Not tainted syzkaller #0 PREEMPT(voluntary) [ 815.150015][T27685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 815.150031][T27685] Call Trace: [ 815.150039][T27685] [ 815.150048][T27685] __dump_stack+0x1d/0x30 [ 815.150079][T27685] dump_stack_lvl+0xe8/0x140 [ 815.150104][T27685] dump_stack+0x15/0x1b [ 815.150126][T27685] should_fail_ex+0x265/0x280 [ 815.150210][T27685] should_failslab+0x8c/0xb0 [ 815.150239][T27685] kmem_cache_alloc_noprof+0x50/0x310 [ 815.150298][T27685] ? getname_flags+0x80/0x3b0 [ 815.150347][T27685] ? fput+0x8f/0xc0 [ 815.150377][T27685] getname_flags+0x80/0x3b0 [ 815.150464][T27685] __x64_sys_unlinkat+0x70/0xb0 [ 815.150487][T27685] x64_sys_call+0x2ede/0x2ff0 [ 815.150516][T27685] do_syscall_64+0xd2/0x200 [ 815.150554][T27685] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 815.150634][T27685] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 815.150672][T27685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.150745][T27685] RIP: 0033:0x7f0a70e9eec9 [ 815.150765][T27685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.150849][T27685] RSP: 002b:00007f0a6f907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 815.150873][T27685] RAX: ffffffffffffffda RBX: 00007f0a710f5fa0 RCX: 00007f0a70e9eec9 [ 815.150890][T27685] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 815.150916][T27685] RBP: 00007f0a6f907090 R08: 0000000000000000 R09: 0000000000000000 [ 815.150933][T27685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.151003][T27685] R13: 00007f0a710f6038 R14: 00007f0a710f5fa0 R15: 00007fffbb3ab488 [ 815.151024][T27685] [ 815.555298][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 815.555317][ T29] audit: type=1400 audit(1758543357.491:12180): avc: denied { create } for pid=27699 comm="syz.3.7832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 815.614638][T27692] loop5: detected capacity change from 0 to 164 [ 815.737303][T27709] loop2: detected capacity change from 0 to 1024 [ 815.747195][T27709] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 815.767226][T27712] loop3: detected capacity change from 0 to 512 [ 815.767659][T27712] EXT4-fs: Ignoring removed bh option [ 815.853511][T27709] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7827: bg 0: block 10: padding at end of block bitmap is not set [ 815.853675][T27709] Quota error (device loop2): write_blk: dquota write failed [ 815.853691][T27709] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2 [ 815.853779][T27709] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 815.853865][T27709] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7827: Failed to acquire dquot type 0 [ 815.853979][T27709] Quota error (device loop2): write_blk: dquota write failed [ 815.853994][T27709] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2 [ 815.854074][T27709] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 815.854094][T27709] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7827: Failed to acquire dquot type 0 [ 815.854310][T27709] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.7827: Freeing blocks not in datazone - block = 0, count = 4096 [ 815.857089][T27709] Quota error (device loop2): write_blk: dquota write failed [ 815.857106][T27709] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2 [ 815.857188][T27709] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 815.857291][T27709] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.7827: Failed to acquire dquot type 0 [ 815.864309][T27709] EXT4-fs (loop2): 1 orphan inode deleted [ 815.864745][T27709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.874911][T27718] loop6: detected capacity change from 0 to 164 [ 815.877642][T27712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.900346][T27716] syz.6.7835: attempt to access beyond end of device [ 815.900346][T27716] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 816.094610][T27712] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 816.114380][T27716] syz.6.7835: attempt to access beyond end of device [ 816.114380][T27716] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 816.214945][T21414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.310246][T27736] loop3: detected capacity change from 0 to 256 [ 816.370589][T27742] loop1: detected capacity change from 0 to 512 [ 816.382297][T27742] EXT4-fs: Ignoring removed bh option [ 816.409303][T27742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.433638][T27742] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 816.545390][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.596134][T27754] loop1: detected capacity change from 0 to 128 [ 816.763501][T27767] loop5: detected capacity change from 0 to 128 [ 816.942884][T27773] loop5: detected capacity change from 0 to 256 [ 817.246266][T27799] loop3: detected capacity change from 0 to 164 [ 817.262519][T27799] syz.3.7865: attempt to access beyond end of device [ 817.262519][T27799] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 817.276942][T27799] syz.3.7865: attempt to access beyond end of device [ 817.276942][T27799] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 817.295329][T27801] loop5: detected capacity change from 0 to 164 [ 817.313787][T27801] syz.5.7861: attempt to access beyond end of device [ 817.313787][T27801] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 817.344434][T27801] syz.5.7861: attempt to access beyond end of device [ 817.344434][T27801] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 817.359393][T27790] loop1: detected capacity change from 0 to 164 [ 817.372088][T27790] syz.1.7866: attempt to access beyond end of device [ 817.372088][T27790] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 817.401630][T27790] syz.1.7866: attempt to access beyond end of device [ 817.401630][T27790] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 817.514913][T27805] SELinux: Context @ is not valid (left unmapped). [ 817.695023][T27811] loop1: detected capacity change from 0 to 8192 [ 817.717393][T27811] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 817.845316][T27826] loop1: detected capacity change from 0 to 512 [ 817.878908][T27826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.940098][T27824] loop3: detected capacity change from 0 to 8192 [ 817.959926][T27826] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.010654][T27824] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 818.043345][T27824] FAULT_INJECTION: forcing a failure. [ 818.043345][T27824] name failslab, interval 1, probability 0, space 0, times 0 [ 818.056095][T27824] CPU: 1 UID: 0 PID: 27824 Comm: syz.3.7876 Not tainted syzkaller #0 PREEMPT(voluntary) [ 818.056177][T27824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 818.056195][T27824] Call Trace: [ 818.056231][T27824] [ 818.056239][T27824] __dump_stack+0x1d/0x30 [ 818.056265][T27824] dump_stack_lvl+0xe8/0x140 [ 818.056290][T27824] dump_stack+0x15/0x1b [ 818.056311][T27824] should_fail_ex+0x265/0x280 [ 818.056347][T27824] should_failslab+0x8c/0xb0 [ 818.056432][T27824] kmem_cache_alloc_noprof+0x50/0x310 [ 818.056491][T27824] ? getname_flags+0x80/0x3b0 [ 818.056521][T27824] ? fput+0x8f/0xc0 [ 818.056559][T27824] getname_flags+0x80/0x3b0 [ 818.056600][T27824] __x64_sys_unlinkat+0x70/0xb0 [ 818.056702][T27824] x64_sys_call+0x2ede/0x2ff0 [ 818.056731][T27824] do_syscall_64+0xd2/0x200 [ 818.056773][T27824] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 818.056834][T27824] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 818.056873][T27824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.056895][T27824] RIP: 0033:0x7f0a70e9eec9 [ 818.056911][T27824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.056935][T27824] RSP: 002b:00007f0a6f907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 818.057036][T27824] RAX: ffffffffffffffda RBX: 00007f0a710f5fa0 RCX: 00007f0a70e9eec9 [ 818.057049][T27824] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 818.057061][T27824] RBP: 00007f0a6f907090 R08: 0000000000000000 R09: 0000000000000000 [ 818.057073][T27824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.057086][T27824] R13: 00007f0a710f6038 R14: 00007f0a710f5fa0 R15: 00007fffbb3ab488 [ 818.057110][T27824] [ 818.383010][T27846] smc: net device bond0 applied user defined pnetid SYZ0 [ 818.390582][T27846] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 818.433408][T27847] smc: net device bond0 erased user defined pnetid SYZ0 [ 818.444345][T27847] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 818.552018][T27835] loop5: detected capacity change from 0 to 1024 [ 818.560523][T27835] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 818.615418][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.634456][T27835] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7879: bg 0: block 10: padding at end of block bitmap is not set [ 818.654891][T27835] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7879: Failed to acquire dquot type 0 [ 818.757085][T27835] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7879: Failed to acquire dquot type 0 [ 818.788457][T27866] loop2: detected capacity change from 0 to 512 [ 818.832453][T27866] EXT4-fs: Ignoring removed bh option [ 818.913367][T27866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.974527][T27835] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.7879: Freeing blocks not in datazone - block = 0, count = 4096 [ 819.000075][T27864] loop3: detected capacity change from 0 to 8192 [ 819.009741][T27866] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 819.021871][T27864] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 819.054560][T27835] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7879: Failed to acquire dquot type 0 [ 819.069693][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.079849][T27862] FAULT_INJECTION: forcing a failure. [ 819.079849][T27862] name failslab, interval 1, probability 0, space 0, times 0 [ 819.092702][T27862] CPU: 1 UID: 0 PID: 27862 Comm: syz.3.7887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 819.092737][T27862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.092811][T27862] Call Trace: [ 819.092821][T27862] [ 819.092832][T27862] __dump_stack+0x1d/0x30 [ 819.092864][T27862] dump_stack_lvl+0xe8/0x140 [ 819.092889][T27862] dump_stack+0x15/0x1b [ 819.092924][T27862] should_fail_ex+0x265/0x280 [ 819.092949][T27862] should_failslab+0x8c/0xb0 [ 819.092978][T27862] kmem_cache_alloc_noprof+0x50/0x310 [ 819.093014][T27862] ? audit_log_start+0x365/0x6c0 [ 819.093115][T27862] audit_log_start+0x365/0x6c0 [ 819.093153][T27862] ? trace_reschedule_exit+0xd/0xc0 [ 819.093253][T27862] audit_seccomp+0x48/0x100 [ 819.093287][T27862] ? __seccomp_filter+0x68c/0x10d0 [ 819.093383][T27862] __seccomp_filter+0x69d/0x10d0 [ 819.093410][T27862] ? _raw_spin_unlock+0x26/0x50 [ 819.093446][T27862] __secure_computing+0x82/0x150 [ 819.093479][T27862] syscall_trace_enter+0xcf/0x1e0 [ 819.093584][T27862] do_syscall_64+0xac/0x200 [ 819.093626][T27862] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 819.093657][T27862] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 819.093758][T27862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.093780][T27862] RIP: 0033:0x7f0a70e9eec9 [ 819.093798][T27862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.093831][T27862] RSP: 002b:00007f0a6f907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 819.093859][T27862] RAX: ffffffffffffffda RBX: 00007f0a710f5fa0 RCX: 00007f0a70e9eec9 [ 819.093876][T27862] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 819.093890][T27862] RBP: 00007f0a6f907090 R08: 0000000000000000 R09: 0000000000000000 [ 819.093905][T27862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.093921][T27862] R13: 00007f0a710f6038 R14: 00007f0a710f5fa0 R15: 00007fffbb3ab488 [ 819.093946][T27862] [ 819.298100][T27835] EXT4-fs (loop5): 1 orphan inode deleted [ 819.305120][T27835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.537170][T27878] loop1: detected capacity change from 0 to 164 [ 819.562172][T27880] loop3: detected capacity change from 0 to 1024 [ 819.569839][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.595373][T27880] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 819.654918][T27883] loop2: detected capacity change from 0 to 512 [ 819.668461][T27880] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 819.679581][T27880] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 819.704782][T27883] ext4: Unknown parameter 'noacl' [ 819.711853][T27880] JBD2: no valid journal superblock found [ 819.717667][T27880] EXT4-fs (loop3): Could not load journal inode [ 819.725623][T27883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7892'. [ 819.734739][T27883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7892'. [ 819.744471][T27883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7892'. [ 819.753738][T27883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7892'. [ 819.925385][T27895] loop3: detected capacity change from 0 to 128 [ 819.969491][T27897] loop2: detected capacity change from 0 to 512 [ 819.989303][T27897] EXT4-fs: Ignoring removed bh option [ 820.022383][T27897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.044948][T27897] ext4 filesystem being mounted at /373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 820.379480][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.439049][T27908] loop3: detected capacity change from 0 to 1024 [ 820.447624][T27908] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 820.460575][T27908] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7900: bg 0: block 10: padding at end of block bitmap is not set [ 820.475962][T27908] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.7900: Failed to acquire dquot type 0 [ 820.487873][T27908] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.7900: Failed to acquire dquot type 0 [ 820.499656][T27908] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.7900: Freeing blocks not in datazone - block = 0, count = 4096 [ 820.513827][T27908] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.7900: Failed to acquire dquot type 0 [ 820.525704][T27908] EXT4-fs (loop3): 1 orphan inode deleted [ 820.532657][T27908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.681715][T27911] loop6: detected capacity change from 0 to 256 [ 820.705290][T27913] loop1: detected capacity change from 0 to 128 [ 820.861385][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 820.861403][ T29] audit: type=1326 audit(1758543362.791:12378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 821.182763][T27917] 9pnet: Could not find request transport: 0x0000000000000003 [ 821.197814][ T29] audit: type=1326 audit(1758543362.831:12379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 821.221750][ T29] audit: type=1326 audit(1758543362.831:12380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 821.245747][ T29] audit: type=1326 audit(1758543362.831:12381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe62510ef03 code=0x7ffc0000 [ 821.269368][ T29] audit: type=1326 audit(1758543362.831:12382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe62510ef03 code=0x7ffc0000 [ 821.293182][ T29] audit: type=1326 audit(1758543362.831:12383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 821.317004][ T29] audit: type=1326 audit(1758543362.841:12384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 821.341393][ T29] audit: type=1326 audit(1758543362.841:12385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 821.365180][ T29] audit: type=1326 audit(1758543362.841:12386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 821.389023][ T29] audit: type=1326 audit(1758543362.841:12387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27914 comm="syz.6.7904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 821.574025][T27922] loop1: detected capacity change from 0 to 128 [ 821.874699][T21414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.106466][T27946] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 822.138395][T27941] loop3: detected capacity change from 0 to 164 [ 822.176921][T27941] bio_check_eod: 2 callbacks suppressed [ 822.176936][T27941] syz.3.7913: attempt to access beyond end of device [ 822.176936][T27941] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 822.204506][T27941] syz.3.7913: attempt to access beyond end of device [ 822.204506][T27941] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 822.425737][T27952] loop1: detected capacity change from 0 to 164 [ 822.433450][T27961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7921'. [ 822.453264][T27961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7921'. [ 822.522252][T27966] loop1: detected capacity change from 0 to 128 [ 822.822621][T27980] loop1: detected capacity change from 0 to 1024 [ 822.904816][T27980] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 822.919909][T27980] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7927: bg 0: block 10: padding at end of block bitmap is not set [ 822.937332][T27980] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.7927: Failed to acquire dquot type 0 [ 822.949319][T27980] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.7927: Failed to acquire dquot type 0 [ 822.961638][T27980] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.7927: Freeing blocks not in datazone - block = 0, count = 4096 [ 822.978842][T27980] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.7927: Failed to acquire dquot type 0 [ 822.990503][T27980] EXT4-fs (loop1): 1 orphan inode deleted [ 822.996980][T27980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.017210][T27981] loop2: detected capacity change from 0 to 1024 [ 823.033587][T27976] loop6: detected capacity change from 0 to 8192 [ 823.071994][T27981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 823.110698][T27976] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 823.166710][T27981] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 823.177699][T27981] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 823.359434][T27981] JBD2: no valid journal superblock found [ 823.365322][T27981] EXT4-fs (loop2): Could not load journal inode [ 823.540610][T27986] loop3: detected capacity change from 0 to 128 [ 823.612610][T27990] loop3: detected capacity change from 0 to 128 [ 823.712835][T23402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.518907][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.532127][T28011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7938'. [ 824.541109][T28011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7938'. [ 824.629520][T28020] loop1: detected capacity change from 0 to 128 [ 824.730245][T28025] loop6: detected capacity change from 0 to 512 [ 824.730626][T28025] EXT4-fs: Ignoring removed bh option [ 824.737072][T28027] loop1: detected capacity change from 0 to 164 [ 824.774719][T28027] syz.1.7945: attempt to access beyond end of device [ 824.774719][T28027] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 824.774759][T28027] syz.1.7945: attempt to access beyond end of device [ 824.774759][T28027] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 824.790229][T28025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.790395][T28025] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 824.871590][T28034] loop1: detected capacity change from 0 to 512 [ 824.871897][T28034] EXT4-fs: Ignoring removed bh option [ 824.913210][T28034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.958181][T27032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.964367][T28034] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 825.013499][T28044] FAULT_INJECTION: forcing a failure. [ 825.013499][T28044] name failslab, interval 1, probability 0, space 0, times 0 [ 825.013563][T28044] CPU: 1 UID: 0 PID: 28044 Comm: syz.6.7949 Not tainted syzkaller #0 PREEMPT(voluntary) [ 825.013596][T28044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 825.013612][T28044] Call Trace: [ 825.013685][T28044] [ 825.013694][T28044] __dump_stack+0x1d/0x30 [ 825.013715][T28044] dump_stack_lvl+0xe8/0x140 [ 825.013734][T28044] dump_stack+0x15/0x1b [ 825.013754][T28044] should_fail_ex+0x265/0x280 [ 825.013786][T28044] should_failslab+0x8c/0xb0 [ 825.013831][T28044] kmem_cache_alloc_noprof+0x50/0x310 [ 825.013860][T28044] ? security_inode_alloc+0x37/0x100 [ 825.013895][T28044] security_inode_alloc+0x37/0x100 [ 825.013944][T28044] inode_init_always_gfp+0x4b7/0x500 [ 825.014004][T28044] alloc_inode+0x58/0x170 [ 825.014028][T28044] create_pipe_files+0x41/0x440 [ 825.014054][T28044] __do_pipe_flags+0x44/0x150 [ 825.014085][T28044] do_pipe2+0x61/0x130 [ 825.014156][T28044] ? trace_sys_enter+0xd0/0xf0 [ 825.014209][T28044] __x64_sys_pipe2+0x30/0x40 [ 825.014242][T28044] x64_sys_call+0x2624/0x2ff0 [ 825.014268][T28044] do_syscall_64+0xd2/0x200 [ 825.014309][T28044] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 825.014336][T28044] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 825.014421][T28044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.014483][T28044] RIP: 0033:0x7fe62510eec9 [ 825.014501][T28044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.014524][T28044] RSP: 002b:00007fe623b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 825.014548][T28044] RAX: ffffffffffffffda RBX: 00007fe625365fa0 RCX: 00007fe62510eec9 [ 825.014565][T28044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 825.014643][T28044] RBP: 00007fe623b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 825.014666][T28044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.014682][T28044] R13: 00007fe625366038 R14: 00007fe625365fa0 R15: 00007fff8c27c678 [ 825.014708][T28044] [ 825.113488][T28051] loop3: detected capacity change from 0 to 128 [ 825.214994][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.661629][T28062] loop3: detected capacity change from 0 to 164 [ 825.665509][T28062] syz.3.7958: attempt to access beyond end of device [ 825.665509][T28062] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 825.665553][T28062] syz.3.7958: attempt to access beyond end of device [ 825.665553][T28062] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 825.858820][T28069] loop5: detected capacity change from 0 to 512 [ 825.927058][T28069] EXT4-fs: Ignoring removed i_version option [ 825.933187][T28069] EXT4-fs: Ignoring removed bh option [ 825.967368][T28069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.994344][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 825.994361][ T29] audit: type=1400 audit(1758543367.921:12606): avc: denied { create } for pid=28074 comm="syz.2.7961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 826.022845][T28075] erspan0 speed is unknown, defaulting to 1000 [ 826.033230][T28069] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 826.056007][T28076] FAULT_INJECTION: forcing a failure. [ 826.056007][T28076] name failslab, interval 1, probability 0, space 0, times 0 [ 826.068930][T28076] CPU: 0 UID: 0 PID: 28076 Comm: syz.2.7961 Not tainted syzkaller #0 PREEMPT(voluntary) [ 826.068966][T28076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 826.068993][T28076] Call Trace: [ 826.069002][T28076] [ 826.069012][T28076] __dump_stack+0x1d/0x30 [ 826.069136][T28076] dump_stack_lvl+0xe8/0x140 [ 826.069156][T28076] dump_stack+0x15/0x1b [ 826.069175][T28076] should_fail_ex+0x265/0x280 [ 826.069272][T28076] should_failslab+0x8c/0xb0 [ 826.069303][T28076] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 826.069332][T28076] ? shmem_alloc_inode+0x34/0x50 [ 826.069354][T28076] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 826.069437][T28076] shmem_alloc_inode+0x34/0x50 [ 826.069464][T28076] alloc_inode+0x40/0x170 [ 826.069499][T28076] new_inode+0x1d/0xe0 [ 826.069559][T28076] shmem_get_inode+0x244/0x750 [ 826.069584][T28076] __shmem_file_setup+0x113/0x210 [ 826.069767][T28076] shmem_file_setup+0x3b/0x50 [ 826.069784][T28076] __se_sys_memfd_create+0x2c3/0x590 [ 826.069808][T28076] __x64_sys_memfd_create+0x31/0x40 [ 826.069835][T28076] x64_sys_call+0x2abe/0x2ff0 [ 826.069860][T28076] do_syscall_64+0xd2/0x200 [ 826.069905][T28076] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 826.069979][T28076] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 826.070018][T28076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.070046][T28076] RIP: 0033:0x7f3396dfeec9 [ 826.070063][T28076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.070132][T28076] RSP: 002b:00007f339583de18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 826.070227][T28076] RAX: ffffffffffffffda RBX: 0000000000000476 RCX: 00007f3396dfeec9 [ 826.070242][T28076] RDX: 00007f339583def0 RSI: 0000000000000000 RDI: 00007f3396e82960 [ 826.070257][T28076] RBP: 0000200000000540 R08: 00007f339583dbb7 R09: 00007f339583de40 [ 826.070272][T28076] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 826.070350][T28076] R13: 00007f339583def0 R14: 00007f339583deb0 R15: 0000200000000380 [ 826.070372][T28076] [ 826.319052][T28075] lo speed is unknown, defaulting to 1000 [ 826.324859][ T29] audit: type=1400 audit(1758543368.231:12607): avc: denied { read write } for pid=28077 comm="syz.1.7962" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 826.348770][ T29] audit: type=1400 audit(1758543368.231:12608): avc: denied { open } for pid=28077 comm="syz.1.7962" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 826.385403][T28083] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.7959: iget: bad i_size value: 2533274857506816 [ 826.406163][T28083] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.7959: iget: bad i_size value: 2533274857506816 [ 826.438799][T28069] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.7959: iget: bad i_size value: 2533274857506816 [ 826.467156][T28069] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.7959: iget: bad i_size value: 2533274857506816 [ 826.498709][ T29] audit: type=1400 audit(1758543368.341:12609): avc: denied { ioctl } for pid=28077 comm="syz.1.7962" path="/dev/vsock" dev="devtmpfs" ino=257 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 826.556049][T28083] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.7959: iget: bad i_size value: 2533274857506816 [ 826.574804][ T29] audit: type=1400 audit(1758543368.491:12610): avc: denied { write } for pid=28068 comm="syz.5.7959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 826.602887][T28090] loop1: detected capacity change from 0 to 164 [ 826.685785][T28069] erspan0 speed is unknown, defaulting to 1000 [ 826.765119][T28098] loop1: detected capacity change from 0 to 128 [ 826.834861][T28069] lo speed is unknown, defaulting to 1000 [ 826.915055][T28107] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 827.432177][T28122] loop1: detected capacity change from 0 to 1024 [ 827.448202][T28122] EXT4-fs: Ignoring removed orlov option [ 827.459476][T28122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.489120][T28122] erspan0 speed is unknown, defaulting to 1000 [ 827.526923][T23402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.732503][T28122] lo speed is unknown, defaulting to 1000 [ 827.769528][T28125] loop5: detected capacity change from 0 to 164 [ 827.787009][T28127] loop2: detected capacity change from 0 to 8192 [ 827.805927][T28127] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 827.818584][T28132] loop6: detected capacity change from 0 to 128 [ 827.829026][ T29] audit: type=1326 audit(1758543369.761:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28126 comm="syz.2.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3396dfeec9 code=0x7ffc0000 [ 827.877319][ T29] audit: type=1326 audit(1758543369.791:12612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28126 comm="syz.2.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3396dfeec9 code=0x7ffc0000 [ 827.901135][ T29] audit: type=1326 audit(1758543369.791:12613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28126 comm="syz.2.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3396dfeec9 code=0x7ffc0000 [ 827.924985][ T29] audit: type=1326 audit(1758543369.791:12614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28126 comm="syz.2.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3396dfeec9 code=0x7ffc0000 [ 827.948861][ T29] audit: type=1326 audit(1758543369.791:12615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28126 comm="syz.2.7977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3396dfeec9 code=0x7ffc0000 [ 828.011447][T28136] loop6: detected capacity change from 0 to 256 [ 828.136790][T28142] loop2: detected capacity change from 0 to 512 [ 828.180953][T28142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.203728][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.223046][T28142] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 828.299203][T28142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.410947][T28142] IPVS: Unknown mcast interface: le0 [ 828.490380][T28164] loop1: detected capacity change from 0 to 256 [ 828.501327][T28161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7988'. [ 828.640644][T28169] loop5: detected capacity change from 0 to 8192 [ 828.659269][T28169] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 828.911415][T28191] loop3: detected capacity change from 0 to 164 [ 828.930269][T28191] syz.3.7999: attempt to access beyond end of device [ 828.930269][T28191] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 828.930316][T28191] syz.3.7999: attempt to access beyond end of device [ 828.930316][T28191] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 829.143039][T28198] loop2: detected capacity change from 0 to 164 [ 829.232661][T28208] loop3: detected capacity change from 0 to 1024 [ 829.233926][T28208] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 829.296280][T28208] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8002: bg 0: block 10: padding at end of block bitmap is not set [ 829.296812][T28208] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8002: Failed to acquire dquot type 0 [ 829.297407][T28208] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8002: Failed to acquire dquot type 0 [ 829.298369][T28208] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.8002: Freeing blocks not in datazone - block = 0, count = 4096 [ 829.298562][T28208] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8002: Failed to acquire dquot type 0 [ 829.298837][T28208] EXT4-fs (loop3): 1 orphan inode deleted [ 829.299321][T28208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.538503][T28218] loop6: detected capacity change from 0 to 8192 [ 829.559394][T28218] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 829.695214][T28228] loop5: detected capacity change from 0 to 512 [ 829.727380][T28228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.816408][T28228] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.834657][T28228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.869522][T28228] IPVS: Unknown mcast interface: le0 [ 829.968529][T28243] loop2: detected capacity change from 0 to 164 [ 829.979762][T28243] cgroup: Need name or subsystem set [ 830.383760][T28263] loop2: detected capacity change from 0 to 512 [ 830.420853][T28263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.436338][T28263] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 830.448120][T28263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.482409][T28263] IPVS: Unknown mcast interface: le0 [ 830.642415][T28273] loop2: detected capacity change from 0 to 512 [ 830.705434][T28273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 830.732927][T28279] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 830.741019][T28273] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 830.764798][T28273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.812868][T28273] IPVS: Unknown mcast interface: le0 [ 831.034103][T28293] loop2: detected capacity change from 0 to 164 [ 831.052090][T28293] syz.2.8034: attempt to access beyond end of device [ 831.052090][T28293] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 831.092511][T28293] syz.2.8034: attempt to access beyond end of device [ 831.092511][T28293] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 831.300775][T28301] loop2: detected capacity change from 0 to 164 [ 831.466767][T28310] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 831.880503][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 831.880523][ T29] audit: type=1326 audit(1758543373.811:12977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34cedeec9 code=0x7ffc0000 [ 831.923120][ T29] audit: type=1326 audit(1758543373.811:12978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34cedeec9 code=0x7ffc0000 [ 831.947389][ T29] audit: type=1326 audit(1758543373.851:12979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff34cedeec9 code=0x7ffc0000 [ 831.971391][ T29] audit: type=1326 audit(1758543373.851:12980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff34cedef03 code=0x7ffc0000 [ 831.995212][ T29] audit: type=1326 audit(1758543373.851:12981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff34cedef03 code=0x7ffc0000 [ 832.019194][ T29] audit: type=1326 audit(1758543373.851:12982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34cedeec9 code=0x7ffc0000 [ 832.043189][ T29] audit: type=1326 audit(1758543373.851:12983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34cedeec9 code=0x7ffc0000 [ 832.067027][ T29] audit: type=1326 audit(1758543373.851:12984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff34cedeec9 code=0x7ffc0000 [ 832.090771][ T29] audit: type=1326 audit(1758543373.851:12985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34cedeec9 code=0x7ffc0000 [ 832.114891][ T29] audit: type=1326 audit(1758543373.851:12986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28322 comm="syz.5.8045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34cedeec9 code=0x7ffc0000 [ 832.152146][T21414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.187213][T28327] loop6: detected capacity change from 0 to 1024 [ 832.195147][T28327] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 832.207418][T28327] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 832.218665][T28327] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 832.235807][T28327] JBD2: no valid journal superblock found [ 832.241593][T28327] EXT4-fs (loop6): Could not load journal inode [ 832.333181][T28335] loop5: detected capacity change from 0 to 128 [ 832.348705][T28329] loop3: detected capacity change from 0 to 8192 [ 832.361290][T28337] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 832.370367][T28329] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 832.536459][T28353] loop6: detected capacity change from 0 to 164 [ 832.574562][T28353] cgroup: Need name or subsystem set [ 832.785096][T28360] loop1: detected capacity change from 0 to 164 [ 832.911727][T28368] sit0: entered allmulticast mode [ 832.944021][T28368] sit0: entered promiscuous mode [ 833.213955][T28374] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 833.416856][T28390] loop6: detected capacity change from 0 to 512 [ 833.434984][T28390] EXT4-fs: Ignoring removed bh option [ 833.451782][T28390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.452057][T28390] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 833.567777][T27032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.727005][T28405] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 833.909301][T28423] loop6: detected capacity change from 0 to 128 [ 834.001944][T28418] loop1: detected capacity change from 0 to 164 [ 834.026635][T28418] syz.1.8080: attempt to access beyond end of device [ 834.026635][T28418] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 834.042935][T28433] loop3: detected capacity change from 0 to 128 [ 834.053048][T28430] loop6: detected capacity change from 0 to 128 [ 834.077703][T28418] syz.1.8080: attempt to access beyond end of device [ 834.077703][T28418] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 834.577712][T28441] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 834.661844][T28438] loop3: detected capacity change from 0 to 164 [ 834.946061][T28446] loop2: detected capacity change from 0 to 164 [ 834.951196][T28454] loop1: detected capacity change from 0 to 1024 [ 834.967927][T28446] syz.2.8090: attempt to access beyond end of device [ 834.967927][T28446] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 834.987290][T28446] syz.2.8090: attempt to access beyond end of device [ 834.987290][T28446] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 834.995150][T28454] EXT4-fs: Ignoring removed orlov option [ 835.023087][T28460] loop5: detected capacity change from 0 to 1024 [ 835.032928][T28460] EXT4-fs: Ignoring removed orlov option [ 835.060706][T28454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.066545][T28460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.069964][T28462] loop6: detected capacity change from 0 to 1024 [ 835.089439][T28462] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 835.097922][T28462] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 835.097952][T28462] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 835.108506][T28462] JBD2: no valid journal superblock found [ 835.108525][T28462] EXT4-fs (loop6): Could not load journal inode [ 835.209952][T28467] erspan0 speed is unknown, defaulting to 1000 [ 835.320647][T28468] erspan0 speed is unknown, defaulting to 1000 [ 835.330676][T28467] lo speed is unknown, defaulting to 1000 [ 835.474925][T28468] lo speed is unknown, defaulting to 1000 [ 835.660183][T28476] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 835.778588][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.954792][T28491] loop6: detected capacity change from 0 to 164 [ 835.959306][T28491] syz.6.8103: attempt to access beyond end of device [ 835.959306][T28491] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 835.959431][T28491] syz.6.8103: attempt to access beyond end of device [ 835.959431][T28491] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 836.011382][T28483] loop1: detected capacity change from 0 to 164 [ 836.112320][T28493] loop6: detected capacity change from 0 to 128 [ 836.170192][T28497] loop6: detected capacity change from 0 to 164 [ 836.194139][T28497] cgroup: Need name or subsystem set [ 836.529739][T23402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.660013][T28508] loop6: detected capacity change from 0 to 164 [ 836.724270][T28510] loop5: detected capacity change from 0 to 164 [ 836.744638][T28508] syz.6.8110: attempt to access beyond end of device [ 836.744638][T28508] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 836.761083][T28514] loop2: detected capacity change from 0 to 1024 [ 836.762029][T28508] syz.6.8110: attempt to access beyond end of device [ 836.762029][T28508] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 836.781485][T28514] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 836.792697][T28510] syz.5.8111: attempt to access beyond end of device [ 836.792697][T28510] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 836.820543][T28510] syz.5.8111: attempt to access beyond end of device [ 836.820543][T28510] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 836.821106][T28516] loop1: detected capacity change from 0 to 256 [ 836.835015][T28514] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 836.851444][T28514] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 836.884695][T28520] loop1: detected capacity change from 0 to 128 [ 836.889185][T28518] loop6: detected capacity change from 0 to 512 [ 836.898460][T28514] JBD2: no valid journal superblock found [ 836.904357][T28514] EXT4-fs (loop2): Could not load journal inode [ 836.930022][T28518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.944964][T28518] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.956484][T28518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.984110][T28518] IPVS: Unknown mcast interface: le0 [ 836.995345][T28531] loop5: detected capacity change from 0 to 512 [ 836.995662][T28531] EXT4-fs: Ignoring removed bh option [ 837.020657][T28531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.020924][T28531] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 837.062462][T23402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.114211][T28538] loop6: detected capacity change from 0 to 8192 [ 837.118553][T28538] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 837.122222][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 837.122239][ T29] audit: type=1326 audit(1758543379.051:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 837.122298][ T29] audit: type=1326 audit(1758543379.051:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 837.124644][ T29] audit: type=1326 audit(1758543379.051:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 837.124743][ T29] audit: type=1326 audit(1758543379.051:13263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 837.124782][ T29] audit: type=1326 audit(1758543379.051:13264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 837.124816][ T29] audit: type=1326 audit(1758543379.051:13265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 837.134412][ T29] audit: type=1326 audit(1758543379.061:13266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 837.134458][ T29] audit: type=1326 audit(1758543379.061:13267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 837.134497][ T29] audit: type=1326 audit(1758543379.061:13268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe62510d710 code=0x7ffc0000 [ 837.134535][ T29] audit: type=1326 audit(1758543379.061:13269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 837.258785][T28549] loop5: detected capacity change from 0 to 164 [ 837.315034][T28548] loop6: detected capacity change from 0 to 128 [ 837.478646][T28551] loop2: detected capacity change from 0 to 256 [ 837.891129][T28563] loop3: detected capacity change from 0 to 1024 [ 837.900672][T28563] EXT4-fs: Ignoring removed bh option [ 837.913714][T28563] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 838.019127][T28563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 838.031520][T28579] loop1: detected capacity change from 0 to 512 [ 838.039407][T28579] EXT4-fs: Ignoring removed bh option [ 838.077989][T28585] loop5: detected capacity change from 0 to 256 [ 838.106685][T28588] netlink: 'syz.3.8129': attribute type 10 has an invalid length. [ 838.118574][T28588] team0: Port device dummy0 added [ 838.125931][T28588] netlink: 'syz.3.8129': attribute type 10 has an invalid length. [ 838.140733][T28588] team0: Port device dummy0 removed [ 838.145015][T28579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.162502][T28588] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 838.172107][T28579] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 838.220538][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.250397][T28592] loop5: detected capacity change from 0 to 8192 [ 838.259888][T28592] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 838.376992][T28601] loop1: detected capacity change from 0 to 164 [ 838.672360][T21414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.709286][T28616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8146'. [ 838.709569][T28616] SELinux: Context system_u:object_r:initrc_var_run_t:s0 is not valid (left unmapped). [ 838.712347][T28610] loop5: detected capacity change from 0 to 164 [ 838.713647][T28616] loop6: detected capacity change from 0 to 512 [ 838.724372][T28616] EXT4-fs (loop6): orphan cleanup on readonly fs [ 838.738172][T28616] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8146: bg 0: block 248: padding at end of block bitmap is not set [ 838.738407][T28616] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.8146: Failed to acquire dquot type 1 [ 838.738998][T28616] EXT4-fs (loop6): 1 truncate cleaned up [ 838.739680][T28616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 838.893395][T28621] loop5: detected capacity change from 0 to 256 [ 839.194635][T28633] bond0: (slave dummy0): Releasing backup interface [ 839.292663][T28633] loop3: detected capacity change from 0 to 164 [ 839.302088][T28633] bio_check_eod: 4 callbacks suppressed [ 839.302103][T28633] syz.3.8154: attempt to access beyond end of device [ 839.302103][T28633] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 839.322539][T28633] syz.3.8154: attempt to access beyond end of device [ 839.322539][T28633] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 839.413405][T28646] loop2: detected capacity change from 0 to 256 [ 839.464840][T28648] loop3: detected capacity change from 0 to 8192 [ 839.478184][T28648] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 839.501158][T28653] loop2: detected capacity change from 0 to 512 [ 839.525295][T28653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.547407][T28653] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.559446][T28653] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.571165][T28656] loop1: detected capacity change from 0 to 164 [ 839.587412][T27032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.599177][T28656] syz.1.8162: attempt to access beyond end of device [ 839.599177][T28656] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 839.635184][T28656] syz.1.8162: attempt to access beyond end of device [ 839.635184][T28656] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 839.656729][T28653] IPVS: Unknown mcast interface: le0 [ 839.790725][T28661] loop6: detected capacity change from 0 to 164 [ 840.059593][T28680] loop5: detected capacity change from 0 to 164 [ 840.093402][T28680] cgroup: Need name or subsystem set [ 840.792080][T28702] loop5: detected capacity change from 0 to 128 [ 840.835904][T28699] sit0: entered allmulticast mode [ 840.918088][T28688] loop1: detected capacity change from 0 to 164 [ 840.932705][T28708] loop2: detected capacity change from 0 to 256 [ 840.932807][T28688] syz.1.8173: attempt to access beyond end of device [ 840.932807][T28688] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 840.961917][T28688] syz.1.8173: attempt to access beyond end of device [ 840.961917][T28688] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 840.987085][T28706] loop5: detected capacity change from 0 to 164 [ 841.040119][T28722] loop6: detected capacity change from 0 to 164 [ 841.077950][T28713] syz.6.8182: attempt to access beyond end of device [ 841.077950][T28713] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 841.078074][T28713] syz.6.8182: attempt to access beyond end of device [ 841.078074][T28713] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 841.164022][T28724] sit0: entered allmulticast mode [ 841.173425][T28721] loop2: detected capacity change from 0 to 164 [ 841.193486][T28721] syz.2.8185: attempt to access beyond end of device [ 841.193486][T28721] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 841.193528][T28721] syz.2.8185: attempt to access beyond end of device [ 841.193528][T28721] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 841.263024][T28737] loop5: detected capacity change from 0 to 1024 [ 841.288846][T28737] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 841.389699][T28737] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 841.389735][T28737] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 841.391878][T28737] JBD2: no valid journal superblock found [ 841.391893][T28737] EXT4-fs (loop5): Could not load journal inode [ 841.489237][T28744] loop5: detected capacity change from 0 to 164 [ 841.508740][T28746] loop1: detected capacity change from 0 to 256 [ 841.564513][T28747] cgroup: Need name or subsystem set [ 841.579249][T28749] loop1: detected capacity change from 0 to 164 [ 841.634684][T28750] cgroup: Need name or subsystem set [ 841.828807][T28757] loop2: detected capacity change from 0 to 164 [ 841.919652][T28756] loop5: detected capacity change from 0 to 164 [ 842.049153][T28770] loop3: detected capacity change from 0 to 512 [ 842.049324][T28768] loop5: detected capacity change from 0 to 164 [ 842.050631][T28770] EXT4-fs: Ignoring removed bh option [ 842.072492][T28770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.072672][T28770] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 842.165697][T21414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.240030][T28779] loop3: detected capacity change from 0 to 128 [ 842.269559][T28774] loop5: detected capacity change from 0 to 164 [ 842.299765][T28783] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 842.326909][T28785] loop1: detected capacity change from 0 to 128 [ 842.393668][T28787] loop5: detected capacity change from 0 to 164 [ 842.405569][T28789] sit0: entered allmulticast mode [ 842.427936][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 842.427956][ T29] audit: type=1326 audit(1758543384.361:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.524133][T28797] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 842.558573][T28796] loop3: detected capacity change from 0 to 164 [ 842.559092][ T29] audit: type=1326 audit(1758543384.401:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.559163][ T29] audit: type=1326 audit(1758543384.401:13799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.559206][ T29] audit: type=1326 audit(1758543384.401:13800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.559233][ T29] audit: type=1326 audit(1758543384.401:13801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.559261][ T29] audit: type=1326 audit(1758543384.401:13802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.559289][ T29] audit: type=1326 audit(1758543384.401:13803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.559328][ T29] audit: type=1326 audit(1758543384.401:13804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.559371][ T29] audit: type=1326 audit(1758543384.401:13805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.559401][ T29] audit: type=1326 audit(1758543384.401:13806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28788 comm="syz.3.8210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 842.861095][T28811] loop3: detected capacity change from 0 to 164 [ 843.002980][T28823] loop2: detected capacity change from 0 to 164 [ 843.234024][T28826] cgroup: Need name or subsystem set [ 843.922789][T28834] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 843.933420][T28832] sit0: entered allmulticast mode [ 844.048687][T28830] loop3: detected capacity change from 0 to 164 [ 844.064815][T28839] loop2: detected capacity change from 0 to 164 [ 844.230422][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a70aa00: rx timeout, send abort [ 844.238694][ C0] vcan0: j1939_tp_rxtimer: 0xffff888131b21800: rx timeout, send abort [ 844.247078][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a70aa00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 844.261400][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888131b21800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 844.387398][T28856] wireguard0: entered promiscuous mode [ 844.392932][T28856] wireguard0: entered allmulticast mode [ 844.422508][T28860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28860 comm=syz.5.8233 [ 844.907094][T28871] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 845.279419][T28882] loop3: detected capacity change from 0 to 164 [ 845.495020][T28889] erspan0 speed is unknown, defaulting to 1000 [ 845.687211][T28890] loop5: detected capacity change from 0 to 512 [ 845.705135][T28889] lo speed is unknown, defaulting to 1000 [ 845.874550][T28890] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.8243: error while reading EA inode 32 err=-116 [ 845.911213][T28890] EXT4-fs (loop5): Remounting filesystem read-only [ 845.917852][T28890] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 845.949306][T28890] EXT4-fs (loop5): 1 orphan inode deleted [ 845.969129][T28890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.992411][T28896] loop6: detected capacity change from 0 to 512 [ 846.046752][T28896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.062479][T28890] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.067819][T28896] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.102318][T28896] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.158212][T28907] loop3: detected capacity change from 0 to 128 [ 846.191189][T28896] IPVS: Unknown mcast interface: le0 [ 846.195764][T28903] loop2: detected capacity change from 0 to 1024 [ 846.227551][T28903] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 846.250960][T28903] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8241: bg 0: block 10: padding at end of block bitmap is not set [ 846.284871][T28903] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.8241: Failed to acquire dquot type 0 [ 846.309061][T28903] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.8241: Failed to acquire dquot type 0 [ 846.341315][T28912] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 846.356638][T28903] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.8241: Freeing blocks not in datazone - block = 0, count = 4096 [ 846.370712][T28903] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.8241: Failed to acquire dquot type 0 [ 846.392415][T28903] EXT4-fs (loop2): 1 orphan inode deleted [ 846.398728][T28903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.437506][T28915] sit0: left promiscuous mode [ 846.580724][T28925] loop1: detected capacity change from 0 to 1024 [ 846.581398][T28925] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 846.583278][T28925] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8245: bg 0: block 10: padding at end of block bitmap is not set [ 846.583537][T28925] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.8245: Failed to acquire dquot type 0 [ 846.583757][T28925] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.8245: Failed to acquire dquot type 0 [ 846.583935][T28925] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.8245: Freeing blocks not in datazone - block = 0, count = 4096 [ 846.584327][T28925] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.8245: Failed to acquire dquot type 0 [ 846.585178][T28925] EXT4-fs (loop1): 1 orphan inode deleted [ 846.752789][T28925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.801102][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.320384][T28942] loop2: detected capacity change from 0 to 1024 [ 847.320923][T28942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 847.321019][T28942] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 847.321091][T28942] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 847.322942][T28942] JBD2: no valid journal superblock found [ 847.322956][T28942] EXT4-fs (loop2): Could not load journal inode [ 847.387442][T28945] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 847.479480][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 847.479497][ T29] audit: type=1326 audit(1758543389.411:14032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.486914][T28947] loop2: detected capacity change from 0 to 512 [ 847.509465][ T29] audit: type=1326 audit(1758543389.411:14033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.568103][ T29] audit: type=1326 audit(1758543389.471:14034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.592053][ T29] audit: type=1326 audit(1758543389.471:14035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.615741][ T29] audit: type=1326 audit(1758543389.471:14036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.639488][ T29] audit: type=1326 audit(1758543389.471:14037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.663655][ T29] audit: type=1326 audit(1758543389.471:14038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.687473][ T29] audit: type=1326 audit(1758543389.471:14039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.711154][ T29] audit: type=1326 audit(1758543389.471:14040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.734788][ T29] audit: type=1326 audit(1758543389.471:14041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28948 comm="syz.3.8262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a70e9eec9 code=0x7ffc0000 [ 847.777615][T28947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 847.811431][T28947] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 847.834915][T28947] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.919427][T28947] IPVS: Unknown mcast interface: le0 [ 848.111090][T28975] loop5: detected capacity change from 0 to 512 [ 848.169413][T28975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.221136][T28963] loop6: detected capacity change from 0 to 164 [ 848.263884][T28975] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.320585][T28963] bio_check_eod: 14 callbacks suppressed [ 848.320600][T28963] syz.6.8267: attempt to access beyond end of device [ 848.320600][T28963] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 848.365483][T28963] syz.6.8267: attempt to access beyond end of device [ 848.365483][T28963] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 848.437662][T23402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.138062][T29008] loop2: detected capacity change from 0 to 164 [ 849.147907][T29008] cgroup: Need name or subsystem set [ 849.191141][T29013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8285'. [ 849.233899][T29015] loop3: detected capacity change from 0 to 1024 [ 849.329324][T29015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 849.345306][T29015] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 849.356621][T29015] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 849.369068][T29024] loop5: detected capacity change from 0 to 1024 [ 849.370935][T29015] JBD2: no valid journal superblock found [ 849.381410][T29015] EXT4-fs (loop3): Could not load journal inode [ 849.388320][T29024] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 849.417353][T29024] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 849.428388][T29024] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 849.451413][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.470104][T29024] JBD2: no valid journal superblock found [ 849.475961][T29024] EXT4-fs (loop5): Could not load journal inode [ 849.487924][T29032] loop1: detected capacity change from 0 to 164 [ 849.513865][T29032] cgroup: Need name or subsystem set [ 849.772728][T29049] loop6: detected capacity change from 0 to 164 [ 849.896900][T29049] syz.6.8296: attempt to access beyond end of device [ 849.896900][T29049] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 849.931256][T29058] loop5: detected capacity change from 0 to 128 [ 849.981856][T29049] syz.6.8296: attempt to access beyond end of device [ 849.981856][T29049] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 850.222355][T29080] loop3: detected capacity change from 0 to 1024 [ 850.248703][T29080] EXT4-fs: Ignoring removed orlov option [ 850.346002][T29080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.616322][T29090] loop2: detected capacity change from 0 to 164 [ 850.637541][T29090] syz.2.8314: attempt to access beyond end of device [ 850.637541][T29090] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 850.642824][T29094] erspan0 speed is unknown, defaulting to 1000 [ 850.658975][T29095] loop1: detected capacity change from 0 to 128 [ 850.700488][T29090] syz.2.8314: attempt to access beyond end of device [ 850.700488][T29090] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 850.732953][T29094] lo speed is unknown, defaulting to 1000 [ 850.924274][T29111] wireguard0: entered promiscuous mode [ 850.929812][T29111] wireguard0: entered allmulticast mode [ 850.955506][T29114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29114 comm=syz.1.8323 [ 851.090580][T29121] loop2: detected capacity change from 0 to 512 [ 851.123547][T29121] EXT4-fs: Ignoring removed bh option [ 851.149897][T29121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.194667][T29121] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 851.259127][T21414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.291072][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.359604][T29132] loop6: detected capacity change from 0 to 164 [ 851.381660][T29136] loop2: detected capacity change from 0 to 1024 [ 851.422091][T29132] syz.6.8328: attempt to access beyond end of device [ 851.422091][T29132] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 851.453424][T29136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 851.465435][T29134] loop3: detected capacity change from 0 to 164 [ 851.485615][T29136] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 851.496628][T29136] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 851.500722][T29132] syz.6.8328: attempt to access beyond end of device [ 851.500722][T29132] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 851.524033][T29136] JBD2: no valid journal superblock found [ 851.529911][T29136] EXT4-fs (loop2): Could not load journal inode [ 851.547693][T29134] syz.3.8329: attempt to access beyond end of device [ 851.547693][T29134] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 851.585951][T29134] syz.3.8329: attempt to access beyond end of device [ 851.585951][T29134] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 851.827816][T29158] loop3: detected capacity change from 0 to 128 [ 851.911741][T29165] wireguard0: entered promiscuous mode [ 851.917423][T29165] wireguard0: entered allmulticast mode [ 851.958080][T29171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29171 comm=syz.3.8342 [ 852.209487][T29181] loop2: detected capacity change from 0 to 164 [ 852.220370][T29181] cgroup: Need name or subsystem set [ 852.268617][T29183] wireguard0: entered promiscuous mode [ 852.274130][T29183] wireguard0: entered allmulticast mode [ 852.317488][T29188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29188 comm=syz.6.8348 [ 852.391811][T29193] loop3: detected capacity change from 0 to 1024 [ 852.398691][T29193] EXT4-fs: Ignoring removed orlov option [ 852.420875][T29193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.432187][T29197] loop2: detected capacity change from 0 to 128 [ 852.486438][T29193] erspan0 speed is unknown, defaulting to 1000 [ 852.556754][T29193] lo speed is unknown, defaulting to 1000 [ 852.623582][T29208] loop2: detected capacity change from 0 to 512 [ 852.656492][T29208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.680551][T29208] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.704834][T29208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.731906][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 852.731923][ T29] audit: type=1326 audit(1758543394.661:14503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 852.774016][ T29] audit: type=1326 audit(1758543394.701:14504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 852.797828][ T29] audit: type=1326 audit(1758543394.701:14505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe62510ef03 code=0x7ffc0000 [ 852.821476][ T29] audit: type=1326 audit(1758543394.701:14506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe62510ef03 code=0x7ffc0000 [ 852.845322][ T29] audit: type=1326 audit(1758543394.701:14507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 852.869112][ T29] audit: type=1326 audit(1758543394.701:14508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 852.892934][ T29] audit: type=1326 audit(1758543394.701:14509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 852.916692][ T29] audit: type=1326 audit(1758543394.701:14510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 852.940318][ T29] audit: type=1326 audit(1758543394.701:14511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 852.965456][T29208] IPVS: Unknown mcast interface: le0 [ 852.973472][T29218] loop5: detected capacity change from 0 to 164 [ 852.994591][T21414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.018496][ T29] audit: type=1326 audit(1758543394.831:14512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29214 comm="syz.6.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 853.039823][T29224] loop1: detected capacity change from 0 to 164 [ 853.138023][T29224] cgroup: Need name or subsystem set [ 853.356404][T29246] loop1: detected capacity change from 0 to 1024 [ 853.363027][T29246] EXT4-fs: Ignoring removed orlov option [ 853.395878][T29240] loop6: detected capacity change from 0 to 8192 [ 853.416834][T29240] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 853.432647][T29246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.476574][T29246] erspan0 speed is unknown, defaulting to 1000 [ 853.578868][T29246] lo speed is unknown, defaulting to 1000 [ 853.732818][T29258] loop3: detected capacity change from 0 to 164 [ 853.743037][T29258] bio_check_eod: 2 callbacks suppressed [ 853.743053][T29258] syz.3.8373: attempt to access beyond end of device [ 853.743053][T29258] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 853.772554][T29258] syz.3.8373: attempt to access beyond end of device [ 853.772554][T29258] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 853.804387][T29264] loop6: detected capacity change from 0 to 128 [ 853.879040][T21978] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.304725][T29286] loop5: detected capacity change from 0 to 256 [ 854.633351][T29300] loop2: detected capacity change from 0 to 8192 [ 854.671075][T29300] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 854.697020][T29302] wireguard0: entered promiscuous mode [ 854.702622][T29302] wireguard0: entered allmulticast mode [ 854.739289][T29304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29304 comm=syz.5.8390 [ 854.912021][T29318] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 855.052677][T29330] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8399'. [ 855.683407][T29344] loop2: detected capacity change from 0 to 128 [ 855.729078][T29345] loop6: detected capacity change from 0 to 128 [ 855.780676][T29351] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 856.473270][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811983d000: rx timeout, send abort [ 856.473318][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811983c600: rx timeout, send abort [ 856.473363][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811983d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 856.473435][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811983c600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 856.695365][T29382] loop1: detected capacity change from 0 to 128 [ 856.726360][T29387] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 856.907022][T29410] wireguard0: entered promiscuous mode [ 856.912637][T29410] wireguard0: entered allmulticast mode [ 856.971227][T29412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29412 comm=syz.6.8428 [ 857.151949][T29417] loop1: detected capacity change from 0 to 128 [ 857.184161][T29419] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 857.222532][T29424] loop1: detected capacity change from 0 to 164 [ 857.226846][ C1] vcan0: j1939_tp_rxtimer: 0xffff888168201a00: rx timeout, send abort [ 857.237143][ C1] vcan0: j1939_tp_rxtimer: 0xffff888168200800: rx timeout, send abort [ 857.245685][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888168201a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 857.260670][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888168200800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 857.275510][T29424] cgroup: Need name or subsystem set [ 857.551259][T29433] wireguard0: entered promiscuous mode [ 857.556954][T29433] wireguard0: entered allmulticast mode [ 857.625876][T29437] loop1: detected capacity change from 0 to 164 [ 857.644179][T29438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29438 comm=syz.5.8436 [ 857.680878][T29439] loop3: detected capacity change from 0 to 164 [ 857.692935][T29437] cgroup: Need name or subsystem set [ 857.754776][T29431] syz.3.8435: attempt to access beyond end of device [ 857.754776][T29431] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 857.900771][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 857.900787][ T29] audit: type=1400 audit(1758543399.831:14671): avc: denied { write } for pid=29446 comm="syz.1.8440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 857.918348][T29431] syz.3.8435: attempt to access beyond end of device [ 857.918348][T29431] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 857.991858][ T29] audit: type=1400 audit(1758543399.911:14672): avc: denied { name_bind } for pid=29448 comm="syz.1.8441" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 858.013626][ T29] audit: type=1400 audit(1758543399.911:14673): avc: denied { node_bind } for pid=29448 comm="syz.1.8441" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 858.059725][T29454] loop1: detected capacity change from 0 to 128 [ 858.080789][T29456] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 858.683992][T29468] loop1: detected capacity change from 0 to 164 [ 858.710404][T29468] syz.1.8447: attempt to access beyond end of device [ 858.710404][T29468] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 858.752407][T29468] syz.1.8447: attempt to access beyond end of device [ 858.752407][T29468] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 858.766240][ T29] audit: type=1326 audit(1758543400.661:14674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29469 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 858.790250][ T29] audit: type=1326 audit(1758543400.661:14675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29469 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 858.813907][ T29] audit: type=1326 audit(1758543400.661:14676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29469 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 858.837852][ T29] audit: type=1326 audit(1758543400.661:14677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29469 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 858.861553][ T29] audit: type=1326 audit(1758543400.661:14678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29469 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 858.885299][ T29] audit: type=1326 audit(1758543400.661:14679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29469 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 858.909039][ T29] audit: type=1326 audit(1758543400.661:14680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29469 comm="syz.6.8448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62510eec9 code=0x7ffc0000 [ 859.109719][T29482] wireguard0: entered promiscuous mode [ 859.115410][T29482] wireguard0: entered allmulticast mode [ 859.123911][T29485] loop1: detected capacity change from 0 to 128 [ 859.159589][T29489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8456'. [ 859.168666][T29489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8456'. [ 859.196548][T29490] loop3: detected capacity change from 0 to 164 [ 859.209719][T29490] syz.3.8453: attempt to access beyond end of device [ 859.209719][T29490] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 859.233255][T29487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29487 comm=syz.5.8454 [ 859.294357][T29490] syz.3.8453: attempt to access beyond end of device [ 859.294357][T29490] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 859.609476][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812836c200: rx timeout, send abort [ 859.609528][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812836d800: rx timeout, send abort [ 859.609586][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812836c200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 859.609641][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812836d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 859.851029][T29506] loop2: detected capacity change from 0 to 164 [ 860.053780][T29512] loop6: detected capacity change from 0 to 164 [ 860.069029][T29512] syz.6.8464: attempt to access beyond end of device [ 860.069029][T29512] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 860.094548][T29512] syz.6.8464: attempt to access beyond end of device [ 860.094548][T29512] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 860.164163][T29521] wireguard0: entered promiscuous mode [ 860.170044][T29521] wireguard0: entered allmulticast mode [ 860.310158][T29538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29538 comm=syz.1.8467 [ 860.844866][T29532] loop3: detected capacity change from 0 to 164 [ 860.903230][T29544] wireguard0: entered promiscuous mode [ 860.909108][T29544] wireguard0: entered allmulticast mode [ 860.934239][T29547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29547 comm=syz.6.8474 [ 861.129953][T29550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8475'. [ 861.139022][T29550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8475'. [ 861.253106][T29555] loop3: detected capacity change from 0 to 164 [ 861.277769][T29555] syz.3.8476: attempt to access beyond end of device [ 861.277769][T29555] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 861.277878][T29555] syz.3.8476: attempt to access beyond end of device [ 861.277878][T29555] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 861.540423][T29563] loop6: detected capacity change from 0 to 128 [ 861.646720][ C0] vcan0: j1939_tp_rxtimer: 0xffff88818dc30c00: rx timeout, send abort [ 861.646783][ C0] vcan0: j1939_tp_rxtimer: 0xffff88818dc30a00: rx timeout, send abort [ 861.646822][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88818dc30c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 861.646872][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88818dc30a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 861.873507][T29573] loop5: detected capacity change from 0 to 2048 [ 861.891455][T29568] loop6: detected capacity change from 0 to 164 [ 861.949179][T29568] syz.6.8480: attempt to access beyond end of device [ 861.949179][T29568] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 861.949259][T29568] syz.6.8480: attempt to access beyond end of device [ 861.949259][T29568] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 862.063713][T29580] loop2: detected capacity change from 0 to 1024 [ 862.080874][T29580] EXT4-fs: Ignoring removed orlov option [ 862.142518][T29583] loop1: detected capacity change from 0 to 164 [ 862.173731][T29573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.202873][T29580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.266525][T23402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.343123][T29594] loop5: detected capacity change from 0 to 1024 [ 862.357794][T29594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 862.362673][T29595] erspan0 speed is unknown, defaulting to 1000 [ 862.378913][T29594] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 862.422801][T29600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8490'. [ 862.442078][T29595] lo speed is unknown, defaulting to 1000 [ 862.478093][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8490'. [ 862.690209][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.711537][T29612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8496'. [ 862.720712][T29612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8496'. [ 862.983752][T29614] loop2: detected capacity change from 0 to 1024 [ 862.984577][T29614] EXT4-fs: Ignoring removed orlov option [ 862.991013][T29614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.136849][T29620] loop6: detected capacity change from 0 to 164 [ 863.248537][T29627] erspan0 speed is unknown, defaulting to 1000 [ 863.503721][T29627] lo speed is unknown, defaulting to 1000 [ 863.512171][T29631] loop5: detected capacity change from 0 to 164 [ 863.525925][T29631] syz.5.8499: attempt to access beyond end of device [ 863.525925][T29631] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 863.580060][T29633] loop5: detected capacity change from 0 to 1024 [ 863.580333][T29633] EXT4-fs: Ignoring removed orlov option [ 863.741390][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 863.741409][ T29] audit: type=1326 audit(1758543405.671:14713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 863.865406][T29633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.873324][ T29] audit: type=1326 audit(1758543405.791:14714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 863.901884][ T29] audit: type=1326 audit(1758543405.791:14715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 863.925727][ T29] audit: type=1326 audit(1758543405.791:14716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 863.950033][ T29] audit: type=1326 audit(1758543405.791:14717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 863.974191][ T29] audit: type=1326 audit(1758543405.791:14718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 863.998055][ T29] audit: type=1326 audit(1758543405.791:14719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 864.022436][ T29] audit: type=1326 audit(1758543405.791:14720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 864.046266][ T29] audit: type=1326 audit(1758543405.791:14721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 864.070150][ T29] audit: type=1326 audit(1758543405.791:14722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29636 comm="syz.1.8501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeec29eec9 code=0x7ffc0000 [ 864.100000][T21843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.113999][T29629] loop3: detected capacity change from 0 to 1024 [ 864.128055][T29629] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 864.147021][T29629] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8498: bg 0: block 10: padding at end of block bitmap is not set [ 864.165102][T29629] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8498: Failed to acquire dquot type 0 [ 864.196542][T29649] erspan0 speed is unknown, defaulting to 1000 [ 864.204060][T29629] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8498: Failed to acquire dquot type 0 [ 864.223717][T29652] loop6: detected capacity change from 0 to 1024 [ 864.224519][T29629] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.8498: Freeing blocks not in datazone - block = 0, count = 4096 [ 864.254318][T29629] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8498: Failed to acquire dquot type 0 [ 864.268799][T29629] EXT4-fs (loop3): 1 orphan inode deleted [ 864.279060][T29652] EXT4-fs: Ignoring removed orlov option [ 864.292517][T29649] lo speed is unknown, defaulting to 1000 [ 864.397432][T29652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.411264][T29629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 864.520319][T29658] ================================================================== [ 864.528495][T29658] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 864.537046][T29658] [ 864.539403][T29658] write to 0xffff888151be9758 of 4 bytes by task 29652 on cpu 1: [ 864.547231][T29658] writeback_single_inode+0x14a/0x3e0 [ 864.552657][T29658] sync_inode_metadata+0x5b/0x90 [ 864.557645][T29658] generic_buffers_fsync_noflush+0xd9/0x120 [ 864.563587][T29658] ext4_sync_file+0x1ab/0x690 [ 864.568311][T29658] vfs_fsync_range+0x10a/0x130 [ 864.573327][T29658] ext4_buffered_write_iter+0x34f/0x3c0 [ 864.578929][T29658] ext4_file_write_iter+0x383/0xf00 [ 864.584178][T29658] iter_file_splice_write+0x666/0xa60 [ 864.589669][T29658] direct_splice_actor+0x156/0x2a0 [ 864.594807][T29658] splice_direct_to_actor+0x312/0x680 [ 864.600334][T29658] do_splice_direct+0xda/0x150 [ 864.605124][T29658] do_sendfile+0x380/0x650 [ 864.609712][T29658] __x64_sys_sendfile64+0x105/0x150 [ 864.614968][T29658] x64_sys_call+0x2bb0/0x2ff0 [ 864.619739][T29658] do_syscall_64+0xd2/0x200 [ 864.624400][T29658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.630485][T29658] [ 864.632827][T29658] read to 0xffff888151be9758 of 4 bytes by task 29658 on cpu 0: [ 864.640468][T29658] __mark_inode_dirty+0x191/0x750 [ 864.645711][T29658] ext4_write_inline_data_end+0x3e5/0x5f0 [ 864.651451][T29658] ext4_write_end+0x3d7/0x730 [ 864.656171][T29658] generic_perform_write+0x312/0x490 [ 864.661560][T29658] ext4_buffered_write_iter+0x1ee/0x3c0 [ 864.667134][T29658] ext4_file_write_iter+0x383/0xf00 [ 864.672356][T29658] iter_file_splice_write+0x666/0xa60 [ 864.677850][T29658] direct_splice_actor+0x156/0x2a0 [ 864.683248][T29658] splice_direct_to_actor+0x312/0x680 [ 864.688650][T29658] do_splice_direct+0xda/0x150 [ 864.693436][T29658] do_sendfile+0x380/0x650 [ 864.697909][T29658] __x64_sys_sendfile64+0x105/0x150 [ 864.703130][T29658] x64_sys_call+0x2bb0/0x2ff0 [ 864.707919][T29658] do_syscall_64+0xd2/0x200 [ 864.712449][T29658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.718364][T29658] [ 864.720691][T29658] value changed: 0x00000038 -> 0x00000002 [ 864.726414][T29658] [ 864.728742][T29658] Reported by Kernel Concurrency Sanitizer on: [ 864.735079][T29658] CPU: 0 UID: 0 PID: 29658 Comm: syz.6.8504 Not tainted syzkaller #0 PREEMPT(voluntary) [ 864.744906][T29658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 864.755075][T29658] ================================================================== [ 864.846602][T29661] erspan0 speed is unknown, defaulting to 1000 [ 864.870656][T23402] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.922015][T21414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.937590][T29661] lo speed is unknown, defaulting to 1000 [ 865.362482][T27032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.